pulumi-gcp 7.24.0a1716510380__py3-none-any.whl → 7.25.0__py3-none-any.whl

pulumi_gcp/certificatemanager/certificate.py

@@ -460,26 +460,6 @@ class Certificate(pulumi.CustomResource):
             name="ca-pool",
             location="us-central1",
             tier="ENTERPRISE")
-        # creating certificate_issuance_config to use it in the managed certificate
-        issuanceconfig = gcp.certificatemanager.CertificateIssuanceConfig("issuanceconfig",
-            name="issuance-config",
-            description="sample description for the certificate issuanceConfigs",
-            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
-                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
-                    ca_pool=pool.id,
-                ),
-            ),
-            lifetime="1814400s",
-            rotation_window_percentage=34,
-            key_algorithm="ECDSA_P256")
-        default = gcp.certificatemanager.Certificate("default",
-            name="issuance-config-cert",
-            description="The default cert",
-            scope="EDGE_CACHE",
-            managed=gcp.certificatemanager.CertificateManagedArgs(
-                domains=["terraform.subdomain1.com"],
-                issuance_config=issuanceconfig.id,
-            ))
         ca_authority = gcp.certificateauthority.Authority("ca_authority",
             location="us-central1",
             pool=pool.name,
@@ -515,6 +495,27 @@ class Certificate(pulumi.CustomResource):
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True)
+        # creating certificate_issuance_config to use it in the managed certificate
+        issuanceconfig = gcp.certificatemanager.CertificateIssuanceConfig("issuanceconfig",
+            name="issuance-config",
+            description="sample description for the certificate issuanceConfigs",
+            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
+                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
+                    ca_pool=pool.id,
+                ),
+            ),
+            lifetime="1814400s",
+            rotation_window_percentage=34,
+            key_algorithm="ECDSA_P256",
+            opts=pulumi.ResourceOptions(depends_on=[ca_authority]))
+        default = gcp.certificatemanager.Certificate("default",
+            name="issuance-config-cert",
+            description="The default cert",
+            scope="EDGE_CACHE",
+            managed=gcp.certificatemanager.CertificateManagedArgs(
+                domains=["terraform.subdomain1.com"],
+                issuance_config=issuanceconfig.id,
+            ))
         ```
         ### Certificate Manager Certificate Basic
 
@@ -571,26 +572,6 @@ class Certificate(pulumi.CustomResource):
             name="ca-pool",
             location="us-central1",
             tier="ENTERPRISE")
-        # creating certificate_issuance_config to use it in the managed certificate
-        issuanceconfig = gcp.certificatemanager.CertificateIssuanceConfig("issuanceconfig",
-            name="issuance-config",
-            description="sample description for the certificate issuanceConfigs",
-            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
-                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
-                    ca_pool=pool.id,
-                ),
-            ),
-            lifetime="1814400s",
-            rotation_window_percentage=34,
-            key_algorithm="ECDSA_P256")
-        default = gcp.certificatemanager.Certificate("default",
-            name="issuance-config-cert",
-            description="sample google managed all_regions certificate with issuance config for terraform",
-            scope="ALL_REGIONS",
-            managed=gcp.certificatemanager.CertificateManagedArgs(
-                domains=["terraform.subdomain1.com"],
-                issuance_config=issuanceconfig.id,
-            ))
         ca_authority = gcp.certificateauthority.Authority("ca_authority",
             location="us-central1",
             pool=pool.name,
@@ -626,6 +607,27 @@ class Certificate(pulumi.CustomResource):
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True)
+        # creating certificate_issuance_config to use it in the managed certificate
+        issuanceconfig = gcp.certificatemanager.CertificateIssuanceConfig("issuanceconfig",
+            name="issuance-config",
+            description="sample description for the certificate issuanceConfigs",
+            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
+                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
+                    ca_pool=pool.id,
+                ),
+            ),
+            lifetime="1814400s",
+            rotation_window_percentage=34,
+            key_algorithm="ECDSA_P256",
+            opts=pulumi.ResourceOptions(depends_on=[ca_authority]))
+        default = gcp.certificatemanager.Certificate("default",
+            name="issuance-config-cert",
+            description="sample google managed all_regions certificate with issuance config for terraform",
+            scope="ALL_REGIONS",
+            managed=gcp.certificatemanager.CertificateManagedArgs(
+                domains=["terraform.subdomain1.com"],
+                issuance_config=issuanceconfig.id,
+            ))
         ```
         ### Certificate Manager Google Managed Certificate Dns All Regions
 
@@ -785,26 +787,6 @@ class Certificate(pulumi.CustomResource):
             name="ca-pool",
             location="us-central1",
             tier="ENTERPRISE")
-        # creating certificate_issuance_config to use it in the managed certificate
-        issuanceconfig = gcp.certificatemanager.CertificateIssuanceConfig("issuanceconfig",
-            name="issuance-config",
-            description="sample description for the certificate issuanceConfigs",
-            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
-                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
-                    ca_pool=pool.id,
-                ),
-            ),
-            lifetime="1814400s",
-            rotation_window_percentage=34,
-            key_algorithm="ECDSA_P256")
-        default = gcp.certificatemanager.Certificate("default",
-            name="issuance-config-cert",
-            description="The default cert",
-            scope="EDGE_CACHE",
-            managed=gcp.certificatemanager.CertificateManagedArgs(
-                domains=["terraform.subdomain1.com"],
-                issuance_config=issuanceconfig.id,
-            ))
         ca_authority = gcp.certificateauthority.Authority("ca_authority",
             location="us-central1",
             pool=pool.name,
@@ -840,6 +822,27 @@ class Certificate(pulumi.CustomResource):
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True)
+        # creating certificate_issuance_config to use it in the managed certificate
+        issuanceconfig = gcp.certificatemanager.CertificateIssuanceConfig("issuanceconfig",
+            name="issuance-config",
+            description="sample description for the certificate issuanceConfigs",
+            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
+                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
+                    ca_pool=pool.id,
+                ),
+            ),
+            lifetime="1814400s",
+            rotation_window_percentage=34,
+            key_algorithm="ECDSA_P256",
+            opts=pulumi.ResourceOptions(depends_on=[ca_authority]))
+        default = gcp.certificatemanager.Certificate("default",
+            name="issuance-config-cert",
+            description="The default cert",
+            scope="EDGE_CACHE",
+            managed=gcp.certificatemanager.CertificateManagedArgs(
+                domains=["terraform.subdomain1.com"],
+                issuance_config=issuanceconfig.id,
+            ))
         ```
         ### Certificate Manager Certificate Basic
 
@@ -896,26 +899,6 @@ class Certificate(pulumi.CustomResource):
             name="ca-pool",
             location="us-central1",
             tier="ENTERPRISE")
-        # creating certificate_issuance_config to use it in the managed certificate
-        issuanceconfig = gcp.certificatemanager.CertificateIssuanceConfig("issuanceconfig",
-            name="issuance-config",
-            description="sample description for the certificate issuanceConfigs",
-            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
-                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
-                    ca_pool=pool.id,
-                ),
-            ),
-            lifetime="1814400s",
-            rotation_window_percentage=34,
-            key_algorithm="ECDSA_P256")
-        default = gcp.certificatemanager.Certificate("default",
-            name="issuance-config-cert",
-            description="sample google managed all_regions certificate with issuance config for terraform",
-            scope="ALL_REGIONS",
-            managed=gcp.certificatemanager.CertificateManagedArgs(
-                domains=["terraform.subdomain1.com"],
-                issuance_config=issuanceconfig.id,
-            ))
         ca_authority = gcp.certificateauthority.Authority("ca_authority",
             location="us-central1",
             pool=pool.name,
@@ -951,6 +934,27 @@ class Certificate(pulumi.CustomResource):
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True)
+        # creating certificate_issuance_config to use it in the managed certificate
+        issuanceconfig = gcp.certificatemanager.CertificateIssuanceConfig("issuanceconfig",
+            name="issuance-config",
+            description="sample description for the certificate issuanceConfigs",
+            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
+                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
+                    ca_pool=pool.id,
+                ),
+            ),
+            lifetime="1814400s",
+            rotation_window_percentage=34,
+            key_algorithm="ECDSA_P256",
+            opts=pulumi.ResourceOptions(depends_on=[ca_authority]))
+        default = gcp.certificatemanager.Certificate("default",
+            name="issuance-config-cert",
+            description="sample google managed all_regions certificate with issuance config for terraform",
+            scope="ALL_REGIONS",
+            managed=gcp.certificatemanager.CertificateManagedArgs(
+                domains=["terraform.subdomain1.com"],
+                issuance_config=issuanceconfig.id,
+            ))
         ```
         ### Certificate Manager Google Managed Certificate Dns All Regions
 

pulumi_gcp/certificatemanager/certificate_issuance_config.py

@@ -455,21 +455,6 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
             name="ca-pool",
             location="us-central1",
             tier="ENTERPRISE")
-        default = gcp.certificatemanager.CertificateIssuanceConfig("default",
-            name="issuance-config",
-            description="sample description for the certificate issuanceConfigs",
-            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
-                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
-                    ca_pool=pool.id,
-                ),
-            ),
-            lifetime="1814400s",
-            rotation_window_percentage=34,
-            key_algorithm="ECDSA_P256",
-            labels={
-                "name": "wrench",
-                "count": "3",
-            })
         ca_authority = gcp.certificateauthority.Authority("ca_authority",
             location="us-central1",
             pool=pool.name,
@@ -505,6 +490,22 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True)
+        default = gcp.certificatemanager.CertificateIssuanceConfig("default",
+            name="issuance-config",
+            description="sample description for the certificate issuanceConfigs",
+            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
+                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
+                    ca_pool=pool.id,
+                ),
+            ),
+            lifetime="1814400s",
+            rotation_window_percentage=34,
+            key_algorithm="ECDSA_P256",
+            labels={
+                "name": "wrench",
+                "count": "3",
+            },
+            opts=pulumi.ResourceOptions(depends_on=[ca_authority]))
         ```
 
         ## Import
@@ -579,21 +580,6 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
             name="ca-pool",
             location="us-central1",
             tier="ENTERPRISE")
-        default = gcp.certificatemanager.CertificateIssuanceConfig("default",
-            name="issuance-config",
-            description="sample description for the certificate issuanceConfigs",
-            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
-                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
-                    ca_pool=pool.id,
-                ),
-            ),
-            lifetime="1814400s",
-            rotation_window_percentage=34,
-            key_algorithm="ECDSA_P256",
-            labels={
-                "name": "wrench",
-                "count": "3",
-            })
         ca_authority = gcp.certificateauthority.Authority("ca_authority",
             location="us-central1",
             pool=pool.name,
@@ -629,6 +615,22 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True)
+        default = gcp.certificatemanager.CertificateIssuanceConfig("default",
+            name="issuance-config",
+            description="sample description for the certificate issuanceConfigs",
+            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
+                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
+                    ca_pool=pool.id,
+                ),
+            ),
+            lifetime="1814400s",
+            rotation_window_percentage=34,
+            key_algorithm="ECDSA_P256",
+            labels={
+                "name": "wrench",
+                "count": "3",
+            },
+            opts=pulumi.ResourceOptions(depends_on=[ca_authority]))
         ```
 
         ## Import

pulumi_gcp/cloudasset/__init__.py

@@ -7,6 +7,7 @@ import typing
 # Export this package's modules as members:
 from .folder_feed import *
 from .get_resources_search_all import *
+from .get_search_all_resources import *
 from .organization_feed import *
 from .project_feed import *
 from ._inputs import *

pulumi_gcp/cloudasset/get_search_all_resources.py

@@ -0,0 +1,197 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from .. import _utilities
+from . import outputs
+
+__all__ = [
+    'GetSearchAllResourcesResult',
+    'AwaitableGetSearchAllResourcesResult',
+    'get_search_all_resources',
+    'get_search_all_resources_output',
+]
+
+@pulumi.output_type
+class GetSearchAllResourcesResult:
+    """
+    A collection of values returned by getSearchAllResources.
+    """
+    def __init__(__self__, asset_types=None, id=None, query=None, results=None, scope=None):
+        if asset_types and not isinstance(asset_types, list):
+            raise TypeError("Expected argument 'asset_types' to be a list")
+        pulumi.set(__self__, "asset_types", asset_types)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if query and not isinstance(query, str):
+            raise TypeError("Expected argument 'query' to be a str")
+        pulumi.set(__self__, "query", query)
+        if results and not isinstance(results, list):
+            raise TypeError("Expected argument 'results' to be a list")
+        pulumi.set(__self__, "results", results)
+        if scope and not isinstance(scope, str):
+            raise TypeError("Expected argument 'scope' to be a str")
+        pulumi.set(__self__, "scope", scope)
+
+    @property
+    @pulumi.getter(name="assetTypes")
+    def asset_types(self) -> Optional[Sequence[str]]:
+        return pulumi.get(self, "asset_types")
+
+    @property
+    @pulumi.getter
+    def id(self) -> str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter
+    def query(self) -> Optional[str]:
+        return pulumi.get(self, "query")
+
+    @property
+    @pulumi.getter
+    def results(self) -> Sequence['outputs.GetSearchAllResourcesResultResult']:
+        """
+        A list of search results based on provided inputs. Structure is defined below.
+        """
+        return pulumi.get(self, "results")
+
+    @property
+    @pulumi.getter
+    def scope(self) -> str:
+        return pulumi.get(self, "scope")
+
+
+class AwaitableGetSearchAllResourcesResult(GetSearchAllResourcesResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetSearchAllResourcesResult(
+            asset_types=self.asset_types,
+            id=self.id,
+            query=self.query,
+            results=self.results,
+            scope=self.scope)
+
+
+def get_search_all_resources(asset_types: Optional[Sequence[str]] = None,
+                             query: Optional[str] = None,
+                             scope: Optional[str] = None,
+                             opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetSearchAllResourcesResult:
+    """
+    Searches all Google Cloud resources within the specified scope, such as a project, folder, or organization. See the
+    [REST API](https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllResources)
+    for more details.
+
+    ## Example Usage
+
+    ### Searching For All Projects In An Org
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    projects = gcp.cloudasset.get_search_all_resources(scope="organizations/0123456789",
+        asset_types=["cloudresourcemanager.googleapis.com/Project"])
+    ```
+
+    ### Searching For All Projects With CloudBuild API Enabled
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    cloud_build_projects = gcp.cloudasset.get_search_all_resources(scope="organizations/0123456789",
+        asset_types=["serviceusage.googleapis.com/Service"],
+        query="displayName:cloudbuild.googleapis.com AND state:ENABLED")
+    ```
+
+    ### Searching For All Service Accounts In A Project
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    project_service_accounts = gcp.cloudasset.get_search_all_resources(scope="projects/my-project-id",
+        asset_types=["iam.googleapis.com/ServiceAccount"])
+    ```
+
+
+    :param Sequence[str] asset_types: A list of asset types that this request searches for. If empty, it will search all the [supported asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-types).
+    :param str query: The query statement. See [how to construct a query](https://cloud.google.com/asset-inventory/docs/searching-resources#how_to_construct_a_query) for more information. If not specified or empty, it will search all the resources within the specified `scope` and `asset_types`.
+    :param str scope: A scope can be a project, a folder, or an organization. The search is limited to the resources within the scope. The allowed value must be: organization number (such as "organizations/123"), folder number (such as "folders/1234"), project number (such as "projects/12345") or project id (such as "projects/abc")
+    """
+    __args__ = dict()
+    __args__['assetTypes'] = asset_types
+    __args__['query'] = query
+    __args__['scope'] = scope
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('gcp:cloudasset/getSearchAllResources:getSearchAllResources', __args__, opts=opts, typ=GetSearchAllResourcesResult).value
+
+    return AwaitableGetSearchAllResourcesResult(
+        asset_types=pulumi.get(__ret__, 'asset_types'),
+        id=pulumi.get(__ret__, 'id'),
+        query=pulumi.get(__ret__, 'query'),
+        results=pulumi.get(__ret__, 'results'),
+        scope=pulumi.get(__ret__, 'scope'))
+
+
+@_utilities.lift_output_func(get_search_all_resources)
+def get_search_all_resources_output(asset_types: Optional[pulumi.Input[Optional[Sequence[str]]]] = None,
+                                    query: Optional[pulumi.Input[Optional[str]]] = None,
+                                    scope: Optional[pulumi.Input[str]] = None,
+                                    opts: Optional[pulumi.InvokeOptions] = None) -> pulumi.Output[GetSearchAllResourcesResult]:
+    """
+    Searches all Google Cloud resources within the specified scope, such as a project, folder, or organization. See the
+    [REST API](https://cloud.google.com/asset-inventory/docs/reference/rest/v1/TopLevel/searchAllResources)
+    for more details.
+
+    ## Example Usage
+
+    ### Searching For All Projects In An Org
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    projects = gcp.cloudasset.get_search_all_resources(scope="organizations/0123456789",
+        asset_types=["cloudresourcemanager.googleapis.com/Project"])
+    ```
+
+    ### Searching For All Projects With CloudBuild API Enabled
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    cloud_build_projects = gcp.cloudasset.get_search_all_resources(scope="organizations/0123456789",
+        asset_types=["serviceusage.googleapis.com/Service"],
+        query="displayName:cloudbuild.googleapis.com AND state:ENABLED")
+    ```
+
+    ### Searching For All Service Accounts In A Project
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    project_service_accounts = gcp.cloudasset.get_search_all_resources(scope="projects/my-project-id",
+        asset_types=["iam.googleapis.com/ServiceAccount"])
+    ```
+
+
+    :param Sequence[str] asset_types: A list of asset types that this request searches for. If empty, it will search all the [supported asset types](https://cloud.google.com/asset-inventory/docs/supported-asset-types).
+    :param str query: The query statement. See [how to construct a query](https://cloud.google.com/asset-inventory/docs/searching-resources#how_to_construct_a_query) for more information. If not specified or empty, it will search all the resources within the specified `scope` and `asset_types`.
+    :param str scope: A scope can be a project, a folder, or an organization. The search is limited to the resources within the scope. The allowed value must be: organization number (such as "organizations/123"), folder number (such as "folders/1234"), project number (such as "projects/12345") or project id (such as "projects/abc")
+    """
+    ...