pulumi-gcp 7.24.0a1716588893__py3-none-any.whl → 7.25.0__py3-none-any.whl

pulumi_gcp/cloudfunctionsv2/function.py

@@ -528,7 +528,6 @@ class Function(pulumi.CustomResource):
                 available_memory="256M",
                 timeout_seconds=60,
             ))
-        pulumi.export("functionUri", function.service_config.uri)
         ```
         ### Cloudfunctions2 Full
 
@@ -684,15 +683,18 @@ class Function(pulumi.CustomResource):
         invoking = gcp.projects.IAMMember("invoking",
             project="my-project-name",
             role="roles/run.invoker",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[gcs_pubsub_publishing]))
         event_receiving = gcp.projects.IAMMember("event-receiving",
             project="my-project-name",
             role="roles/eventarc.eventReceiver",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[invoking]))
         artifactregistry_reader = gcp.projects.IAMMember("artifactregistry-reader",
             project="my-project-name",
             role="roles/artifactregistry.reader",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[event_receiving]))
         function = gcp.cloudfunctionsv2.Function("function",
             name="gcf-function",
             location="us-central1",
@@ -730,7 +732,11 @@ class Function(pulumi.CustomResource):
                     attribute="bucket",
                     value=trigger_bucket.name,
                 )],
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    event_receiving,
+                    artifactregistry_reader,
+                ]))
         ```
         ### Cloudfunctions2 Basic Auditlogs
 
@@ -768,11 +774,13 @@ class Function(pulumi.CustomResource):
         event_receiving = gcp.projects.IAMMember("event-receiving",
             project="my-project-name",
             role="roles/eventarc.eventReceiver",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[invoking]))
         artifactregistry_reader = gcp.projects.IAMMember("artifactregistry-reader",
             project="my-project-name",
             role="roles/artifactregistry.reader",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[event_receiving]))
         function = gcp.cloudfunctionsv2.Function("function",
             name="gcf-function",
             location="us-central1",
@@ -822,7 +830,11 @@ class Function(pulumi.CustomResource):
                         operator="match-path-pattern",
                     ),
                 ],
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    event_receiving,
+                    artifactregistry_reader,
+                ]))
         ```
         ### Cloudfunctions2 Basic Builder
 
@@ -856,7 +868,12 @@ class Function(pulumi.CustomResource):
             bucket=bucket.name,
             source=pulumi.FileAsset("function-source.zip"))
         # builder permissions need to stablize before it can pull the source zip
-        wait60s = time.index.Sleep("wait_60s", create_duration=60s)
+        wait60s = time.index.Sleep("wait_60s", create_duration=60s,
+        opts=pulumi.ResourceOptions(depends_on=[
+                log_writer,
+                artifact_registry_writer,
+                storage_object_admin,
+            ]))
         function = gcp.cloudfunctionsv2.Function("function",
             name="function-v2",
             location="us-central1",
@@ -876,8 +893,8 @@ class Function(pulumi.CustomResource):
                 max_instance_count=1,
                 available_memory="256M",
                 timeout_seconds=60,
-            ))
-        pulumi.export("functionUri", function.service_config.uri)
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[wait60s]))
         ```
         ### Cloudfunctions2 Secret Env
 
@@ -903,6 +920,10 @@ class Function(pulumi.CustomResource):
                     )],
                 ),
             ))
+        secret_secret_version = gcp.secretmanager.SecretVersion("secret",
+            secret=secret.name,
+            secret_data="secret",
+            enabled=True)
         function = gcp.cloudfunctionsv2.Function("function",
             name="function-secret",
             location="us-central1",
@@ -927,11 +948,8 @@ class Function(pulumi.CustomResource):
                     secret=secret.secret_id,
                     version="latest",
                 )],
-            ))
-        secret_secret_version = gcp.secretmanager.SecretVersion("secret",
-            secret=secret.name,
-            secret_data="secret",
-            enabled=True)
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[secret_secret_version]))
         ```
         ### Cloudfunctions2 Secret Volume
 
@@ -957,6 +975,10 @@ class Function(pulumi.CustomResource):
                     )],
                 ),
             ))
+        secret_secret_version = gcp.secretmanager.SecretVersion("secret",
+            secret=secret.name,
+            secret_data="secret",
+            enabled=True)
         function = gcp.cloudfunctionsv2.Function("function",
             name="function-secret",
             location="us-central1",
@@ -980,11 +1002,8 @@ class Function(pulumi.CustomResource):
                     project_id=project,
                     secret=secret.secret_id,
                 )],
-            ))
-        secret_secret_version = gcp.secretmanager.SecretVersion("secret",
-            secret=secret.name,
-            secret_data="secret",
-            enabled=True)
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[secret_secret_version]))
         ```
         ### Cloudfunctions2 Private Workerpool
 
@@ -1053,16 +1072,6 @@ class Function(pulumi.CustomResource):
             repository_id="ar-repo",
             location="us-central1",
             format="DOCKER")
-        encoded_ar_repo = gcp.artifactregistry.Repository("encoded-ar-repo",
-            location="us-central1",
-            repository_id="cmek-repo",
-            format="DOCKER",
-            kms_key_name="cmek-key")
-        binding = gcp.artifactregistry.RepositoryIamBinding("binding",
-            location=encoded_ar_repo.location,
-            repository=encoded_ar_repo.name,
-            role="roles/artifactregistry.admin",
-            members=[f"serviceAccount:service-{project_get_project.number}@gcf-admin-robot.iam.gserviceaccount.com"])
         gcf_cmek_keyuser = gcp.kms.CryptoKeyIAMBinding("gcf_cmek_keyuser",
             crypto_key_id="cmek-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
@@ -1072,7 +1081,19 @@ class Function(pulumi.CustomResource):
                 f"serviceAccount:service-{project_get_project.number}@gs-project-accounts.iam.gserviceaccount.com",
                 f"serviceAccount:service-{project_get_project.number}@serverless-robot-prod.iam.gserviceaccount.com",
                 ea_sa.email.apply(lambda email: f"serviceAccount:{email}"),
-            ])
+            ],
+            opts=pulumi.ResourceOptions(depends_on=[ea_sa]))
+        encoded_ar_repo = gcp.artifactregistry.Repository("encoded-ar-repo",
+            location="us-central1",
+            repository_id="cmek-repo",
+            format="DOCKER",
+            kms_key_name="cmek-key",
+            opts=pulumi.ResourceOptions(depends_on=[gcf_cmek_keyuser]))
+        binding = gcp.artifactregistry.RepositoryIamBinding("binding",
+            location=encoded_ar_repo.location,
+            repository=encoded_ar_repo.name,
+            role="roles/artifactregistry.admin",
+            members=[f"serviceAccount:service-{project_get_project.number}@gcf-admin-robot.iam.gserviceaccount.com"])
         function = gcp.cloudfunctionsv2.Function("function",
             name="function-cmek",
             location="us-central1",
@@ -1093,7 +1114,8 @@ class Function(pulumi.CustomResource):
                 max_instance_count=1,
                 available_memory="256M",
                 timeout_seconds=60,
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[gcf_cmek_keyuser]))
         ```
 
         ## Import
@@ -1195,7 +1217,6 @@ class Function(pulumi.CustomResource):
                 available_memory="256M",
                 timeout_seconds=60,
             ))
-        pulumi.export("functionUri", function.service_config.uri)
         ```
         ### Cloudfunctions2 Full
 
@@ -1351,15 +1372,18 @@ class Function(pulumi.CustomResource):
         invoking = gcp.projects.IAMMember("invoking",
             project="my-project-name",
             role="roles/run.invoker",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[gcs_pubsub_publishing]))
         event_receiving = gcp.projects.IAMMember("event-receiving",
             project="my-project-name",
             role="roles/eventarc.eventReceiver",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[invoking]))
         artifactregistry_reader = gcp.projects.IAMMember("artifactregistry-reader",
             project="my-project-name",
             role="roles/artifactregistry.reader",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[event_receiving]))
         function = gcp.cloudfunctionsv2.Function("function",
             name="gcf-function",
             location="us-central1",
@@ -1397,7 +1421,11 @@ class Function(pulumi.CustomResource):
                     attribute="bucket",
                     value=trigger_bucket.name,
                 )],
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    event_receiving,
+                    artifactregistry_reader,
+                ]))
         ```
         ### Cloudfunctions2 Basic Auditlogs
 
@@ -1435,11 +1463,13 @@ class Function(pulumi.CustomResource):
         event_receiving = gcp.projects.IAMMember("event-receiving",
             project="my-project-name",
             role="roles/eventarc.eventReceiver",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[invoking]))
         artifactregistry_reader = gcp.projects.IAMMember("artifactregistry-reader",
             project="my-project-name",
             role="roles/artifactregistry.reader",
-            member=account.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=account.email.apply(lambda email: f"serviceAccount:{email}"),
+            opts=pulumi.ResourceOptions(depends_on=[event_receiving]))
         function = gcp.cloudfunctionsv2.Function("function",
             name="gcf-function",
             location="us-central1",
@@ -1489,7 +1519,11 @@ class Function(pulumi.CustomResource):
                         operator="match-path-pattern",
                     ),
                 ],
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[
+                    event_receiving,
+                    artifactregistry_reader,
+                ]))
         ```
         ### Cloudfunctions2 Basic Builder
 
@@ -1523,7 +1557,12 @@ class Function(pulumi.CustomResource):
             bucket=bucket.name,
             source=pulumi.FileAsset("function-source.zip"))
         # builder permissions need to stablize before it can pull the source zip
-        wait60s = time.index.Sleep("wait_60s", create_duration=60s)
+        wait60s = time.index.Sleep("wait_60s", create_duration=60s,
+        opts=pulumi.ResourceOptions(depends_on=[
+                log_writer,
+                artifact_registry_writer,
+                storage_object_admin,
+            ]))
         function = gcp.cloudfunctionsv2.Function("function",
             name="function-v2",
             location="us-central1",
@@ -1543,8 +1582,8 @@ class Function(pulumi.CustomResource):
                 max_instance_count=1,
                 available_memory="256M",
                 timeout_seconds=60,
-            ))
-        pulumi.export("functionUri", function.service_config.uri)
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[wait60s]))
         ```
         ### Cloudfunctions2 Secret Env
 
@@ -1570,6 +1609,10 @@ class Function(pulumi.CustomResource):
                     )],
                 ),
             ))
+        secret_secret_version = gcp.secretmanager.SecretVersion("secret",
+            secret=secret.name,
+            secret_data="secret",
+            enabled=True)
         function = gcp.cloudfunctionsv2.Function("function",
             name="function-secret",
             location="us-central1",
@@ -1594,11 +1637,8 @@ class Function(pulumi.CustomResource):
                     secret=secret.secret_id,
                     version="latest",
                 )],
-            ))
-        secret_secret_version = gcp.secretmanager.SecretVersion("secret",
-            secret=secret.name,
-            secret_data="secret",
-            enabled=True)
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[secret_secret_version]))
         ```
         ### Cloudfunctions2 Secret Volume
 
@@ -1624,6 +1664,10 @@ class Function(pulumi.CustomResource):
                     )],
                 ),
             ))
+        secret_secret_version = gcp.secretmanager.SecretVersion("secret",
+            secret=secret.name,
+            secret_data="secret",
+            enabled=True)
         function = gcp.cloudfunctionsv2.Function("function",
             name="function-secret",
             location="us-central1",
@@ -1647,11 +1691,8 @@ class Function(pulumi.CustomResource):
                     project_id=project,
                     secret=secret.secret_id,
                 )],
-            ))
-        secret_secret_version = gcp.secretmanager.SecretVersion("secret",
-            secret=secret.name,
-            secret_data="secret",
-            enabled=True)
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[secret_secret_version]))
         ```
         ### Cloudfunctions2 Private Workerpool
 
@@ -1720,16 +1761,6 @@ class Function(pulumi.CustomResource):
             repository_id="ar-repo",
             location="us-central1",
             format="DOCKER")
-        encoded_ar_repo = gcp.artifactregistry.Repository("encoded-ar-repo",
-            location="us-central1",
-            repository_id="cmek-repo",
-            format="DOCKER",
-            kms_key_name="cmek-key")
-        binding = gcp.artifactregistry.RepositoryIamBinding("binding",
-            location=encoded_ar_repo.location,
-            repository=encoded_ar_repo.name,
-            role="roles/artifactregistry.admin",
-            members=[f"serviceAccount:service-{project_get_project.number}@gcf-admin-robot.iam.gserviceaccount.com"])
         gcf_cmek_keyuser = gcp.kms.CryptoKeyIAMBinding("gcf_cmek_keyuser",
             crypto_key_id="cmek-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
@@ -1739,7 +1770,19 @@ class Function(pulumi.CustomResource):
                 f"serviceAccount:service-{project_get_project.number}@gs-project-accounts.iam.gserviceaccount.com",
                 f"serviceAccount:service-{project_get_project.number}@serverless-robot-prod.iam.gserviceaccount.com",
                 ea_sa.email.apply(lambda email: f"serviceAccount:{email}"),
-            ])
+            ],
+            opts=pulumi.ResourceOptions(depends_on=[ea_sa]))
+        encoded_ar_repo = gcp.artifactregistry.Repository("encoded-ar-repo",
+            location="us-central1",
+            repository_id="cmek-repo",
+            format="DOCKER",
+            kms_key_name="cmek-key",
+            opts=pulumi.ResourceOptions(depends_on=[gcf_cmek_keyuser]))
+        binding = gcp.artifactregistry.RepositoryIamBinding("binding",
+            location=encoded_ar_repo.location,
+            repository=encoded_ar_repo.name,
+            role="roles/artifactregistry.admin",
+            members=[f"serviceAccount:service-{project_get_project.number}@gcf-admin-robot.iam.gserviceaccount.com"])
         function = gcp.cloudfunctionsv2.Function("function",
             name="function-cmek",
             location="us-central1",
@@ -1760,7 +1803,8 @@ class Function(pulumi.CustomResource):
                 max_instance_count=1,
                 available_memory="256M",
                 timeout_seconds=60,
-            ))
+            ),
+            opts=pulumi.ResourceOptions(depends_on=[gcf_cmek_keyuser]))
         ```
 
         ## Import

pulumi_gcp/cloudids/endpoint.py

@@ -375,7 +375,8 @@ class Endpoint(pulumi.CustomResource):
             name="test",
             location="us-central1-f",
             network=default.id,
-            severity="INFORMATIONAL")
+            severity="INFORMATIONAL",
+            opts=pulumi.ResourceOptions(depends_on=[private_service_connection]))
         ```
 
         ## Import
@@ -453,7 +454,8 @@ class Endpoint(pulumi.CustomResource):
             name="test",
             location="us-central1-f",
             network=default.id,
-            severity="INFORMATIONAL")
+            severity="INFORMATIONAL",
+            opts=pulumi.ResourceOptions(depends_on=[private_service_connection]))
         ```
 
         ## Import

pulumi_gcp/cloudrun/_inputs.py

@@ -48,6 +48,7 @@ __all__ = [
     'ServiceTemplateSpecVolumeArgs',
     'ServiceTemplateSpecVolumeCsiArgs',
     'ServiceTemplateSpecVolumeEmptyDirArgs',
+    'ServiceTemplateSpecVolumeNfsArgs',
     'ServiceTemplateSpecVolumeSecretArgs',
     'ServiceTemplateSpecVolumeSecretItemArgs',
     'ServiceTrafficArgs',
@@ -2884,6 +2885,7 @@ class ServiceTemplateSpecVolumeArgs:
                  name: pulumi.Input[str],
                  csi: Optional[pulumi.Input['ServiceTemplateSpecVolumeCsiArgs']] = None,
                  empty_dir: Optional[pulumi.Input['ServiceTemplateSpecVolumeEmptyDirArgs']] = None,
+                 nfs: Optional[pulumi.Input['ServiceTemplateSpecVolumeNfsArgs']] = None,
                  secret: Optional[pulumi.Input['ServiceTemplateSpecVolumeSecretArgs']] = None):
         """
         :param pulumi.Input[str] name: Volume's name.
@@ -2891,6 +2893,10 @@ class ServiceTemplateSpecVolumeArgs:
                Structure is documented below.
         :param pulumi.Input['ServiceTemplateSpecVolumeEmptyDirArgs'] empty_dir: Ephemeral storage which can be backed by real disks (HD, SSD), network storage or memory (i.e. tmpfs). For now only in memory (tmpfs) is supported. It is ephemeral in the sense that when the sandbox is taken down, the data is destroyed with it (it does not persist across sandbox runs).
                Structure is documented below.
+        :param pulumi.Input['ServiceTemplateSpecVolumeNfsArgs'] nfs: A filesystem backed by a Network File System share. This filesystem requires the
+               run.googleapis.com/execution-environment annotation to be set to "gen2" and
+               run.googleapis.com/launch-stage set to "BETA" or "ALPHA".
+               Structure is documented below.
         :param pulumi.Input['ServiceTemplateSpecVolumeSecretArgs'] secret: The secret's value will be presented as the content of a file whose
                name is defined in the item path. If no items are defined, the name of
                the file is the secret_name.
@@ -2901,6 +2907,8 @@ class ServiceTemplateSpecVolumeArgs:
             pulumi.set(__self__, "csi", csi)
         if empty_dir is not None:
             pulumi.set(__self__, "empty_dir", empty_dir)
+        if nfs is not None:
+            pulumi.set(__self__, "nfs", nfs)
         if secret is not None:
             pulumi.set(__self__, "secret", secret)
 
@@ -2942,6 +2950,21 @@ class ServiceTemplateSpecVolumeArgs:
     def empty_dir(self, value: Optional[pulumi.Input['ServiceTemplateSpecVolumeEmptyDirArgs']]):
         pulumi.set(self, "empty_dir", value)
 
+    @property
+    @pulumi.getter
+    def nfs(self) -> Optional[pulumi.Input['ServiceTemplateSpecVolumeNfsArgs']]:
+        """
+        A filesystem backed by a Network File System share. This filesystem requires the
+        run.googleapis.com/execution-environment annotation to be set to "gen2" and
+        run.googleapis.com/launch-stage set to "BETA" or "ALPHA".
+        Structure is documented below.
+        """
+        return pulumi.get(self, "nfs")
+
+    @nfs.setter
+    def nfs(self, value: Optional[pulumi.Input['ServiceTemplateSpecVolumeNfsArgs']]):
+        pulumi.set(self, "nfs", value)
+
     @property
     @pulumi.getter
     def secret(self) -> Optional[pulumi.Input['ServiceTemplateSpecVolumeSecretArgs']]:
@@ -2973,8 +2996,6 @@ class ServiceTemplateSpecVolumeCsiArgs:
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] volume_attributes: Driver-specific attributes. The following options are supported for available drivers:
                * gcsfuse.run.googleapis.com
                * bucketName: The name of the Cloud Storage Bucket that backs this volume. The Cloud Run Service identity must have access to this bucket.
-               
-               - - -
         """
         pulumi.set(__self__, "driver", driver)
         if read_only is not None:
@@ -3016,8 +3037,6 @@ class ServiceTemplateSpecVolumeCsiArgs:
         Driver-specific attributes. The following options are supported for available drivers:
         * gcsfuse.run.googleapis.com
         * bucketName: The name of the Cloud Storage Bucket that backs this volume. The Cloud Run Service identity must have access to this bucket.
-
-        - - -
         """
         return pulumi.get(self, "volume_attributes")
 
@@ -3065,6 +3084,63 @@ class ServiceTemplateSpecVolumeEmptyDirArgs:
         pulumi.set(self, "size_limit", value)
 
 
+@pulumi.input_type
+class ServiceTemplateSpecVolumeNfsArgs:
+    def __init__(__self__, *,
+                 path: pulumi.Input[str],
+                 server: pulumi.Input[str],
+                 read_only: Optional[pulumi.Input[bool]] = None):
+        """
+        :param pulumi.Input[str] path: Path exported by the NFS server
+        :param pulumi.Input[str] server: IP address or hostname of the NFS server
+        :param pulumi.Input[bool] read_only: If true, mount the NFS volume as read only in all mounts. Defaults to false.
+               
+               - - -
+        """
+        pulumi.set(__self__, "path", path)
+        pulumi.set(__self__, "server", server)
+        if read_only is not None:
+            pulumi.set(__self__, "read_only", read_only)
+
+    @property
+    @pulumi.getter
+    def path(self) -> pulumi.Input[str]:
+        """
+        Path exported by the NFS server
+        """
+        return pulumi.get(self, "path")
+
+    @path.setter
+    def path(self, value: pulumi.Input[str]):
+        pulumi.set(self, "path", value)
+
+    @property
+    @pulumi.getter
+    def server(self) -> pulumi.Input[str]:
+        """
+        IP address or hostname of the NFS server
+        """
+        return pulumi.get(self, "server")
+
+    @server.setter
+    def server(self, value: pulumi.Input[str]):
+        pulumi.set(self, "server", value)
+
+    @property
+    @pulumi.getter(name="readOnly")
+    def read_only(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If true, mount the NFS volume as read only in all mounts. Defaults to false.
+
+        - - -
+        """
+        return pulumi.get(self, "read_only")
+
+    @read_only.setter
+    def read_only(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "read_only", value)
+
+
 @pulumi.input_type
 class ServiceTemplateSpecVolumeSecretArgs:
     def __init__(__self__, *,