pulumi-gcp 7.28.0a1718950249__py3-none-any.whl → 7.29.0__py3-none-any.whl

pulumi_gcp/composer/user_workloads_config_map.py

@@ -0,0 +1,475 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from .. import _utilities
+
+__all__ = ['UserWorkloadsConfigMapArgs', 'UserWorkloadsConfigMap']
+
+@pulumi.input_type
+class UserWorkloadsConfigMapArgs:
+    def __init__(__self__, *,
+                 environment: pulumi.Input[str],
+                 data: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 name: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 region: Optional[pulumi.Input[str]] = None):
+        """
+        The set of arguments for constructing a UserWorkloadsConfigMap resource.
+        :param pulumi.Input[str] environment: Environment where the Kubernetes ConfigMap will be stored and used.
+               
+               
+               - - -
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] data: The "data" field of Kubernetes ConfigMap, organized in key-value pairs.
+               For details see: https://kubernetes.io/docs/concepts/configuration/configmap/
+        :param pulumi.Input[str] name: Name of the Kubernetes ConfigMap.
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[str] region: The location or Compute Engine region for the environment.
+        """
+        pulumi.set(__self__, "environment", environment)
+        if data is not None:
+            pulumi.set(__self__, "data", data)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if project is not None:
+            pulumi.set(__self__, "project", project)
+        if region is not None:
+            pulumi.set(__self__, "region", region)
+
+    @property
+    @pulumi.getter
+    def environment(self) -> pulumi.Input[str]:
+        """
+        Environment where the Kubernetes ConfigMap will be stored and used.
+
+
+        - - -
+        """
+        return pulumi.get(self, "environment")
+
+    @environment.setter
+    def environment(self, value: pulumi.Input[str]):
+        pulumi.set(self, "environment", value)
+
+    @property
+    @pulumi.getter
+    def data(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        The "data" field of Kubernetes ConfigMap, organized in key-value pairs.
+        For details see: https://kubernetes.io/docs/concepts/configuration/configmap/
+        """
+        return pulumi.get(self, "data")
+
+    @data.setter
+    def data(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "data", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[str]]:
+        """
+        Name of the Kubernetes ConfigMap.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def project(self) -> Optional[pulumi.Input[str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
+        return pulumi.get(self, "project")
+
+    @project.setter
+    def project(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "project", value)
+
+    @property
+    @pulumi.getter
+    def region(self) -> Optional[pulumi.Input[str]]:
+        """
+        The location or Compute Engine region for the environment.
+        """
+        return pulumi.get(self, "region")
+
+    @region.setter
+    def region(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "region", value)
+
+
+@pulumi.input_type
+class _UserWorkloadsConfigMapState:
+    def __init__(__self__, *,
+                 data: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 environment: Optional[pulumi.Input[str]] = None,
+                 name: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 region: Optional[pulumi.Input[str]] = None):
+        """
+        Input properties used for looking up and filtering UserWorkloadsConfigMap resources.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] data: The "data" field of Kubernetes ConfigMap, organized in key-value pairs.
+               For details see: https://kubernetes.io/docs/concepts/configuration/configmap/
+        :param pulumi.Input[str] environment: Environment where the Kubernetes ConfigMap will be stored and used.
+               
+               
+               - - -
+        :param pulumi.Input[str] name: Name of the Kubernetes ConfigMap.
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[str] region: The location or Compute Engine region for the environment.
+        """
+        if data is not None:
+            pulumi.set(__self__, "data", data)
+        if environment is not None:
+            pulumi.set(__self__, "environment", environment)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if project is not None:
+            pulumi.set(__self__, "project", project)
+        if region is not None:
+            pulumi.set(__self__, "region", region)
+
+    @property
+    @pulumi.getter
+    def data(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        The "data" field of Kubernetes ConfigMap, organized in key-value pairs.
+        For details see: https://kubernetes.io/docs/concepts/configuration/configmap/
+        """
+        return pulumi.get(self, "data")
+
+    @data.setter
+    def data(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "data", value)
+
+    @property
+    @pulumi.getter
+    def environment(self) -> Optional[pulumi.Input[str]]:
+        """
+        Environment where the Kubernetes ConfigMap will be stored and used.
+
+
+        - - -
+        """
+        return pulumi.get(self, "environment")
+
+    @environment.setter
+    def environment(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "environment", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[str]]:
+        """
+        Name of the Kubernetes ConfigMap.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def project(self) -> Optional[pulumi.Input[str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
+        return pulumi.get(self, "project")
+
+    @project.setter
+    def project(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "project", value)
+
+    @property
+    @pulumi.getter
+    def region(self) -> Optional[pulumi.Input[str]]:
+        """
+        The location or Compute Engine region for the environment.
+        """
+        return pulumi.get(self, "region")
+
+    @region.setter
+    def region(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "region", value)
+
+
+class UserWorkloadsConfigMap(pulumi.CustomResource):
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 data: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 environment: Optional[pulumi.Input[str]] = None,
+                 name: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 region: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        """
+        ## Example Usage
+
+        ### Composer User Workloads Config Map Basic
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        environment = gcp.composer.Environment("environment",
+            name="test-environment",
+            region="us-central1",
+            config=gcp.composer.EnvironmentConfigArgs(
+                software_config=gcp.composer.EnvironmentConfigSoftwareConfigArgs(
+                    image_version="composer-3-airflow-2",
+                ),
+            ))
+        config_map = gcp.composer.UserWorkloadsConfigMap("config_map",
+            name="test-config-map",
+            region="us-central1",
+            environment=environment.name,
+            data={
+                "api_host": "apihost:443",
+            })
+        ```
+
+        ## Import
+
+        UserWorkloadsConfigMap can be imported using any of these accepted formats:
+
+        * `projects/{{project}}/locations/{{region}}/environments/{{environment}}/userWorkloadsConfigMaps/{{name}}`
+
+        * `{{project}}/{{region}}/{{environment}}/{{name}}`
+
+        * `{{region}}/{{environment}}/{{name}}`
+
+        * `{{environment}}/{{name}}`
+
+        When using the `pulumi import` command, UserWorkloadsConfigMap can be imported using one of the formats above. For example:
+
+        ```sh
+        $ pulumi import gcp:composer/userWorkloadsConfigMap:UserWorkloadsConfigMap default projects/{{project}}/locations/{{region}}/environments/{{environment}}/userWorkloadsConfigMaps/{{name}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:composer/userWorkloadsConfigMap:UserWorkloadsConfigMap default {{project}}/{{region}}/{{environment}}/{{name}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:composer/userWorkloadsConfigMap:UserWorkloadsConfigMap default {{region}}/{{environment}}/{{name}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:composer/userWorkloadsConfigMap:UserWorkloadsConfigMap default {{environment}}/{{name}}
+        ```
+
+        :param str resource_name: The name of the resource.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] data: The "data" field of Kubernetes ConfigMap, organized in key-value pairs.
+               For details see: https://kubernetes.io/docs/concepts/configuration/configmap/
+        :param pulumi.Input[str] environment: Environment where the Kubernetes ConfigMap will be stored and used.
+               
+               
+               - - -
+        :param pulumi.Input[str] name: Name of the Kubernetes ConfigMap.
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[str] region: The location or Compute Engine region for the environment.
+        """
+        ...
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 args: UserWorkloadsConfigMapArgs,
+                 opts: Optional[pulumi.ResourceOptions] = None):
+        """
+        ## Example Usage
+
+        ### Composer User Workloads Config Map Basic
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        environment = gcp.composer.Environment("environment",
+            name="test-environment",
+            region="us-central1",
+            config=gcp.composer.EnvironmentConfigArgs(
+                software_config=gcp.composer.EnvironmentConfigSoftwareConfigArgs(
+                    image_version="composer-3-airflow-2",
+                ),
+            ))
+        config_map = gcp.composer.UserWorkloadsConfigMap("config_map",
+            name="test-config-map",
+            region="us-central1",
+            environment=environment.name,
+            data={
+                "api_host": "apihost:443",
+            })
+        ```
+
+        ## Import
+
+        UserWorkloadsConfigMap can be imported using any of these accepted formats:
+
+        * `projects/{{project}}/locations/{{region}}/environments/{{environment}}/userWorkloadsConfigMaps/{{name}}`
+
+        * `{{project}}/{{region}}/{{environment}}/{{name}}`
+
+        * `{{region}}/{{environment}}/{{name}}`
+
+        * `{{environment}}/{{name}}`
+
+        When using the `pulumi import` command, UserWorkloadsConfigMap can be imported using one of the formats above. For example:
+
+        ```sh
+        $ pulumi import gcp:composer/userWorkloadsConfigMap:UserWorkloadsConfigMap default projects/{{project}}/locations/{{region}}/environments/{{environment}}/userWorkloadsConfigMaps/{{name}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:composer/userWorkloadsConfigMap:UserWorkloadsConfigMap default {{project}}/{{region}}/{{environment}}/{{name}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:composer/userWorkloadsConfigMap:UserWorkloadsConfigMap default {{region}}/{{environment}}/{{name}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:composer/userWorkloadsConfigMap:UserWorkloadsConfigMap default {{environment}}/{{name}}
+        ```
+
+        :param str resource_name: The name of the resource.
+        :param UserWorkloadsConfigMapArgs args: The arguments to use to populate this resource's properties.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        ...
+    def __init__(__self__, resource_name: str, *args, **kwargs):
+        resource_args, opts = _utilities.get_resource_args_opts(UserWorkloadsConfigMapArgs, pulumi.ResourceOptions, *args, **kwargs)
+        if resource_args is not None:
+            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
+        else:
+            __self__._internal_init(resource_name, *args, **kwargs)
+
+    def _internal_init(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 data: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 environment: Optional[pulumi.Input[str]] = None,
+                 name: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 region: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
+        if not isinstance(opts, pulumi.ResourceOptions):
+            raise TypeError('Expected resource options to be a ResourceOptions instance')
+        if opts.id is None:
+            if __props__ is not None:
+                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
+            __props__ = UserWorkloadsConfigMapArgs.__new__(UserWorkloadsConfigMapArgs)
+
+            __props__.__dict__["data"] = data
+            if environment is None and not opts.urn:
+                raise TypeError("Missing required property 'environment'")
+            __props__.__dict__["environment"] = environment
+            __props__.__dict__["name"] = name
+            __props__.__dict__["project"] = project
+            __props__.__dict__["region"] = region
+        super(UserWorkloadsConfigMap, __self__).__init__(
+            'gcp:composer/userWorkloadsConfigMap:UserWorkloadsConfigMap',
+            resource_name,
+            __props__,
+            opts)
+
+    @staticmethod
+    def get(resource_name: str,
+            id: pulumi.Input[str],
+            opts: Optional[pulumi.ResourceOptions] = None,
+            data: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+            environment: Optional[pulumi.Input[str]] = None,
+            name: Optional[pulumi.Input[str]] = None,
+            project: Optional[pulumi.Input[str]] = None,
+            region: Optional[pulumi.Input[str]] = None) -> 'UserWorkloadsConfigMap':
+        """
+        Get an existing UserWorkloadsConfigMap resource's state with the given name, id, and optional extra
+        properties used to qualify the lookup.
+
+        :param str resource_name: The unique name of the resulting resource.
+        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] data: The "data" field of Kubernetes ConfigMap, organized in key-value pairs.
+               For details see: https://kubernetes.io/docs/concepts/configuration/configmap/
+        :param pulumi.Input[str] environment: Environment where the Kubernetes ConfigMap will be stored and used.
+               
+               
+               - - -
+        :param pulumi.Input[str] name: Name of the Kubernetes ConfigMap.
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
+        :param pulumi.Input[str] region: The location or Compute Engine region for the environment.
+        """
+        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
+
+        __props__ = _UserWorkloadsConfigMapState.__new__(_UserWorkloadsConfigMapState)
+
+        __props__.__dict__["data"] = data
+        __props__.__dict__["environment"] = environment
+        __props__.__dict__["name"] = name
+        __props__.__dict__["project"] = project
+        __props__.__dict__["region"] = region
+        return UserWorkloadsConfigMap(resource_name, opts=opts, __props__=__props__)
+
+    @property
+    @pulumi.getter
+    def data(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
+        """
+        The "data" field of Kubernetes ConfigMap, organized in key-value pairs.
+        For details see: https://kubernetes.io/docs/concepts/configuration/configmap/
+        """
+        return pulumi.get(self, "data")
+
+    @property
+    @pulumi.getter
+    def environment(self) -> pulumi.Output[str]:
+        """
+        Environment where the Kubernetes ConfigMap will be stored and used.
+
+
+        - - -
+        """
+        return pulumi.get(self, "environment")
+
+    @property
+    @pulumi.getter
+    def name(self) -> pulumi.Output[str]:
+        """
+        Name of the Kubernetes ConfigMap.
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter
+    def project(self) -> pulumi.Output[str]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
+        return pulumi.get(self, "project")
+
+    @property
+    @pulumi.getter
+    def region(self) -> pulumi.Output[str]:
+        """
+        The location or Compute Engine region for the environment.
+        """
+        return pulumi.get(self, "region")
+

pulumi_gcp/compute/_inputs.py

@@ -437,6 +437,8 @@ __all__ = [
     'SecurityPolicyRuleMatchArgs',
     'SecurityPolicyRuleMatchConfigArgs',
     'SecurityPolicyRuleMatchExprArgs',
+    'SecurityPolicyRuleMatchExprOptionsArgs',
+    'SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs',
     'SecurityPolicyRulePreconfiguredWafConfigArgs',
     'SecurityPolicyRulePreconfiguredWafConfigExclusionArgs',
     'SecurityPolicyRulePreconfiguredWafConfigExclusionRequestCookyArgs',
@@ -1758,6 +1760,7 @@ class BackendServiceBackendArgs:
                and CONNECTION (for TCP/SSL).
                See the [Backend Services Overview](https://cloud.google.com/load-balancing/docs/backend-service#balancing-mode)
                for an explanation of load balancing modes.
+               From version 6.0.0 default value will be UTILIZATION to match default GCP value.
                Default value is `UTILIZATION`.
                Possible values are: `UTILIZATION`, `RATE`, `CONNECTION`.
         :param pulumi.Input[float] capacity_scaler: A multiplier applied to the group's maximum servicing capacity
@@ -1858,6 +1861,7 @@ class BackendServiceBackendArgs:
         and CONNECTION (for TCP/SSL).
         See the [Backend Services Overview](https://cloud.google.com/load-balancing/docs/backend-service#balancing-mode)
         for an explanation of load balancing modes.
+        From version 6.0.0 default value will be UTILIZATION to match default GCP value.
         Default value is `UTILIZATION`.
         Possible values are: `UTILIZATION`, `RATE`, `CONNECTION`.
         """
@@ -3687,7 +3691,6 @@ class DiskGuestOsFeatureArgs:
                  type: pulumi.Input[str]):
         """
         :param pulumi.Input[str] type: The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options.
-               Possible values are: `MULTI_IP_SUBNET`, `SECURE_BOOT`, `SEV_CAPABLE`, `UEFI_COMPATIBLE`, `VIRTIO_SCSI_MULTIQUEUE`, `WINDOWS`, `GVNIC`, `SEV_LIVE_MIGRATABLE`, `SEV_SNP_CAPABLE`, `SUSPEND_RESUME_COMPATIBLE`, `TDX_CAPABLE`, `SEV_LIVE_MIGRATABLE_V2`.
         """
         pulumi.set(__self__, "type", type)
 
@@ -3696,7 +3699,6 @@ class DiskGuestOsFeatureArgs:
     def type(self) -> pulumi.Input[str]:
         """
         The type of supported feature. Read [Enabling guest operating system features](https://cloud.google.com/compute/docs/images/create-delete-deprecate-private-images#guest-os-features) to see a list of available options.
-        Possible values are: `MULTI_IP_SUBNET`, `SECURE_BOOT`, `SEV_CAPABLE`, `UEFI_COMPATIBLE`, `VIRTIO_SCSI_MULTIQUEUE`, `WINDOWS`, `GVNIC`, `SEV_LIVE_MIGRATABLE`, `SEV_SNP_CAPABLE`, `SUSPEND_RESUME_COMPATIBLE`, `TDX_CAPABLE`, `SEV_LIVE_MIGRATABLE_V2`.
         """
         return pulumi.get(self, "type")
 
@@ -16337,6 +16339,7 @@ class RegionBackendServiceBackendArgs:
         :param pulumi.Input[str] balancing_mode: Specifies the balancing mode for this backend.
                See the [Backend Services Overview](https://cloud.google.com/load-balancing/docs/backend-service#balancing-mode)
                for an explanation of load balancing modes.
+               From version 6.0.0 default value will be UTILIZATION to match default GCP value.
                Default value is `CONNECTION`.
                Possible values are: `UTILIZATION`, `RATE`, `CONNECTION`.
         :param pulumi.Input[float] capacity_scaler: A multiplier applied to the group's maximum servicing capacity
@@ -16449,6 +16452,7 @@ class RegionBackendServiceBackendArgs:
         Specifies the balancing mode for this backend.
         See the [Backend Services Overview](https://cloud.google.com/load-balancing/docs/backend-service#balancing-mode)
         for an explanation of load balancing modes.
+        From version 6.0.0 default value will be UTILIZATION to match default GCP value.
         Default value is `CONNECTION`.
         Possible values are: `UTILIZATION`, `RATE`, `CONNECTION`.
         """
@@ -30827,6 +30831,7 @@ class SecurityPolicyRuleMatchArgs:
     def __init__(__self__, *,
                  config: Optional[pulumi.Input['SecurityPolicyRuleMatchConfigArgs']] = None,
                  expr: Optional[pulumi.Input['SecurityPolicyRuleMatchExprArgs']] = None,
+                 expr_options: Optional[pulumi.Input['SecurityPolicyRuleMatchExprOptionsArgs']] = None,
                  versioned_expr: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input['SecurityPolicyRuleMatchConfigArgs'] config: The configuration options available when specifying versionedExpr.
@@ -30834,6 +30839,8 @@ class SecurityPolicyRuleMatchArgs:
                Structure is documented below.
         :param pulumi.Input['SecurityPolicyRuleMatchExprArgs'] expr: User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header.
                Structure is documented below.
+        :param pulumi.Input['SecurityPolicyRuleMatchExprOptionsArgs'] expr_options: The configuration options available when specifying a user defined CEVAL expression (i.e., 'expr').
+               Structure is documented below.
         :param pulumi.Input[str] versioned_expr: Preconfigured versioned expression. If this field is specified, config must also be specified.
                Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding srcIpRange field in config.
                Possible values are: `SRC_IPS_V1`.
@@ -30842,6 +30849,8 @@ class SecurityPolicyRuleMatchArgs:
             pulumi.set(__self__, "config", config)
         if expr is not None:
             pulumi.set(__self__, "expr", expr)
+        if expr_options is not None:
+            pulumi.set(__self__, "expr_options", expr_options)
         if versioned_expr is not None:
             pulumi.set(__self__, "versioned_expr", versioned_expr)
 
@@ -30872,6 +30881,19 @@ class SecurityPolicyRuleMatchArgs:
     def expr(self, value: Optional[pulumi.Input['SecurityPolicyRuleMatchExprArgs']]):
         pulumi.set(self, "expr", value)
 
+    @property
+    @pulumi.getter(name="exprOptions")
+    def expr_options(self) -> Optional[pulumi.Input['SecurityPolicyRuleMatchExprOptionsArgs']]:
+        """
+        The configuration options available when specifying a user defined CEVAL expression (i.e., 'expr').
+        Structure is documented below.
+        """
+        return pulumi.get(self, "expr_options")
+
+    @expr_options.setter
+    def expr_options(self, value: Optional[pulumi.Input['SecurityPolicyRuleMatchExprOptionsArgs']]):
+        pulumi.set(self, "expr_options", value)
+
     @property
     @pulumi.getter(name="versionedExpr")
     def versioned_expr(self) -> Optional[pulumi.Input[str]]:
@@ -30932,6 +30954,69 @@ class SecurityPolicyRuleMatchExprArgs:
         pulumi.set(self, "expression", value)
 
 
+@pulumi.input_type
+class SecurityPolicyRuleMatchExprOptionsArgs:
+    def __init__(__self__, *,
+                 recaptcha_options: pulumi.Input['SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs']):
+        """
+        :param pulumi.Input['SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs'] recaptcha_options: reCAPTCHA configuration options to be applied for the rule. If the rule does not evaluate reCAPTCHA tokens, this field has no effect.
+               Structure is documented below.
+        """
+        pulumi.set(__self__, "recaptcha_options", recaptcha_options)
+
+    @property
+    @pulumi.getter(name="recaptchaOptions")
+    def recaptcha_options(self) -> pulumi.Input['SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs']:
+        """
+        reCAPTCHA configuration options to be applied for the rule. If the rule does not evaluate reCAPTCHA tokens, this field has no effect.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "recaptcha_options")
+
+    @recaptcha_options.setter
+    def recaptcha_options(self, value: pulumi.Input['SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs']):
+        pulumi.set(self, "recaptcha_options", value)
+
+
+@pulumi.input_type
+class SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs:
+    def __init__(__self__, *,
+                 action_token_site_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 session_token_site_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] action_token_site_keys: A list of site keys to be used during the validation of reCAPTCHA action-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] session_token_site_keys: A list of site keys to be used during the validation of reCAPTCHA session-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
+        """
+        if action_token_site_keys is not None:
+            pulumi.set(__self__, "action_token_site_keys", action_token_site_keys)
+        if session_token_site_keys is not None:
+            pulumi.set(__self__, "session_token_site_keys", session_token_site_keys)
+
+    @property
+    @pulumi.getter(name="actionTokenSiteKeys")
+    def action_token_site_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        A list of site keys to be used during the validation of reCAPTCHA action-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
+        """
+        return pulumi.get(self, "action_token_site_keys")
+
+    @action_token_site_keys.setter
+    def action_token_site_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "action_token_site_keys", value)
+
+    @property
+    @pulumi.getter(name="sessionTokenSiteKeys")
+    def session_token_site_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        A list of site keys to be used during the validation of reCAPTCHA session-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
+        """
+        return pulumi.get(self, "session_token_site_keys")
+
+    @session_token_site_keys.setter
+    def session_token_site_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "session_token_site_keys", value)
+
+
 @pulumi.input_type
 class SecurityPolicyRulePreconfiguredWafConfigArgs:
     def __init__(__self__, *,