pulumi-gcp 7.28.0a1718950249__py3-none-any.whl → 7.29.0__py3-none-any.whl

pulumi_gcp/servicenetworking/__init__.py

@@ -8,3 +8,4 @@ import typing
 from .connection import *
 from .get_peered_dns_domain import *
 from .peered_dns_domain import *
+from .vpc_service_controls import *

pulumi_gcp/servicenetworking/vpc_service_controls.py

@@ -0,0 +1,511 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from .. import _utilities
+
+__all__ = ['VpcServiceControlsArgs', 'VpcServiceControls']
+
+@pulumi.input_type
+class VpcServiceControlsArgs:
+    def __init__(__self__, *,
+                 enabled: pulumi.Input[bool],
+                 network: pulumi.Input[str],
+                 service: pulumi.Input[str],
+                 project: Optional[pulumi.Input[str]] = None):
+        """
+        The set of arguments for constructing a VpcServiceControls resource.
+        :param pulumi.Input[bool] enabled: Desired VPC Service Controls state service producer VPC network, as
+               described at the top of this page.
+        :param pulumi.Input[str] network: The network that the consumer is using to connect with services.
+        :param pulumi.Input[str] service: The service that is managing peering connectivity for a service
+               producer's organization. For Google services that support this
+               functionality, this value is `servicenetworking.googleapis.com`.
+               
+               
+               - - -
+        :param pulumi.Input[str] project: The id of the Google Cloud project containing the consumer network.
+        """
+        pulumi.set(__self__, "enabled", enabled)
+        pulumi.set(__self__, "network", network)
+        pulumi.set(__self__, "service", service)
+        if project is not None:
+            pulumi.set(__self__, "project", project)
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> pulumi.Input[bool]:
+        """
+        Desired VPC Service Controls state service producer VPC network, as
+        described at the top of this page.
+        """
+        return pulumi.get(self, "enabled")
+
+    @enabled.setter
+    def enabled(self, value: pulumi.Input[bool]):
+        pulumi.set(self, "enabled", value)
+
+    @property
+    @pulumi.getter
+    def network(self) -> pulumi.Input[str]:
+        """
+        The network that the consumer is using to connect with services.
+        """
+        return pulumi.get(self, "network")
+
+    @network.setter
+    def network(self, value: pulumi.Input[str]):
+        pulumi.set(self, "network", value)
+
+    @property
+    @pulumi.getter
+    def service(self) -> pulumi.Input[str]:
+        """
+        The service that is managing peering connectivity for a service
+        producer's organization. For Google services that support this
+        functionality, this value is `servicenetworking.googleapis.com`.
+
+
+        - - -
+        """
+        return pulumi.get(self, "service")
+
+    @service.setter
+    def service(self, value: pulumi.Input[str]):
+        pulumi.set(self, "service", value)
+
+    @property
+    @pulumi.getter
+    def project(self) -> Optional[pulumi.Input[str]]:
+        """
+        The id of the Google Cloud project containing the consumer network.
+        """
+        return pulumi.get(self, "project")
+
+    @project.setter
+    def project(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "project", value)
+
+
+@pulumi.input_type
+class _VpcServiceControlsState:
+    def __init__(__self__, *,
+                 enabled: Optional[pulumi.Input[bool]] = None,
+                 network: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 service: Optional[pulumi.Input[str]] = None):
+        """
+        Input properties used for looking up and filtering VpcServiceControls resources.
+        :param pulumi.Input[bool] enabled: Desired VPC Service Controls state service producer VPC network, as
+               described at the top of this page.
+        :param pulumi.Input[str] network: The network that the consumer is using to connect with services.
+        :param pulumi.Input[str] project: The id of the Google Cloud project containing the consumer network.
+        :param pulumi.Input[str] service: The service that is managing peering connectivity for a service
+               producer's organization. For Google services that support this
+               functionality, this value is `servicenetworking.googleapis.com`.
+               
+               
+               - - -
+        """
+        if enabled is not None:
+            pulumi.set(__self__, "enabled", enabled)
+        if network is not None:
+            pulumi.set(__self__, "network", network)
+        if project is not None:
+            pulumi.set(__self__, "project", project)
+        if service is not None:
+            pulumi.set(__self__, "service", service)
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Desired VPC Service Controls state service producer VPC network, as
+        described at the top of this page.
+        """
+        return pulumi.get(self, "enabled")
+
+    @enabled.setter
+    def enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "enabled", value)
+
+    @property
+    @pulumi.getter
+    def network(self) -> Optional[pulumi.Input[str]]:
+        """
+        The network that the consumer is using to connect with services.
+        """
+        return pulumi.get(self, "network")
+
+    @network.setter
+    def network(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "network", value)
+
+    @property
+    @pulumi.getter
+    def project(self) -> Optional[pulumi.Input[str]]:
+        """
+        The id of the Google Cloud project containing the consumer network.
+        """
+        return pulumi.get(self, "project")
+
+    @project.setter
+    def project(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "project", value)
+
+    @property
+    @pulumi.getter
+    def service(self) -> Optional[pulumi.Input[str]]:
+        """
+        The service that is managing peering connectivity for a service
+        producer's organization. For Google services that support this
+        functionality, this value is `servicenetworking.googleapis.com`.
+
+
+        - - -
+        """
+        return pulumi.get(self, "service")
+
+    @service.setter
+    def service(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "service", value)
+
+
+class VpcServiceControls(pulumi.CustomResource):
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 enabled: Optional[pulumi.Input[bool]] = None,
+                 network: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 service: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        """
+        Manages the VPC Service Controls configuration for a service
+        networking connection
+
+        When enabled, Google Cloud makes the following
+        route configuration changes in the service producer VPC network:
+        - Removes the IPv4 default route (destination 0.0.0.0/0,
+          next hop default internet gateway), Google Cloud then creates an
+          IPv4 route for destination 199.36.153.4/30 using the default
+          internet gateway next hop.
+        - Creates Cloud DNS managed private zones and authorizes those zones
+          for the service producer VPC network. The zones include
+          googleapis.com, gcr.io, pkg.dev, notebooks.cloud.google.com,
+          kernels.googleusercontent.com, backupdr.cloud.google.com, and
+          backupdr.googleusercontent.com as necessary domains or host names
+          for Google APIs and services that are compatible with VPC Service
+          Controls. Record data in the zones resolves all host names to
+          199.36.153.4, 199.36.153.5, 199.36.153.6, and 199.36.153.7.
+
+        When disabled, Google Cloud makes the following route configuration
+        changes in the service producer VPC network:
+        - Restores a default route (destination 0.0.0.0/0, next hop default
+          internet gateway)
+        - Deletes the Cloud DNS managed private zones that provided the host
+          name overrides.
+
+        To get more information about VPCServiceControls, see:
+
+        * [API documentation](https://cloud.google.com/service-infrastructure/docs/service-networking/reference/rest/v1/services)
+        * How-to Guides
+            * [Private Google Access with VPC Service Controls](https://cloud.google.com/vpc-service-controls/docs/private-connectivity)
+            * [Set up private connectivity to Google APIs and services](https://cloud.google.com/vpc-service-controls/docs/set-up-private-connectivity)
+            * [Enable VPC Service Controls for service networking](https://cloud.google.com/sdk/gcloud/reference/services/vpc-peerings/enable-vpc-service-controls)
+
+        > **Note:** Destroying a `servicenetworking.VpcServiceControls`
+        resource will remove it from state, but will not change the
+        underlying VPC Service Controls configuration for the service
+        producer network.
+
+        ## Example Usage
+
+        ### Service Networking Vpc Service Controls Basic
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        # Create a VPC
+        default = gcp.compute.Network("default", name="example-network")
+        # Create an IP address
+        default_global_address = gcp.compute.GlobalAddress("default",
+            name="psa-range",
+            purpose="VPC_PEERING",
+            address_type="INTERNAL",
+            prefix_length=16,
+            network=default.id)
+        # Create a private connection
+        default_connection = gcp.servicenetworking.Connection("default",
+            network=default.id,
+            service="servicenetworking.googleapis.com",
+            reserved_peering_ranges=[default_global_address.name])
+        # Enable VPC-SC on the producer network
+        default_vpc_service_controls = gcp.servicenetworking.VpcServiceControls("default",
+            network=default.name,
+            service="servicenetworking.googleapis.com",
+            enabled=True,
+            opts = pulumi.ResourceOptions(depends_on=[default_connection]))
+        ```
+
+        ## Import
+
+        VPCServiceControls can be imported using any of these accepted formats:
+
+        * `services/{{service}}/projects/{{project}}/networks/{{network}}`
+
+        * `{{service}}/{{project}}/{{network}}`
+
+        * `{{service}}/{{network}}`
+
+        When using the `pulumi import` command, VPCServiceControls can be imported using one of the formats above. For example:
+
+        ```sh
+        $ pulumi import gcp:servicenetworking/vpcServiceControls:VpcServiceControls default services/{{service}}/projects/{{project}}/networks/{{network}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:servicenetworking/vpcServiceControls:VpcServiceControls default {{service}}/{{project}}/{{network}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:servicenetworking/vpcServiceControls:VpcServiceControls default {{service}}/{{network}}
+        ```
+
+        :param str resource_name: The name of the resource.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[bool] enabled: Desired VPC Service Controls state service producer VPC network, as
+               described at the top of this page.
+        :param pulumi.Input[str] network: The network that the consumer is using to connect with services.
+        :param pulumi.Input[str] project: The id of the Google Cloud project containing the consumer network.
+        :param pulumi.Input[str] service: The service that is managing peering connectivity for a service
+               producer's organization. For Google services that support this
+               functionality, this value is `servicenetworking.googleapis.com`.
+               
+               
+               - - -
+        """
+        ...
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 args: VpcServiceControlsArgs,
+                 opts: Optional[pulumi.ResourceOptions] = None):
+        """
+        Manages the VPC Service Controls configuration for a service
+        networking connection
+
+        When enabled, Google Cloud makes the following
+        route configuration changes in the service producer VPC network:
+        - Removes the IPv4 default route (destination 0.0.0.0/0,
+          next hop default internet gateway), Google Cloud then creates an
+          IPv4 route for destination 199.36.153.4/30 using the default
+          internet gateway next hop.
+        - Creates Cloud DNS managed private zones and authorizes those zones
+          for the service producer VPC network. The zones include
+          googleapis.com, gcr.io, pkg.dev, notebooks.cloud.google.com,
+          kernels.googleusercontent.com, backupdr.cloud.google.com, and
+          backupdr.googleusercontent.com as necessary domains or host names
+          for Google APIs and services that are compatible with VPC Service
+          Controls. Record data in the zones resolves all host names to
+          199.36.153.4, 199.36.153.5, 199.36.153.6, and 199.36.153.7.
+
+        When disabled, Google Cloud makes the following route configuration
+        changes in the service producer VPC network:
+        - Restores a default route (destination 0.0.0.0/0, next hop default
+          internet gateway)
+        - Deletes the Cloud DNS managed private zones that provided the host
+          name overrides.
+
+        To get more information about VPCServiceControls, see:
+
+        * [API documentation](https://cloud.google.com/service-infrastructure/docs/service-networking/reference/rest/v1/services)
+        * How-to Guides
+            * [Private Google Access with VPC Service Controls](https://cloud.google.com/vpc-service-controls/docs/private-connectivity)
+            * [Set up private connectivity to Google APIs and services](https://cloud.google.com/vpc-service-controls/docs/set-up-private-connectivity)
+            * [Enable VPC Service Controls for service networking](https://cloud.google.com/sdk/gcloud/reference/services/vpc-peerings/enable-vpc-service-controls)
+
+        > **Note:** Destroying a `servicenetworking.VpcServiceControls`
+        resource will remove it from state, but will not change the
+        underlying VPC Service Controls configuration for the service
+        producer network.
+
+        ## Example Usage
+
+        ### Service Networking Vpc Service Controls Basic
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        # Create a VPC
+        default = gcp.compute.Network("default", name="example-network")
+        # Create an IP address
+        default_global_address = gcp.compute.GlobalAddress("default",
+            name="psa-range",
+            purpose="VPC_PEERING",
+            address_type="INTERNAL",
+            prefix_length=16,
+            network=default.id)
+        # Create a private connection
+        default_connection = gcp.servicenetworking.Connection("default",
+            network=default.id,
+            service="servicenetworking.googleapis.com",
+            reserved_peering_ranges=[default_global_address.name])
+        # Enable VPC-SC on the producer network
+        default_vpc_service_controls = gcp.servicenetworking.VpcServiceControls("default",
+            network=default.name,
+            service="servicenetworking.googleapis.com",
+            enabled=True,
+            opts = pulumi.ResourceOptions(depends_on=[default_connection]))
+        ```
+
+        ## Import
+
+        VPCServiceControls can be imported using any of these accepted formats:
+
+        * `services/{{service}}/projects/{{project}}/networks/{{network}}`
+
+        * `{{service}}/{{project}}/{{network}}`
+
+        * `{{service}}/{{network}}`
+
+        When using the `pulumi import` command, VPCServiceControls can be imported using one of the formats above. For example:
+
+        ```sh
+        $ pulumi import gcp:servicenetworking/vpcServiceControls:VpcServiceControls default services/{{service}}/projects/{{project}}/networks/{{network}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:servicenetworking/vpcServiceControls:VpcServiceControls default {{service}}/{{project}}/{{network}}
+        ```
+
+        ```sh
+        $ pulumi import gcp:servicenetworking/vpcServiceControls:VpcServiceControls default {{service}}/{{network}}
+        ```
+
+        :param str resource_name: The name of the resource.
+        :param VpcServiceControlsArgs args: The arguments to use to populate this resource's properties.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        ...
+    def __init__(__self__, resource_name: str, *args, **kwargs):
+        resource_args, opts = _utilities.get_resource_args_opts(VpcServiceControlsArgs, pulumi.ResourceOptions, *args, **kwargs)
+        if resource_args is not None:
+            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
+        else:
+            __self__._internal_init(resource_name, *args, **kwargs)
+
+    def _internal_init(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 enabled: Optional[pulumi.Input[bool]] = None,
+                 network: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 service: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
+        if not isinstance(opts, pulumi.ResourceOptions):
+            raise TypeError('Expected resource options to be a ResourceOptions instance')
+        if opts.id is None:
+            if __props__ is not None:
+                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
+            __props__ = VpcServiceControlsArgs.__new__(VpcServiceControlsArgs)
+
+            if enabled is None and not opts.urn:
+                raise TypeError("Missing required property 'enabled'")
+            __props__.__dict__["enabled"] = enabled
+            if network is None and not opts.urn:
+                raise TypeError("Missing required property 'network'")
+            __props__.__dict__["network"] = network
+            __props__.__dict__["project"] = project
+            if service is None and not opts.urn:
+                raise TypeError("Missing required property 'service'")
+            __props__.__dict__["service"] = service
+        super(VpcServiceControls, __self__).__init__(
+            'gcp:servicenetworking/vpcServiceControls:VpcServiceControls',
+            resource_name,
+            __props__,
+            opts)
+
+    @staticmethod
+    def get(resource_name: str,
+            id: pulumi.Input[str],
+            opts: Optional[pulumi.ResourceOptions] = None,
+            enabled: Optional[pulumi.Input[bool]] = None,
+            network: Optional[pulumi.Input[str]] = None,
+            project: Optional[pulumi.Input[str]] = None,
+            service: Optional[pulumi.Input[str]] = None) -> 'VpcServiceControls':
+        """
+        Get an existing VpcServiceControls resource's state with the given name, id, and optional extra
+        properties used to qualify the lookup.
+
+        :param str resource_name: The unique name of the resulting resource.
+        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[bool] enabled: Desired VPC Service Controls state service producer VPC network, as
+               described at the top of this page.
+        :param pulumi.Input[str] network: The network that the consumer is using to connect with services.
+        :param pulumi.Input[str] project: The id of the Google Cloud project containing the consumer network.
+        :param pulumi.Input[str] service: The service that is managing peering connectivity for a service
+               producer's organization. For Google services that support this
+               functionality, this value is `servicenetworking.googleapis.com`.
+               
+               
+               - - -
+        """
+        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
+
+        __props__ = _VpcServiceControlsState.__new__(_VpcServiceControlsState)
+
+        __props__.__dict__["enabled"] = enabled
+        __props__.__dict__["network"] = network
+        __props__.__dict__["project"] = project
+        __props__.__dict__["service"] = service
+        return VpcServiceControls(resource_name, opts=opts, __props__=__props__)
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> pulumi.Output[bool]:
+        """
+        Desired VPC Service Controls state service producer VPC network, as
+        described at the top of this page.
+        """
+        return pulumi.get(self, "enabled")
+
+    @property
+    @pulumi.getter
+    def network(self) -> pulumi.Output[str]:
+        """
+        The network that the consumer is using to connect with services.
+        """
+        return pulumi.get(self, "network")
+
+    @property
+    @pulumi.getter
+    def project(self) -> pulumi.Output[Optional[str]]:
+        """
+        The id of the Google Cloud project containing the consumer network.
+        """
+        return pulumi.get(self, "project")
+
+    @property
+    @pulumi.getter
+    def service(self) -> pulumi.Output[str]:
+        """
+        The service that is managing peering connectivity for a service
+        producer's organization. For Google services that support this
+        functionality, this value is `servicenetworking.googleapis.com`.
+
+
+        - - -
+        """
+        return pulumi.get(self, "service")
+

pulumi_gcp/sql/_inputs.py

@@ -1502,13 +1502,11 @@ class DatabaseInstanceSettingsIpConfigurationArgs:
 
     @property
     @pulumi.getter(name="requireSsl")
+    @_utilities.deprecated("""`require_ssl` will be fully deprecated in a future major release. For now, please use `ssl_mode` with a compatible `require_ssl` value instead.""")
     def require_ssl(self) -> Optional[pulumi.Input[bool]]:
         """
         Whether SSL connections over IP are enforced or not. To change this field, also set the corresponding value in `ssl_mode`. It will be fully deprecated in a future major release. For now, please use `ssl_mode` with a compatible `require_ssl` value instead.
         """
-        warnings.warn("""`require_ssl` will be fully deprecated in a future major release. For now, please use `ssl_mode` with a compatible `require_ssl` value instead.""", DeprecationWarning)
-        pulumi.log.warn("""require_ssl is deprecated: `require_ssl` will be fully deprecated in a future major release. For now, please use `ssl_mode` with a compatible `require_ssl` value instead.""")
-
         return pulumi.get(self, "require_ssl")
 
     @require_ssl.setter

pulumi_gcp/sql/database_instance.py

@@ -858,7 +858,7 @@ class DatabaseInstance(pulumi.CustomResource):
                     enable_private_path_for_google_cloud_services=True,
                 ),
             ),
-            opts=pulumi.ResourceOptions(depends_on=[private_vpc_connection]))
+            opts = pulumi.ResourceOptions(depends_on=[private_vpc_connection]))
         ```
 
         ### ENTERPRISE_PLUS Instance with data_cache_config
@@ -1052,7 +1052,7 @@ class DatabaseInstance(pulumi.CustomResource):
                     enable_private_path_for_google_cloud_services=True,
                 ),
             ),
-            opts=pulumi.ResourceOptions(depends_on=[private_vpc_connection]))
+            opts = pulumi.ResourceOptions(depends_on=[private_vpc_connection]))
         ```
 
         ### ENTERPRISE_PLUS Instance with data_cache_config

pulumi_gcp/sql/outputs.py

@@ -1549,13 +1549,11 @@ class DatabaseInstanceSettingsIpConfiguration(dict):
 
     @property
     @pulumi.getter(name="requireSsl")
+    @_utilities.deprecated("""`require_ssl` will be fully deprecated in a future major release. For now, please use `ssl_mode` with a compatible `require_ssl` value instead.""")
     def require_ssl(self) -> Optional[bool]:
         """
         Whether SSL connections over IP are enforced or not. To change this field, also set the corresponding value in `ssl_mode`. It will be fully deprecated in a future major release. For now, please use `ssl_mode` with a compatible `require_ssl` value instead.
         """
-        warnings.warn("""`require_ssl` will be fully deprecated in a future major release. For now, please use `ssl_mode` with a compatible `require_ssl` value instead.""", DeprecationWarning)
-        pulumi.log.warn("""require_ssl is deprecated: `require_ssl` will be fully deprecated in a future major release. For now, please use `ssl_mode` with a compatible `require_ssl` value instead.""")
-
         return pulumi.get(self, "require_ssl")
 
     @property

pulumi_gcp/sql/user.py

@@ -48,7 +48,9 @@ class UserArgs:
                is not provided, the provider project is used.
         :param pulumi.Input[str] type: The user type. It determines the method to authenticate the
                user during login. The default is the database's built-in user type. Flags
-               include "BUILT_IN", "CLOUD_IAM_USER", "CLOUD_IAM_GROUP" or "CLOUD_IAM_SERVICE_ACCOUNT".
+               include "BUILT_IN", "CLOUD_IAM_USER", and "CLOUD_IAM_SERVICE_ACCOUNT" for both
+               [Postgres](https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1beta4/users#sqlusertype) and [MySQL](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/users#sqlusertype).
+               MySQL also includes "CLOUD_IAM_GROUP", "CLOUD_IAM_GROUP_USER" and "CLOUD_IAM_GROUP_SERVICE_ACCOUNT".
         """
         pulumi.set(__self__, "instance", instance)
         if deletion_policy is not None:
@@ -167,7 +169,9 @@ class UserArgs:
         """
         The user type. It determines the method to authenticate the
         user during login. The default is the database's built-in user type. Flags
-        include "BUILT_IN", "CLOUD_IAM_USER", "CLOUD_IAM_GROUP" or "CLOUD_IAM_SERVICE_ACCOUNT".
+        include "BUILT_IN", "CLOUD_IAM_USER", and "CLOUD_IAM_SERVICE_ACCOUNT" for both
+        [Postgres](https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1beta4/users#sqlusertype) and [MySQL](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/users#sqlusertype).
+        MySQL also includes "CLOUD_IAM_GROUP", "CLOUD_IAM_GROUP_USER" and "CLOUD_IAM_GROUP_SERVICE_ACCOUNT".
         """
         return pulumi.get(self, "type")
 
@@ -212,7 +216,9 @@ class _UserState:
                is not provided, the provider project is used.
         :param pulumi.Input[str] type: The user type. It determines the method to authenticate the
                user during login. The default is the database's built-in user type. Flags
-               include "BUILT_IN", "CLOUD_IAM_USER", "CLOUD_IAM_GROUP" or "CLOUD_IAM_SERVICE_ACCOUNT".
+               include "BUILT_IN", "CLOUD_IAM_USER", and "CLOUD_IAM_SERVICE_ACCOUNT" for both
+               [Postgres](https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1beta4/users#sqlusertype) and [MySQL](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/users#sqlusertype).
+               MySQL also includes "CLOUD_IAM_GROUP", "CLOUD_IAM_GROUP_USER" and "CLOUD_IAM_GROUP_SERVICE_ACCOUNT".
         """
         if deletion_policy is not None:
             pulumi.set(__self__, "deletion_policy", deletion_policy)
@@ -343,7 +349,9 @@ class _UserState:
         """
         The user type. It determines the method to authenticate the
         user during login. The default is the database's built-in user type. Flags
-        include "BUILT_IN", "CLOUD_IAM_USER", "CLOUD_IAM_GROUP" or "CLOUD_IAM_SERVICE_ACCOUNT".
+        include "BUILT_IN", "CLOUD_IAM_USER", and "CLOUD_IAM_SERVICE_ACCOUNT" for both
+        [Postgres](https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1beta4/users#sqlusertype) and [MySQL](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/users#sqlusertype).
+        MySQL also includes "CLOUD_IAM_GROUP", "CLOUD_IAM_GROUP_USER" and "CLOUD_IAM_GROUP_SERVICE_ACCOUNT".
         """
         return pulumi.get(self, "type")
 
@@ -494,7 +502,9 @@ class User(pulumi.CustomResource):
                is not provided, the provider project is used.
         :param pulumi.Input[str] type: The user type. It determines the method to authenticate the
                user during login. The default is the database's built-in user type. Flags
-               include "BUILT_IN", "CLOUD_IAM_USER", "CLOUD_IAM_GROUP" or "CLOUD_IAM_SERVICE_ACCOUNT".
+               include "BUILT_IN", "CLOUD_IAM_USER", and "CLOUD_IAM_SERVICE_ACCOUNT" for both
+               [Postgres](https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1beta4/users#sqlusertype) and [MySQL](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/users#sqlusertype).
+               MySQL also includes "CLOUD_IAM_GROUP", "CLOUD_IAM_GROUP_USER" and "CLOUD_IAM_GROUP_SERVICE_ACCOUNT".
         """
         ...
     @overload
@@ -699,7 +709,9 @@ class User(pulumi.CustomResource):
                is not provided, the provider project is used.
         :param pulumi.Input[str] type: The user type. It determines the method to authenticate the
                user during login. The default is the database's built-in user type. Flags
-               include "BUILT_IN", "CLOUD_IAM_USER", "CLOUD_IAM_GROUP" or "CLOUD_IAM_SERVICE_ACCOUNT".
+               include "BUILT_IN", "CLOUD_IAM_USER", and "CLOUD_IAM_SERVICE_ACCOUNT" for both
+               [Postgres](https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1beta4/users#sqlusertype) and [MySQL](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/users#sqlusertype).
+               MySQL also includes "CLOUD_IAM_GROUP", "CLOUD_IAM_GROUP_USER" and "CLOUD_IAM_GROUP_SERVICE_ACCOUNT".
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -794,7 +806,9 @@ class User(pulumi.CustomResource):
         """
         The user type. It determines the method to authenticate the
         user during login. The default is the database's built-in user type. Flags
-        include "BUILT_IN", "CLOUD_IAM_USER", "CLOUD_IAM_GROUP" or "CLOUD_IAM_SERVICE_ACCOUNT".
+        include "BUILT_IN", "CLOUD_IAM_USER", and "CLOUD_IAM_SERVICE_ACCOUNT" for both
+        [Postgres](https://cloud.google.com/sql/docs/postgres/admin-api/rest/v1beta4/users#sqlusertype) and [MySQL](https://cloud.google.com/sql/docs/mysql/admin-api/rest/v1beta4/users#sqlusertype).
+        MySQL also includes "CLOUD_IAM_GROUP", "CLOUD_IAM_GROUP_USER" and "CLOUD_IAM_GROUP_SERVICE_ACCOUNT".
         """
         return pulumi.get(self, "type")
 

pulumi_gcp/storage/get_project_service_account.py

@@ -156,7 +156,7 @@ def get_project_service_account(project: Optional[str] = None,
         encryption=gcp.storage.BucketEncryptionArgs(
             default_kms_key_name="your-crypto-key-id",
         ),
-        opts=pulumi.ResourceOptions(depends_on=[binding]))
+        opts = pulumi.ResourceOptions(depends_on=[binding]))
     ```
 
 
@@ -248,7 +248,7 @@ def get_project_service_account_output(project: Optional[pulumi.Input[Optional[s
         encryption=gcp.storage.BucketEncryptionArgs(
             default_kms_key_name="your-crypto-key-id",
         ),
-        opts=pulumi.ResourceOptions(depends_on=[binding]))
+        opts = pulumi.ResourceOptions(depends_on=[binding]))
     ```