pulumi-gcp 7.29.0a1719364094__py3-none-any.whl → 7.29.0a1719416802__py3-none-any.whl

pulumi_gcp/cloudrunv2/job.py

@@ -25,7 +25,9 @@ class JobArgs:
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  launch_stage: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 project: Optional[pulumi.Input[str]] = None):
+                 project: Optional[pulumi.Input[str]] = None,
+                 run_execution_token: Optional[pulumi.Input[str]] = None,
+                 start_execution_token: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a Job resource.
         :param pulumi.Input[str] location: The location of the cloud run job
@@ -56,6 +58,10 @@ class JobArgs:
                input, but only BETA and GA-level features are used, this field will be BETA on output. Possible values:
                ["UNIMPLEMENTED", "PRELAUNCH", "EARLY_ACCESS", "ALPHA", "BETA", "GA", "DEPRECATED"]
         :param pulumi.Input[str] name: Name of the Job.
+        :param pulumi.Input[str] run_execution_token: A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+               execution is successfully completed. The sum of job name and token length must be fewer than 63 characters.
+        :param pulumi.Input[str] start_execution_token: A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+               execution is successfully started. The sum of job name and token length must be fewer than 63 characters.
         """
         pulumi.set(__self__, "location", location)
         pulumi.set(__self__, "template", template)
@@ -75,6 +81,10 @@ class JobArgs:
             pulumi.set(__self__, "name", name)
         if project is not None:
             pulumi.set(__self__, "project", project)
+        if run_execution_token is not None:
+            pulumi.set(__self__, "run_execution_token", run_execution_token)
+        if start_execution_token is not None:
+            pulumi.set(__self__, "start_execution_token", start_execution_token)
 
     @property
     @pulumi.getter
@@ -212,6 +222,32 @@ class JobArgs:
     def project(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "project", value)
 
+    @property
+    @pulumi.getter(name="runExecutionToken")
+    def run_execution_token(self) -> Optional[pulumi.Input[str]]:
+        """
+        A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+        execution is successfully completed. The sum of job name and token length must be fewer than 63 characters.
+        """
+        return pulumi.get(self, "run_execution_token")
+
+    @run_execution_token.setter
+    def run_execution_token(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "run_execution_token", value)
+
+    @property
+    @pulumi.getter(name="startExecutionToken")
+    def start_execution_token(self) -> Optional[pulumi.Input[str]]:
+        """
+        A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+        execution is successfully started. The sum of job name and token length must be fewer than 63 characters.
+        """
+        return pulumi.get(self, "start_execution_token")
+
+    @start_execution_token.setter
+    def start_execution_token(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "start_execution_token", value)
+
 
 @pulumi.input_type
 class _JobState:
@@ -240,6 +276,8 @@ class _JobState:
                  project: Optional[pulumi.Input[str]] = None,
                  pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  reconciling: Optional[pulumi.Input[bool]] = None,
+                 run_execution_token: Optional[pulumi.Input[str]] = None,
+                 start_execution_token: Optional[pulumi.Input[str]] = None,
                  template: Optional[pulumi.Input['JobTemplateArgs']] = None,
                  terminal_conditions: Optional[pulumi.Input[Sequence[pulumi.Input['JobTerminalConditionArgs']]]] = None,
                  uid: Optional[pulumi.Input[str]] = None,
@@ -294,6 +332,10 @@ class _JobState:
                When a new Job is created, or an existing one is updated, Cloud Run will asynchronously perform all necessary steps to bring the Job to the desired state. This process is called reconciliation. While reconciliation is in process, observedGeneration and latest_succeeded_execution, will have transient values that might mismatch the intended state: Once reconciliation is over (and this field is false), there are two possible outcomes: reconciliation succeeded and the state matches the Job, or there was an error, and reconciliation failed. This state can be found in terminalCondition.state.
                If reconciliation succeeded, the following fields will match: observedGeneration and generation, latest_succeeded_execution and latestCreatedExecution.
                If reconciliation failed, observedGeneration and latest_succeeded_execution will have the state of the last succeeded execution or empty for newly created Job. Additional information on the failure can be found in terminalCondition and conditions
+        :param pulumi.Input[str] run_execution_token: A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+               execution is successfully completed. The sum of job name and token length must be fewer than 63 characters.
+        :param pulumi.Input[str] start_execution_token: A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+               execution is successfully started. The sum of job name and token length must be fewer than 63 characters.
         :param pulumi.Input['JobTemplateArgs'] template: The template used to create executions for this Job.
                Structure is documented below.
         :param pulumi.Input[Sequence[pulumi.Input['JobTerminalConditionArgs']]] terminal_conditions: The Condition of this Job, containing its readiness status, and detailed error information in case it did not reach the desired state
@@ -349,6 +391,10 @@ class _JobState:
             pulumi.set(__self__, "pulumi_labels", pulumi_labels)
         if reconciling is not None:
             pulumi.set(__self__, "reconciling", reconciling)
+        if run_execution_token is not None:
+            pulumi.set(__self__, "run_execution_token", run_execution_token)
+        if start_execution_token is not None:
+            pulumi.set(__self__, "start_execution_token", start_execution_token)
         if template is not None:
             pulumi.set(__self__, "template", template)
         if terminal_conditions is not None:
@@ -666,6 +712,32 @@ class _JobState:
     def reconciling(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "reconciling", value)
 
+    @property
+    @pulumi.getter(name="runExecutionToken")
+    def run_execution_token(self) -> Optional[pulumi.Input[str]]:
+        """
+        A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+        execution is successfully completed. The sum of job name and token length must be fewer than 63 characters.
+        """
+        return pulumi.get(self, "run_execution_token")
+
+    @run_execution_token.setter
+    def run_execution_token(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "run_execution_token", value)
+
+    @property
+    @pulumi.getter(name="startExecutionToken")
+    def start_execution_token(self) -> Optional[pulumi.Input[str]]:
+        """
+        A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+        execution is successfully started. The sum of job name and token length must be fewer than 63 characters.
+        """
+        return pulumi.get(self, "start_execution_token")
+
+    @start_execution_token.setter
+    def start_execution_token(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "start_execution_token", value)
+
     @property
     @pulumi.getter
     def template(self) -> Optional[pulumi.Input['JobTemplateArgs']]:
@@ -731,6 +803,8 @@ class Job(pulumi.CustomResource):
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
+                 run_execution_token: Optional[pulumi.Input[str]] = None,
+                 start_execution_token: Optional[pulumi.Input[str]] = None,
                  template: Optional[pulumi.Input[pulumi.InputType['JobTemplateArgs']]] = None,
                  __props__=None):
         """
@@ -756,7 +830,7 @@ class Job(pulumi.CustomResource):
             template=gcp.cloudrunv2.JobTemplateArgs(
                 template=gcp.cloudrunv2.JobTemplateTemplateArgs(
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                     )],
                 ),
             ))
@@ -773,7 +847,7 @@ class Job(pulumi.CustomResource):
             template=gcp.cloudrunv2.JobTemplateArgs(
                 template=gcp.cloudrunv2.JobTemplateTemplateArgs(
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                         resources=gcp.cloudrunv2.JobTemplateTemplateContainerResourcesArgs(
                             limits={
                                 "cpu": "2",
@@ -815,7 +889,7 @@ class Job(pulumi.CustomResource):
                         ),
                     )],
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                         envs=[
                             gcp.cloudrunv2.JobTemplateTemplateContainerEnvArgs(
                                 name="FOO",
@@ -877,7 +951,7 @@ class Job(pulumi.CustomResource):
             template=gcp.cloudrunv2.JobTemplateArgs(
                 template=gcp.cloudrunv2.JobTemplateTemplateArgs(
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                     )],
                     vpc_access=gcp.cloudrunv2.JobTemplateTemplateVpcAccessArgs(
                         connector=connector.id,
@@ -953,7 +1027,7 @@ class Job(pulumi.CustomResource):
                         ),
                     )],
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                         volume_mounts=[gcp.cloudrunv2.JobTemplateTemplateContainerVolumeMountArgs(
                             name="a-volume",
                             mount_path="/secrets",
@@ -979,7 +1053,7 @@ class Job(pulumi.CustomResource):
             template=gcp.cloudrunv2.JobTemplateArgs(
                 template=gcp.cloudrunv2.JobTemplateTemplateArgs(
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                         volume_mounts=[gcp.cloudrunv2.JobTemplateTemplateContainerVolumeMountArgs(
                             name="empty-dir-volume",
                             mount_path="/mnt",
@@ -995,6 +1069,24 @@ class Job(pulumi.CustomResource):
                 ),
             ))
         ```
+        ### Cloudrunv2 Job Run Job
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.cloudrunv2.Job("default",
+            name="cloudrun-job",
+            location="us-central1",
+            start_execution_token="start-once-created",
+            template=gcp.cloudrunv2.JobTemplateArgs(
+                template=gcp.cloudrunv2.JobTemplateTemplateArgs(
+                    containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
+                        image="us-docker.pkg.dev/cloudrun/container/job",
+                    )],
+                ),
+            ))
+        ```
 
         ## Import
 
@@ -1048,6 +1140,10 @@ class Job(pulumi.CustomResource):
                ["UNIMPLEMENTED", "PRELAUNCH", "EARLY_ACCESS", "ALPHA", "BETA", "GA", "DEPRECATED"]
         :param pulumi.Input[str] location: The location of the cloud run job
         :param pulumi.Input[str] name: Name of the Job.
+        :param pulumi.Input[str] run_execution_token: A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+               execution is successfully completed. The sum of job name and token length must be fewer than 63 characters.
+        :param pulumi.Input[str] start_execution_token: A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+               execution is successfully started. The sum of job name and token length must be fewer than 63 characters.
         :param pulumi.Input[pulumi.InputType['JobTemplateArgs']] template: The template used to create executions for this Job.
                Structure is documented below.
         """
@@ -1080,7 +1176,7 @@ class Job(pulumi.CustomResource):
             template=gcp.cloudrunv2.JobTemplateArgs(
                 template=gcp.cloudrunv2.JobTemplateTemplateArgs(
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                     )],
                 ),
             ))
@@ -1097,7 +1193,7 @@ class Job(pulumi.CustomResource):
             template=gcp.cloudrunv2.JobTemplateArgs(
                 template=gcp.cloudrunv2.JobTemplateTemplateArgs(
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                         resources=gcp.cloudrunv2.JobTemplateTemplateContainerResourcesArgs(
                             limits={
                                 "cpu": "2",
@@ -1139,7 +1235,7 @@ class Job(pulumi.CustomResource):
                         ),
                     )],
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                         envs=[
                             gcp.cloudrunv2.JobTemplateTemplateContainerEnvArgs(
                                 name="FOO",
@@ -1201,7 +1297,7 @@ class Job(pulumi.CustomResource):
             template=gcp.cloudrunv2.JobTemplateArgs(
                 template=gcp.cloudrunv2.JobTemplateTemplateArgs(
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                     )],
                     vpc_access=gcp.cloudrunv2.JobTemplateTemplateVpcAccessArgs(
                         connector=connector.id,
@@ -1277,7 +1373,7 @@ class Job(pulumi.CustomResource):
                         ),
                     )],
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                         volume_mounts=[gcp.cloudrunv2.JobTemplateTemplateContainerVolumeMountArgs(
                             name="a-volume",
                             mount_path="/secrets",
@@ -1303,7 +1399,7 @@ class Job(pulumi.CustomResource):
             template=gcp.cloudrunv2.JobTemplateArgs(
                 template=gcp.cloudrunv2.JobTemplateTemplateArgs(
                     containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
-                        image="us-docker.pkg.dev/cloudrun/container/hello",
+                        image="us-docker.pkg.dev/cloudrun/container/job",
                         volume_mounts=[gcp.cloudrunv2.JobTemplateTemplateContainerVolumeMountArgs(
                             name="empty-dir-volume",
                             mount_path="/mnt",
@@ -1319,6 +1415,24 @@ class Job(pulumi.CustomResource):
                 ),
             ))
         ```
+        ### Cloudrunv2 Job Run Job
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.cloudrunv2.Job("default",
+            name="cloudrun-job",
+            location="us-central1",
+            start_execution_token="start-once-created",
+            template=gcp.cloudrunv2.JobTemplateArgs(
+                template=gcp.cloudrunv2.JobTemplateTemplateArgs(
+                    containers=[gcp.cloudrunv2.JobTemplateTemplateContainerArgs(
+                        image="us-docker.pkg.dev/cloudrun/container/job",
+                    )],
+                ),
+            ))
+        ```
 
         ## Import
 
@@ -1368,6 +1482,8 @@ class Job(pulumi.CustomResource):
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
+                 run_execution_token: Optional[pulumi.Input[str]] = None,
+                 start_execution_token: Optional[pulumi.Input[str]] = None,
                  template: Optional[pulumi.Input[pulumi.InputType['JobTemplateArgs']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -1389,6 +1505,8 @@ class Job(pulumi.CustomResource):
             __props__.__dict__["location"] = location
             __props__.__dict__["name"] = name
             __props__.__dict__["project"] = project
+            __props__.__dict__["run_execution_token"] = run_execution_token
+            __props__.__dict__["start_execution_token"] = start_execution_token
             if template is None and not opts.urn:
                 raise TypeError("Missing required property 'template'")
             __props__.__dict__["template"] = template
@@ -1446,6 +1564,8 @@ class Job(pulumi.CustomResource):
             project: Optional[pulumi.Input[str]] = None,
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             reconciling: Optional[pulumi.Input[bool]] = None,
+            run_execution_token: Optional[pulumi.Input[str]] = None,
+            start_execution_token: Optional[pulumi.Input[str]] = None,
             template: Optional[pulumi.Input[pulumi.InputType['JobTemplateArgs']]] = None,
             terminal_conditions: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['JobTerminalConditionArgs']]]]] = None,
             uid: Optional[pulumi.Input[str]] = None,
@@ -1505,6 +1625,10 @@ class Job(pulumi.CustomResource):
                When a new Job is created, or an existing one is updated, Cloud Run will asynchronously perform all necessary steps to bring the Job to the desired state. This process is called reconciliation. While reconciliation is in process, observedGeneration and latest_succeeded_execution, will have transient values that might mismatch the intended state: Once reconciliation is over (and this field is false), there are two possible outcomes: reconciliation succeeded and the state matches the Job, or there was an error, and reconciliation failed. This state can be found in terminalCondition.state.
                If reconciliation succeeded, the following fields will match: observedGeneration and generation, latest_succeeded_execution and latestCreatedExecution.
                If reconciliation failed, observedGeneration and latest_succeeded_execution will have the state of the last succeeded execution or empty for newly created Job. Additional information on the failure can be found in terminalCondition and conditions
+        :param pulumi.Input[str] run_execution_token: A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+               execution is successfully completed. The sum of job name and token length must be fewer than 63 characters.
+        :param pulumi.Input[str] start_execution_token: A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+               execution is successfully started. The sum of job name and token length must be fewer than 63 characters.
         :param pulumi.Input[pulumi.InputType['JobTemplateArgs']] template: The template used to create executions for this Job.
                Structure is documented below.
         :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['JobTerminalConditionArgs']]]] terminal_conditions: The Condition of this Job, containing its readiness status, and detailed error information in case it did not reach the desired state
@@ -1540,6 +1664,8 @@ class Job(pulumi.CustomResource):
         __props__.__dict__["project"] = project
         __props__.__dict__["pulumi_labels"] = pulumi_labels
         __props__.__dict__["reconciling"] = reconciling
+        __props__.__dict__["run_execution_token"] = run_execution_token
+        __props__.__dict__["start_execution_token"] = start_execution_token
         __props__.__dict__["template"] = template
         __props__.__dict__["terminal_conditions"] = terminal_conditions
         __props__.__dict__["uid"] = uid
@@ -1758,6 +1884,24 @@ class Job(pulumi.CustomResource):
         """
         return pulumi.get(self, "reconciling")
 
+    @property
+    @pulumi.getter(name="runExecutionToken")
+    def run_execution_token(self) -> pulumi.Output[Optional[str]]:
+        """
+        A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+        execution is successfully completed. The sum of job name and token length must be fewer than 63 characters.
+        """
+        return pulumi.get(self, "run_execution_token")
+
+    @property
+    @pulumi.getter(name="startExecutionToken")
+    def start_execution_token(self) -> pulumi.Output[Optional[str]]:
+        """
+        A unique string used as a suffix creating a new execution upon job create or update. The Job will become ready when the
+        execution is successfully started. The sum of job name and token length must be fewer than 63 characters.
+        """
+        return pulumi.get(self, "start_execution_token")
+
     @property
     @pulumi.getter
     def template(self) -> pulumi.Output['outputs.JobTemplate']:

pulumi_gcp/compute/_inputs.py

@@ -437,6 +437,8 @@ __all__ = [
     'SecurityPolicyRuleMatchArgs',
     'SecurityPolicyRuleMatchConfigArgs',
     'SecurityPolicyRuleMatchExprArgs',
+    'SecurityPolicyRuleMatchExprOptionsArgs',
+    'SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs',
     'SecurityPolicyRulePreconfiguredWafConfigArgs',
     'SecurityPolicyRulePreconfiguredWafConfigExclusionArgs',
     'SecurityPolicyRulePreconfiguredWafConfigExclusionRequestCookyArgs',
@@ -30829,6 +30831,7 @@ class SecurityPolicyRuleMatchArgs:
     def __init__(__self__, *,
                  config: Optional[pulumi.Input['SecurityPolicyRuleMatchConfigArgs']] = None,
                  expr: Optional[pulumi.Input['SecurityPolicyRuleMatchExprArgs']] = None,
+                 expr_options: Optional[pulumi.Input['SecurityPolicyRuleMatchExprOptionsArgs']] = None,
                  versioned_expr: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input['SecurityPolicyRuleMatchConfigArgs'] config: The configuration options available when specifying versionedExpr.
@@ -30836,6 +30839,8 @@ class SecurityPolicyRuleMatchArgs:
                Structure is documented below.
         :param pulumi.Input['SecurityPolicyRuleMatchExprArgs'] expr: User defined CEVAL expression. A CEVAL expression is used to specify match criteria such as origin.ip, source.region_code and contents in the request header.
                Structure is documented below.
+        :param pulumi.Input['SecurityPolicyRuleMatchExprOptionsArgs'] expr_options: The configuration options available when specifying a user defined CEVAL expression (i.e., 'expr').
+               Structure is documented below.
         :param pulumi.Input[str] versioned_expr: Preconfigured versioned expression. If this field is specified, config must also be specified.
                Available preconfigured expressions along with their requirements are: SRC_IPS_V1 - must specify the corresponding srcIpRange field in config.
                Possible values are: `SRC_IPS_V1`.
@@ -30844,6 +30849,8 @@ class SecurityPolicyRuleMatchArgs:
             pulumi.set(__self__, "config", config)
         if expr is not None:
             pulumi.set(__self__, "expr", expr)
+        if expr_options is not None:
+            pulumi.set(__self__, "expr_options", expr_options)
         if versioned_expr is not None:
             pulumi.set(__self__, "versioned_expr", versioned_expr)
 
@@ -30874,6 +30881,19 @@ class SecurityPolicyRuleMatchArgs:
     def expr(self, value: Optional[pulumi.Input['SecurityPolicyRuleMatchExprArgs']]):
         pulumi.set(self, "expr", value)
 
+    @property
+    @pulumi.getter(name="exprOptions")
+    def expr_options(self) -> Optional[pulumi.Input['SecurityPolicyRuleMatchExprOptionsArgs']]:
+        """
+        The configuration options available when specifying a user defined CEVAL expression (i.e., 'expr').
+        Structure is documented below.
+        """
+        return pulumi.get(self, "expr_options")
+
+    @expr_options.setter
+    def expr_options(self, value: Optional[pulumi.Input['SecurityPolicyRuleMatchExprOptionsArgs']]):
+        pulumi.set(self, "expr_options", value)
+
     @property
     @pulumi.getter(name="versionedExpr")
     def versioned_expr(self) -> Optional[pulumi.Input[str]]:
@@ -30934,6 +30954,69 @@ class SecurityPolicyRuleMatchExprArgs:
         pulumi.set(self, "expression", value)
 
 
+@pulumi.input_type
+class SecurityPolicyRuleMatchExprOptionsArgs:
+    def __init__(__self__, *,
+                 recaptcha_options: pulumi.Input['SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs']):
+        """
+        :param pulumi.Input['SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs'] recaptcha_options: reCAPTCHA configuration options to be applied for the rule. If the rule does not evaluate reCAPTCHA tokens, this field has no effect.
+               Structure is documented below.
+        """
+        pulumi.set(__self__, "recaptcha_options", recaptcha_options)
+
+    @property
+    @pulumi.getter(name="recaptchaOptions")
+    def recaptcha_options(self) -> pulumi.Input['SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs']:
+        """
+        reCAPTCHA configuration options to be applied for the rule. If the rule does not evaluate reCAPTCHA tokens, this field has no effect.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "recaptcha_options")
+
+    @recaptcha_options.setter
+    def recaptcha_options(self, value: pulumi.Input['SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs']):
+        pulumi.set(self, "recaptcha_options", value)
+
+
+@pulumi.input_type
+class SecurityPolicyRuleMatchExprOptionsRecaptchaOptionsArgs:
+    def __init__(__self__, *,
+                 action_token_site_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 session_token_site_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] action_token_site_keys: A list of site keys to be used during the validation of reCAPTCHA action-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] session_token_site_keys: A list of site keys to be used during the validation of reCAPTCHA session-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
+        """
+        if action_token_site_keys is not None:
+            pulumi.set(__self__, "action_token_site_keys", action_token_site_keys)
+        if session_token_site_keys is not None:
+            pulumi.set(__self__, "session_token_site_keys", session_token_site_keys)
+
+    @property
+    @pulumi.getter(name="actionTokenSiteKeys")
+    def action_token_site_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        A list of site keys to be used during the validation of reCAPTCHA action-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
+        """
+        return pulumi.get(self, "action_token_site_keys")
+
+    @action_token_site_keys.setter
+    def action_token_site_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "action_token_site_keys", value)
+
+    @property
+    @pulumi.getter(name="sessionTokenSiteKeys")
+    def session_token_site_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        A list of site keys to be used during the validation of reCAPTCHA session-tokens. The provided site keys need to be created from reCAPTCHA API under the same project where the security policy is created.
+        """
+        return pulumi.get(self, "session_token_site_keys")
+
+    @session_token_site_keys.setter
+    def session_token_site_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "session_token_site_keys", value)
+
+
 @pulumi.input_type
 class SecurityPolicyRulePreconfiguredWafConfigArgs:
     def __init__(__self__, *,