pulumi-gcp 7.29.0a1719416802__py3-none-any.whl → 7.30.0__py3-none-any.whl

pulumi_gcp/billing/project_info.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['ProjectInfoArgs', 'ProjectInfo']

pulumi_gcp/billing/sub_account.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['SubAccountArgs', 'SubAccount']

pulumi_gcp/binaryauthorization/_inputs.py

@@ -4,22 +4,76 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
     'AttestorAttestationAuthorityNoteArgs',
+    'AttestorAttestationAuthorityNoteArgsDict',
     'AttestorAttestationAuthorityNotePublicKeyArgs',
+    'AttestorAttestationAuthorityNotePublicKeyArgsDict',
     'AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs',
+    'AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgsDict',
     'AttestorIamBindingConditionArgs',
+    'AttestorIamBindingConditionArgsDict',
     'AttestorIamMemberConditionArgs',
+    'AttestorIamMemberConditionArgsDict',
     'PolicyAdmissionWhitelistPatternArgs',
+    'PolicyAdmissionWhitelistPatternArgsDict',
     'PolicyClusterAdmissionRuleArgs',
+    'PolicyClusterAdmissionRuleArgsDict',
     'PolicyDefaultAdmissionRuleArgs',
+    'PolicyDefaultAdmissionRuleArgsDict',
 ]
 
+MYPY = False
+
+if not MYPY:
+    class AttestorAttestationAuthorityNoteArgsDict(TypedDict):
+        note_reference: pulumi.Input[str]
+        """
+        The resource name of a ATTESTATION_AUTHORITY Note, created by the
+        user. If the Note is in a different project from the Attestor, it
+        should be specified in the format `projects/*/notes/*` (or the legacy
+        `providers/*/notes/*`). This field may not be updated.
+        An attestation by this attestor is stored as a Container Analysis
+        ATTESTATION_AUTHORITY Occurrence that names a container image
+        and that links to this Note.
+        """
+        delegation_service_account_email: NotRequired[pulumi.Input[str]]
+        """
+        (Output)
+        This field will contain the service account email address that
+        this Attestor will use as the principal when querying Container
+        Analysis. Attestor administrators must grant this service account
+        the IAM role needed to read attestations from the noteReference in
+        Container Analysis (containeranalysis.notes.occurrences.viewer).
+        This email address is fixed for the lifetime of the Attestor, but
+        callers should not make any other assumptions about the service
+        account email; future versions may use an email based on a
+        different naming pattern.
+        """
+        public_keys: NotRequired[pulumi.Input[Sequence[pulumi.Input['AttestorAttestationAuthorityNotePublicKeyArgsDict']]]]
+        """
+        Public keys that verify attestations signed by this attestor. This
+        field may be updated.
+        If this field is non-empty, one of the specified public keys must
+        verify that an attestation was signed by this attestor for the
+        image specified in the admission request.
+        If this field is empty, this attestor always returns that no valid
+        attestations exist.
+        Structure is documented below.
+        """
+elif False:
+    AttestorAttestationAuthorityNoteArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AttestorAttestationAuthorityNoteArgs:
     def __init__(__self__, *,
@@ -118,6 +172,45 @@ class AttestorAttestationAuthorityNoteArgs:
         pulumi.set(self, "public_keys", value)
 
 
+if not MYPY:
+    class AttestorAttestationAuthorityNotePublicKeyArgsDict(TypedDict):
+        ascii_armored_pgp_public_key: NotRequired[pulumi.Input[str]]
+        """
+        ASCII-armored representation of a PGP public key, as the
+        entire output by the command
+        `gpg --export --armor foo@example.com` (either LF or CRLF
+        line endings). When using this field, id should be left
+        blank. The BinAuthz API handlers will calculate the ID
+        and fill it in automatically. BinAuthz computes this ID
+        as the OpenPGP RFC4880 V4 fingerprint, represented as
+        upper-case hex. If id is provided by the caller, it will
+        be overwritten by the API-calculated ID.
+        """
+        comment: NotRequired[pulumi.Input[str]]
+        """
+        A descriptive comment. This field may be updated.
+        """
+        id: NotRequired[pulumi.Input[str]]
+        """
+        The ID of this public key. Signatures verified by BinAuthz
+        must include the ID of the public key that can be used to
+        verify them, and that ID must match the contents of this
+        field exactly. Additional restrictions on this field can
+        be imposed based on which public key type is encapsulated.
+        See the documentation on publicKey cases below for details.
+        """
+        pkix_public_key: NotRequired[pulumi.Input['AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgsDict']]
+        """
+        A raw PKIX SubjectPublicKeyInfo format public key.
+        NOTE: id may be explicitly provided by the caller when using this
+        type of public key, but it MUST be a valid RFC3986 URI. If id is left
+        blank, a default one will be computed based on the digest of the DER
+        encoding of the public key.
+        Structure is documented below.
+        """
+elif False:
+    AttestorAttestationAuthorityNotePublicKeyArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AttestorAttestationAuthorityNotePublicKeyArgs:
     def __init__(__self__, *,
@@ -225,6 +318,26 @@ class AttestorAttestationAuthorityNotePublicKeyArgs:
         pulumi.set(self, "pkix_public_key", value)
 
 
+if not MYPY:
+    class AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgsDict(TypedDict):
+        public_key_pem: NotRequired[pulumi.Input[str]]
+        """
+        A PEM-encoded public key, as described in
+        `https://tools.ietf.org/html/rfc7468#section-13`
+        """
+        signature_algorithm: NotRequired[pulumi.Input[str]]
+        """
+        The signature algorithm used to verify a message against
+        a signature using this key. These signature algorithm must
+        match the structure and any object identifiers encoded in
+        publicKeyPem (i.e. this algorithm must match that of the
+        public key).
+
+        - - -
+        """
+elif False:
+    AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs:
     def __init__(__self__, *,
@@ -278,6 +391,14 @@ class AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs:
         pulumi.set(self, "signature_algorithm", value)
 
 
+if not MYPY:
+    class AttestorIamBindingConditionArgsDict(TypedDict):
+        expression: pulumi.Input[str]
+        title: pulumi.Input[str]
+        description: NotRequired[pulumi.Input[str]]
+elif False:
+    AttestorIamBindingConditionArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AttestorIamBindingConditionArgs:
     def __init__(__self__, *,
@@ -317,6 +438,14 @@ class AttestorIamBindingConditionArgs:
         pulumi.set(self, "description", value)
 
 
+if not MYPY:
+    class AttestorIamMemberConditionArgsDict(TypedDict):
+        expression: pulumi.Input[str]
+        title: pulumi.Input[str]
+        description: NotRequired[pulumi.Input[str]]
+elif False:
+    AttestorIamMemberConditionArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AttestorIamMemberConditionArgs:
     def __init__(__self__, *,
@@ -356,6 +485,18 @@ class AttestorIamMemberConditionArgs:
         pulumi.set(self, "description", value)
 
 
+if not MYPY:
+    class PolicyAdmissionWhitelistPatternArgsDict(TypedDict):
+        name_pattern: pulumi.Input[str]
+        """
+        An image name pattern to whitelist, in the form
+        `registry/path/to/image`. This supports a trailing * as a
+        wildcard, but this is allowed only in text after the registry/
+        part.
+        """
+elif False:
+    PolicyAdmissionWhitelistPatternArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicyAdmissionWhitelistPatternArgs:
     def __init__(__self__, *,
@@ -384,6 +525,36 @@ class PolicyAdmissionWhitelistPatternArgs:
         pulumi.set(self, "name_pattern", value)
 
 
+if not MYPY:
+    class PolicyClusterAdmissionRuleArgsDict(TypedDict):
+        cluster: pulumi.Input[str]
+        """
+        The identifier for this object. Format specified above.
+        """
+        enforcement_mode: pulumi.Input[str]
+        """
+        The action when a pod creation is denied by the admission rule.
+        Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
+        """
+        evaluation_mode: pulumi.Input[str]
+        """
+        How this admission rule will be evaluated.
+        Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
+        """
+        require_attestations_bies: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The resource names of the attestors that must attest to a
+        container image. If the attestor is in a different project from the
+        policy, it should be specified in the format `projects/*/attestors/*`.
+        Each attestor must exist before a policy can reference it. To add an
+        attestor to a policy the principal issuing the policy change
+        request must be able to read the attestor resource.
+        Note: this field must be non-empty when the evaluation_mode field
+        specifies REQUIRE_ATTESTATION, otherwise it must be empty.
+        """
+elif False:
+    PolicyClusterAdmissionRuleArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicyClusterAdmissionRuleArgs:
     def __init__(__self__, *,
@@ -470,6 +641,34 @@ class PolicyClusterAdmissionRuleArgs:
         pulumi.set(self, "require_attestations_bies", value)
 
 
+if not MYPY:
+    class PolicyDefaultAdmissionRuleArgsDict(TypedDict):
+        enforcement_mode: pulumi.Input[str]
+        """
+        The action when a pod creation is denied by the admission rule.
+        Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
+
+        - - -
+        """
+        evaluation_mode: pulumi.Input[str]
+        """
+        How this admission rule will be evaluated.
+        Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
+        """
+        require_attestations_bies: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The resource names of the attestors that must attest to a
+        container image. If the attestor is in a different project from the
+        policy, it should be specified in the format `projects/*/attestors/*`.
+        Each attestor must exist before a policy can reference it. To add an
+        attestor to a policy the principal issuing the policy change
+        request must be able to read the attestor resource.
+        Note: this field must be non-empty when the evaluation_mode field
+        specifies REQUIRE_ATTESTATION, otherwise it must be empty.
+        """
+elif False:
+    PolicyDefaultAdmissionRuleArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class PolicyDefaultAdmissionRuleArgs:
     def __init__(__self__, *,

pulumi_gcp/binaryauthorization/attestor.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -157,7 +162,7 @@ class Attestor(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 attestation_authority_note: Optional[pulumi.Input[pulumi.InputType['AttestorAttestationAuthorityNoteArgs']]] = None,
+                 attestation_authority_note: Optional[pulumi.Input[Union['AttestorAttestationAuthorityNoteArgs', 'AttestorAttestationAuthorityNoteArgsDict']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
@@ -181,17 +186,17 @@ class Attestor(pulumi.CustomResource):
 
         note = gcp.containeranalysis.Note("note",
             name="test-attestor-note",
-            attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
-                hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
-                    human_readable_name="Attestor Note",
-                ),
-            ))
+            attestation_authority={
+                "hint": {
+                    "humanReadableName": "Attestor Note",
+                },
+            })
         attestor = gcp.binaryauthorization.Attestor("attestor",
             name="test-attestor",
-            attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
-                note_reference=note.name,
-                public_keys=[gcp.binaryauthorization.AttestorAttestationAuthorityNotePublicKeyArgs(
-                    ascii_armored_pgp_public_key=\"\"\"mQENBFtP0doBCADF+joTiXWKVuP8kJt3fgpBSjT9h8ezMfKA4aXZctYLx5wslWQl
+            attestation_authority_note={
+                "noteReference": note.name,
+                "publicKeys": [{
+                    "asciiArmoredPgpPublicKey": \"\"\"mQENBFtP0doBCADF+joTiXWKVuP8kJt3fgpBSjT9h8ezMfKA4aXZctYLx5wslWQl
         bB7Iu2ezkECNzoEeU7WxUe8a61pMCh9cisS9H5mB2K2uM4Jnf8tgFeXn3akJDVo0
         oR1IC+Dp9mXbRSK3MAvKkOwWlG99sx3uEdvmeBRHBOO+grchLx24EThXFOyP9Fk6
         V39j6xMjw4aggLD15B4V0v9JqBDdJiIYFzszZDL6pJwZrzcP0z8JO4rTZd+f64bD
@@ -207,8 +212,8 @@ class Attestor(pulumi.CustomResource):
         qoIRW6y0+UlAc+MbqfL0ziHDOAmcqz1GnROg
         =6Bvm
         \"\"\",
-                )],
-            ))
+                }],
+            })
         ```
         ### Binary Authorization Attestor Kms
 
@@ -223,29 +228,29 @@ class Attestor(pulumi.CustomResource):
             name="test-attestor-key",
             key_ring=keyring.id,
             purpose="ASYMMETRIC_SIGN",
-            version_template=gcp.kms.CryptoKeyVersionTemplateArgs(
-                algorithm="RSA_SIGN_PKCS1_4096_SHA512",
-            ))
+            version_template={
+                "algorithm": "RSA_SIGN_PKCS1_4096_SHA512",
+            })
         version = gcp.kms.get_kms_crypto_key_version_output(crypto_key=crypto_key.id)
         note = gcp.containeranalysis.Note("note",
             name="test-attestor-note",
-            attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
-                hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
-                    human_readable_name="Attestor Note",
-                ),
-            ))
+            attestation_authority={
+                "hint": {
+                    "humanReadableName": "Attestor Note",
+                },
+            })
         attestor = gcp.binaryauthorization.Attestor("attestor",
             name="test-attestor",
-            attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
-                note_reference=note.name,
-                public_keys=[gcp.binaryauthorization.AttestorAttestationAuthorityNotePublicKeyArgs(
-                    id=version.id,
-                    pkix_public_key=gcp.binaryauthorization.AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs(
-                        public_key_pem=version.public_keys[0].pem,
-                        signature_algorithm=version.public_keys[0].algorithm,
-                    ),
-                )],
-            ))
+            attestation_authority_note={
+                "noteReference": note.name,
+                "publicKeys": [{
+                    "id": version.id,
+                    "pkixPublicKey": {
+                        "publicKeyPem": version.public_keys[0].pem,
+                        "signatureAlgorithm": version.public_keys[0].algorithm,
+                    },
+                }],
+            })
         ```
 
         ## Import
@@ -274,7 +279,7 @@ class Attestor(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[pulumi.InputType['AttestorAttestationAuthorityNoteArgs']] attestation_authority_note: A Container Analysis ATTESTATION_AUTHORITY Note, created by the user.
+        :param pulumi.Input[Union['AttestorAttestationAuthorityNoteArgs', 'AttestorAttestationAuthorityNoteArgsDict']] attestation_authority_note: A Container Analysis ATTESTATION_AUTHORITY Note, created by the user.
                Structure is documented below.
         :param pulumi.Input[str] description: A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
         :param pulumi.Input[str] name: The resource name.
@@ -304,17 +309,17 @@ class Attestor(pulumi.CustomResource):
 
         note = gcp.containeranalysis.Note("note",
             name="test-attestor-note",
-            attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
-                hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
-                    human_readable_name="Attestor Note",
-                ),
-            ))
+            attestation_authority={
+                "hint": {
+                    "humanReadableName": "Attestor Note",
+                },
+            })
         attestor = gcp.binaryauthorization.Attestor("attestor",
             name="test-attestor",
-            attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
-                note_reference=note.name,
-                public_keys=[gcp.binaryauthorization.AttestorAttestationAuthorityNotePublicKeyArgs(
-                    ascii_armored_pgp_public_key=\"\"\"mQENBFtP0doBCADF+joTiXWKVuP8kJt3fgpBSjT9h8ezMfKA4aXZctYLx5wslWQl
+            attestation_authority_note={
+                "noteReference": note.name,
+                "publicKeys": [{
+                    "asciiArmoredPgpPublicKey": \"\"\"mQENBFtP0doBCADF+joTiXWKVuP8kJt3fgpBSjT9h8ezMfKA4aXZctYLx5wslWQl
         bB7Iu2ezkECNzoEeU7WxUe8a61pMCh9cisS9H5mB2K2uM4Jnf8tgFeXn3akJDVo0
         oR1IC+Dp9mXbRSK3MAvKkOwWlG99sx3uEdvmeBRHBOO+grchLx24EThXFOyP9Fk6
         V39j6xMjw4aggLD15B4V0v9JqBDdJiIYFzszZDL6pJwZrzcP0z8JO4rTZd+f64bD
@@ -330,8 +335,8 @@ class Attestor(pulumi.CustomResource):
         qoIRW6y0+UlAc+MbqfL0ziHDOAmcqz1GnROg
         =6Bvm
         \"\"\",
-                )],
-            ))
+                }],
+            })
         ```
         ### Binary Authorization Attestor Kms
 
@@ -346,29 +351,29 @@ class Attestor(pulumi.CustomResource):
             name="test-attestor-key",
             key_ring=keyring.id,
             purpose="ASYMMETRIC_SIGN",
-            version_template=gcp.kms.CryptoKeyVersionTemplateArgs(
-                algorithm="RSA_SIGN_PKCS1_4096_SHA512",
-            ))
+            version_template={
+                "algorithm": "RSA_SIGN_PKCS1_4096_SHA512",
+            })
         version = gcp.kms.get_kms_crypto_key_version_output(crypto_key=crypto_key.id)
         note = gcp.containeranalysis.Note("note",
             name="test-attestor-note",
-            attestation_authority=gcp.containeranalysis.NoteAttestationAuthorityArgs(
-                hint=gcp.containeranalysis.NoteAttestationAuthorityHintArgs(
-                    human_readable_name="Attestor Note",
-                ),
-            ))
+            attestation_authority={
+                "hint": {
+                    "humanReadableName": "Attestor Note",
+                },
+            })
         attestor = gcp.binaryauthorization.Attestor("attestor",
             name="test-attestor",
-            attestation_authority_note=gcp.binaryauthorization.AttestorAttestationAuthorityNoteArgs(
-                note_reference=note.name,
-                public_keys=[gcp.binaryauthorization.AttestorAttestationAuthorityNotePublicKeyArgs(
-                    id=version.id,
-                    pkix_public_key=gcp.binaryauthorization.AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs(
-                        public_key_pem=version.public_keys[0].pem,
-                        signature_algorithm=version.public_keys[0].algorithm,
-                    ),
-                )],
-            ))
+            attestation_authority_note={
+                "noteReference": note.name,
+                "publicKeys": [{
+                    "id": version.id,
+                    "pkixPublicKey": {
+                        "publicKeyPem": version.public_keys[0].pem,
+                        "signatureAlgorithm": version.public_keys[0].algorithm,
+                    },
+                }],
+            })
         ```
 
         ## Import
@@ -410,7 +415,7 @@ class Attestor(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 attestation_authority_note: Optional[pulumi.Input[pulumi.InputType['AttestorAttestationAuthorityNoteArgs']]] = None,
+                 attestation_authority_note: Optional[pulumi.Input[Union['AttestorAttestationAuthorityNoteArgs', 'AttestorAttestationAuthorityNoteArgsDict']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
@@ -439,7 +444,7 @@ class Attestor(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            attestation_authority_note: Optional[pulumi.Input[pulumi.InputType['AttestorAttestationAuthorityNoteArgs']]] = None,
+            attestation_authority_note: Optional[pulumi.Input[Union['AttestorAttestationAuthorityNoteArgs', 'AttestorAttestationAuthorityNoteArgsDict']]] = None,
             description: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
             project: Optional[pulumi.Input[str]] = None) -> 'Attestor':
@@ -450,7 +455,7 @@ class Attestor(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[pulumi.InputType['AttestorAttestationAuthorityNoteArgs']] attestation_authority_note: A Container Analysis ATTESTATION_AUTHORITY Note, created by the user.
+        :param pulumi.Input[Union['AttestorAttestationAuthorityNoteArgs', 'AttestorAttestationAuthorityNoteArgsDict']] attestation_authority_note: A Container Analysis ATTESTATION_AUTHORITY Note, created by the user.
                Structure is documented below.
         :param pulumi.Input[str] description: A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
         :param pulumi.Input[str] name: The resource name.

pulumi_gcp/binaryauthorization/attestor_iam_binding.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -252,7 +257,7 @@ class AttestorIamBinding(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  attestor: Optional[pulumi.Input[str]] = None,
-                 condition: Optional[pulumi.Input[pulumi.InputType['AttestorIamBindingConditionArgs']]] = None,
+                 condition: Optional[pulumi.Input[Union['AttestorIamBindingConditionArgs', 'AttestorIamBindingConditionArgsDict']]] = None,
                  members: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  role: Optional[pulumi.Input[str]] = None,
@@ -278,10 +283,10 @@ class AttestorIamBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/viewer",
-            members=["user:jane@example.com"],
-        )])
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
         policy = gcp.binaryauthorization.AttestorIamPolicy("policy",
             project=attestor["project"],
             attestor=attestor["name"],
@@ -320,10 +325,10 @@ class AttestorIamBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/viewer",
-            members=["user:jane@example.com"],
-        )])
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
         policy = gcp.binaryauthorization.AttestorIamPolicy("policy",
             project=attestor["project"],
             attestor=attestor["name"],
@@ -439,10 +444,10 @@ class AttestorIamBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/viewer",
-            members=["user:jane@example.com"],
-        )])
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
         policy = gcp.binaryauthorization.AttestorIamPolicy("policy",
             project=attestor["project"],
             attestor=attestor["name"],
@@ -481,10 +486,10 @@ class AttestorIamBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        admin = gcp.organizations.get_iam_policy(bindings=[gcp.organizations.GetIAMPolicyBindingArgs(
-            role="roles/viewer",
-            members=["user:jane@example.com"],
-        )])
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/viewer",
+            "members": ["user:jane@example.com"],
+        }])
         policy = gcp.binaryauthorization.AttestorIamPolicy("policy",
             project=attestor["project"],
             attestor=attestor["name"],
@@ -569,7 +574,7 @@ class AttestorIamBinding(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  attestor: Optional[pulumi.Input[str]] = None,
-                 condition: Optional[pulumi.Input[pulumi.InputType['AttestorIamBindingConditionArgs']]] = None,
+                 condition: Optional[pulumi.Input[Union['AttestorIamBindingConditionArgs', 'AttestorIamBindingConditionArgsDict']]] = None,
                  members: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  role: Optional[pulumi.Input[str]] = None,
@@ -605,7 +610,7 @@ class AttestorIamBinding(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             attestor: Optional[pulumi.Input[str]] = None,
-            condition: Optional[pulumi.Input[pulumi.InputType['AttestorIamBindingConditionArgs']]] = None,
+            condition: Optional[pulumi.Input[Union['AttestorIamBindingConditionArgs', 'AttestorIamBindingConditionArgsDict']]] = None,
             etag: Optional[pulumi.Input[str]] = None,
             members: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
             project: Optional[pulumi.Input[str]] = None,