pulumi-gcp 7.29.0a1719417555__py3-none-any.whl → 7.30.0__py3-none-any.whl

pulumi_gcp/apphub/workload.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -423,7 +428,7 @@ class Workload(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  application_id: Optional[pulumi.Input[str]] = None,
-                 attributes: Optional[pulumi.Input[pulumi.InputType['WorkloadAttributesArgs']]] = None,
+                 attributes: Optional[pulumi.Input[Union['WorkloadAttributesArgs', 'WorkloadAttributesArgsDict']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  discovered_workload: Optional[pulumi.Input[str]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
@@ -463,7 +468,7 @@ class Workload(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] application_id: Part of `parent`.  Full resource name of a parent Application. Example: projects/{HOST_PROJECT_ID}/locations/{LOCATION}/applications/{APPLICATION_ID}
-        :param pulumi.Input[pulumi.InputType['WorkloadAttributesArgs']] attributes: Consumer provided attributes.
+        :param pulumi.Input[Union['WorkloadAttributesArgs', 'WorkloadAttributesArgsDict']] attributes: Consumer provided attributes.
                Structure is documented below.
         :param pulumi.Input[str] description: User-defined description of a Workload.
         :param pulumi.Input[str] discovered_workload: Immutable. The resource name of the original discovered workload.
@@ -527,7 +532,7 @@ class Workload(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  application_id: Optional[pulumi.Input[str]] = None,
-                 attributes: Optional[pulumi.Input[pulumi.InputType['WorkloadAttributesArgs']]] = None,
+                 attributes: Optional[pulumi.Input[Union['WorkloadAttributesArgs', 'WorkloadAttributesArgsDict']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  discovered_workload: Optional[pulumi.Input[str]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
@@ -577,7 +582,7 @@ class Workload(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             application_id: Optional[pulumi.Input[str]] = None,
-            attributes: Optional[pulumi.Input[pulumi.InputType['WorkloadAttributesArgs']]] = None,
+            attributes: Optional[pulumi.Input[Union['WorkloadAttributesArgs', 'WorkloadAttributesArgsDict']]] = None,
             create_time: Optional[pulumi.Input[str]] = None,
             description: Optional[pulumi.Input[str]] = None,
             discovered_workload: Optional[pulumi.Input[str]] = None,
@@ -589,8 +594,8 @@ class Workload(pulumi.CustomResource):
             uid: Optional[pulumi.Input[str]] = None,
             update_time: Optional[pulumi.Input[str]] = None,
             workload_id: Optional[pulumi.Input[str]] = None,
-            workload_properties: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['WorkloadWorkloadPropertyArgs']]]]] = None,
-            workload_references: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['WorkloadWorkloadReferenceArgs']]]]] = None) -> 'Workload':
+            workload_properties: Optional[pulumi.Input[Sequence[pulumi.Input[Union['WorkloadWorkloadPropertyArgs', 'WorkloadWorkloadPropertyArgsDict']]]]] = None,
+            workload_references: Optional[pulumi.Input[Sequence[pulumi.Input[Union['WorkloadWorkloadReferenceArgs', 'WorkloadWorkloadReferenceArgsDict']]]]] = None) -> 'Workload':
         """
         Get an existing Workload resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -599,7 +604,7 @@ class Workload(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] application_id: Part of `parent`.  Full resource name of a parent Application. Example: projects/{HOST_PROJECT_ID}/locations/{LOCATION}/applications/{APPLICATION_ID}
-        :param pulumi.Input[pulumi.InputType['WorkloadAttributesArgs']] attributes: Consumer provided attributes.
+        :param pulumi.Input[Union['WorkloadAttributesArgs', 'WorkloadAttributesArgsDict']] attributes: Consumer provided attributes.
                Structure is documented below.
         :param pulumi.Input[str] create_time: Output only. Create time.
         :param pulumi.Input[str] description: User-defined description of a Workload.
@@ -616,9 +621,9 @@ class Workload(pulumi.CustomResource):
                
                
                - - -
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['WorkloadWorkloadPropertyArgs']]]] workload_properties: Properties of an underlying compute resource represented by the Workload.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['WorkloadWorkloadPropertyArgs', 'WorkloadWorkloadPropertyArgsDict']]]] workload_properties: Properties of an underlying compute resource represented by the Workload.
                Structure is documented below.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['WorkloadWorkloadReferenceArgs']]]] workload_references: Reference of an underlying compute resource represented by the Workload.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['WorkloadWorkloadReferenceArgs', 'WorkloadWorkloadReferenceArgsDict']]]] workload_references: Reference of an underlying compute resource represented by the Workload.
                Structure is documented below.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))

pulumi_gcp/applicationintegration/_inputs.py

@@ -4,30 +4,71 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [
     'AuthConfigClientCertificateArgs',
+    'AuthConfigClientCertificateArgsDict',
     'AuthConfigDecryptedCredentialArgs',
+    'AuthConfigDecryptedCredentialArgsDict',
     'AuthConfigDecryptedCredentialAuthTokenArgs',
+    'AuthConfigDecryptedCredentialAuthTokenArgsDict',
     'AuthConfigDecryptedCredentialJwtArgs',
+    'AuthConfigDecryptedCredentialJwtArgsDict',
     'AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs',
+    'AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgsDict',
     'AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs',
+    'AuthConfigDecryptedCredentialOauth2ClientCredentialsArgsDict',
     'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs',
+    'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgsDict',
     'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs',
+    'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgsDict',
     'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs',
+    'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgsDict',
     'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs',
+    'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgsDict',
     'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs',
+    'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgsDict',
     'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs',
+    'AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgsDict',
     'AuthConfigDecryptedCredentialOidcTokenArgs',
+    'AuthConfigDecryptedCredentialOidcTokenArgsDict',
     'AuthConfigDecryptedCredentialServiceAccountCredentialsArgs',
+    'AuthConfigDecryptedCredentialServiceAccountCredentialsArgsDict',
     'AuthConfigDecryptedCredentialUsernameAndPasswordArgs',
+    'AuthConfigDecryptedCredentialUsernameAndPasswordArgsDict',
     'ClientCloudKmsConfigArgs',
+    'ClientCloudKmsConfigArgsDict',
 ]
 
+MYPY = False
+
+if not MYPY:
+    class AuthConfigClientCertificateArgsDict(TypedDict):
+        encrypted_private_key: pulumi.Input[str]
+        """
+        The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
+        """
+        ssl_certificate: pulumi.Input[str]
+        """
+        The ssl certificate encoded in PEM format. This string must include the begin header and end footer lines.
+        """
+        passphrase: NotRequired[pulumi.Input[str]]
+        """
+        'passphrase' should be left unset if private key is not encrypted.
+        Note that 'passphrase' is not the password for web server, but an extra layer of security to protected private key.
+        """
+elif False:
+    AuthConfigClientCertificateArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigClientCertificateArgs:
     def __init__(__self__, *,
@@ -83,6 +124,50 @@ class AuthConfigClientCertificateArgs:
         pulumi.set(self, "passphrase", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialArgsDict(TypedDict):
+        credential_type: pulumi.Input[str]
+        """
+        Credential type associated with auth configs.
+        """
+        auth_token: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialAuthTokenArgsDict']]
+        """
+        Auth token credential.
+        Structure is documented below.
+        """
+        jwt: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialJwtArgsDict']]
+        """
+        JWT credential.
+        Structure is documented below.
+        """
+        oauth2_authorization_code: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgsDict']]
+        """
+        OAuth2 authorization code credential.
+        Structure is documented below.
+        """
+        oauth2_client_credentials: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialOauth2ClientCredentialsArgsDict']]
+        """
+        OAuth2 client credentials.
+        Structure is documented below.
+        """
+        oidc_token: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialOidcTokenArgsDict']]
+        """
+        Google OIDC ID Token.
+        Structure is documented below.
+        """
+        service_account_credentials: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialServiceAccountCredentialsArgsDict']]
+        """
+        Service account credential.
+        Structure is documented below.
+        """
+        username_and_password: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialUsernameAndPasswordArgsDict']]
+        """
+        Username and password credential.
+        Structure is documented below.
+        """
+elif False:
+    AuthConfigDecryptedCredentialArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialArgs:
     def __init__(__self__, *,
@@ -231,6 +316,19 @@ class AuthConfigDecryptedCredentialArgs:
         pulumi.set(self, "username_and_password", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialAuthTokenArgsDict(TypedDict):
+        token: NotRequired[pulumi.Input[str]]
+        """
+        The token for the auth type.
+        """
+        type: NotRequired[pulumi.Input[str]]
+        """
+        Authentication type, e.g. "Basic", "Bearer", etc.
+        """
+elif False:
+    AuthConfigDecryptedCredentialAuthTokenArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialAuthTokenArgs:
     def __init__(__self__, *,
@@ -270,6 +368,28 @@ class AuthConfigDecryptedCredentialAuthTokenArgs:
         pulumi.set(self, "type", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialJwtArgsDict(TypedDict):
+        jwt: NotRequired[pulumi.Input[str]]
+        """
+        (Output)
+        The token calculated by the header, payload and signature.
+        """
+        jwt_header: NotRequired[pulumi.Input[str]]
+        """
+        Identifies which algorithm is used to generate the signature.
+        """
+        jwt_payload: NotRequired[pulumi.Input[str]]
+        """
+        Contains a set of claims. The JWT specification defines seven Registered Claim Names which are the standard fields commonly included in tokens. Custom claims are usually also included, depending on the purpose of the token.
+        """
+        secret: NotRequired[pulumi.Input[str]]
+        """
+        User's pre-shared secret to sign the token.
+        """
+elif False:
+    AuthConfigDecryptedCredentialJwtArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialJwtArgs:
     def __init__(__self__, *,
@@ -343,6 +463,31 @@ class AuthConfigDecryptedCredentialJwtArgs:
         pulumi.set(self, "secret", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgsDict(TypedDict):
+        auth_endpoint: NotRequired[pulumi.Input[str]]
+        """
+        The auth url endpoint to send the auth code request to.
+        """
+        client_id: NotRequired[pulumi.Input[str]]
+        """
+        The client's id.
+        """
+        client_secret: NotRequired[pulumi.Input[str]]
+        """
+        The client's secret.
+        """
+        scope: NotRequired[pulumi.Input[str]]
+        """
+        A space-delimited list of requested scope permissions.
+        """
+        token_endpoint: NotRequired[pulumi.Input[str]]
+        """
+        The token url endpoint to send the token request to.
+        """
+elif False:
+    AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs:
     def __init__(__self__, *,
@@ -430,6 +575,35 @@ class AuthConfigDecryptedCredentialOauth2AuthorizationCodeArgs:
         pulumi.set(self, "token_endpoint", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialOauth2ClientCredentialsArgsDict(TypedDict):
+        client_id: NotRequired[pulumi.Input[str]]
+        """
+        The client's ID.
+        """
+        client_secret: NotRequired[pulumi.Input[str]]
+        """
+        The client's secret.
+        """
+        request_type: NotRequired[pulumi.Input[str]]
+        """
+        Represent how to pass parameters to fetch access token Possible values: ["REQUEST_TYPE_UNSPECIFIED", "REQUEST_BODY", "QUERY_PARAMETERS", "ENCODED_HEADER"]
+        """
+        scope: NotRequired[pulumi.Input[str]]
+        """
+        A space-delimited list of requested scope permissions.
+        """
+        token_endpoint: NotRequired[pulumi.Input[str]]
+        """
+        The token endpoint is used by the client to obtain an access token by presenting its authorization grant or refresh token.
+        """
+        token_params: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgsDict']]
+        """
+        Token parameters for the auth request.
+        """
+elif False:
+    AuthConfigDecryptedCredentialOauth2ClientCredentialsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs:
     def __init__(__self__, *,
@@ -533,6 +707,16 @@ class AuthConfigDecryptedCredentialOauth2ClientCredentialsArgs:
         pulumi.set(self, "token_params", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgsDict(TypedDict):
+        entries: NotRequired[pulumi.Input[Sequence[pulumi.Input['AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgsDict']]]]
+        """
+        A list of parameter map entries.
+        Structure is documented below.
+        """
+elif False:
+    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs:
     def __init__(__self__, *,
@@ -558,6 +742,21 @@ class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsArgs:
         pulumi.set(self, "entries", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgsDict(TypedDict):
+        key: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgsDict']]
+        """
+        Key of the map entry.
+        Structure is documented below.
+        """
+        value: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgsDict']]
+        """
+        Value of the map entry.
+        Structure is documented below.
+        """
+elif False:
+    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs:
     def __init__(__self__, *,
@@ -601,6 +800,16 @@ class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryArgs:
         pulumi.set(self, "value", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgsDict(TypedDict):
+        literal_value: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgsDict']]
+        """
+        Passing a literal value
+        Structure is documented below.
+        """
+elif False:
+    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArgs:
     def __init__(__self__, *,
@@ -626,6 +835,15 @@ class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyArg
         pulumi.set(self, "literal_value", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgsDict(TypedDict):
+        string_value: NotRequired[pulumi.Input[str]]
+        """
+        String.
+        """
+elif False:
+    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLiteralValueArgs:
     def __init__(__self__, *,
@@ -649,6 +867,16 @@ class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryKeyLit
         pulumi.set(self, "string_value", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgsDict(TypedDict):
+        literal_value: NotRequired[pulumi.Input['AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgsDict']]
+        """
+        Passing a literal value
+        Structure is documented below.
+        """
+elif False:
+    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueArgs:
     def __init__(__self__, *,
@@ -674,6 +902,15 @@ class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueA
         pulumi.set(self, "literal_value", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgsDict(TypedDict):
+        string_value: NotRequired[pulumi.Input[str]]
+        """
+        String.
+        """
+elif False:
+    AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueLiteralValueArgs:
     def __init__(__self__, *,
@@ -697,6 +934,30 @@ class AuthConfigDecryptedCredentialOauth2ClientCredentialsTokenParamsEntryValueL
         pulumi.set(self, "string_value", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialOidcTokenArgsDict(TypedDict):
+        audience: NotRequired[pulumi.Input[str]]
+        """
+        Audience to be used when generating OIDC token. The audience claim identifies the recipients that the JWT is intended for.
+        """
+        service_account_email: NotRequired[pulumi.Input[str]]
+        """
+        The service account email to be used as the identity for the token.
+        """
+        token: NotRequired[pulumi.Input[str]]
+        """
+        (Output)
+        ID token obtained for the service account.
+        """
+        token_expire_time: NotRequired[pulumi.Input[str]]
+        """
+        (Output)
+        The approximate time until the token retrieved is valid.
+        A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
+        """
+elif False:
+    AuthConfigDecryptedCredentialOidcTokenArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialOidcTokenArgs:
     def __init__(__self__, *,
@@ -774,6 +1035,19 @@ class AuthConfigDecryptedCredentialOidcTokenArgs:
         pulumi.set(self, "token_expire_time", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialServiceAccountCredentialsArgsDict(TypedDict):
+        scope: NotRequired[pulumi.Input[str]]
+        """
+        A space-delimited list of requested scope permissions.
+        """
+        service_account: NotRequired[pulumi.Input[str]]
+        """
+        Name of the service account that has the permission to make the request.
+        """
+elif False:
+    AuthConfigDecryptedCredentialServiceAccountCredentialsArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialServiceAccountCredentialsArgs:
     def __init__(__self__, *,
@@ -813,6 +1087,21 @@ class AuthConfigDecryptedCredentialServiceAccountCredentialsArgs:
         pulumi.set(self, "service_account", value)
 
 
+if not MYPY:
+    class AuthConfigDecryptedCredentialUsernameAndPasswordArgsDict(TypedDict):
+        password: NotRequired[pulumi.Input[str]]
+        """
+        Password to be used.
+
+        <a name="nested_oauth2_authorization_code"></a>The `oauth2_authorization_code` block supports:
+        """
+        username: NotRequired[pulumi.Input[str]]
+        """
+        Username to be used.
+        """
+elif False:
+    AuthConfigDecryptedCredentialUsernameAndPasswordArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class AuthConfigDecryptedCredentialUsernameAndPasswordArgs:
     def __init__(__self__, *,
@@ -856,6 +1145,41 @@ class AuthConfigDecryptedCredentialUsernameAndPasswordArgs:
         pulumi.set(self, "username", value)
 
 
+if not MYPY:
+    class ClientCloudKmsConfigArgsDict(TypedDict):
+        key: pulumi.Input[str]
+        """
+        A Cloud KMS key is a named object containing one or more key versions, along
+        with metadata for the key. A key exists on exactly one key ring tied to a
+        specific location.
+        """
+        kms_location: pulumi.Input[str]
+        """
+        Location name of the key ring, e.g. "us-west1".
+        """
+        kms_ring: pulumi.Input[str]
+        """
+        A key ring organizes keys in a specific Google Cloud location and allows you to
+        manage access control on groups of keys. A key ring's name does not need to be
+        unique across a Google Cloud project, but must be unique within a given location.
+        """
+        key_version: NotRequired[pulumi.Input[str]]
+        """
+        Each version of a key contains key material used for encryption or signing.
+        A key's version is represented by an integer, starting at 1. To decrypt data
+        or verify a signature, you must use the same key version that was used to
+        encrypt or sign the data.
+        """
+        kms_project_id: NotRequired[pulumi.Input[str]]
+        """
+        The Google Cloud project id of the project where the kms key stored. If empty,
+        the kms key is stored at the same project as customer's project and ecrypted
+        with CMEK, otherwise, the kms key is stored in the tenant project and
+        encrypted with GMEK.
+        """
+elif False:
+    ClientCloudKmsConfigArgsDict: TypeAlias = Mapping[str, Any]
+
 @pulumi.input_type
 class ClientCloudKmsConfigArgs:
     def __init__(__self__, *,

pulumi_gcp/applicationintegration/auth_config.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -540,8 +545,8 @@ class AuthConfig(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 client_certificate: Optional[pulumi.Input[pulumi.InputType['AuthConfigClientCertificateArgs']]] = None,
-                 decrypted_credential: Optional[pulumi.Input[pulumi.InputType['AuthConfigDecryptedCredentialArgs']]] = None,
+                 client_certificate: Optional[pulumi.Input[Union['AuthConfigClientCertificateArgs', 'AuthConfigClientCertificateArgsDict']]] = None,
+                 decrypted_credential: Optional[pulumi.Input[Union['AuthConfigDecryptedCredentialArgs', 'AuthConfigDecryptedCredentialArgsDict']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  expiry_notification_durations: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
@@ -573,13 +578,13 @@ class AuthConfig(pulumi.CustomResource):
             location="us-west1",
             display_name="test-authconfig",
             description="Test auth config created via terraform",
-            decrypted_credential=gcp.applicationintegration.AuthConfigDecryptedCredentialArgs(
-                credential_type="USERNAME_AND_PASSWORD",
-                username_and_password=gcp.applicationintegration.AuthConfigDecryptedCredentialUsernameAndPasswordArgs(
-                    username="test-username",
-                    password="test-password",
-                ),
-            ),
+            decrypted_credential={
+                "credentialType": "USERNAME_AND_PASSWORD",
+                "usernameAndPassword": {
+                    "username": "test-username",
+                    "password": "test-password",
+                },
+            },
             opts = pulumi.ResourceOptions(depends_on=[client]))
         ```
 
@@ -597,9 +602,9 @@ class AuthConfig(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[pulumi.InputType['AuthConfigClientCertificateArgs']] client_certificate: Raw client certificate
+        :param pulumi.Input[Union['AuthConfigClientCertificateArgs', 'AuthConfigClientCertificateArgsDict']] client_certificate: Raw client certificate
                Structure is documented below.
-        :param pulumi.Input[pulumi.InputType['AuthConfigDecryptedCredentialArgs']] decrypted_credential: Raw auth credentials.
+        :param pulumi.Input[Union['AuthConfigDecryptedCredentialArgs', 'AuthConfigDecryptedCredentialArgsDict']] decrypted_credential: Raw auth credentials.
                Structure is documented below.
         :param pulumi.Input[str] description: A description of the auth config.
         :param pulumi.Input[str] display_name: The name of the auth config.
@@ -645,13 +650,13 @@ class AuthConfig(pulumi.CustomResource):
             location="us-west1",
             display_name="test-authconfig",
             description="Test auth config created via terraform",
-            decrypted_credential=gcp.applicationintegration.AuthConfigDecryptedCredentialArgs(
-                credential_type="USERNAME_AND_PASSWORD",
-                username_and_password=gcp.applicationintegration.AuthConfigDecryptedCredentialUsernameAndPasswordArgs(
-                    username="test-username",
-                    password="test-password",
-                ),
-            ),
+            decrypted_credential={
+                "credentialType": "USERNAME_AND_PASSWORD",
+                "usernameAndPassword": {
+                    "username": "test-username",
+                    "password": "test-password",
+                },
+            },
             opts = pulumi.ResourceOptions(depends_on=[client]))
         ```
 
@@ -682,8 +687,8 @@ class AuthConfig(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 client_certificate: Optional[pulumi.Input[pulumi.InputType['AuthConfigClientCertificateArgs']]] = None,
-                 decrypted_credential: Optional[pulumi.Input[pulumi.InputType['AuthConfigDecryptedCredentialArgs']]] = None,
+                 client_certificate: Optional[pulumi.Input[Union['AuthConfigClientCertificateArgs', 'AuthConfigClientCertificateArgsDict']]] = None,
+                 decrypted_credential: Optional[pulumi.Input[Union['AuthConfigDecryptedCredentialArgs', 'AuthConfigDecryptedCredentialArgsDict']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  expiry_notification_durations: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
@@ -735,11 +740,11 @@ class AuthConfig(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             certificate_id: Optional[pulumi.Input[str]] = None,
-            client_certificate: Optional[pulumi.Input[pulumi.InputType['AuthConfigClientCertificateArgs']]] = None,
+            client_certificate: Optional[pulumi.Input[Union['AuthConfigClientCertificateArgs', 'AuthConfigClientCertificateArgsDict']]] = None,
             create_time: Optional[pulumi.Input[str]] = None,
             creator_email: Optional[pulumi.Input[str]] = None,
             credential_type: Optional[pulumi.Input[str]] = None,
-            decrypted_credential: Optional[pulumi.Input[pulumi.InputType['AuthConfigDecryptedCredentialArgs']]] = None,
+            decrypted_credential: Optional[pulumi.Input[Union['AuthConfigDecryptedCredentialArgs', 'AuthConfigDecryptedCredentialArgsDict']]] = None,
             description: Optional[pulumi.Input[str]] = None,
             display_name: Optional[pulumi.Input[str]] = None,
             encrypted_credential: Optional[pulumi.Input[str]] = None,
@@ -762,13 +767,13 @@ class AuthConfig(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] certificate_id: Certificate id for client certificate.
-        :param pulumi.Input[pulumi.InputType['AuthConfigClientCertificateArgs']] client_certificate: Raw client certificate
+        :param pulumi.Input[Union['AuthConfigClientCertificateArgs', 'AuthConfigClientCertificateArgsDict']] client_certificate: Raw client certificate
                Structure is documented below.
         :param pulumi.Input[str] create_time: The timestamp when the auth config is created.
                A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
         :param pulumi.Input[str] creator_email: The creator's email address. Generated based on the End User Credentials/LOAS role of the user making the call.
         :param pulumi.Input[str] credential_type: Credential type of the encrypted credential.
-        :param pulumi.Input[pulumi.InputType['AuthConfigDecryptedCredentialArgs']] decrypted_credential: Raw auth credentials.
+        :param pulumi.Input[Union['AuthConfigDecryptedCredentialArgs', 'AuthConfigDecryptedCredentialArgsDict']] decrypted_credential: Raw auth credentials.
                Structure is documented below.
         :param pulumi.Input[str] description: A description of the auth config.
         :param pulumi.Input[str] display_name: The name of the auth config.