pulumi-gcp 7.30.0__py3-none-any.whl → 7.30.0a1719470057__py3-none-any.whl

pulumi_gcp/networksecurity/authorization_policy.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -374,7 +369,7 @@ class AuthorizationPolicy(pulumi.CustomResource):
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
-                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AuthorizationPolicyRuleArgs', 'AuthorizationPolicyRuleArgsDict']]]]] = None,
+                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AuthorizationPolicyRuleArgs']]]]] = None,
                  __props__=None):
         """
         ## Example Usage
@@ -392,12 +387,12 @@ class AuthorizationPolicy(pulumi.CustomResource):
             },
             description="my description",
             action="ALLOW",
-            rules=[{
-                "sources": [{
-                    "principals": ["namespace/*"],
-                    "ipBlocks": ["1.2.3.0/24"],
-                }],
-            }])
+            rules=[gcp.networksecurity.AuthorizationPolicyRuleArgs(
+                sources=[gcp.networksecurity.AuthorizationPolicyRuleSourceArgs(
+                    principals=["namespace/*"],
+                    ip_blocks=["1.2.3.0/24"],
+                )],
+            )])
         ```
         ### Network Security Authorization Policy Destinations
 
@@ -412,21 +407,21 @@ class AuthorizationPolicy(pulumi.CustomResource):
             },
             description="my description",
             action="ALLOW",
-            rules=[{
-                "sources": [{
-                    "principals": ["namespace/*"],
-                    "ipBlocks": ["1.2.3.0/24"],
-                }],
-                "destinations": [{
-                    "hosts": ["mydomain.*"],
-                    "ports": [8080],
-                    "methods": ["GET"],
-                    "httpHeaderMatch": {
-                        "headerName": ":method",
-                        "regexMatch": "GET",
-                    },
-                }],
-            }])
+            rules=[gcp.networksecurity.AuthorizationPolicyRuleArgs(
+                sources=[gcp.networksecurity.AuthorizationPolicyRuleSourceArgs(
+                    principals=["namespace/*"],
+                    ip_blocks=["1.2.3.0/24"],
+                )],
+                destinations=[gcp.networksecurity.AuthorizationPolicyRuleDestinationArgs(
+                    hosts=["mydomain.*"],
+                    ports=[8080],
+                    methods=["GET"],
+                    http_header_match=gcp.networksecurity.AuthorizationPolicyRuleDestinationHttpHeaderMatchArgs(
+                        header_name=":method",
+                        regex_match="GET",
+                    ),
+                )],
+            )])
         ```
 
         ## Import
@@ -469,7 +464,7 @@ class AuthorizationPolicy(pulumi.CustomResource):
                - - -
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['AuthorizationPolicyRuleArgs', 'AuthorizationPolicyRuleArgsDict']]]] rules: List of rules to match. Note that at least one of the rules must match in order for the action specified in the 'action' field to be taken.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AuthorizationPolicyRuleArgs']]]] rules: List of rules to match. Note that at least one of the rules must match in order for the action specified in the 'action' field to be taken.
                A rule is a match if there is a matching source and destination. If left blank, the action specified in the action field will be applied on every request.
                Structure is documented below.
         """
@@ -495,12 +490,12 @@ class AuthorizationPolicy(pulumi.CustomResource):
             },
             description="my description",
             action="ALLOW",
-            rules=[{
-                "sources": [{
-                    "principals": ["namespace/*"],
-                    "ipBlocks": ["1.2.3.0/24"],
-                }],
-            }])
+            rules=[gcp.networksecurity.AuthorizationPolicyRuleArgs(
+                sources=[gcp.networksecurity.AuthorizationPolicyRuleSourceArgs(
+                    principals=["namespace/*"],
+                    ip_blocks=["1.2.3.0/24"],
+                )],
+            )])
         ```
         ### Network Security Authorization Policy Destinations
 
@@ -515,21 +510,21 @@ class AuthorizationPolicy(pulumi.CustomResource):
             },
             description="my description",
             action="ALLOW",
-            rules=[{
-                "sources": [{
-                    "principals": ["namespace/*"],
-                    "ipBlocks": ["1.2.3.0/24"],
-                }],
-                "destinations": [{
-                    "hosts": ["mydomain.*"],
-                    "ports": [8080],
-                    "methods": ["GET"],
-                    "httpHeaderMatch": {
-                        "headerName": ":method",
-                        "regexMatch": "GET",
-                    },
-                }],
-            }])
+            rules=[gcp.networksecurity.AuthorizationPolicyRuleArgs(
+                sources=[gcp.networksecurity.AuthorizationPolicyRuleSourceArgs(
+                    principals=["namespace/*"],
+                    ip_blocks=["1.2.3.0/24"],
+                )],
+                destinations=[gcp.networksecurity.AuthorizationPolicyRuleDestinationArgs(
+                    hosts=["mydomain.*"],
+                    ports=[8080],
+                    methods=["GET"],
+                    http_header_match=gcp.networksecurity.AuthorizationPolicyRuleDestinationHttpHeaderMatchArgs(
+                        header_name=":method",
+                        regex_match="GET",
+                    ),
+                )],
+            )])
         ```
 
         ## Import
@@ -577,7 +572,7 @@ class AuthorizationPolicy(pulumi.CustomResource):
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
-                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AuthorizationPolicyRuleArgs', 'AuthorizationPolicyRuleArgsDict']]]]] = None,
+                 rules: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AuthorizationPolicyRuleArgs']]]]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -621,7 +616,7 @@ class AuthorizationPolicy(pulumi.CustomResource):
             name: Optional[pulumi.Input[str]] = None,
             project: Optional[pulumi.Input[str]] = None,
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
-            rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AuthorizationPolicyRuleArgs', 'AuthorizationPolicyRuleArgsDict']]]]] = None,
+            rules: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AuthorizationPolicyRuleArgs']]]]] = None,
             update_time: Optional[pulumi.Input[str]] = None) -> 'AuthorizationPolicy':
         """
         Get an existing AuthorizationPolicy resource's state with the given name, id, and optional extra
@@ -648,7 +643,7 @@ class AuthorizationPolicy(pulumi.CustomResource):
                If it is not provided, the provider project is used.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['AuthorizationPolicyRuleArgs', 'AuthorizationPolicyRuleArgsDict']]]] rules: List of rules to match. Note that at least one of the rules must match in order for the action specified in the 'action' field to be taken.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['AuthorizationPolicyRuleArgs']]]] rules: List of rules to match. Note that at least one of the rules must match in order for the action specified in the 'action' field to be taken.
                A rule is a match if there is a matching source and destination. If left blank, the action specified in the action field will be applied on every request.
                Structure is documented below.
         :param pulumi.Input[str] update_time: Time the AuthorizationPolicy was updated in UTC.

pulumi_gcp/networksecurity/client_tls_policy.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -397,13 +392,13 @@ class ClientTlsPolicy(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 client_certificate: Optional[pulumi.Input[Union['ClientTlsPolicyClientCertificateArgs', 'ClientTlsPolicyClientCertificateArgsDict']]] = None,
+                 client_certificate: Optional[pulumi.Input[pulumi.InputType['ClientTlsPolicyClientCertificateArgs']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
-                 server_validation_cas: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ClientTlsPolicyServerValidationCaArgs', 'ClientTlsPolicyServerValidationCaArgsDict']]]]] = None,
+                 server_validation_cas: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['ClientTlsPolicyServerValidationCaArgs']]]]] = None,
                  sni: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
@@ -435,22 +430,22 @@ class ClientTlsPolicy(pulumi.CustomResource):
                 "foo": "bar",
             },
             description="my description",
-            client_certificate={
-                "certificateProviderInstance": {
-                    "pluginInstance": "google_cloud_private_spiffe",
-                },
-            },
+            client_certificate=gcp.networksecurity.ClientTlsPolicyClientCertificateArgs(
+                certificate_provider_instance=gcp.networksecurity.ClientTlsPolicyClientCertificateCertificateProviderInstanceArgs(
+                    plugin_instance="google_cloud_private_spiffe",
+                ),
+            ),
             server_validation_cas=[
-                {
-                    "grpcEndpoint": {
-                        "targetUri": "unix:mypath",
-                    },
-                },
-                {
-                    "grpcEndpoint": {
-                        "targetUri": "unix:mypath1",
-                    },
-                },
+                gcp.networksecurity.ClientTlsPolicyServerValidationCaArgs(
+                    grpc_endpoint=gcp.networksecurity.ClientTlsPolicyServerValidationCaGrpcEndpointArgs(
+                        target_uri="unix:mypath",
+                    ),
+                ),
+                gcp.networksecurity.ClientTlsPolicyServerValidationCaArgs(
+                    grpc_endpoint=gcp.networksecurity.ClientTlsPolicyServerValidationCaGrpcEndpointArgs(
+                        target_uri="unix:mypath1",
+                    ),
+                ),
             ])
         ```
 
@@ -480,7 +475,7 @@ class ClientTlsPolicy(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Union['ClientTlsPolicyClientCertificateArgs', 'ClientTlsPolicyClientCertificateArgsDict']] client_certificate: Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
+        :param pulumi.Input[pulumi.InputType['ClientTlsPolicyClientCertificateArgs']] client_certificate: Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
                Structure is documented below.
         :param pulumi.Input[str] description: A free-text description of the resource. Max length 1024 characters.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of label tags associated with the ClientTlsPolicy resource.
@@ -494,7 +489,7 @@ class ClientTlsPolicy(pulumi.CustomResource):
                - - -
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['ClientTlsPolicyServerValidationCaArgs', 'ClientTlsPolicyServerValidationCaArgsDict']]]] server_validation_cas: Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['ClientTlsPolicyServerValidationCaArgs']]]] server_validation_cas: Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
                Structure is documented below.
         :param pulumi.Input[str] sni: Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
         """
@@ -533,22 +528,22 @@ class ClientTlsPolicy(pulumi.CustomResource):
                 "foo": "bar",
             },
             description="my description",
-            client_certificate={
-                "certificateProviderInstance": {
-                    "pluginInstance": "google_cloud_private_spiffe",
-                },
-            },
+            client_certificate=gcp.networksecurity.ClientTlsPolicyClientCertificateArgs(
+                certificate_provider_instance=gcp.networksecurity.ClientTlsPolicyClientCertificateCertificateProviderInstanceArgs(
+                    plugin_instance="google_cloud_private_spiffe",
+                ),
+            ),
             server_validation_cas=[
-                {
-                    "grpcEndpoint": {
-                        "targetUri": "unix:mypath",
-                    },
-                },
-                {
-                    "grpcEndpoint": {
-                        "targetUri": "unix:mypath1",
-                    },
-                },
+                gcp.networksecurity.ClientTlsPolicyServerValidationCaArgs(
+                    grpc_endpoint=gcp.networksecurity.ClientTlsPolicyServerValidationCaGrpcEndpointArgs(
+                        target_uri="unix:mypath",
+                    ),
+                ),
+                gcp.networksecurity.ClientTlsPolicyServerValidationCaArgs(
+                    grpc_endpoint=gcp.networksecurity.ClientTlsPolicyServerValidationCaGrpcEndpointArgs(
+                        target_uri="unix:mypath1",
+                    ),
+                ),
             ])
         ```
 
@@ -591,13 +586,13 @@ class ClientTlsPolicy(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 client_certificate: Optional[pulumi.Input[Union['ClientTlsPolicyClientCertificateArgs', 'ClientTlsPolicyClientCertificateArgsDict']]] = None,
+                 client_certificate: Optional[pulumi.Input[pulumi.InputType['ClientTlsPolicyClientCertificateArgs']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
-                 server_validation_cas: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ClientTlsPolicyServerValidationCaArgs', 'ClientTlsPolicyServerValidationCaArgsDict']]]]] = None,
+                 server_validation_cas: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['ClientTlsPolicyServerValidationCaArgs']]]]] = None,
                  sni: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -632,7 +627,7 @@ class ClientTlsPolicy(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            client_certificate: Optional[pulumi.Input[Union['ClientTlsPolicyClientCertificateArgs', 'ClientTlsPolicyClientCertificateArgsDict']]] = None,
+            client_certificate: Optional[pulumi.Input[pulumi.InputType['ClientTlsPolicyClientCertificateArgs']]] = None,
             create_time: Optional[pulumi.Input[str]] = None,
             description: Optional[pulumi.Input[str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -641,7 +636,7 @@ class ClientTlsPolicy(pulumi.CustomResource):
             name: Optional[pulumi.Input[str]] = None,
             project: Optional[pulumi.Input[str]] = None,
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
-            server_validation_cas: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ClientTlsPolicyServerValidationCaArgs', 'ClientTlsPolicyServerValidationCaArgsDict']]]]] = None,
+            server_validation_cas: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['ClientTlsPolicyServerValidationCaArgs']]]]] = None,
             sni: Optional[pulumi.Input[str]] = None,
             update_time: Optional[pulumi.Input[str]] = None) -> 'ClientTlsPolicy':
         """
@@ -651,7 +646,7 @@ class ClientTlsPolicy(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Union['ClientTlsPolicyClientCertificateArgs', 'ClientTlsPolicyClientCertificateArgsDict']] client_certificate: Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
+        :param pulumi.Input[pulumi.InputType['ClientTlsPolicyClientCertificateArgs']] client_certificate: Defines a mechanism to provision client identity (public and private keys) for peer to peer authentication. The presence of this dictates mTLS.
                Structure is documented below.
         :param pulumi.Input[str] create_time: Time the ClientTlsPolicy was created in UTC.
         :param pulumi.Input[str] description: A free-text description of the resource. Max length 1024 characters.
@@ -669,7 +664,7 @@ class ClientTlsPolicy(pulumi.CustomResource):
                If it is not provided, the provider project is used.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['ClientTlsPolicyServerValidationCaArgs', 'ClientTlsPolicyServerValidationCaArgsDict']]]] server_validation_cas: Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['ClientTlsPolicyServerValidationCaArgs']]]] server_validation_cas: Defines the mechanism to obtain the Certificate Authority certificate to validate the server certificate. If empty, client does not validate the server certificate.
                Structure is documented below.
         :param pulumi.Input[str] sni: Server Name Indication string to present to the server during TLS handshake. E.g: "secure.example.com".
         :param pulumi.Input[str] update_time: Time the ClientTlsPolicy was updated in UTC.

pulumi_gcp/networksecurity/firewall_endpoint.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['FirewallEndpointArgs', 'FirewallEndpoint']

pulumi_gcp/networksecurity/firewall_endpoint_association.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['FirewallEndpointAssociationArgs', 'FirewallEndpointAssociation']

pulumi_gcp/networksecurity/gateway_security_policy.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['GatewaySecurityPolicyArgs', 'GatewaySecurityPolicy']
@@ -313,24 +308,24 @@ class GatewaySecurityPolicy(pulumi.CustomResource):
             name="my-basic-ca-pool",
             location="us-central1",
             tier="DEVOPS",
-            publishing_options={
-                "publishCaCert": False,
-                "publishCrl": False,
-            },
-            issuance_policy={
-                "maximumLifetime": "1209600s",
-                "baselineValues": {
-                    "caOptions": {
-                        "isCa": False,
-                    },
-                    "keyUsage": {
-                        "baseKeyUsage": {},
-                        "extendedKeyUsage": {
-                            "serverAuth": True,
-                        },
-                    },
-                },
-            })
+            publishing_options=gcp.certificateauthority.CaPoolPublishingOptionsArgs(
+                publish_ca_cert=False,
+                publish_crl=False,
+            ),
+            issuance_policy=gcp.certificateauthority.CaPoolIssuancePolicyArgs(
+                maximum_lifetime="1209600s",
+                baseline_values=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesArgs(
+                    ca_options=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesCaOptionsArgs(
+                        is_ca=False,
+                    ),
+                    key_usage=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesKeyUsageArgs(
+                        base_key_usage=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs(),
+                        extended_key_usage=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs(
+                            server_auth=True,
+                        ),
+                    ),
+                ),
+            ))
         default_authority = gcp.certificateauthority.Authority("default",
             pool=default.name,
             certificate_authority_id="my-basic-certificate-authority",
@@ -340,31 +335,31 @@ class GatewaySecurityPolicy(pulumi.CustomResource):
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True,
-            config={
-                "subjectConfig": {
-                    "subject": {
-                        "organization": "Test LLC",
-                        "commonName": "my-ca",
-                    },
-                },
-                "x509Config": {
-                    "caOptions": {
-                        "isCa": True,
-                    },
-                    "keyUsage": {
-                        "baseKeyUsage": {
-                            "certSign": True,
-                            "crlSign": True,
-                        },
-                        "extendedKeyUsage": {
-                            "serverAuth": False,
-                        },
-                    },
-                },
-            },
-            key_spec={
-                "algorithm": "RSA_PKCS1_4096_SHA256",
-            })
+            config=gcp.certificateauthority.AuthorityConfigArgs(
+                subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
+                    subject=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectArgs(
+                        organization="Test LLC",
+                        common_name="my-ca",
+                    ),
+                ),
+                x509_config=gcp.certificateauthority.AuthorityConfigX509ConfigArgs(
+                    ca_options=gcp.certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs(
+                        is_ca=True,
+                    ),
+                    key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs(
+                        base_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs(
+                            cert_sign=True,
+                            crl_sign=True,
+                        ),
+                        extended_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
+                            server_auth=False,
+                        ),
+                    ),
+                ),
+            ),
+            key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
+                algorithm="RSA_PKCS1_4096_SHA256",
+            ))
         project = gcp.organizations.get_project()
         tls_inspection_permission = gcp.certificateauthority.CaPoolIamMember("tls_inspection_permission",
             ca_pool=default.id,
@@ -461,24 +456,24 @@ class GatewaySecurityPolicy(pulumi.CustomResource):
             name="my-basic-ca-pool",
             location="us-central1",
             tier="DEVOPS",
-            publishing_options={
-                "publishCaCert": False,
-                "publishCrl": False,
-            },
-            issuance_policy={
-                "maximumLifetime": "1209600s",
-                "baselineValues": {
-                    "caOptions": {
-                        "isCa": False,
-                    },
-                    "keyUsage": {
-                        "baseKeyUsage": {},
-                        "extendedKeyUsage": {
-                            "serverAuth": True,
-                        },
-                    },
-                },
-            })
+            publishing_options=gcp.certificateauthority.CaPoolPublishingOptionsArgs(
+                publish_ca_cert=False,
+                publish_crl=False,
+            ),
+            issuance_policy=gcp.certificateauthority.CaPoolIssuancePolicyArgs(
+                maximum_lifetime="1209600s",
+                baseline_values=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesArgs(
+                    ca_options=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesCaOptionsArgs(
+                        is_ca=False,
+                    ),
+                    key_usage=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesKeyUsageArgs(
+                        base_key_usage=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs(),
+                        extended_key_usage=gcp.certificateauthority.CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs(
+                            server_auth=True,
+                        ),
+                    ),
+                ),
+            ))
         default_authority = gcp.certificateauthority.Authority("default",
             pool=default.name,
             certificate_authority_id="my-basic-certificate-authority",
@@ -488,31 +483,31 @@ class GatewaySecurityPolicy(pulumi.CustomResource):
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True,
-            config={
-                "subjectConfig": {
-                    "subject": {
-                        "organization": "Test LLC",
-                        "commonName": "my-ca",
-                    },
-                },
-                "x509Config": {
-                    "caOptions": {
-                        "isCa": True,
-                    },
-                    "keyUsage": {
-                        "baseKeyUsage": {
-                            "certSign": True,
-                            "crlSign": True,
-                        },
-                        "extendedKeyUsage": {
-                            "serverAuth": False,
-                        },
-                    },
-                },
-            },
-            key_spec={
-                "algorithm": "RSA_PKCS1_4096_SHA256",
-            })
+            config=gcp.certificateauthority.AuthorityConfigArgs(
+                subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
+                    subject=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectArgs(
+                        organization="Test LLC",
+                        common_name="my-ca",
+                    ),
+                ),
+                x509_config=gcp.certificateauthority.AuthorityConfigX509ConfigArgs(
+                    ca_options=gcp.certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs(
+                        is_ca=True,
+                    ),
+                    key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs(
+                        base_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs(
+                            cert_sign=True,
+                            crl_sign=True,
+                        ),
+                        extended_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
+                            server_auth=False,
+                        ),
+                    ),
+                ),
+            ),
+            key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
+                algorithm="RSA_PKCS1_4096_SHA256",
+            ))
         project = gcp.organizations.get_project()
         tls_inspection_permission = gcp.certificateauthority.CaPoolIamMember("tls_inspection_permission",
             ca_pool=default.id,

pulumi_gcp/networksecurity/gateway_security_policy_rule.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['GatewaySecurityPolicyRuleArgs', 'GatewaySecurityPolicyRule']

pulumi_gcp/networksecurity/get_address_group_iam_policy.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = [

pulumi_gcp/networksecurity/outputs.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs