pulumi-gcp 7.30.0__py3-none-any.whl → 7.30.0a1719470057__py3-none-any.whl

pulumi_gcp/certificatemanager/certificate_issuance_config.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -429,7 +424,7 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 certificate_authority_config: Optional[pulumi.Input[Union['CertificateIssuanceConfigCertificateAuthorityConfigArgs', 'CertificateIssuanceConfigCertificateAuthorityConfigArgsDict']]] = None,
+                 certificate_authority_config: Optional[pulumi.Input[pulumi.InputType['CertificateIssuanceConfigCertificateAuthorityConfigArgs']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  key_algorithm: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -464,45 +459,45 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
             location="us-central1",
             pool=pool.name,
             certificate_authority_id="ca-authority",
-            config={
-                "subjectConfig": {
-                    "subject": {
-                        "organization": "HashiCorp",
-                        "commonName": "my-certificate-authority",
-                    },
-                    "subjectAltName": {
-                        "dnsNames": ["hashicorp.com"],
-                    },
-                },
-                "x509Config": {
-                    "caOptions": {
-                        "isCa": True,
-                    },
-                    "keyUsage": {
-                        "baseKeyUsage": {
-                            "certSign": True,
-                            "crlSign": True,
-                        },
-                        "extendedKeyUsage": {
-                            "serverAuth": True,
-                        },
-                    },
-                },
-            },
-            key_spec={
-                "algorithm": "RSA_PKCS1_4096_SHA256",
-            },
+            config=gcp.certificateauthority.AuthorityConfigArgs(
+                subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
+                    subject=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectArgs(
+                        organization="HashiCorp",
+                        common_name="my-certificate-authority",
+                    ),
+                    subject_alt_name=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs(
+                        dns_names=["hashicorp.com"],
+                    ),
+                ),
+                x509_config=gcp.certificateauthority.AuthorityConfigX509ConfigArgs(
+                    ca_options=gcp.certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs(
+                        is_ca=True,
+                    ),
+                    key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs(
+                        base_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs(
+                            cert_sign=True,
+                            crl_sign=True,
+                        ),
+                        extended_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
+                            server_auth=True,
+                        ),
+                    ),
+                ),
+            ),
+            key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
+                algorithm="RSA_PKCS1_4096_SHA256",
+            ),
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True)
         default = gcp.certificatemanager.CertificateIssuanceConfig("default",
             name="issuance-config",
             description="sample description for the certificate issuanceConfigs",
-            certificate_authority_config={
-                "certificateAuthorityServiceConfig": {
-                    "caPool": pool.id,
-                },
-            },
+            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
+                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
+                    ca_pool=pool.id,
+                ),
+            ),
             lifetime="1814400s",
             rotation_window_percentage=34,
             key_algorithm="ECDSA_P256",
@@ -539,7 +534,7 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Union['CertificateIssuanceConfigCertificateAuthorityConfigArgs', 'CertificateIssuanceConfigCertificateAuthorityConfigArgsDict']] certificate_authority_config: The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
+        :param pulumi.Input[pulumi.InputType['CertificateIssuanceConfigCertificateAuthorityConfigArgs']] certificate_authority_config: The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
                Structure is documented below.
         :param pulumi.Input[str] description: One or more paragraphs of text description of a CertificateIssuanceConfig.
         :param pulumi.Input[str] key_algorithm: Key algorithm to use when generating the private key.
@@ -589,45 +584,45 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
             location="us-central1",
             pool=pool.name,
             certificate_authority_id="ca-authority",
-            config={
-                "subjectConfig": {
-                    "subject": {
-                        "organization": "HashiCorp",
-                        "commonName": "my-certificate-authority",
-                    },
-                    "subjectAltName": {
-                        "dnsNames": ["hashicorp.com"],
-                    },
-                },
-                "x509Config": {
-                    "caOptions": {
-                        "isCa": True,
-                    },
-                    "keyUsage": {
-                        "baseKeyUsage": {
-                            "certSign": True,
-                            "crlSign": True,
-                        },
-                        "extendedKeyUsage": {
-                            "serverAuth": True,
-                        },
-                    },
-                },
-            },
-            key_spec={
-                "algorithm": "RSA_PKCS1_4096_SHA256",
-            },
+            config=gcp.certificateauthority.AuthorityConfigArgs(
+                subject_config=gcp.certificateauthority.AuthorityConfigSubjectConfigArgs(
+                    subject=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectArgs(
+                        organization="HashiCorp",
+                        common_name="my-certificate-authority",
+                    ),
+                    subject_alt_name=gcp.certificateauthority.AuthorityConfigSubjectConfigSubjectAltNameArgs(
+                        dns_names=["hashicorp.com"],
+                    ),
+                ),
+                x509_config=gcp.certificateauthority.AuthorityConfigX509ConfigArgs(
+                    ca_options=gcp.certificateauthority.AuthorityConfigX509ConfigCaOptionsArgs(
+                        is_ca=True,
+                    ),
+                    key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageArgs(
+                        base_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs(
+                            cert_sign=True,
+                            crl_sign=True,
+                        ),
+                        extended_key_usage=gcp.certificateauthority.AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs(
+                            server_auth=True,
+                        ),
+                    ),
+                ),
+            ),
+            key_spec=gcp.certificateauthority.AuthorityKeySpecArgs(
+                algorithm="RSA_PKCS1_4096_SHA256",
+            ),
             deletion_protection=False,
             skip_grace_period=True,
             ignore_active_certificates_on_deletion=True)
         default = gcp.certificatemanager.CertificateIssuanceConfig("default",
             name="issuance-config",
             description="sample description for the certificate issuanceConfigs",
-            certificate_authority_config={
-                "certificateAuthorityServiceConfig": {
-                    "caPool": pool.id,
-                },
-            },
+            certificate_authority_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigArgs(
+                certificate_authority_service_config=gcp.certificatemanager.CertificateIssuanceConfigCertificateAuthorityConfigCertificateAuthorityServiceConfigArgs(
+                    ca_pool=pool.id,
+                ),
+            ),
             lifetime="1814400s",
             rotation_window_percentage=34,
             key_algorithm="ECDSA_P256",
@@ -677,7 +672,7 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 certificate_authority_config: Optional[pulumi.Input[Union['CertificateIssuanceConfigCertificateAuthorityConfigArgs', 'CertificateIssuanceConfigCertificateAuthorityConfigArgsDict']]] = None,
+                 certificate_authority_config: Optional[pulumi.Input[pulumi.InputType['CertificateIssuanceConfigCertificateAuthorityConfigArgs']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  key_algorithm: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -728,7 +723,7 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            certificate_authority_config: Optional[pulumi.Input[Union['CertificateIssuanceConfigCertificateAuthorityConfigArgs', 'CertificateIssuanceConfigCertificateAuthorityConfigArgsDict']]] = None,
+            certificate_authority_config: Optional[pulumi.Input[pulumi.InputType['CertificateIssuanceConfigCertificateAuthorityConfigArgs']]] = None,
             create_time: Optional[pulumi.Input[str]] = None,
             description: Optional[pulumi.Input[str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -748,7 +743,7 @@ class CertificateIssuanceConfig(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Union['CertificateIssuanceConfigCertificateAuthorityConfigArgs', 'CertificateIssuanceConfigCertificateAuthorityConfigArgsDict']] certificate_authority_config: The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
+        :param pulumi.Input[pulumi.InputType['CertificateIssuanceConfigCertificateAuthorityConfigArgs']] certificate_authority_config: The CA that issues the workload certificate. It includes the CA address, type, authentication to CA service, etc.
                Structure is documented below.
         :param pulumi.Input[str] create_time: The creation timestamp of a CertificateIssuanceConfig. Timestamp is in RFC3339 UTC "Zulu" format,
                accurate to nanoseconds with up to nine fractional digits.

pulumi_gcp/certificatemanager/certificate_map.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -459,7 +454,7 @@ class CertificateMap(pulumi.CustomResource):
             create_time: Optional[pulumi.Input[str]] = None,
             description: Optional[pulumi.Input[str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
-            gclb_targets: Optional[pulumi.Input[Sequence[pulumi.Input[Union['CertificateMapGclbTargetArgs', 'CertificateMapGclbTargetArgsDict']]]]] = None,
+            gclb_targets: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['CertificateMapGclbTargetArgs']]]]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             name: Optional[pulumi.Input[str]] = None,
             project: Optional[pulumi.Input[str]] = None,
@@ -477,7 +472,7 @@ class CertificateMap(pulumi.CustomResource):
                Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
         :param pulumi.Input[str] description: A human-readable description of the resource.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['CertificateMapGclbTargetArgs', 'CertificateMapGclbTargetArgsDict']]]] gclb_targets: A list of target proxies that use this Certificate Map
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['CertificateMapGclbTargetArgs']]]] gclb_targets: A list of target proxies that use this Certificate Map
                Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Set of labels associated with a Certificate Map resource.
                

pulumi_gcp/certificatemanager/certificate_map_entry.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 
 __all__ = ['CertificateMapEntryArgs', 'CertificateMapEntry']
@@ -481,16 +476,16 @@ class CertificateMapEntry(pulumi.CustomResource):
             name="cert-map-entry",
             description="The default cert",
             scope="DEFAULT",
-            managed={
-                "domains": [
+            managed=gcp.certificatemanager.CertificateManagedArgs(
+                domains=[
                     instance.domain,
                     instance2.domain,
                 ],
-                "dnsAuthorizations": [
+                dns_authorizations=[
                     instance.id,
                     instance2.id,
                 ],
-            })
+            ))
         default = gcp.certificatemanager.CertificateMapEntry("default",
             name="cert-map-entry",
             description="My acceptance test certificate map entry",
@@ -590,16 +585,16 @@ class CertificateMapEntry(pulumi.CustomResource):
             name="cert-map-entry",
             description="The default cert",
             scope="DEFAULT",
-            managed={
-                "domains": [
+            managed=gcp.certificatemanager.CertificateManagedArgs(
+                domains=[
                     instance.domain,
                     instance2.domain,
                 ],
-                "dnsAuthorizations": [
+                dns_authorizations=[
                     instance.id,
                     instance2.id,
                 ],
-            })
+            ))
         default = gcp.certificatemanager.CertificateMapEntry("default",
             name="cert-map-entry",
             description="My acceptance test certificate map entry",

pulumi_gcp/certificatemanager/dns_authorization.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -594,7 +589,7 @@ class DnsAuthorization(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             description: Optional[pulumi.Input[str]] = None,
-            dns_resource_records: Optional[pulumi.Input[Sequence[pulumi.Input[Union['DnsAuthorizationDnsResourceRecordArgs', 'DnsAuthorizationDnsResourceRecordArgsDict']]]]] = None,
+            dns_resource_records: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['DnsAuthorizationDnsResourceRecordArgs']]]]] = None,
             domain: Optional[pulumi.Input[str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -611,7 +606,7 @@ class DnsAuthorization(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] description: A human-readable description of the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['DnsAuthorizationDnsResourceRecordArgs', 'DnsAuthorizationDnsResourceRecordArgsDict']]]] dns_resource_records: The structure describing the DNS Resource Record that needs to be added
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['DnsAuthorizationDnsResourceRecordArgs']]]] dns_resource_records: The structure describing the DNS Resource Record that needs to be added
                to DNS configuration for the authorization to be usable by
                certificate.
                Structure is documented below.

pulumi_gcp/certificatemanager/get_certificate_map.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 

pulumi_gcp/certificatemanager/outputs.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 

pulumi_gcp/certificatemanager/trust_config.py

@@ -4,14 +4,9 @@
 
 import copy
 import warnings
-import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
-if sys.version_info >= (3, 11):
-    from typing import NotRequired, TypedDict, TypeAlias
-else:
-    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -341,7 +336,7 @@ class TrustConfig(pulumi.CustomResource):
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
-                 trust_stores: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TrustConfigTrustStoreArgs', 'TrustConfigTrustStoreArgsDict']]]]] = None,
+                 trust_stores: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['TrustConfigTrustStoreArgs']]]]] = None,
                  __props__=None):
         """
         TrustConfig represents a resource that represents your Public Key Infrastructure (PKI) configuration in Certificate Manager for use in mutual TLS authentication scenarios.
@@ -365,14 +360,14 @@ class TrustConfig(pulumi.CustomResource):
             name="trust-config",
             description="sample description for the trust config",
             location="us-central1",
-            trust_stores=[{
-                "trustAnchors": [{
-                    "pemCertificate": std.file(input="test-fixtures/cert.pem").result,
-                }],
-                "intermediateCas": [{
-                    "pemCertificate": std.file(input="test-fixtures/cert.pem").result,
-                }],
-            }],
+            trust_stores=[gcp.certificatemanager.TrustConfigTrustStoreArgs(
+                trust_anchors=[gcp.certificatemanager.TrustConfigTrustStoreTrustAnchorArgs(
+                    pem_certificate=std.file(input="test-fixtures/cert.pem").result,
+                )],
+                intermediate_cas=[gcp.certificatemanager.TrustConfigTrustStoreIntermediateCaArgs(
+                    pem_certificate=std.file(input="test-fixtures/cert.pem").result,
+                )],
+            )],
             labels={
                 "foo": "bar",
             })
@@ -415,7 +410,7 @@ class TrustConfig(pulumi.CustomResource):
         :param pulumi.Input[str] name: A user-defined name of the trust config. Trust config names must be unique globally.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['TrustConfigTrustStoreArgs', 'TrustConfigTrustStoreArgsDict']]]] trust_stores: Set of trust stores to perform validation against.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['TrustConfigTrustStoreArgs']]]] trust_stores: Set of trust stores to perform validation against.
                This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation.
                Structure is documented below.
         """
@@ -447,14 +442,14 @@ class TrustConfig(pulumi.CustomResource):
             name="trust-config",
             description="sample description for the trust config",
             location="us-central1",
-            trust_stores=[{
-                "trustAnchors": [{
-                    "pemCertificate": std.file(input="test-fixtures/cert.pem").result,
-                }],
-                "intermediateCas": [{
-                    "pemCertificate": std.file(input="test-fixtures/cert.pem").result,
-                }],
-            }],
+            trust_stores=[gcp.certificatemanager.TrustConfigTrustStoreArgs(
+                trust_anchors=[gcp.certificatemanager.TrustConfigTrustStoreTrustAnchorArgs(
+                    pem_certificate=std.file(input="test-fixtures/cert.pem").result,
+                )],
+                intermediate_cas=[gcp.certificatemanager.TrustConfigTrustStoreIntermediateCaArgs(
+                    pem_certificate=std.file(input="test-fixtures/cert.pem").result,
+                )],
+            )],
             labels={
                 "foo": "bar",
             })
@@ -504,7 +499,7 @@ class TrustConfig(pulumi.CustomResource):
                  location: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
-                 trust_stores: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TrustConfigTrustStoreArgs', 'TrustConfigTrustStoreArgsDict']]]]] = None,
+                 trust_stores: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['TrustConfigTrustStoreArgs']]]]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -546,7 +541,7 @@ class TrustConfig(pulumi.CustomResource):
             name: Optional[pulumi.Input[str]] = None,
             project: Optional[pulumi.Input[str]] = None,
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
-            trust_stores: Optional[pulumi.Input[Sequence[pulumi.Input[Union['TrustConfigTrustStoreArgs', 'TrustConfigTrustStoreArgsDict']]]]] = None,
+            trust_stores: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['TrustConfigTrustStoreArgs']]]]] = None,
             update_time: Optional[pulumi.Input[str]] = None) -> 'TrustConfig':
         """
         Get an existing TrustConfig resource's state with the given name, id, and optional extra
@@ -572,7 +567,7 @@ class TrustConfig(pulumi.CustomResource):
                If it is not provided, the provider project is used.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource
                and default labels configured on the provider.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['TrustConfigTrustStoreArgs', 'TrustConfigTrustStoreArgsDict']]]] trust_stores: Set of trust stores to perform validation against.
+        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['TrustConfigTrustStoreArgs']]]] trust_stores: Set of trust stores to perform validation against.
                This field is supported when TrustConfig is configured with Load Balancers, currently not supported for SPIFFE certificate validation.
                Structure is documented below.
         :param pulumi.Input[str] update_time: The last update timestamp of a TrustConfig.