pulumi-gcp 7.30.0a1719470057__py3-none-any.whl → 7.30.0a1719513455__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/_inputs.py +15 -0
- pulumi_gcp/accessapproval/get_folder_service_account.py +5 -0
- pulumi_gcp/accessapproval/get_organization_service_account.py +5 -0
- pulumi_gcp/accessapproval/get_project_service_account.py +5 -0
- pulumi_gcp/accesscontextmanager/_inputs.py +2066 -6
- pulumi_gcp/accesscontextmanager/access_level.py +37 -32
- pulumi_gcp/accesscontextmanager/access_level_condition.py +53 -48
- pulumi_gcp/accesscontextmanager/access_levels.py +70 -65
- pulumi_gcp/accesscontextmanager/access_policy.py +5 -0
- pulumi_gcp/accesscontextmanager/access_policy_iam_binding.py +24 -19
- pulumi_gcp/accesscontextmanager/access_policy_iam_member.py +24 -19
- pulumi_gcp/accesscontextmanager/access_policy_iam_policy.py +21 -16
- pulumi_gcp/accesscontextmanager/authorized_orgs_desc.py +5 -0
- pulumi_gcp/accesscontextmanager/egress_policy.py +5 -0
- pulumi_gcp/accesscontextmanager/gcp_user_access_binding.py +33 -28
- pulumi_gcp/accesscontextmanager/get_access_policy_iam_policy.py +5 -0
- pulumi_gcp/accesscontextmanager/ingress_policy.py +5 -0
- pulumi_gcp/accesscontextmanager/outputs.py +5 -0
- pulumi_gcp/accesscontextmanager/service_perimeter.py +201 -196
- pulumi_gcp/accesscontextmanager/service_perimeter_dry_run_resource.py +11 -6
- pulumi_gcp/accesscontextmanager/service_perimeter_egress_policy.py +15 -10
- pulumi_gcp/accesscontextmanager/service_perimeter_ingress_policy.py +15 -10
- pulumi_gcp/accesscontextmanager/service_perimeter_resource.py +11 -6
- pulumi_gcp/accesscontextmanager/service_perimeters.py +60 -55
- pulumi_gcp/activedirectory/domain.py +5 -0
- pulumi_gcp/activedirectory/domain_trust.py +5 -0
- pulumi_gcp/activedirectory/peering.py +5 -0
- pulumi_gcp/alloydb/_inputs.py +535 -0
- pulumi_gcp/alloydb/backup.py +26 -21
- pulumi_gcp/alloydb/cluster.py +177 -172
- pulumi_gcp/alloydb/get_locations.py +5 -0
- pulumi_gcp/alloydb/get_supported_database_flags.py +5 -0
- pulumi_gcp/alloydb/instance.py +77 -72
- pulumi_gcp/alloydb/outputs.py +5 -0
- pulumi_gcp/alloydb/user.py +17 -12
- pulumi_gcp/apigateway/_inputs.py +168 -0
- pulumi_gcp/apigateway/api.py +5 -0
- pulumi_gcp/apigateway/api_config.py +25 -20
- pulumi_gcp/apigateway/api_config_iam_binding.py +24 -19
- pulumi_gcp/apigateway/api_config_iam_member.py +24 -19
- pulumi_gcp/apigateway/api_config_iam_policy.py +21 -16
- pulumi_gcp/apigateway/api_iam_binding.py +24 -19
- pulumi_gcp/apigateway/api_iam_member.py +24 -19
- pulumi_gcp/apigateway/api_iam_policy.py +21 -16
- pulumi_gcp/apigateway/gateway.py +5 -0
- pulumi_gcp/apigateway/gateway_iam_binding.py +24 -19
- pulumi_gcp/apigateway/gateway_iam_member.py +24 -19
- pulumi_gcp/apigateway/gateway_iam_policy.py +21 -16
- pulumi_gcp/apigateway/get_api_config_iam_policy.py +5 -0
- pulumi_gcp/apigateway/get_api_iam_policy.py +5 -0
- pulumi_gcp/apigateway/get_gateway_iam_policy.py +5 -0
- pulumi_gcp/apigateway/outputs.py +5 -0
- pulumi_gcp/apigee/_inputs.py +508 -0
- pulumi_gcp/apigee/addons_config.py +60 -55
- pulumi_gcp/apigee/endpoint_attachment.py +5 -0
- pulumi_gcp/apigee/env_group.py +5 -0
- pulumi_gcp/apigee/env_group_attachment.py +5 -0
- pulumi_gcp/apigee/env_keystore.py +5 -0
- pulumi_gcp/apigee/env_references.py +5 -0
- pulumi_gcp/apigee/environment.py +10 -5
- pulumi_gcp/apigee/environment_iam_binding.py +24 -19
- pulumi_gcp/apigee/environment_iam_member.py +24 -19
- pulumi_gcp/apigee/environment_iam_policy.py +21 -16
- pulumi_gcp/apigee/flowhook.py +5 -0
- pulumi_gcp/apigee/get_environment_iam_policy.py +5 -0
- pulumi_gcp/apigee/instance.py +5 -0
- pulumi_gcp/apigee/instance_attachment.py +5 -0
- pulumi_gcp/apigee/keystores_aliases_key_cert_file.py +10 -5
- pulumi_gcp/apigee/keystores_aliases_pkcs12.py +7 -2
- pulumi_gcp/apigee/keystores_aliases_self_signed_cert.py +31 -26
- pulumi_gcp/apigee/nat_address.py +5 -0
- pulumi_gcp/apigee/organization.py +10 -5
- pulumi_gcp/apigee/outputs.py +5 -0
- pulumi_gcp/apigee/sharedflow.py +7 -2
- pulumi_gcp/apigee/sharedflow_deployment.py +5 -0
- pulumi_gcp/apigee/sync_authorization.py +5 -0
- pulumi_gcp/apigee/target_server.py +10 -5
- pulumi_gcp/appengine/_inputs.py +990 -7
- pulumi_gcp/appengine/application.py +17 -12
- pulumi_gcp/appengine/application_url_dispatch_rules.py +46 -41
- pulumi_gcp/appengine/domain_mapping.py +18 -13
- pulumi_gcp/appengine/engine_split_traffic.py +50 -45
- pulumi_gcp/appengine/firewall_rule.py +5 -0
- pulumi_gcp/appengine/flexible_app_version.py +130 -125
- pulumi_gcp/appengine/get_default_service_account.py +5 -0
- pulumi_gcp/appengine/outputs.py +5 -0
- pulumi_gcp/appengine/service_network_settings.py +32 -27
- pulumi_gcp/appengine/standard_app_version.py +109 -104
- pulumi_gcp/apphub/_inputs.py +370 -0
- pulumi_gcp/apphub/application.py +67 -62
- pulumi_gcp/apphub/get_application.py +5 -0
- pulumi_gcp/apphub/get_discovered_service.py +5 -0
- pulumi_gcp/apphub/get_discovered_workload.py +5 -0
- pulumi_gcp/apphub/outputs.py +5 -0
- pulumi_gcp/apphub/service.py +78 -73
- pulumi_gcp/apphub/service_project_attachment.py +5 -0
- pulumi_gcp/apphub/workload.py +14 -9
- pulumi_gcp/applicationintegration/_inputs.py +324 -0
- pulumi_gcp/applicationintegration/auth_config.py +29 -24
- pulumi_gcp/applicationintegration/client.py +24 -19
- pulumi_gcp/applicationintegration/outputs.py +5 -0
- pulumi_gcp/artifactregistry/_inputs.py +392 -0
- pulumi_gcp/artifactregistry/get_docker_image.py +5 -0
- pulumi_gcp/artifactregistry/get_repository.py +5 -0
- pulumi_gcp/artifactregistry/get_repository_iam_policy.py +5 -0
- pulumi_gcp/artifactregistry/outputs.py +5 -0
- pulumi_gcp/artifactregistry/repository.py +338 -333
- pulumi_gcp/artifactregistry/repository_iam_binding.py +24 -19
- pulumi_gcp/artifactregistry/repository_iam_member.py +24 -19
- pulumi_gcp/artifactregistry/repository_iam_policy.py +21 -16
- pulumi_gcp/artifactregistry/vpcsc_config.py +5 -0
- pulumi_gcp/assuredworkloads/_inputs.py +117 -0
- pulumi_gcp/assuredworkloads/outputs.py +5 -0
- pulumi_gcp/assuredworkloads/workload.py +86 -81
- pulumi_gcp/backupdisasterrecovery/_inputs.py +41 -0
- pulumi_gcp/backupdisasterrecovery/get_management_server.py +5 -0
- pulumi_gcp/backupdisasterrecovery/management_server.py +20 -15
- pulumi_gcp/backupdisasterrecovery/outputs.py +5 -0
- pulumi_gcp/beyondcorp/_inputs.py +86 -0
- pulumi_gcp/beyondcorp/app_connection.py +57 -52
- pulumi_gcp/beyondcorp/app_connector.py +30 -25
- pulumi_gcp/beyondcorp/app_gateway.py +7 -2
- pulumi_gcp/beyondcorp/get_app_connection.py +5 -0
- pulumi_gcp/beyondcorp/get_app_connector.py +5 -0
- pulumi_gcp/beyondcorp/get_app_gateway.py +5 -0
- pulumi_gcp/beyondcorp/outputs.py +5 -0
- pulumi_gcp/biglake/_inputs.py +64 -0
- pulumi_gcp/biglake/catalog.py +5 -0
- pulumi_gcp/biglake/database.py +18 -13
- pulumi_gcp/biglake/outputs.py +5 -0
- pulumi_gcp/biglake/table.py +36 -31
- pulumi_gcp/bigquery/_inputs.py +1930 -6
- pulumi_gcp/bigquery/app_profile.py +133 -128
- pulumi_gcp/bigquery/bi_reservation.py +10 -5
- pulumi_gcp/bigquery/capacity_commitment.py +5 -0
- pulumi_gcp/bigquery/connection.py +181 -176
- pulumi_gcp/bigquery/connection_iam_binding.py +24 -19
- pulumi_gcp/bigquery/connection_iam_member.py +24 -19
- pulumi_gcp/bigquery/connection_iam_policy.py +21 -16
- pulumi_gcp/bigquery/data_transfer_config.py +20 -15
- pulumi_gcp/bigquery/dataset.py +132 -127
- pulumi_gcp/bigquery/dataset_access.py +72 -67
- pulumi_gcp/bigquery/dataset_iam_binding.py +24 -19
- pulumi_gcp/bigquery/dataset_iam_member.py +24 -19
- pulumi_gcp/bigquery/dataset_iam_policy.py +21 -16
- pulumi_gcp/bigquery/get_connection_iam_policy.py +5 -0
- pulumi_gcp/bigquery/get_dataset.py +5 -0
- pulumi_gcp/bigquery/get_dataset_iam_policy.py +5 -0
- pulumi_gcp/bigquery/get_default_service_account.py +5 -0
- pulumi_gcp/bigquery/get_table_iam_policy.py +5 -0
- pulumi_gcp/bigquery/iam_binding.py +102 -97
- pulumi_gcp/bigquery/iam_member.py +102 -97
- pulumi_gcp/bigquery/iam_policy.py +97 -92
- pulumi_gcp/bigquery/job.py +229 -224
- pulumi_gcp/bigquery/outputs.py +5 -0
- pulumi_gcp/bigquery/reservation.py +16 -11
- pulumi_gcp/bigquery/reservation_assignment.py +5 -0
- pulumi_gcp/bigquery/routine.py +114 -109
- pulumi_gcp/bigquery/table.py +67 -62
- pulumi_gcp/bigqueryanalyticshub/_inputs.py +97 -0
- pulumi_gcp/bigqueryanalyticshub/data_exchange.py +5 -0
- pulumi_gcp/bigqueryanalyticshub/data_exchange_iam_binding.py +24 -19
- pulumi_gcp/bigqueryanalyticshub/data_exchange_iam_member.py +24 -19
- pulumi_gcp/bigqueryanalyticshub/data_exchange_iam_policy.py +21 -16
- pulumi_gcp/bigqueryanalyticshub/get_data_exchange_iam_policy.py +5 -0
- pulumi_gcp/bigqueryanalyticshub/get_listing_iam_policy.py +5 -0
- pulumi_gcp/bigqueryanalyticshub/listing.py +45 -40
- pulumi_gcp/bigqueryanalyticshub/listing_iam_binding.py +24 -19
- pulumi_gcp/bigqueryanalyticshub/listing_iam_member.py +24 -19
- pulumi_gcp/bigqueryanalyticshub/listing_iam_policy.py +21 -16
- pulumi_gcp/bigqueryanalyticshub/outputs.py +5 -0
- pulumi_gcp/bigquerydatapolicy/_inputs.py +40 -0
- pulumi_gcp/bigquerydatapolicy/data_policy.py +24 -19
- pulumi_gcp/bigquerydatapolicy/data_policy_iam_binding.py +24 -19
- pulumi_gcp/bigquerydatapolicy/data_policy_iam_member.py +24 -19
- pulumi_gcp/bigquerydatapolicy/data_policy_iam_policy.py +21 -16
- pulumi_gcp/bigquerydatapolicy/get_iam_policy.py +5 -0
- pulumi_gcp/bigquerydatapolicy/outputs.py +5 -0
- pulumi_gcp/bigtable/_inputs.py +202 -0
- pulumi_gcp/bigtable/authorized_view.py +10 -5
- pulumi_gcp/bigtable/gc_policy.py +45 -40
- pulumi_gcp/bigtable/get_instance_iam_policy.py +5 -0
- pulumi_gcp/bigtable/get_table_iam_policy.py +5 -0
- pulumi_gcp/bigtable/instance.py +52 -47
- pulumi_gcp/bigtable/instance_iam_binding.py +24 -19
- pulumi_gcp/bigtable/instance_iam_member.py +24 -19
- pulumi_gcp/bigtable/instance_iam_policy.py +21 -16
- pulumi_gcp/bigtable/outputs.py +5 -0
- pulumi_gcp/bigtable/table.py +39 -34
- pulumi_gcp/bigtable/table_iam_binding.py +24 -19
- pulumi_gcp/bigtable/table_iam_member.py +24 -19
- pulumi_gcp/bigtable/table_iam_policy.py +21 -16
- pulumi_gcp/billing/_inputs.py +257 -0
- pulumi_gcp/billing/account_iam_binding.py +24 -19
- pulumi_gcp/billing/account_iam_member.py +24 -19
- pulumi_gcp/billing/account_iam_policy.py +21 -16
- pulumi_gcp/billing/budget.py +225 -220
- pulumi_gcp/billing/get_account_iam_policy.py +5 -0
- pulumi_gcp/billing/outputs.py +5 -0
- pulumi_gcp/billing/project_info.py +5 -0
- pulumi_gcp/billing/sub_account.py +5 -0
- pulumi_gcp/binaryauthorization/_inputs.py +199 -0
- pulumi_gcp/binaryauthorization/attestor.py +68 -63
- pulumi_gcp/binaryauthorization/attestor_iam_binding.py +24 -19
- pulumi_gcp/binaryauthorization/attestor_iam_member.py +24 -19
- pulumi_gcp/binaryauthorization/attestor_iam_policy.py +21 -16
- pulumi_gcp/binaryauthorization/get_attestor_iam_policy.py +5 -0
- pulumi_gcp/binaryauthorization/outputs.py +5 -0
- pulumi_gcp/binaryauthorization/policy.py +88 -83
- pulumi_gcp/blockchainnodeengine/_inputs.py +131 -0
- pulumi_gcp/blockchainnodeengine/blockchain_nodes.py +62 -57
- pulumi_gcp/blockchainnodeengine/outputs.py +5 -0
- pulumi_gcp/certificateauthority/_inputs.py +2157 -36
- pulumi_gcp/certificateauthority/authority.py +398 -393
- pulumi_gcp/certificateauthority/ca_pool.py +189 -184
- pulumi_gcp/certificateauthority/ca_pool_iam_binding.py +102 -97
- pulumi_gcp/certificateauthority/ca_pool_iam_member.py +102 -97
- pulumi_gcp/certificateauthority/ca_pool_iam_policy.py +97 -92
- pulumi_gcp/certificateauthority/certificate.py +636 -631
- pulumi_gcp/certificateauthority/certificate_template.py +134 -129
- pulumi_gcp/certificateauthority/certificate_template_iam_binding.py +102 -97
- pulumi_gcp/certificateauthority/certificate_template_iam_member.py +102 -97
- pulumi_gcp/certificateauthority/certificate_template_iam_policy.py +97 -92
- pulumi_gcp/certificateauthority/get_authority.py +5 -0
- pulumi_gcp/certificateauthority/get_ca_pool_iam_policy.py +5 -0
- pulumi_gcp/certificateauthority/get_certificate_template_iam_policy.py +5 -0
- pulumi_gcp/certificateauthority/outputs.py +5 -0
- pulumi_gcp/certificatemanager/_inputs.py +256 -0
- pulumi_gcp/certificatemanager/certificate.py +203 -198
- pulumi_gcp/certificatemanager/certificate_issuance_config.py +76 -71
- pulumi_gcp/certificatemanager/certificate_map.py +7 -2
- pulumi_gcp/certificatemanager/certificate_map_entry.py +13 -8
- pulumi_gcp/certificatemanager/dns_authorization.py +7 -2
- pulumi_gcp/certificatemanager/get_certificate_map.py +5 -0
- pulumi_gcp/certificatemanager/outputs.py +5 -0
- pulumi_gcp/certificatemanager/trust_config.py +26 -21
- pulumi_gcp/cloudasset/_inputs.py +151 -0
- pulumi_gcp/cloudasset/folder_feed.py +35 -30
- pulumi_gcp/cloudasset/get_resources_search_all.py +5 -0
- pulumi_gcp/cloudasset/get_search_all_resources.py +5 -0
- pulumi_gcp/cloudasset/organization_feed.py +35 -30
- pulumi_gcp/cloudasset/outputs.py +5 -0
- pulumi_gcp/cloudasset/project_feed.py +35 -30
- pulumi_gcp/cloudbuild/_inputs.py +1038 -29
- pulumi_gcp/cloudbuild/bitbucket_server_config.py +61 -56
- pulumi_gcp/cloudbuild/get_trigger.py +5 -0
- pulumi_gcp/cloudbuild/outputs.py +5 -0
- pulumi_gcp/cloudbuild/trigger.py +733 -728
- pulumi_gcp/cloudbuild/worker_pool.py +43 -38
- pulumi_gcp/cloudbuildv2/_inputs.py +335 -0
- pulumi_gcp/cloudbuildv2/connection.py +106 -101
- pulumi_gcp/cloudbuildv2/connection_iam_binding.py +24 -19
- pulumi_gcp/cloudbuildv2/connection_iam_member.py +24 -19
- pulumi_gcp/cloudbuildv2/connection_iam_policy.py +21 -16
- pulumi_gcp/cloudbuildv2/get_connection_iam_policy.py +5 -0
- pulumi_gcp/cloudbuildv2/outputs.py +5 -0
- pulumi_gcp/cloudbuildv2/repository.py +67 -62
- pulumi_gcp/clouddeploy/_inputs.py +700 -0
- pulumi_gcp/clouddeploy/automation.py +101 -96
- pulumi_gcp/clouddeploy/custom_target_type.py +88 -83
- pulumi_gcp/clouddeploy/custom_target_type_iam_binding.py +8 -3
- pulumi_gcp/clouddeploy/custom_target_type_iam_member.py +8 -3
- pulumi_gcp/clouddeploy/custom_target_type_iam_policy.py +5 -0
- pulumi_gcp/clouddeploy/delivery_pipeline.py +162 -157
- pulumi_gcp/clouddeploy/delivery_pipeline_iam_binding.py +8 -3
- pulumi_gcp/clouddeploy/delivery_pipeline_iam_member.py +8 -3
- pulumi_gcp/clouddeploy/delivery_pipeline_iam_policy.py +5 -0
- pulumi_gcp/clouddeploy/get_custom_target_type_iam_policy.py +5 -0
- pulumi_gcp/clouddeploy/get_delivery_pipeline_iam_policy.py +5 -0
- pulumi_gcp/clouddeploy/get_target_iam_policy.py +5 -0
- pulumi_gcp/clouddeploy/outputs.py +5 -0
- pulumi_gcp/clouddeploy/target.py +69 -64
- pulumi_gcp/clouddeploy/target_iam_binding.py +8 -3
- pulumi_gcp/clouddeploy/target_iam_member.py +8 -3
- pulumi_gcp/clouddeploy/target_iam_policy.py +5 -0
- pulumi_gcp/clouddomains/_inputs.py +372 -0
- pulumi_gcp/clouddomains/outputs.py +5 -0
- pulumi_gcp/clouddomains/registration.py +121 -116
- pulumi_gcp/cloudfunctions/_inputs.py +132 -0
- pulumi_gcp/cloudfunctions/function.py +25 -20
- pulumi_gcp/cloudfunctions/function_iam_binding.py +24 -19
- pulumi_gcp/cloudfunctions/function_iam_member.py +24 -19
- pulumi_gcp/cloudfunctions/function_iam_policy.py +21 -16
- pulumi_gcp/cloudfunctions/get_function.py +5 -0
- pulumi_gcp/cloudfunctions/get_function_iam_policy.py +5 -0
- pulumi_gcp/cloudfunctions/outputs.py +5 -0
- pulumi_gcp/cloudfunctionsv2/_inputs.py +357 -0
- pulumi_gcp/cloudfunctionsv2/function.py +514 -509
- pulumi_gcp/cloudfunctionsv2/function_iam_binding.py +24 -19
- pulumi_gcp/cloudfunctionsv2/function_iam_member.py +24 -19
- pulumi_gcp/cloudfunctionsv2/function_iam_policy.py +21 -16
- pulumi_gcp/cloudfunctionsv2/get_function.py +5 -0
- pulumi_gcp/cloudfunctionsv2/get_function_iam_policy.py +5 -0
- pulumi_gcp/cloudfunctionsv2/outputs.py +5 -0
- pulumi_gcp/cloudidentity/_inputs.py +161 -0
- pulumi_gcp/cloudidentity/get_group_lookup.py +9 -4
- pulumi_gcp/cloudidentity/get_group_memberships.py +5 -0
- pulumi_gcp/cloudidentity/get_groups.py +5 -0
- pulumi_gcp/cloudidentity/group.py +18 -13
- pulumi_gcp/cloudidentity/group_membership.py +68 -63
- pulumi_gcp/cloudidentity/outputs.py +5 -0
- pulumi_gcp/cloudids/endpoint.py +5 -0
- pulumi_gcp/cloudquota/_inputs.py +44 -0
- pulumi_gcp/cloudquota/get_s_quota_info.py +5 -0
- pulumi_gcp/cloudquota/get_s_quota_infos.py +5 -0
- pulumi_gcp/cloudquota/outputs.py +5 -0
- pulumi_gcp/cloudquota/s_quota_preference.py +16 -11
- pulumi_gcp/cloudrun/_inputs.py +1165 -15
- pulumi_gcp/cloudrun/domain_mapping.py +49 -44
- pulumi_gcp/cloudrun/get_locations.py +5 -0
- pulumi_gcp/cloudrun/get_service.py +5 -0
- pulumi_gcp/cloudrun/get_service_iam_policy.py +5 -0
- pulumi_gcp/cloudrun/iam_binding.py +24 -19
- pulumi_gcp/cloudrun/iam_member.py +24 -19
- pulumi_gcp/cloudrun/iam_policy.py +21 -16
- pulumi_gcp/cloudrun/outputs.py +5 -0
- pulumi_gcp/cloudrun/service.py +270 -265
- pulumi_gcp/cloudrunv2/_inputs.py +1338 -5
- pulumi_gcp/cloudrunv2/get_job.py +5 -0
- pulumi_gcp/cloudrunv2/get_job_iam_policy.py +5 -0
- pulumi_gcp/cloudrunv2/get_service.py +5 -0
- pulumi_gcp/cloudrunv2/get_service_iam_policy.py +5 -0
- pulumi_gcp/cloudrunv2/job.py +287 -282
- pulumi_gcp/cloudrunv2/job_iam_binding.py +24 -19
- pulumi_gcp/cloudrunv2/job_iam_member.py +24 -19
- pulumi_gcp/cloudrunv2/job_iam_policy.py +21 -16
- pulumi_gcp/cloudrunv2/outputs.py +5 -0
- pulumi_gcp/cloudrunv2/service.py +437 -432
- pulumi_gcp/cloudrunv2/service_iam_binding.py +24 -19
- pulumi_gcp/cloudrunv2/service_iam_member.py +24 -19
- pulumi_gcp/cloudrunv2/service_iam_policy.py +21 -16
- pulumi_gcp/cloudscheduler/_inputs.py +193 -0
- pulumi_gcp/cloudscheduler/job.py +127 -122
- pulumi_gcp/cloudscheduler/outputs.py +5 -0
- pulumi_gcp/cloudtasks/_inputs.py +134 -0
- pulumi_gcp/cloudtasks/get_queue_iam_policy.py +5 -0
- pulumi_gcp/cloudtasks/outputs.py +5 -0
- pulumi_gcp/cloudtasks/queue.py +63 -58
- pulumi_gcp/cloudtasks/queue_iam_binding.py +24 -19
- pulumi_gcp/cloudtasks/queue_iam_member.py +24 -19
- pulumi_gcp/cloudtasks/queue_iam_policy.py +21 -16
- pulumi_gcp/composer/_inputs.py +566 -0
- pulumi_gcp/composer/environment.py +15 -10
- pulumi_gcp/composer/get_environment.py +5 -0
- pulumi_gcp/composer/get_image_versions.py +15 -10
- pulumi_gcp/composer/get_user_workloads_config_map.py +15 -10
- pulumi_gcp/composer/get_user_workloads_secret.py +15 -10
- pulumi_gcp/composer/outputs.py +5 -0
- pulumi_gcp/composer/user_workloads_config_map.py +15 -10
- pulumi_gcp/composer/user_workloads_secret.py +15 -10
- pulumi_gcp/compute/_inputs.py +13512 -145
- pulumi_gcp/compute/address.py +27 -22
- pulumi_gcp/compute/attached_disk.py +21 -16
- pulumi_gcp/compute/autoscaler.py +98 -93
- pulumi_gcp/compute/backend_bucket.py +30 -25
- pulumi_gcp/compute/backend_bucket_iam_binding.py +8 -3
- pulumi_gcp/compute/backend_bucket_iam_member.py +8 -3
- pulumi_gcp/compute/backend_bucket_iam_policy.py +5 -0
- pulumi_gcp/compute/backend_bucket_signed_url_key.py +5 -0
- pulumi_gcp/compute/backend_service.py +204 -199
- pulumi_gcp/compute/backend_service_iam_binding.py +10 -5
- pulumi_gcp/compute/backend_service_iam_member.py +10 -5
- pulumi_gcp/compute/backend_service_iam_policy.py +5 -0
- pulumi_gcp/compute/backend_service_signed_url_key.py +35 -30
- pulumi_gcp/compute/ca_external_account_key.py +5 -0
- pulumi_gcp/compute/disk.py +54 -49
- pulumi_gcp/compute/disk_async_replication.py +10 -5
- pulumi_gcp/compute/disk_iam_binding.py +24 -19
- pulumi_gcp/compute/disk_iam_member.py +24 -19
- pulumi_gcp/compute/disk_iam_policy.py +21 -16
- pulumi_gcp/compute/disk_resource_policy_attachment.py +21 -16
- pulumi_gcp/compute/external_vpn_gateway.py +24 -19
- pulumi_gcp/compute/firewall.py +42 -37
- pulumi_gcp/compute/firewall_policy.py +5 -0
- pulumi_gcp/compute/firewall_policy_association.py +5 -0
- pulumi_gcp/compute/firewall_policy_rule.py +44 -39
- pulumi_gcp/compute/forwarding_rule.py +248 -243
- pulumi_gcp/compute/get_address.py +5 -0
- pulumi_gcp/compute/get_addresses.py +5 -0
- pulumi_gcp/compute/get_backend_bucket.py +5 -0
- pulumi_gcp/compute/get_backend_bucket_iam_policy.py +5 -0
- pulumi_gcp/compute/get_backend_service.py +5 -0
- pulumi_gcp/compute/get_backend_service_iam_policy.py +5 -0
- pulumi_gcp/compute/get_certificate.py +5 -0
- pulumi_gcp/compute/get_default_service_account.py +5 -0
- pulumi_gcp/compute/get_disk.py +13 -8
- pulumi_gcp/compute/get_disk_iam_policy.py +5 -0
- pulumi_gcp/compute/get_forwarding_rule.py +5 -0
- pulumi_gcp/compute/get_forwarding_rules.py +5 -0
- pulumi_gcp/compute/get_global_address.py +5 -0
- pulumi_gcp/compute/get_global_forwarding_rule.py +5 -0
- pulumi_gcp/compute/get_hc_vpn_gateway.py +5 -0
- pulumi_gcp/compute/get_health_check.py +5 -0
- pulumi_gcp/compute/get_image.py +15 -10
- pulumi_gcp/compute/get_image_iam_policy.py +5 -0
- pulumi_gcp/compute/get_instance.py +5 -0
- pulumi_gcp/compute/get_instance_group.py +5 -0
- pulumi_gcp/compute/get_instance_group_manager.py +5 -0
- pulumi_gcp/compute/get_instance_iam_policy.py +5 -0
- pulumi_gcp/compute/get_instance_serial_port.py +29 -24
- pulumi_gcp/compute/get_instance_template.py +5 -0
- pulumi_gcp/compute/get_lbip_ranges.py +5 -0
- pulumi_gcp/compute/get_machine_image_iam_policy.py +5 -0
- pulumi_gcp/compute/get_machine_types.py +5 -0
- pulumi_gcp/compute/get_netblock_ip_ranges.py +5 -0
- pulumi_gcp/compute/get_network.py +5 -0
- pulumi_gcp/compute/get_network_endpoint_group.py +5 -0
- pulumi_gcp/compute/get_network_peering.py +5 -0
- pulumi_gcp/compute/get_networks.py +5 -0
- pulumi_gcp/compute/get_node_types.py +5 -0
- pulumi_gcp/compute/get_region_backend_service_iam_policy.py +5 -0
- pulumi_gcp/compute/get_region_disk.py +5 -0
- pulumi_gcp/compute/get_region_disk_iam_policy.py +5 -0
- pulumi_gcp/compute/get_region_instance_group.py +5 -0
- pulumi_gcp/compute/get_region_instance_template.py +5 -0
- pulumi_gcp/compute/get_region_network_endpoint_group.py +5 -0
- pulumi_gcp/compute/get_region_ssl_certificate.py +5 -0
- pulumi_gcp/compute/get_regions.py +5 -0
- pulumi_gcp/compute/get_reservation.py +5 -0
- pulumi_gcp/compute/get_resource_policy.py +5 -0
- pulumi_gcp/compute/get_router.py +5 -0
- pulumi_gcp/compute/get_router_nat.py +5 -0
- pulumi_gcp/compute/get_router_status.py +5 -0
- pulumi_gcp/compute/get_security_policy.py +5 -0
- pulumi_gcp/compute/get_snapshot.py +5 -0
- pulumi_gcp/compute/get_snapshot_iam_policy.py +5 -0
- pulumi_gcp/compute/get_ssl_policy.py +5 -0
- pulumi_gcp/compute/get_subnetwork.py +5 -0
- pulumi_gcp/compute/get_subnetwork_iam_policy.py +5 -0
- pulumi_gcp/compute/get_subnetworks.py +5 -0
- pulumi_gcp/compute/get_vpn_gateway.py +5 -0
- pulumi_gcp/compute/get_zones.py +5 -0
- pulumi_gcp/compute/global_address.py +5 -0
- pulumi_gcp/compute/global_forwarding_rule.py +211 -206
- pulumi_gcp/compute/global_network_endpoint.py +5 -0
- pulumi_gcp/compute/global_network_endpoint_group.py +5 -0
- pulumi_gcp/compute/ha_vpn_gateway.py +32 -27
- pulumi_gcp/compute/health_check.py +174 -169
- pulumi_gcp/compute/http_health_check.py +5 -0
- pulumi_gcp/compute/https_health_check.py +5 -0
- pulumi_gcp/compute/image.py +50 -45
- pulumi_gcp/compute/image_iam_binding.py +102 -97
- pulumi_gcp/compute/image_iam_member.py +102 -97
- pulumi_gcp/compute/image_iam_policy.py +97 -92
- pulumi_gcp/compute/instance.py +104 -99
- pulumi_gcp/compute/instance_from_machine_image.py +61 -56
- pulumi_gcp/compute/instance_from_template.py +88 -83
- pulumi_gcp/compute/instance_group.py +26 -21
- pulumi_gcp/compute/instance_group_manager.py +138 -133
- pulumi_gcp/compute/instance_group_membership.py +21 -16
- pulumi_gcp/compute/instance_group_named_port.py +13 -8
- pulumi_gcp/compute/instance_iam_binding.py +102 -97
- pulumi_gcp/compute/instance_iam_member.py +102 -97
- pulumi_gcp/compute/instance_iam_policy.py +97 -92
- pulumi_gcp/compute/instance_settings.py +16 -11
- pulumi_gcp/compute/instance_template.py +147 -142
- pulumi_gcp/compute/interconnect.py +14 -9
- pulumi_gcp/compute/interconnect_attachment.py +19 -14
- pulumi_gcp/compute/machine_image.py +48 -43
- pulumi_gcp/compute/machine_image_iam_binding.py +102 -97
- pulumi_gcp/compute/machine_image_iam_member.py +102 -97
- pulumi_gcp/compute/machine_image_iam_policy.py +97 -92
- pulumi_gcp/compute/managed_ssl_certificate.py +40 -35
- pulumi_gcp/compute/manged_ssl_certificate.py +40 -35
- pulumi_gcp/compute/network.py +5 -0
- pulumi_gcp/compute/network_attachment.py +29 -24
- pulumi_gcp/compute/network_edge_security_service.py +5 -0
- pulumi_gcp/compute/network_endpoint.py +23 -18
- pulumi_gcp/compute/network_endpoint_group.py +5 -0
- pulumi_gcp/compute/network_endpoint_list.py +66 -61
- pulumi_gcp/compute/network_firewall_policy.py +5 -0
- pulumi_gcp/compute/network_firewall_policy_association.py +5 -0
- pulumi_gcp/compute/network_firewall_policy_rule.py +41 -36
- pulumi_gcp/compute/network_peering.py +5 -0
- pulumi_gcp/compute/network_peering_routes_config.py +41 -36
- pulumi_gcp/compute/node_group.py +50 -45
- pulumi_gcp/compute/node_template.py +21 -16
- pulumi_gcp/compute/organization_security_policy.py +5 -0
- pulumi_gcp/compute/organization_security_policy_association.py +31 -26
- pulumi_gcp/compute/organization_security_policy_rule.py +36 -31
- pulumi_gcp/compute/outputs.py +5 -0
- pulumi_gcp/compute/packet_mirroring.py +83 -78
- pulumi_gcp/compute/per_instance_config.py +56 -51
- pulumi_gcp/compute/project_cloud_armor_tier.py +5 -0
- pulumi_gcp/compute/project_default_network_tier.py +5 -0
- pulumi_gcp/compute/project_metadata.py +5 -0
- pulumi_gcp/compute/project_metadata_item.py +5 -0
- pulumi_gcp/compute/public_advertised_prefix.py +5 -0
- pulumi_gcp/compute/public_delegated_prefix.py +5 -0
- pulumi_gcp/compute/region_autoscaler.py +60 -55
- pulumi_gcp/compute/region_backend_service.py +203 -198
- pulumi_gcp/compute/region_backend_service_iam_binding.py +10 -5
- pulumi_gcp/compute/region_backend_service_iam_member.py +10 -5
- pulumi_gcp/compute/region_backend_service_iam_policy.py +5 -0
- pulumi_gcp/compute/region_commitment.py +47 -42
- pulumi_gcp/compute/region_disk.py +49 -44
- pulumi_gcp/compute/region_disk_iam_binding.py +24 -19
- pulumi_gcp/compute/region_disk_iam_member.py +24 -19
- pulumi_gcp/compute/region_disk_iam_policy.py +21 -16
- pulumi_gcp/compute/region_disk_resource_policy_attachment.py +21 -16
- pulumi_gcp/compute/region_health_check.py +174 -169
- pulumi_gcp/compute/region_instance_group_manager.py +134 -129
- pulumi_gcp/compute/region_instance_template.py +55 -50
- pulumi_gcp/compute/region_network_endpoint.py +23 -18
- pulumi_gcp/compute/region_network_endpoint_group.py +135 -130
- pulumi_gcp/compute/region_network_firewall_policy.py +5 -0
- pulumi_gcp/compute/region_network_firewall_policy_association.py +5 -0
- pulumi_gcp/compute/region_network_firewall_policy_rule.py +41 -36
- pulumi_gcp/compute/region_per_instance_config.py +66 -61
- pulumi_gcp/compute/region_security_policy.py +49 -44
- pulumi_gcp/compute/region_security_policy_rule.py +161 -156
- pulumi_gcp/compute/region_ssl_certificate.py +5 -0
- pulumi_gcp/compute/region_ssl_policy.py +5 -0
- pulumi_gcp/compute/region_target_http_proxy.py +43 -38
- pulumi_gcp/compute/region_target_https_proxy.py +97 -92
- pulumi_gcp/compute/region_target_tcp_proxy.py +11 -6
- pulumi_gcp/compute/region_url_map.py +824 -819
- pulumi_gcp/compute/reservation.py +29 -24
- pulumi_gcp/compute/resource_policy.py +153 -148
- pulumi_gcp/compute/route.py +17 -12
- pulumi_gcp/compute/router.py +40 -35
- pulumi_gcp/compute/router_interface.py +5 -0
- pulumi_gcp/compute/router_nat.py +98 -93
- pulumi_gcp/compute/router_peer.py +78 -73
- pulumi_gcp/compute/router_status.py +5 -0
- pulumi_gcp/compute/security_policy.py +201 -196
- pulumi_gcp/compute/security_policy_rule.py +80 -75
- pulumi_gcp/compute/security_scan_config.py +15 -10
- pulumi_gcp/compute/service_attachment.py +60 -55
- pulumi_gcp/compute/shared_vpc_host_project.py +5 -0
- pulumi_gcp/compute/shared_vpc_service_project.py +5 -0
- pulumi_gcp/compute/snapshot.py +15 -10
- pulumi_gcp/compute/snapshot_iam_binding.py +24 -19
- pulumi_gcp/compute/snapshot_iam_member.py +24 -19
- pulumi_gcp/compute/snapshot_iam_policy.py +21 -16
- pulumi_gcp/compute/ssl_certificate.py +5 -0
- pulumi_gcp/compute/ssl_policy.py +5 -0
- pulumi_gcp/compute/subnetwork.py +33 -28
- pulumi_gcp/compute/subnetwork_iam_binding.py +102 -97
- pulumi_gcp/compute/subnetwork_iam_member.py +102 -97
- pulumi_gcp/compute/subnetwork_iam_policy.py +97 -92
- pulumi_gcp/compute/target_grpc_proxy.py +129 -124
- pulumi_gcp/compute/target_http_proxy.py +61 -56
- pulumi_gcp/compute/target_https_proxy.py +133 -128
- pulumi_gcp/compute/target_instance.py +63 -58
- pulumi_gcp/compute/target_pool.py +5 -0
- pulumi_gcp/compute/target_ssl_proxy.py +11 -6
- pulumi_gcp/compute/target_tcp_proxy.py +11 -6
- pulumi_gcp/compute/url_map.py +731 -726
- pulumi_gcp/compute/vpn_gateway.py +5 -0
- pulumi_gcp/compute/vpn_tunnel.py +5 -0
- pulumi_gcp/config/__init__.pyi +5 -0
- pulumi_gcp/config/outputs.py +5 -0
- pulumi_gcp/config/vars.py +5 -0
- pulumi_gcp/container/_inputs.py +5502 -823
- pulumi_gcp/container/attached_cluster.py +128 -123
- pulumi_gcp/container/aws_cluster.py +359 -354
- pulumi_gcp/container/aws_node_pool.py +554 -549
- pulumi_gcp/container/azure_client.py +5 -0
- pulumi_gcp/container/azure_cluster.py +133 -128
- pulumi_gcp/container/azure_node_pool.py +115 -110
- pulumi_gcp/container/cluster.py +224 -219
- pulumi_gcp/container/get_attached_install_manifest.py +5 -0
- pulumi_gcp/container/get_attached_versions.py +5 -0
- pulumi_gcp/container/get_aws_versions.py +5 -0
- pulumi_gcp/container/get_azure_versions.py +5 -0
- pulumi_gcp/container/get_cluster.py +5 -0
- pulumi_gcp/container/get_engine_versions.py +5 -0
- pulumi_gcp/container/get_registry_image.py +5 -0
- pulumi_gcp/container/get_registry_repository.py +5 -0
- pulumi_gcp/container/node_pool.py +78 -73
- pulumi_gcp/container/outputs.py +5 -0
- pulumi_gcp/container/registry.py +5 -0
- pulumi_gcp/containeranalysis/_inputs.py +121 -0
- pulumi_gcp/containeranalysis/get_note_iam_policy.py +5 -0
- pulumi_gcp/containeranalysis/note.py +49 -44
- pulumi_gcp/containeranalysis/note_iam_binding.py +24 -19
- pulumi_gcp/containeranalysis/note_iam_member.py +24 -19
- pulumi_gcp/containeranalysis/note_iam_policy.py +21 -16
- pulumi_gcp/containeranalysis/occurence.py +10 -5
- pulumi_gcp/containeranalysis/outputs.py +5 -0
- pulumi_gcp/databasemigrationservice/_inputs.py +578 -0
- pulumi_gcp/databasemigrationservice/connection_profile.py +188 -183
- pulumi_gcp/databasemigrationservice/outputs.py +5 -0
- pulumi_gcp/databasemigrationservice/private_connection.py +20 -15
- pulumi_gcp/datacatalog/_inputs.py +318 -0
- pulumi_gcp/datacatalog/entry.py +20 -15
- pulumi_gcp/datacatalog/entry_group.py +5 -0
- pulumi_gcp/datacatalog/entry_group_iam_binding.py +24 -19
- pulumi_gcp/datacatalog/entry_group_iam_member.py +24 -19
- pulumi_gcp/datacatalog/entry_group_iam_policy.py +21 -16
- pulumi_gcp/datacatalog/get_entry_group_iam_policy.py +5 -0
- pulumi_gcp/datacatalog/get_policy_tag_iam_policy.py +5 -0
- pulumi_gcp/datacatalog/get_tag_template_iam_policy.py +5 -0
- pulumi_gcp/datacatalog/get_taxonomy_iam_policy.py +5 -0
- pulumi_gcp/datacatalog/outputs.py +5 -0
- pulumi_gcp/datacatalog/policy_tag.py +5 -0
- pulumi_gcp/datacatalog/policy_tag_iam_binding.py +24 -19
- pulumi_gcp/datacatalog/policy_tag_iam_member.py +24 -19
- pulumi_gcp/datacatalog/policy_tag_iam_policy.py +21 -16
- pulumi_gcp/datacatalog/tag.py +264 -259
- pulumi_gcp/datacatalog/tag_template.py +76 -71
- pulumi_gcp/datacatalog/tag_template_iam_binding.py +24 -19
- pulumi_gcp/datacatalog/tag_template_iam_member.py +24 -19
- pulumi_gcp/datacatalog/tag_template_iam_policy.py +21 -16
- pulumi_gcp/datacatalog/taxonomy.py +5 -0
- pulumi_gcp/datacatalog/taxonomy_iam_binding.py +24 -19
- pulumi_gcp/datacatalog/taxonomy_iam_member.py +24 -19
- pulumi_gcp/datacatalog/taxonomy_iam_policy.py +21 -16
- pulumi_gcp/dataflow/_inputs.py +316 -0
- pulumi_gcp/dataflow/flex_template_job.py +5 -0
- pulumi_gcp/dataflow/job.py +5 -0
- pulumi_gcp/dataflow/outputs.py +5 -0
- pulumi_gcp/dataflow/pipeline.py +75 -70
- pulumi_gcp/dataform/_inputs.py +251 -0
- pulumi_gcp/dataform/get_repository_iam_policy.py +5 -0
- pulumi_gcp/dataform/outputs.py +5 -0
- pulumi_gcp/dataform/repository.py +41 -36
- pulumi_gcp/dataform/repository_iam_binding.py +8 -3
- pulumi_gcp/dataform/repository_iam_member.py +8 -3
- pulumi_gcp/dataform/repository_iam_policy.py +5 -0
- pulumi_gcp/dataform/repository_release_config.py +58 -53
- pulumi_gcp/dataform/repository_workflow_config.py +94 -89
- pulumi_gcp/datafusion/_inputs.py +64 -0
- pulumi_gcp/datafusion/get_instance_iam_policy.py +5 -0
- pulumi_gcp/datafusion/instance.py +55 -50
- pulumi_gcp/datafusion/outputs.py +5 -0
- pulumi_gcp/dataloss/_inputs.py +6566 -114
- pulumi_gcp/dataloss/outputs.py +5 -0
- pulumi_gcp/dataloss/prevention_deidentify_template.py +226 -221
- pulumi_gcp/dataloss/prevention_discovery_config.py +22 -17
- pulumi_gcp/dataloss/prevention_inspect_template.py +442 -437
- pulumi_gcp/dataloss/prevention_job_trigger.py +701 -696
- pulumi_gcp/dataloss/prevention_stored_info_type.py +62 -57
- pulumi_gcp/dataplex/_inputs.py +1212 -6
- pulumi_gcp/dataplex/aspect_type.py +5 -0
- pulumi_gcp/dataplex/aspect_type_iam_binding.py +24 -19
- pulumi_gcp/dataplex/aspect_type_iam_member.py +24 -19
- pulumi_gcp/dataplex/aspect_type_iam_policy.py +21 -16
- pulumi_gcp/dataplex/asset.py +47 -42
- pulumi_gcp/dataplex/asset_iam_binding.py +24 -19
- pulumi_gcp/dataplex/asset_iam_member.py +24 -19
- pulumi_gcp/dataplex/asset_iam_policy.py +21 -16
- pulumi_gcp/dataplex/datascan.py +289 -284
- pulumi_gcp/dataplex/datascan_iam_binding.py +24 -19
- pulumi_gcp/dataplex/datascan_iam_member.py +24 -19
- pulumi_gcp/dataplex/datascan_iam_policy.py +21 -16
- pulumi_gcp/dataplex/entry_group.py +5 -0
- pulumi_gcp/dataplex/entry_group_iam_binding.py +24 -19
- pulumi_gcp/dataplex/entry_group_iam_member.py +24 -19
- pulumi_gcp/dataplex/entry_group_iam_policy.py +21 -16
- pulumi_gcp/dataplex/entry_type.py +16 -11
- pulumi_gcp/dataplex/entry_type_iam_binding.py +24 -19
- pulumi_gcp/dataplex/entry_type_iam_member.py +24 -19
- pulumi_gcp/dataplex/entry_type_iam_policy.py +21 -16
- pulumi_gcp/dataplex/get_aspect_type_iam_policy.py +5 -0
- pulumi_gcp/dataplex/get_asset_iam_policy.py +5 -0
- pulumi_gcp/dataplex/get_datascan_iam_policy.py +5 -0
- pulumi_gcp/dataplex/get_entry_group_iam_policy.py +5 -0
- pulumi_gcp/dataplex/get_entry_type_iam_policy.py +5 -0
- pulumi_gcp/dataplex/get_lake_iam_policy.py +5 -0
- pulumi_gcp/dataplex/get_task_iam_policy.py +5 -0
- pulumi_gcp/dataplex/get_zone_iam_policy.py +5 -0
- pulumi_gcp/dataplex/lake.py +14 -9
- pulumi_gcp/dataplex/lake_iam_binding.py +24 -19
- pulumi_gcp/dataplex/lake_iam_member.py +24 -19
- pulumi_gcp/dataplex/lake_iam_policy.py +21 -16
- pulumi_gcp/dataplex/outputs.py +5 -0
- pulumi_gcp/dataplex/task.py +173 -168
- pulumi_gcp/dataplex/task_iam_binding.py +24 -19
- pulumi_gcp/dataplex/task_iam_member.py +24 -19
- pulumi_gcp/dataplex/task_iam_policy.py +21 -16
- pulumi_gcp/dataplex/zone.py +29 -24
- pulumi_gcp/dataplex/zone_iam_binding.py +24 -19
- pulumi_gcp/dataplex/zone_iam_member.py +24 -19
- pulumi_gcp/dataplex/zone_iam_policy.py +21 -16
- pulumi_gcp/dataproc/_inputs.py +3214 -39
- pulumi_gcp/dataproc/autoscaling_policy.py +50 -45
- pulumi_gcp/dataproc/autoscaling_policy_iam_binding.py +24 -19
- pulumi_gcp/dataproc/autoscaling_policy_iam_member.py +24 -19
- pulumi_gcp/dataproc/autoscaling_policy_iam_policy.py +21 -16
- pulumi_gcp/dataproc/cluster.py +109 -104
- pulumi_gcp/dataproc/cluster_iam_binding.py +24 -19
- pulumi_gcp/dataproc/cluster_iam_member.py +24 -19
- pulumi_gcp/dataproc/cluster_iam_policy.py +21 -16
- pulumi_gcp/dataproc/get_autoscaling_policy_iam_policy.py +5 -0
- pulumi_gcp/dataproc/get_cluster_iam_policy.py +5 -0
- pulumi_gcp/dataproc/get_job_iam_policy.py +5 -0
- pulumi_gcp/dataproc/get_metastore_federation_iam_policy.py +5 -0
- pulumi_gcp/dataproc/get_metastore_service.py +5 -0
- pulumi_gcp/dataproc/get_metastore_service_iam_policy.py +5 -0
- pulumi_gcp/dataproc/job.py +95 -90
- pulumi_gcp/dataproc/job_iam_binding.py +24 -19
- pulumi_gcp/dataproc/job_iam_member.py +24 -19
- pulumi_gcp/dataproc/job_iam_policy.py +21 -16
- pulumi_gcp/dataproc/metastore_federation.py +56 -51
- pulumi_gcp/dataproc/metastore_federation_iam_binding.py +24 -19
- pulumi_gcp/dataproc/metastore_federation_iam_member.py +24 -19
- pulumi_gcp/dataproc/metastore_federation_iam_policy.py +21 -16
- pulumi_gcp/dataproc/metastore_service.py +239 -234
- pulumi_gcp/dataproc/metastore_service_iam_binding.py +24 -19
- pulumi_gcp/dataproc/metastore_service_iam_member.py +24 -19
- pulumi_gcp/dataproc/metastore_service_iam_policy.py +21 -16
- pulumi_gcp/dataproc/outputs.py +5 -0
- pulumi_gcp/dataproc/workflow_template.py +112 -107
- pulumi_gcp/datastore/_inputs.py +22 -0
- pulumi_gcp/datastore/data_store_index.py +26 -21
- pulumi_gcp/datastore/outputs.py +5 -0
- pulumi_gcp/datastream/_inputs.py +1631 -35
- pulumi_gcp/datastream/connection_profile.py +251 -246
- pulumi_gcp/datastream/get_static_ips.py +5 -0
- pulumi_gcp/datastream/outputs.py +5 -0
- pulumi_gcp/datastream/private_connection.py +20 -15
- pulumi_gcp/datastream/stream.py +777 -772
- pulumi_gcp/deploymentmanager/_inputs.py +66 -0
- pulumi_gcp/deploymentmanager/deployment.py +33 -28
- pulumi_gcp/deploymentmanager/outputs.py +5 -0
- pulumi_gcp/diagflow/_inputs.py +2590 -41
- pulumi_gcp/diagflow/agent.py +5 -0
- pulumi_gcp/diagflow/cx_agent.py +75 -70
- pulumi_gcp/diagflow/cx_entity_type.py +37 -32
- pulumi_gcp/diagflow/cx_environment.py +22 -17
- pulumi_gcp/diagflow/cx_flow.py +455 -450
- pulumi_gcp/diagflow/cx_intent.py +55 -50
- pulumi_gcp/diagflow/cx_page.py +718 -713
- pulumi_gcp/diagflow/cx_security_settings.py +69 -64
- pulumi_gcp/diagflow/cx_test_case.py +197 -192
- pulumi_gcp/diagflow/cx_version.py +13 -8
- pulumi_gcp/diagflow/cx_webhook.py +27 -22
- pulumi_gcp/diagflow/entity_type.py +26 -21
- pulumi_gcp/diagflow/fulfillment.py +27 -22
- pulumi_gcp/diagflow/intent.py +7 -2
- pulumi_gcp/diagflow/outputs.py +5 -0
- pulumi_gcp/discoveryengine/_inputs.py +183 -0
- pulumi_gcp/discoveryengine/chat_engine.py +37 -32
- pulumi_gcp/discoveryengine/data_store.py +32 -27
- pulumi_gcp/discoveryengine/outputs.py +5 -0
- pulumi_gcp/discoveryengine/search_engine.py +17 -12
- pulumi_gcp/dns/_inputs.py +589 -0
- pulumi_gcp/dns/dns_managed_zone_iam_binding.py +24 -19
- pulumi_gcp/dns/dns_managed_zone_iam_member.py +24 -19
- pulumi_gcp/dns/dns_managed_zone_iam_policy.py +21 -16
- pulumi_gcp/dns/get_keys.py +13 -8
- pulumi_gcp/dns/get_managed_zone.py +5 -0
- pulumi_gcp/dns/get_managed_zone_iam_policy.py +5 -0
- pulumi_gcp/dns/get_managed_zones.py +5 -0
- pulumi_gcp/dns/get_record_set.py +5 -0
- pulumi_gcp/dns/managed_zone.py +183 -178
- pulumi_gcp/dns/outputs.py +5 -0
- pulumi_gcp/dns/policy.py +47 -42
- pulumi_gcp/dns/record_set.py +100 -95
- pulumi_gcp/dns/response_policy.py +81 -76
- pulumi_gcp/dns/response_policy_rule.py +38 -33
- pulumi_gcp/edgecontainer/_inputs.py +464 -0
- pulumi_gcp/edgecontainer/cluster.py +152 -147
- pulumi_gcp/edgecontainer/node_pool.py +109 -104
- pulumi_gcp/edgecontainer/outputs.py +5 -0
- pulumi_gcp/edgecontainer/vpn_connection.py +36 -31
- pulumi_gcp/edgenetwork/network.py +5 -0
- pulumi_gcp/edgenetwork/subnet.py +5 -0
- pulumi_gcp/endpoints/_inputs.py +101 -0
- pulumi_gcp/endpoints/consumers_iam_binding.py +8 -3
- pulumi_gcp/endpoints/consumers_iam_member.py +8 -3
- pulumi_gcp/endpoints/consumers_iam_policy.py +5 -0
- pulumi_gcp/endpoints/get_service_consumers_iam_policy.py +5 -0
- pulumi_gcp/endpoints/get_service_iam_policy.py +5 -0
- pulumi_gcp/endpoints/outputs.py +5 -0
- pulumi_gcp/endpoints/service.py +9 -4
- pulumi_gcp/endpoints/service_iam_binding.py +24 -19
- pulumi_gcp/endpoints/service_iam_member.py +24 -19
- pulumi_gcp/endpoints/service_iam_policy.py +21 -16
- pulumi_gcp/essentialcontacts/_inputs.py +313 -0
- pulumi_gcp/essentialcontacts/contact.py +5 -0
- pulumi_gcp/essentialcontacts/document_ai_processor.py +5 -0
- pulumi_gcp/essentialcontacts/document_ai_processor_default_version.py +5 -0
- pulumi_gcp/essentialcontacts/document_ai_warehouse_document_schema.py +40 -35
- pulumi_gcp/essentialcontacts/document_ai_warehouse_location.py +5 -0
- pulumi_gcp/essentialcontacts/outputs.py +5 -0
- pulumi_gcp/eventarc/_inputs.py +145 -0
- pulumi_gcp/eventarc/channel.py +5 -0
- pulumi_gcp/eventarc/google_channel_config.py +5 -0
- pulumi_gcp/eventarc/outputs.py +5 -0
- pulumi_gcp/eventarc/trigger.py +78 -73
- pulumi_gcp/filestore/_inputs.py +108 -0
- pulumi_gcp/filestore/backup.py +23 -18
- pulumi_gcp/filestore/get_instance.py +5 -0
- pulumi_gcp/filestore/instance.py +107 -102
- pulumi_gcp/filestore/outputs.py +5 -0
- pulumi_gcp/filestore/snapshot.py +37 -32
- pulumi_gcp/firebase/_inputs.py +511 -0
- pulumi_gcp/firebase/android_app.py +21 -16
- pulumi_gcp/firebase/app_check_app_attest_config.py +5 -0
- pulumi_gcp/firebase/app_check_debug_token.py +5 -0
- pulumi_gcp/firebase/app_check_device_check_config.py +5 -0
- pulumi_gcp/firebase/app_check_play_integrity_config.py +5 -0
- pulumi_gcp/firebase/app_check_recaptcha_enterprise_config.py +5 -0
- pulumi_gcp/firebase/app_check_recaptcha_v3_config.py +5 -0
- pulumi_gcp/firebase/app_check_service_config.py +5 -0
- pulumi_gcp/firebase/apple_app.py +15 -10
- pulumi_gcp/firebase/database_instance.py +5 -0
- pulumi_gcp/firebase/extensions_instance.py +30 -25
- pulumi_gcp/firebase/get_android_app.py +5 -0
- pulumi_gcp/firebase/get_android_app_config.py +5 -0
- pulumi_gcp/firebase/get_apple_app.py +5 -0
- pulumi_gcp/firebase/get_apple_app_config.py +5 -0
- pulumi_gcp/firebase/get_hosting_channel.py +5 -0
- pulumi_gcp/firebase/get_web_app.py +5 -0
- pulumi_gcp/firebase/get_web_app_config.py +5 -0
- pulumi_gcp/firebase/hosting_channel.py +5 -0
- pulumi_gcp/firebase/hosting_custom_domain.py +39 -34
- pulumi_gcp/firebase/hosting_release.py +33 -28
- pulumi_gcp/firebase/hosting_site.py +5 -0
- pulumi_gcp/firebase/hosting_version.py +76 -71
- pulumi_gcp/firebase/outputs.py +5 -0
- pulumi_gcp/firebase/project.py +5 -0
- pulumi_gcp/firebase/storage_bucket.py +5 -0
- pulumi_gcp/firebase/web_app.py +15 -10
- pulumi_gcp/firebaserules/_inputs.py +51 -0
- pulumi_gcp/firebaserules/outputs.py +5 -0
- pulumi_gcp/firebaserules/release.py +5 -0
- pulumi_gcp/firebaserules/ruleset.py +40 -35
- pulumi_gcp/firestore/_inputs.py +154 -0
- pulumi_gcp/firestore/backup_schedule.py +23 -18
- pulumi_gcp/firestore/database.py +22 -17
- pulumi_gcp/firestore/document.py +5 -0
- pulumi_gcp/firestore/field.py +63 -58
- pulumi_gcp/firestore/index.py +72 -67
- pulumi_gcp/firestore/outputs.py +5 -0
- pulumi_gcp/folder/_inputs.py +165 -0
- pulumi_gcp/folder/access_approval_settings.py +28 -23
- pulumi_gcp/folder/get_iam_policy.py +5 -0
- pulumi_gcp/folder/get_organization_policy.py +5 -0
- pulumi_gcp/folder/iam_audit_config.py +130 -125
- pulumi_gcp/folder/iam_binding.py +8 -3
- pulumi_gcp/folder/iam_member.py +130 -125
- pulumi_gcp/folder/iam_policy.py +125 -120
- pulumi_gcp/folder/organization_policy.py +54 -49
- pulumi_gcp/folder/outputs.py +5 -0
- pulumi_gcp/gkebackup/_inputs.py +694 -0
- pulumi_gcp/gkebackup/backup_plan.py +436 -431
- pulumi_gcp/gkebackup/backup_plan_iam_binding.py +24 -19
- pulumi_gcp/gkebackup/backup_plan_iam_member.py +24 -19
- pulumi_gcp/gkebackup/backup_plan_iam_policy.py +21 -16
- pulumi_gcp/gkebackup/get_backup_plan_iam_policy.py +5 -0
- pulumi_gcp/gkebackup/get_restore_plan_iam_policy.py +5 -0
- pulumi_gcp/gkebackup/outputs.py +5 -0
- pulumi_gcp/gkebackup/restore_plan.py +580 -575
- pulumi_gcp/gkebackup/restore_plan_iam_binding.py +578 -573
- pulumi_gcp/gkebackup/restore_plan_iam_member.py +578 -573
- pulumi_gcp/gkebackup/restore_plan_iam_policy.py +575 -570
- pulumi_gcp/gkehub/_inputs.py +1204 -6
- pulumi_gcp/gkehub/feature.py +319 -314
- pulumi_gcp/gkehub/feature_iam_binding.py +24 -19
- pulumi_gcp/gkehub/feature_iam_member.py +24 -19
- pulumi_gcp/gkehub/feature_iam_policy.py +21 -16
- pulumi_gcp/gkehub/feature_membership.py +184 -179
- pulumi_gcp/gkehub/fleet.py +24 -19
- pulumi_gcp/gkehub/get_feature_iam_policy.py +5 -0
- pulumi_gcp/gkehub/get_membership_iam_policy.py +5 -0
- pulumi_gcp/gkehub/get_scope_iam_policy.py +5 -0
- pulumi_gcp/gkehub/membership.py +57 -52
- pulumi_gcp/gkehub/membership_binding.py +17 -12
- pulumi_gcp/gkehub/membership_iam_binding.py +24 -19
- pulumi_gcp/gkehub/membership_iam_member.py +24 -19
- pulumi_gcp/gkehub/membership_iam_policy.py +21 -16
- pulumi_gcp/gkehub/membership_rbac_role_binding.py +28 -23
- pulumi_gcp/gkehub/namespace.py +7 -2
- pulumi_gcp/gkehub/outputs.py +5 -0
- pulumi_gcp/gkehub/scope.py +7 -2
- pulumi_gcp/gkehub/scope_iam_binding.py +24 -19
- pulumi_gcp/gkehub/scope_iam_member.py +24 -19
- pulumi_gcp/gkehub/scope_iam_policy.py +21 -16
- pulumi_gcp/gkehub/scope_rbac_role_binding.py +18 -13
- pulumi_gcp/gkeonprem/_inputs.py +2318 -18
- pulumi_gcp/gkeonprem/bare_metal_admin_cluster.py +335 -330
- pulumi_gcp/gkeonprem/bare_metal_cluster.py +528 -523
- pulumi_gcp/gkeonprem/bare_metal_node_pool.py +262 -257
- pulumi_gcp/gkeonprem/outputs.py +5 -0
- pulumi_gcp/gkeonprem/v_mware_cluster.py +399 -394
- pulumi_gcp/gkeonprem/v_mware_node_pool.py +89 -84
- pulumi_gcp/healthcare/_inputs.py +316 -0
- pulumi_gcp/healthcare/consent_store.py +5 -0
- pulumi_gcp/healthcare/consent_store_iam_binding.py +24 -19
- pulumi_gcp/healthcare/consent_store_iam_member.py +24 -19
- pulumi_gcp/healthcare/consent_store_iam_policy.py +21 -16
- pulumi_gcp/healthcare/dataset.py +5 -0
- pulumi_gcp/healthcare/dataset_iam_binding.py +24 -19
- pulumi_gcp/healthcare/dataset_iam_member.py +24 -19
- pulumi_gcp/healthcare/dataset_iam_policy.py +21 -16
- pulumi_gcp/healthcare/dicom_store.py +39 -34
- pulumi_gcp/healthcare/dicom_store_iam_binding.py +24 -19
- pulumi_gcp/healthcare/dicom_store_iam_member.py +24 -19
- pulumi_gcp/healthcare/dicom_store_iam_policy.py +21 -16
- pulumi_gcp/healthcare/fhir_store.py +62 -57
- pulumi_gcp/healthcare/fhir_store_iam_binding.py +24 -19
- pulumi_gcp/healthcare/fhir_store_iam_member.py +24 -19
- pulumi_gcp/healthcare/fhir_store_iam_policy.py +21 -16
- pulumi_gcp/healthcare/get_consent_store_iam_policy.py +5 -0
- pulumi_gcp/healthcare/get_dataset_iam_policy.py +5 -0
- pulumi_gcp/healthcare/get_dicom_store_iam_policy.py +5 -0
- pulumi_gcp/healthcare/get_fhir_store_iam_policy.py +5 -0
- pulumi_gcp/healthcare/get_hl7_v2_store_iam_policy.py +5 -0
- pulumi_gcp/healthcare/hl7_store.py +46 -41
- pulumi_gcp/healthcare/hl7_store_iam_binding.py +24 -19
- pulumi_gcp/healthcare/hl7_store_iam_member.py +24 -19
- pulumi_gcp/healthcare/hl7_store_iam_policy.py +21 -16
- pulumi_gcp/healthcare/outputs.py +5 -0
- pulumi_gcp/iam/_inputs.py +433 -0
- pulumi_gcp/iam/access_boundary_policy.py +54 -49
- pulumi_gcp/iam/deny_policy.py +56 -51
- pulumi_gcp/iam/get_rule.py +5 -0
- pulumi_gcp/iam/get_testable_permissions.py +5 -0
- pulumi_gcp/iam/get_workload_identity_pool.py +5 -0
- pulumi_gcp/iam/get_workload_identity_pool_provider.py +5 -0
- pulumi_gcp/iam/outputs.py +5 -0
- pulumi_gcp/iam/workforce_pool.py +22 -17
- pulumi_gcp/iam/workforce_pool_provider.py +184 -179
- pulumi_gcp/iam/workload_identity_pool.py +5 -0
- pulumi_gcp/iam/workload_identity_pool_provider.py +68 -63
- pulumi_gcp/iap/_inputs.py +411 -0
- pulumi_gcp/iap/app_engine_service_iam_binding.py +102 -97
- pulumi_gcp/iap/app_engine_service_iam_member.py +102 -97
- pulumi_gcp/iap/app_engine_service_iam_policy.py +97 -92
- pulumi_gcp/iap/app_engine_version_iam_binding.py +102 -97
- pulumi_gcp/iap/app_engine_version_iam_member.py +102 -97
- pulumi_gcp/iap/app_engine_version_iam_policy.py +97 -92
- pulumi_gcp/iap/brand.py +5 -0
- pulumi_gcp/iap/client.py +5 -0
- pulumi_gcp/iap/get_app_engine_service_iam_policy.py +5 -0
- pulumi_gcp/iap/get_app_engine_version_iam_policy.py +5 -0
- pulumi_gcp/iap/get_client.py +5 -0
- pulumi_gcp/iap/get_tunnel_dest_group_iam_policy.py +5 -0
- pulumi_gcp/iap/get_tunnel_iam_policy.py +5 -0
- pulumi_gcp/iap/get_tunnel_instance_iam_policy.py +5 -0
- pulumi_gcp/iap/get_web_backend_service_iam_policy.py +5 -0
- pulumi_gcp/iap/get_web_iam_policy.py +5 -0
- pulumi_gcp/iap/get_web_region_backend_service_iam_policy.py +5 -0
- pulumi_gcp/iap/get_web_type_app_engine_iam_policy.py +5 -0
- pulumi_gcp/iap/get_web_type_compute_iam_policy.py +5 -0
- pulumi_gcp/iap/outputs.py +5 -0
- pulumi_gcp/iap/tunnel_dest_group.py +5 -0
- pulumi_gcp/iap/tunnel_dest_group_iam_binding.py +102 -97
- pulumi_gcp/iap/tunnel_dest_group_iam_member.py +102 -97
- pulumi_gcp/iap/tunnel_dest_group_iam_policy.py +97 -92
- pulumi_gcp/iap/tunnel_iam_binding.py +102 -97
- pulumi_gcp/iap/tunnel_iam_member.py +102 -97
- pulumi_gcp/iap/tunnel_iam_policy.py +97 -92
- pulumi_gcp/iap/tunnel_instance_iam_binding.py +102 -97
- pulumi_gcp/iap/tunnel_instance_iam_member.py +102 -97
- pulumi_gcp/iap/tunnel_instance_iam_policy.py +97 -92
- pulumi_gcp/iap/web_backend_service_iam_binding.py +102 -97
- pulumi_gcp/iap/web_backend_service_iam_member.py +102 -97
- pulumi_gcp/iap/web_backend_service_iam_policy.py +97 -92
- pulumi_gcp/iap/web_iam_binding.py +102 -97
- pulumi_gcp/iap/web_iam_member.py +102 -97
- pulumi_gcp/iap/web_iam_policy.py +97 -92
- pulumi_gcp/iap/web_region_backend_service_iam_binding.py +102 -97
- pulumi_gcp/iap/web_region_backend_service_iam_member.py +102 -97
- pulumi_gcp/iap/web_region_backend_service_iam_policy.py +97 -92
- pulumi_gcp/iap/web_type_app_enging_iam_binding.py +102 -97
- pulumi_gcp/iap/web_type_app_enging_iam_member.py +102 -97
- pulumi_gcp/iap/web_type_app_enging_iam_policy.py +97 -92
- pulumi_gcp/iap/web_type_compute_iam_binding.py +102 -97
- pulumi_gcp/iap/web_type_compute_iam_member.py +102 -97
- pulumi_gcp/iap/web_type_compute_iam_policy.py +97 -92
- pulumi_gcp/identityplatform/_inputs.py +576 -0
- pulumi_gcp/identityplatform/config.py +119 -114
- pulumi_gcp/identityplatform/default_supported_idp_config.py +5 -0
- pulumi_gcp/identityplatform/inbound_saml_config.py +39 -34
- pulumi_gcp/identityplatform/oauth_idp_config.py +5 -0
- pulumi_gcp/identityplatform/outputs.py +5 -0
- pulumi_gcp/identityplatform/project_default_config.py +38 -33
- pulumi_gcp/identityplatform/tenant.py +5 -0
- pulumi_gcp/identityplatform/tenant_default_supported_idp_config.py +5 -0
- pulumi_gcp/identityplatform/tenant_inbound_saml_config.py +39 -34
- pulumi_gcp/identityplatform/tenant_oauth_idp_config.py +5 -0
- pulumi_gcp/integrationconnectors/_inputs.py +868 -0
- pulumi_gcp/integrationconnectors/connection.py +465 -460
- pulumi_gcp/integrationconnectors/endpoint_attachment.py +5 -0
- pulumi_gcp/integrationconnectors/managed_zone.py +15 -10
- pulumi_gcp/integrationconnectors/outputs.py +5 -0
- pulumi_gcp/kms/_inputs.py +303 -0
- pulumi_gcp/kms/autokey_config.py +5 -0
- pulumi_gcp/kms/crypto_key.py +18 -13
- pulumi_gcp/kms/crypto_key_iam_binding.py +56 -51
- pulumi_gcp/kms/crypto_key_iam_member.py +56 -51
- pulumi_gcp/kms/crypto_key_iam_policy.py +51 -46
- pulumi_gcp/kms/crypto_key_version.py +12 -7
- pulumi_gcp/kms/ekm_connection.py +24 -19
- pulumi_gcp/kms/get_crypto_key_iam_policy.py +5 -0
- pulumi_gcp/kms/get_key_ring_iam_policy.py +5 -0
- pulumi_gcp/kms/get_kms_crypto_key.py +5 -0
- pulumi_gcp/kms/get_kms_crypto_key_version.py +5 -0
- pulumi_gcp/kms/get_kms_key_ring.py +5 -0
- pulumi_gcp/kms/get_kms_secret.py +11 -6
- pulumi_gcp/kms/get_kms_secret_asymmetric.py +17 -12
- pulumi_gcp/kms/get_kms_secret_ciphertext.py +23 -18
- pulumi_gcp/kms/key_handle.py +5 -0
- pulumi_gcp/kms/key_ring.py +5 -0
- pulumi_gcp/kms/key_ring_iam_binding.py +102 -97
- pulumi_gcp/kms/key_ring_iam_member.py +102 -97
- pulumi_gcp/kms/key_ring_iam_policy.py +97 -92
- pulumi_gcp/kms/key_ring_import_job.py +9 -4
- pulumi_gcp/kms/outputs.py +5 -0
- pulumi_gcp/kms/secret_ciphertext.py +23 -18
- pulumi_gcp/logging/_inputs.py +520 -0
- pulumi_gcp/logging/billing_account_bucket_config.py +15 -10
- pulumi_gcp/logging/billing_account_exclusion.py +5 -0
- pulumi_gcp/logging/billing_account_sink.py +15 -10
- pulumi_gcp/logging/folder_bucket_config.py +15 -10
- pulumi_gcp/logging/folder_exclusion.py +5 -0
- pulumi_gcp/logging/folder_settings.py +5 -0
- pulumi_gcp/logging/folder_sink.py +15 -10
- pulumi_gcp/logging/get_folder_settings.py +5 -0
- pulumi_gcp/logging/get_log_view_iam_policy.py +5 -0
- pulumi_gcp/logging/get_organization_settings.py +5 -0
- pulumi_gcp/logging/get_project_cmek_settings.py +5 -0
- pulumi_gcp/logging/get_project_settings.py +5 -0
- pulumi_gcp/logging/get_sink.py +5 -0
- pulumi_gcp/logging/linked_dataset.py +10 -5
- pulumi_gcp/logging/log_view.py +5 -0
- pulumi_gcp/logging/log_view_iam_binding.py +10 -5
- pulumi_gcp/logging/log_view_iam_member.py +10 -5
- pulumi_gcp/logging/log_view_iam_policy.py +5 -0
- pulumi_gcp/logging/metric.py +97 -92
- pulumi_gcp/logging/organization_bucket_config.py +15 -10
- pulumi_gcp/logging/organization_exclusion.py +5 -0
- pulumi_gcp/logging/organization_settings.py +5 -0
- pulumi_gcp/logging/organization_sink.py +15 -10
- pulumi_gcp/logging/outputs.py +5 -0
- pulumi_gcp/logging/project_bucket_config.py +21 -16
- pulumi_gcp/logging/project_exclusion.py +5 -0
- pulumi_gcp/logging/project_sink.py +15 -10
- pulumi_gcp/looker/_inputs.py +211 -0
- pulumi_gcp/looker/instance.py +204 -199
- pulumi_gcp/looker/outputs.py +5 -0
- pulumi_gcp/managedkafka/_inputs.py +69 -0
- pulumi_gcp/managedkafka/cluster.py +72 -67
- pulumi_gcp/managedkafka/outputs.py +5 -0
- pulumi_gcp/managedkafka/topic.py +27 -22
- pulumi_gcp/memcache/_inputs.py +184 -0
- pulumi_gcp/memcache/instance.py +56 -51
- pulumi_gcp/memcache/outputs.py +5 -0
- pulumi_gcp/migrationcenter/_inputs.py +182 -0
- pulumi_gcp/migrationcenter/group.py +5 -0
- pulumi_gcp/migrationcenter/outputs.py +5 -0
- pulumi_gcp/migrationcenter/preference_set.py +82 -77
- pulumi_gcp/ml/_inputs.py +17 -0
- pulumi_gcp/ml/engine_model.py +10 -5
- pulumi_gcp/ml/outputs.py +5 -0
- pulumi_gcp/monitoring/_inputs.py +1651 -12
- pulumi_gcp/monitoring/alert_policy.py +128 -123
- pulumi_gcp/monitoring/custom_service.py +16 -11
- pulumi_gcp/monitoring/dashboard.py +5 -0
- pulumi_gcp/monitoring/generic_service.py +20 -15
- pulumi_gcp/monitoring/get_app_engine_service.py +21 -16
- pulumi_gcp/monitoring/get_cluster_istio_service.py +5 -0
- pulumi_gcp/monitoring/get_istio_canonical_service.py +5 -0
- pulumi_gcp/monitoring/get_mesh_istio_service.py +5 -0
- pulumi_gcp/monitoring/get_notification_channel.py +29 -24
- pulumi_gcp/monitoring/get_secret_version.py +5 -0
- pulumi_gcp/monitoring/get_uptime_check_i_ps.py +5 -0
- pulumi_gcp/monitoring/group.py +5 -0
- pulumi_gcp/monitoring/metric_descriptor.py +49 -44
- pulumi_gcp/monitoring/monitored_project.py +5 -0
- pulumi_gcp/monitoring/notification_channel.py +16 -11
- pulumi_gcp/monitoring/outputs.py +5 -0
- pulumi_gcp/monitoring/slo.py +120 -115
- pulumi_gcp/monitoring/uptime_check_config.py +241 -236
- pulumi_gcp/netapp/_inputs.py +311 -0
- pulumi_gcp/netapp/active_directory.py +5 -0
- pulumi_gcp/netapp/backup.py +11 -6
- pulumi_gcp/netapp/backup_policy.py +5 -0
- pulumi_gcp/netapp/backup_vault.py +5 -0
- pulumi_gcp/netapp/kmsconfig.py +5 -0
- pulumi_gcp/netapp/outputs.py +5 -0
- pulumi_gcp/netapp/storage_pool.py +5 -0
- pulumi_gcp/netapp/volume.py +27 -22
- pulumi_gcp/netapp/volume_replication.py +24 -19
- pulumi_gcp/netapp/volume_snapshot.py +5 -0
- pulumi_gcp/networkconnectivity/_inputs.py +253 -0
- pulumi_gcp/networkconnectivity/hub.py +7 -2
- pulumi_gcp/networkconnectivity/internal_range.py +5 -0
- pulumi_gcp/networkconnectivity/outputs.py +5 -0
- pulumi_gcp/networkconnectivity/policy_based_route.py +46 -41
- pulumi_gcp/networkconnectivity/regional_endpoint.py +5 -0
- pulumi_gcp/networkconnectivity/service_connection_policy.py +20 -15
- pulumi_gcp/networkconnectivity/spoke.py +71 -66
- pulumi_gcp/networkmanagement/_inputs.py +87 -0
- pulumi_gcp/networkmanagement/connectivity_test.py +85 -80
- pulumi_gcp/networkmanagement/outputs.py +5 -0
- pulumi_gcp/networksecurity/_inputs.py +321 -0
- pulumi_gcp/networksecurity/address_group.py +5 -0
- pulumi_gcp/networksecurity/address_group_iam_binding.py +8 -3
- pulumi_gcp/networksecurity/address_group_iam_member.py +8 -3
- pulumi_gcp/networksecurity/address_group_iam_policy.py +5 -0
- pulumi_gcp/networksecurity/authorization_policy.py +52 -47
- pulumi_gcp/networksecurity/client_tls_policy.py +45 -40
- pulumi_gcp/networksecurity/firewall_endpoint.py +5 -0
- pulumi_gcp/networksecurity/firewall_endpoint_association.py +5 -0
- pulumi_gcp/networksecurity/gateway_security_policy.py +91 -86
- pulumi_gcp/networksecurity/gateway_security_policy_rule.py +5 -0
- pulumi_gcp/networksecurity/get_address_group_iam_policy.py +5 -0
- pulumi_gcp/networksecurity/outputs.py +5 -0
- pulumi_gcp/networksecurity/security_profile.py +40 -35
- pulumi_gcp/networksecurity/security_profile_group.py +5 -0
- pulumi_gcp/networksecurity/server_tls_policy.py +101 -96
- pulumi_gcp/networksecurity/tls_inspection_policy.py +193 -188
- pulumi_gcp/networksecurity/url_list.py +5 -0
- pulumi_gcp/networkservices/_inputs.py +1781 -29
- pulumi_gcp/networkservices/edge_cache_keyset.py +51 -46
- pulumi_gcp/networkservices/edge_cache_origin.py +89 -84
- pulumi_gcp/networkservices/edge_cache_service.py +567 -562
- pulumi_gcp/networkservices/endpoint_policy.py +55 -50
- pulumi_gcp/networkservices/gateway.py +21 -16
- pulumi_gcp/networkservices/grpc_route.py +146 -141
- pulumi_gcp/networkservices/http_route.py +294 -289
- pulumi_gcp/networkservices/lb_route_extension.py +10 -5
- pulumi_gcp/networkservices/lb_traffic_extension.py +10 -5
- pulumi_gcp/networkservices/mesh.py +5 -0
- pulumi_gcp/networkservices/outputs.py +5 -0
- pulumi_gcp/networkservices/service_binding.py +5 -0
- pulumi_gcp/networkservices/service_lb_policies.py +27 -22
- pulumi_gcp/networkservices/tcp_route.py +106 -101
- pulumi_gcp/networkservices/tls_route.py +82 -77
- pulumi_gcp/notebooks/_inputs.py +615 -0
- pulumi_gcp/notebooks/environment.py +21 -16
- pulumi_gcp/notebooks/get_instance_iam_policy.py +5 -0
- pulumi_gcp/notebooks/get_runtime_iam_policy.py +5 -0
- pulumi_gcp/notebooks/instance.py +78 -73
- pulumi_gcp/notebooks/instance_iam_binding.py +24 -19
- pulumi_gcp/notebooks/instance_iam_member.py +24 -19
- pulumi_gcp/notebooks/instance_iam_policy.py +21 -16
- pulumi_gcp/notebooks/location.py +5 -0
- pulumi_gcp/notebooks/outputs.py +5 -0
- pulumi_gcp/notebooks/runtime.py +222 -217
- pulumi_gcp/notebooks/runtime_iam_binding.py +24 -19
- pulumi_gcp/notebooks/runtime_iam_member.py +24 -19
- pulumi_gcp/notebooks/runtime_iam_policy.py +21 -16
- pulumi_gcp/organizations/_inputs.py +231 -0
- pulumi_gcp/organizations/access_approval_settings.py +36 -31
- pulumi_gcp/organizations/folder.py +5 -0
- pulumi_gcp/organizations/get_active_folder.py +5 -0
- pulumi_gcp/organizations/get_billing_account.py +5 -0
- pulumi_gcp/organizations/get_client_config.py +5 -0
- pulumi_gcp/organizations/get_client_open_id_user_info.py +5 -0
- pulumi_gcp/organizations/get_folder.py +5 -0
- pulumi_gcp/organizations/get_folders.py +5 -0
- pulumi_gcp/organizations/get_iam_policy.py +13 -8
- pulumi_gcp/organizations/get_organization.py +5 -0
- pulumi_gcp/organizations/get_project.py +5 -0
- pulumi_gcp/organizations/iam_audit_config.py +18 -13
- pulumi_gcp/organizations/iam_binding.py +8 -3
- pulumi_gcp/organizations/iam_custom_role.py +5 -0
- pulumi_gcp/organizations/iam_member.py +130 -125
- pulumi_gcp/organizations/iam_policy.py +125 -120
- pulumi_gcp/organizations/outputs.py +5 -0
- pulumi_gcp/organizations/policy.py +54 -49
- pulumi_gcp/organizations/project.py +5 -0
- pulumi_gcp/orgpolicy/_inputs.py +183 -0
- pulumi_gcp/orgpolicy/custom_constraint.py +15 -10
- pulumi_gcp/orgpolicy/outputs.py +5 -0
- pulumi_gcp/orgpolicy/policy.py +103 -98
- pulumi_gcp/osconfig/_inputs.py +2235 -30
- pulumi_gcp/osconfig/guest_policies.py +171 -166
- pulumi_gcp/osconfig/os_policy_assignment.py +158 -153
- pulumi_gcp/osconfig/outputs.py +5 -0
- pulumi_gcp/osconfig/patch_deployment.py +326 -321
- pulumi_gcp/oslogin/ssh_public_key.py +5 -0
- pulumi_gcp/parallelstore/instance.py +5 -0
- pulumi_gcp/privilegedaccessmanager/_inputs.py +170 -0
- pulumi_gcp/privilegedaccessmanager/entitlement.py +94 -89
- pulumi_gcp/privilegedaccessmanager/outputs.py +5 -0
- pulumi_gcp/projects/_inputs.py +262 -0
- pulumi_gcp/projects/access_approval_settings.py +30 -25
- pulumi_gcp/projects/api_key.py +88 -83
- pulumi_gcp/projects/default_service_accounts.py +5 -0
- pulumi_gcp/projects/get_iam_policy.py +5 -0
- pulumi_gcp/projects/get_organization_policy.py +5 -0
- pulumi_gcp/projects/get_project.py +5 -0
- pulumi_gcp/projects/get_project_service.py +5 -0
- pulumi_gcp/projects/iam_audit_config.py +130 -125
- pulumi_gcp/projects/iam_binding.py +130 -125
- pulumi_gcp/projects/iam_custom_role.py +5 -0
- pulumi_gcp/projects/iam_member.py +130 -125
- pulumi_gcp/projects/iam_member_remove.py +5 -0
- pulumi_gcp/projects/iam_policy.py +125 -120
- pulumi_gcp/projects/organization_policy.py +54 -49
- pulumi_gcp/projects/outputs.py +5 -0
- pulumi_gcp/projects/service.py +5 -0
- pulumi_gcp/projects/service_identity.py +5 -0
- pulumi_gcp/projects/usage_export_bucket.py +5 -0
- pulumi_gcp/provider.py +7 -2
- pulumi_gcp/pubsub/_inputs.py +438 -0
- pulumi_gcp/pubsub/get_schema_iam_policy.py +5 -0
- pulumi_gcp/pubsub/get_subscription.py +5 -0
- pulumi_gcp/pubsub/get_subscription_iam_policy.py +5 -0
- pulumi_gcp/pubsub/get_topic.py +5 -0
- pulumi_gcp/pubsub/get_topic_iam_policy.py +5 -0
- pulumi_gcp/pubsub/lite_reservation.py +5 -0
- pulumi_gcp/pubsub/lite_subscription.py +36 -31
- pulumi_gcp/pubsub/lite_topic.py +46 -41
- pulumi_gcp/pubsub/outputs.py +5 -0
- pulumi_gcp/pubsub/schema.py +13 -8
- pulumi_gcp/pubsub/schema_iam_binding.py +24 -19
- pulumi_gcp/pubsub/schema_iam_member.py +24 -19
- pulumi_gcp/pubsub/schema_iam_policy.py +21 -16
- pulumi_gcp/pubsub/subscription.py +141 -136
- pulumi_gcp/pubsub/subscription_iam_binding.py +24 -19
- pulumi_gcp/pubsub/subscription_iam_member.py +24 -19
- pulumi_gcp/pubsub/subscription_iam_policy.py +21 -16
- pulumi_gcp/pubsub/topic.py +50 -45
- pulumi_gcp/pubsub/topic_iam_binding.py +24 -19
- pulumi_gcp/pubsub/topic_iam_member.py +24 -19
- pulumi_gcp/pubsub/topic_iam_policy.py +21 -16
- pulumi_gcp/pulumi-plugin.json +1 -1
- pulumi_gcp/recaptcha/_inputs.py +89 -0
- pulumi_gcp/recaptcha/enterprise_key.py +132 -127
- pulumi_gcp/recaptcha/outputs.py +5 -0
- pulumi_gcp/redis/_inputs.py +321 -0
- pulumi_gcp/redis/cluster.py +59 -54
- pulumi_gcp/redis/get_instance.py +5 -0
- pulumi_gcp/redis/instance.py +51 -46
- pulumi_gcp/redis/outputs.py +5 -0
- pulumi_gcp/resourcemanager/lien.py +5 -0
- pulumi_gcp/runtimeconfig/_inputs.py +25 -0
- pulumi_gcp/runtimeconfig/config.py +5 -0
- pulumi_gcp/runtimeconfig/config_iam_binding.py +8 -3
- pulumi_gcp/runtimeconfig/config_iam_member.py +8 -3
- pulumi_gcp/runtimeconfig/config_iam_policy.py +5 -0
- pulumi_gcp/runtimeconfig/get_config.py +5 -0
- pulumi_gcp/runtimeconfig/get_config_iam_policy.py +5 -0
- pulumi_gcp/runtimeconfig/get_variable.py +5 -0
- pulumi_gcp/runtimeconfig/outputs.py +5 -0
- pulumi_gcp/runtimeconfig/variable.py +5 -0
- pulumi_gcp/secretmanager/_inputs.py +143 -0
- pulumi_gcp/secretmanager/get_secret.py +5 -0
- pulumi_gcp/secretmanager/get_secret_iam_policy.py +5 -0
- pulumi_gcp/secretmanager/get_secret_version.py +5 -0
- pulumi_gcp/secretmanager/get_secret_version_access.py +5 -0
- pulumi_gcp/secretmanager/get_secrets.py +5 -0
- pulumi_gcp/secretmanager/outputs.py +5 -0
- pulumi_gcp/secretmanager/secret.py +68 -63
- pulumi_gcp/secretmanager/secret_iam_binding.py +102 -97
- pulumi_gcp/secretmanager/secret_iam_member.py +102 -97
- pulumi_gcp/secretmanager/secret_iam_policy.py +97 -92
- pulumi_gcp/secretmanager/secret_version.py +53 -48
- pulumi_gcp/securesourcemanager/_inputs.py +75 -0
- pulumi_gcp/securesourcemanager/get_instance_iam_policy.py +5 -0
- pulumi_gcp/securesourcemanager/instance.py +78 -73
- pulumi_gcp/securesourcemanager/instance_iam_binding.py +8 -3
- pulumi_gcp/securesourcemanager/instance_iam_member.py +8 -3
- pulumi_gcp/securesourcemanager/instance_iam_policy.py +5 -0
- pulumi_gcp/securesourcemanager/outputs.py +5 -0
- pulumi_gcp/securitycenter/_inputs.py +860 -7
- pulumi_gcp/securitycenter/event_threat_detection_custom_module.py +5 -0
- pulumi_gcp/securitycenter/folder_custom_module.py +82 -77
- pulumi_gcp/securitycenter/get_source_iam_policy.py +5 -0
- pulumi_gcp/securitycenter/instance_iam_binding.py +38 -33
- pulumi_gcp/securitycenter/instance_iam_member.py +38 -33
- pulumi_gcp/securitycenter/instance_iam_policy.py +35 -30
- pulumi_gcp/securitycenter/management_folder_security_health_analytics_custom_module.py +82 -77
- pulumi_gcp/securitycenter/management_organization_event_threat_detection_custom_module.py +5 -0
- pulumi_gcp/securitycenter/management_organization_security_health_analytics_custom_module.py +82 -77
- pulumi_gcp/securitycenter/management_project_security_health_analytics_custom_module.py +82 -77
- pulumi_gcp/securitycenter/mute_config.py +5 -0
- pulumi_gcp/securitycenter/notification_config.py +16 -11
- pulumi_gcp/securitycenter/organization_custom_module.py +82 -77
- pulumi_gcp/securitycenter/outputs.py +5 -0
- pulumi_gcp/securitycenter/project_custom_module.py +82 -77
- pulumi_gcp/securitycenter/source.py +5 -0
- pulumi_gcp/securitycenter/source_iam_binding.py +8 -3
- pulumi_gcp/securitycenter/source_iam_member.py +8 -3
- pulumi_gcp/securitycenter/source_iam_policy.py +5 -0
- pulumi_gcp/securityposture/_inputs.py +457 -0
- pulumi_gcp/securityposture/outputs.py +5 -0
- pulumi_gcp/securityposture/posture.py +186 -181
- pulumi_gcp/securityposture/posture_deployment.py +35 -30
- pulumi_gcp/serviceaccount/_inputs.py +51 -0
- pulumi_gcp/serviceaccount/account.py +5 -0
- pulumi_gcp/serviceaccount/get_account.py +5 -0
- pulumi_gcp/serviceaccount/get_account_access_token.py +5 -0
- pulumi_gcp/serviceaccount/get_account_id_token.py +5 -0
- pulumi_gcp/serviceaccount/get_account_jwt.py +5 -0
- pulumi_gcp/serviceaccount/get_account_key.py +5 -0
- pulumi_gcp/serviceaccount/get_iam_policy.py +5 -0
- pulumi_gcp/serviceaccount/iam_binding.py +66 -61
- pulumi_gcp/serviceaccount/iam_member.py +66 -61
- pulumi_gcp/serviceaccount/iam_policy.py +61 -56
- pulumi_gcp/serviceaccount/key.py +5 -0
- pulumi_gcp/serviceaccount/outputs.py +5 -0
- pulumi_gcp/servicedirectory/_inputs.py +43 -0
- pulumi_gcp/servicedirectory/endpoint.py +5 -0
- pulumi_gcp/servicedirectory/get_namespace_iam_policy.py +5 -0
- pulumi_gcp/servicedirectory/get_service_iam_policy.py +5 -0
- pulumi_gcp/servicedirectory/namespace.py +5 -0
- pulumi_gcp/servicedirectory/namespace_iam_binding.py +24 -19
- pulumi_gcp/servicedirectory/namespace_iam_member.py +24 -19
- pulumi_gcp/servicedirectory/namespace_iam_policy.py +21 -16
- pulumi_gcp/servicedirectory/outputs.py +5 -0
- pulumi_gcp/servicedirectory/service.py +5 -0
- pulumi_gcp/servicedirectory/service_iam_binding.py +24 -19
- pulumi_gcp/servicedirectory/service_iam_member.py +24 -19
- pulumi_gcp/servicedirectory/service_iam_policy.py +21 -16
- pulumi_gcp/servicenetworking/connection.py +5 -0
- pulumi_gcp/servicenetworking/get_peered_dns_domain.py +5 -0
- pulumi_gcp/servicenetworking/peered_dns_domain.py +5 -0
- pulumi_gcp/servicenetworking/vpc_service_controls.py +5 -0
- pulumi_gcp/serviceusage/consumer_quota_override.py +5 -0
- pulumi_gcp/sourcerepo/_inputs.py +49 -0
- pulumi_gcp/sourcerepo/get_repository.py +5 -0
- pulumi_gcp/sourcerepo/get_repository_iam_policy.py +5 -0
- pulumi_gcp/sourcerepo/outputs.py +5 -0
- pulumi_gcp/sourcerepo/repository.py +20 -15
- pulumi_gcp/sourcerepo/repository_iam_binding.py +24 -19
- pulumi_gcp/sourcerepo/repository_iam_member.py +24 -19
- pulumi_gcp/sourcerepo/repository_iam_policy.py +21 -16
- pulumi_gcp/spanner/_inputs.py +157 -0
- pulumi_gcp/spanner/database.py +10 -5
- pulumi_gcp/spanner/database_iam_binding.py +102 -97
- pulumi_gcp/spanner/database_iam_member.py +102 -97
- pulumi_gcp/spanner/database_iam_policy.py +97 -92
- pulumi_gcp/spanner/get_database_iam_policy.py +5 -0
- pulumi_gcp/spanner/get_instance.py +5 -0
- pulumi_gcp/spanner/get_instance_iam_policy.py +5 -0
- pulumi_gcp/spanner/instance.py +30 -25
- pulumi_gcp/spanner/instance_config.py +10 -5
- pulumi_gcp/spanner/instance_iam_binding.py +24 -19
- pulumi_gcp/spanner/instance_iam_member.py +24 -19
- pulumi_gcp/spanner/instance_iam_policy.py +21 -16
- pulumi_gcp/spanner/outputs.py +5 -0
- pulumi_gcp/sql/_inputs.py +616 -0
- pulumi_gcp/sql/database.py +17 -12
- pulumi_gcp/sql/database_instance.py +93 -88
- pulumi_gcp/sql/get_backup_run.py +5 -0
- pulumi_gcp/sql/get_ca_certs.py +5 -0
- pulumi_gcp/sql/get_database.py +5 -0
- pulumi_gcp/sql/get_database_instance.py +5 -0
- pulumi_gcp/sql/get_database_instance_latest_recovery_time.py +5 -0
- pulumi_gcp/sql/get_database_instances.py +5 -0
- pulumi_gcp/sql/get_databases.py +5 -0
- pulumi_gcp/sql/get_tiers.py +5 -0
- pulumi_gcp/sql/outputs.py +5 -0
- pulumi_gcp/sql/source_representation_instance.py +5 -0
- pulumi_gcp/sql/ssl_cert.py +11 -6
- pulumi_gcp/sql/user.py +43 -38
- pulumi_gcp/storage/_inputs.py +828 -0
- pulumi_gcp/storage/bucket.py +125 -120
- pulumi_gcp/storage/bucket_access_control.py +5 -0
- pulumi_gcp/storage/bucket_acl.py +5 -0
- pulumi_gcp/storage/bucket_iam_binding.py +102 -97
- pulumi_gcp/storage/bucket_iam_member.py +102 -97
- pulumi_gcp/storage/bucket_iam_policy.py +97 -92
- pulumi_gcp/storage/bucket_object.py +15 -10
- pulumi_gcp/storage/default_object_access_control.py +7 -2
- pulumi_gcp/storage/default_object_acl.py +5 -0
- pulumi_gcp/storage/get_bucket.py +5 -0
- pulumi_gcp/storage/get_bucket_iam_policy.py +5 -0
- pulumi_gcp/storage/get_bucket_object.py +5 -0
- pulumi_gcp/storage/get_bucket_object_content.py +5 -0
- pulumi_gcp/storage/get_bucket_objects.py +5 -0
- pulumi_gcp/storage/get_buckets.py +5 -0
- pulumi_gcp/storage/get_object_signed_url.py +5 -0
- pulumi_gcp/storage/get_project_service_account.py +11 -6
- pulumi_gcp/storage/get_transfer_project_service_account.py +5 -0
- pulumi_gcp/storage/get_transfer_project_servie_account.py +5 -0
- pulumi_gcp/storage/hmac_key.py +5 -0
- pulumi_gcp/storage/insights_report_config.py +76 -71
- pulumi_gcp/storage/notification.py +5 -0
- pulumi_gcp/storage/object_access_control.py +7 -2
- pulumi_gcp/storage/object_acl.py +5 -0
- pulumi_gcp/storage/outputs.py +5 -0
- pulumi_gcp/storage/transfer_agent_pool.py +16 -11
- pulumi_gcp/storage/transfer_job.py +113 -108
- pulumi_gcp/tags/_inputs.py +43 -0
- pulumi_gcp/tags/get_tag_key.py +5 -0
- pulumi_gcp/tags/get_tag_key_iam_policy.py +5 -0
- pulumi_gcp/tags/get_tag_keys.py +5 -0
- pulumi_gcp/tags/get_tag_value.py +5 -0
- pulumi_gcp/tags/get_tag_value_iam_policy.py +5 -0
- pulumi_gcp/tags/get_tag_values.py +5 -0
- pulumi_gcp/tags/location_tag_binding.py +5 -0
- pulumi_gcp/tags/outputs.py +5 -0
- pulumi_gcp/tags/tag_binding.py +5 -0
- pulumi_gcp/tags/tag_key.py +5 -0
- pulumi_gcp/tags/tag_key_iam_binding.py +24 -19
- pulumi_gcp/tags/tag_key_iam_member.py +24 -19
- pulumi_gcp/tags/tag_key_iam_policy.py +21 -16
- pulumi_gcp/tags/tag_value.py +5 -0
- pulumi_gcp/tags/tag_value_iam_binding.py +24 -19
- pulumi_gcp/tags/tag_value_iam_member.py +24 -19
- pulumi_gcp/tags/tag_value_iam_policy.py +21 -16
- pulumi_gcp/tpu/_inputs.py +194 -0
- pulumi_gcp/tpu/get_tensorflow_versions.py +5 -0
- pulumi_gcp/tpu/get_v2_accelerator_types.py +5 -0
- pulumi_gcp/tpu/get_v2_runtime_versions.py +5 -0
- pulumi_gcp/tpu/node.py +18 -13
- pulumi_gcp/tpu/outputs.py +5 -0
- pulumi_gcp/tpu/v2_vm.py +87 -82
- pulumi_gcp/vertex/_inputs.py +841 -0
- pulumi_gcp/vertex/ai_dataset.py +10 -5
- pulumi_gcp/vertex/ai_deployment_resource_pool.py +36 -31
- pulumi_gcp/vertex/ai_endpoint.py +18 -13
- pulumi_gcp/vertex/ai_endpoint_iam_binding.py +8 -3
- pulumi_gcp/vertex/ai_endpoint_iam_member.py +8 -3
- pulumi_gcp/vertex/ai_endpoint_iam_policy.py +5 -0
- pulumi_gcp/vertex/ai_feature_group.py +22 -17
- pulumi_gcp/vertex/ai_feature_group_feature.py +17 -12
- pulumi_gcp/vertex/ai_feature_online_store.py +73 -68
- pulumi_gcp/vertex/ai_feature_online_store_featureview.py +151 -146
- pulumi_gcp/vertex/ai_feature_store.py +57 -52
- pulumi_gcp/vertex/ai_feature_store_entity_type.py +92 -87
- pulumi_gcp/vertex/ai_feature_store_entity_type_feature.py +41 -36
- pulumi_gcp/vertex/ai_feature_store_entity_type_iam_binding.py +8 -3
- pulumi_gcp/vertex/ai_feature_store_entity_type_iam_member.py +8 -3
- pulumi_gcp/vertex/ai_feature_store_entity_type_iam_policy.py +5 -0
- pulumi_gcp/vertex/ai_feature_store_iam_binding.py +8 -3
- pulumi_gcp/vertex/ai_feature_store_iam_member.py +8 -3
- pulumi_gcp/vertex/ai_feature_store_iam_policy.py +5 -0
- pulumi_gcp/vertex/ai_index.py +68 -63
- pulumi_gcp/vertex/ai_index_endpoint.py +18 -13
- pulumi_gcp/vertex/ai_metadata_store.py +12 -7
- pulumi_gcp/vertex/ai_tensorboard.py +16 -11
- pulumi_gcp/vertex/get_ai_endpoint_iam_policy.py +5 -0
- pulumi_gcp/vertex/get_ai_featurestore_entitytype_iam_policy.py +5 -0
- pulumi_gcp/vertex/get_ai_featurestore_iam_policy.py +5 -0
- pulumi_gcp/vertex/get_ai_index.py +5 -0
- pulumi_gcp/vertex/outputs.py +5 -0
- pulumi_gcp/vmwareengine/_inputs.py +290 -0
- pulumi_gcp/vmwareengine/cluster.py +74 -69
- pulumi_gcp/vmwareengine/external_access_rule.py +61 -56
- pulumi_gcp/vmwareengine/external_address.py +27 -22
- pulumi_gcp/vmwareengine/get_cluster.py +5 -0
- pulumi_gcp/vmwareengine/get_external_access_rule.py +5 -0
- pulumi_gcp/vmwareengine/get_external_address.py +5 -0
- pulumi_gcp/vmwareengine/get_network.py +5 -0
- pulumi_gcp/vmwareengine/get_network_peering.py +5 -0
- pulumi_gcp/vmwareengine/get_network_policy.py +5 -0
- pulumi_gcp/vmwareengine/get_nsx_credentials.py +5 -0
- pulumi_gcp/vmwareengine/get_private_cloud.py +5 -0
- pulumi_gcp/vmwareengine/get_subnet.py +5 -0
- pulumi_gcp/vmwareengine/get_vcenter_credentials.py +5 -0
- pulumi_gcp/vmwareengine/network.py +7 -2
- pulumi_gcp/vmwareengine/network_peering.py +5 -0
- pulumi_gcp/vmwareengine/network_policy.py +27 -22
- pulumi_gcp/vmwareengine/outputs.py +5 -0
- pulumi_gcp/vmwareengine/private_cloud.py +67 -62
- pulumi_gcp/vmwareengine/subnet.py +29 -24
- pulumi_gcp/vpcaccess/_inputs.py +22 -0
- pulumi_gcp/vpcaccess/connector.py +16 -11
- pulumi_gcp/vpcaccess/get_connector.py +5 -0
- pulumi_gcp/vpcaccess/outputs.py +5 -0
- pulumi_gcp/workbench/_inputs.py +319 -0
- pulumi_gcp/workbench/get_instance_iam_policy.py +5 -0
- pulumi_gcp/workbench/instance.py +144 -139
- pulumi_gcp/workbench/instance_iam_binding.py +8 -3
- pulumi_gcp/workbench/instance_iam_member.py +8 -3
- pulumi_gcp/workbench/instance_iam_policy.py +5 -0
- pulumi_gcp/workbench/outputs.py +5 -0
- pulumi_gcp/workflows/workflow.py +5 -0
- pulumi_gcp/workstations/_inputs.py +433 -0
- pulumi_gcp/workstations/get_workstation_config_iam_policy.py +5 -0
- pulumi_gcp/workstations/get_workstation_iam_policy.py +5 -0
- pulumi_gcp/workstations/outputs.py +5 -0
- pulumi_gcp/workstations/workstation.py +19 -14
- pulumi_gcp/workstations/workstation_cluster.py +35 -30
- pulumi_gcp/workstations/workstation_config.py +251 -246
- pulumi_gcp/workstations/workstation_config_iam_binding.py +8 -3
- pulumi_gcp/workstations/workstation_config_iam_member.py +8 -3
- pulumi_gcp/workstations/workstation_config_iam_policy.py +5 -0
- pulumi_gcp/workstations/workstation_iam_binding.py +8 -3
- pulumi_gcp/workstations/workstation_iam_member.py +8 -3
- pulumi_gcp/workstations/workstation_iam_policy.py +5 -0
- {pulumi_gcp-7.30.0a1719470057.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/METADATA +2 -1
- pulumi_gcp-7.30.0a1719513455.dist-info/RECORD +1600 -0
- pulumi_gcp-7.30.0a1719470057.dist-info/RECORD +0 -1600
- {pulumi_gcp-7.30.0a1719470057.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/WHEEL +0 -0
- {pulumi_gcp-7.30.0a1719470057.dist-info → pulumi_gcp-7.30.0a1719513455.dist-info}/top_level.txt +0 -0
@@ -4,105 +4,220 @@
|
|
4
4
|
|
5
5
|
import copy
|
6
6
|
import warnings
|
7
|
+
import sys
|
7
8
|
import pulumi
|
8
9
|
import pulumi.runtime
|
9
10
|
from typing import Any, Mapping, Optional, Sequence, Union, overload
|
11
|
+
if sys.version_info >= (3, 11):
|
12
|
+
from typing import NotRequired, TypedDict, TypeAlias
|
13
|
+
else:
|
14
|
+
from typing_extensions import NotRequired, TypedDict, TypeAlias
|
10
15
|
from .. import _utilities
|
11
16
|
|
12
17
|
__all__ = [
|
13
18
|
'AuthorityAccessUrlArgs',
|
19
|
+
'AuthorityAccessUrlArgsDict',
|
14
20
|
'AuthorityConfigArgs',
|
21
|
+
'AuthorityConfigArgsDict',
|
15
22
|
'AuthorityConfigSubjectConfigArgs',
|
23
|
+
'AuthorityConfigSubjectConfigArgsDict',
|
16
24
|
'AuthorityConfigSubjectConfigSubjectArgs',
|
25
|
+
'AuthorityConfigSubjectConfigSubjectArgsDict',
|
17
26
|
'AuthorityConfigSubjectConfigSubjectAltNameArgs',
|
27
|
+
'AuthorityConfigSubjectConfigSubjectAltNameArgsDict',
|
18
28
|
'AuthorityConfigSubjectKeyIdArgs',
|
29
|
+
'AuthorityConfigSubjectKeyIdArgsDict',
|
19
30
|
'AuthorityConfigX509ConfigArgs',
|
31
|
+
'AuthorityConfigX509ConfigArgsDict',
|
20
32
|
'AuthorityConfigX509ConfigAdditionalExtensionArgs',
|
33
|
+
'AuthorityConfigX509ConfigAdditionalExtensionArgsDict',
|
21
34
|
'AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs',
|
35
|
+
'AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgsDict',
|
22
36
|
'AuthorityConfigX509ConfigCaOptionsArgs',
|
37
|
+
'AuthorityConfigX509ConfigCaOptionsArgsDict',
|
23
38
|
'AuthorityConfigX509ConfigKeyUsageArgs',
|
39
|
+
'AuthorityConfigX509ConfigKeyUsageArgsDict',
|
24
40
|
'AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs',
|
41
|
+
'AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgsDict',
|
25
42
|
'AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs',
|
43
|
+
'AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgsDict',
|
26
44
|
'AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs',
|
45
|
+
'AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgsDict',
|
27
46
|
'AuthorityConfigX509ConfigNameConstraintsArgs',
|
47
|
+
'AuthorityConfigX509ConfigNameConstraintsArgsDict',
|
28
48
|
'AuthorityConfigX509ConfigPolicyIdArgs',
|
49
|
+
'AuthorityConfigX509ConfigPolicyIdArgsDict',
|
29
50
|
'AuthorityKeySpecArgs',
|
51
|
+
'AuthorityKeySpecArgsDict',
|
30
52
|
'AuthoritySubordinateConfigArgs',
|
53
|
+
'AuthoritySubordinateConfigArgsDict',
|
31
54
|
'AuthoritySubordinateConfigPemIssuerChainArgs',
|
55
|
+
'AuthoritySubordinateConfigPemIssuerChainArgsDict',
|
32
56
|
'CaPoolIamBindingConditionArgs',
|
57
|
+
'CaPoolIamBindingConditionArgsDict',
|
33
58
|
'CaPoolIamMemberConditionArgs',
|
59
|
+
'CaPoolIamMemberConditionArgsDict',
|
34
60
|
'CaPoolIssuancePolicyArgs',
|
61
|
+
'CaPoolIssuancePolicyArgsDict',
|
35
62
|
'CaPoolIssuancePolicyAllowedIssuanceModesArgs',
|
63
|
+
'CaPoolIssuancePolicyAllowedIssuanceModesArgsDict',
|
36
64
|
'CaPoolIssuancePolicyAllowedKeyTypeArgs',
|
65
|
+
'CaPoolIssuancePolicyAllowedKeyTypeArgsDict',
|
37
66
|
'CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs',
|
67
|
+
'CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgsDict',
|
38
68
|
'CaPoolIssuancePolicyAllowedKeyTypeRsaArgs',
|
69
|
+
'CaPoolIssuancePolicyAllowedKeyTypeRsaArgsDict',
|
39
70
|
'CaPoolIssuancePolicyBaselineValuesArgs',
|
71
|
+
'CaPoolIssuancePolicyBaselineValuesArgsDict',
|
40
72
|
'CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs',
|
73
|
+
'CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgsDict',
|
41
74
|
'CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs',
|
75
|
+
'CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgsDict',
|
42
76
|
'CaPoolIssuancePolicyBaselineValuesCaOptionsArgs',
|
77
|
+
'CaPoolIssuancePolicyBaselineValuesCaOptionsArgsDict',
|
43
78
|
'CaPoolIssuancePolicyBaselineValuesKeyUsageArgs',
|
79
|
+
'CaPoolIssuancePolicyBaselineValuesKeyUsageArgsDict',
|
44
80
|
'CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs',
|
81
|
+
'CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgsDict',
|
45
82
|
'CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs',
|
83
|
+
'CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgsDict',
|
46
84
|
'CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs',
|
85
|
+
'CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgsDict',
|
47
86
|
'CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs',
|
87
|
+
'CaPoolIssuancePolicyBaselineValuesNameConstraintsArgsDict',
|
48
88
|
'CaPoolIssuancePolicyBaselineValuesPolicyIdArgs',
|
89
|
+
'CaPoolIssuancePolicyBaselineValuesPolicyIdArgsDict',
|
49
90
|
'CaPoolIssuancePolicyIdentityConstraintsArgs',
|
91
|
+
'CaPoolIssuancePolicyIdentityConstraintsArgsDict',
|
50
92
|
'CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs',
|
93
|
+
'CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgsDict',
|
51
94
|
'CaPoolPublishingOptionsArgs',
|
95
|
+
'CaPoolPublishingOptionsArgsDict',
|
52
96
|
'CertificateCertificateDescriptionArgs',
|
97
|
+
'CertificateCertificateDescriptionArgsDict',
|
53
98
|
'CertificateCertificateDescriptionAuthorityKeyIdArgs',
|
99
|
+
'CertificateCertificateDescriptionAuthorityKeyIdArgsDict',
|
54
100
|
'CertificateCertificateDescriptionCertFingerprintArgs',
|
101
|
+
'CertificateCertificateDescriptionCertFingerprintArgsDict',
|
55
102
|
'CertificateCertificateDescriptionPublicKeyArgs',
|
103
|
+
'CertificateCertificateDescriptionPublicKeyArgsDict',
|
56
104
|
'CertificateCertificateDescriptionSubjectDescriptionArgs',
|
105
|
+
'CertificateCertificateDescriptionSubjectDescriptionArgsDict',
|
57
106
|
'CertificateCertificateDescriptionSubjectDescriptionSubjectArgs',
|
107
|
+
'CertificateCertificateDescriptionSubjectDescriptionSubjectArgsDict',
|
58
108
|
'CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs',
|
109
|
+
'CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgsDict',
|
59
110
|
'CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs',
|
111
|
+
'CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgsDict',
|
60
112
|
'CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs',
|
113
|
+
'CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgsDict',
|
61
114
|
'CertificateCertificateDescriptionSubjectKeyIdArgs',
|
115
|
+
'CertificateCertificateDescriptionSubjectKeyIdArgsDict',
|
62
116
|
'CertificateCertificateDescriptionX509DescriptionArgs',
|
117
|
+
'CertificateCertificateDescriptionX509DescriptionArgsDict',
|
63
118
|
'CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs',
|
119
|
+
'CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgsDict',
|
64
120
|
'CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs',
|
121
|
+
'CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgsDict',
|
65
122
|
'CertificateCertificateDescriptionX509DescriptionCaOptionArgs',
|
123
|
+
'CertificateCertificateDescriptionX509DescriptionCaOptionArgsDict',
|
66
124
|
'CertificateCertificateDescriptionX509DescriptionKeyUsageArgs',
|
125
|
+
'CertificateCertificateDescriptionX509DescriptionKeyUsageArgsDict',
|
67
126
|
'CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs',
|
127
|
+
'CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgsDict',
|
68
128
|
'CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs',
|
129
|
+
'CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgsDict',
|
69
130
|
'CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs',
|
131
|
+
'CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgsDict',
|
70
132
|
'CertificateCertificateDescriptionX509DescriptionNameConstraintArgs',
|
133
|
+
'CertificateCertificateDescriptionX509DescriptionNameConstraintArgsDict',
|
71
134
|
'CertificateCertificateDescriptionX509DescriptionPolicyIdArgs',
|
135
|
+
'CertificateCertificateDescriptionX509DescriptionPolicyIdArgsDict',
|
72
136
|
'CertificateConfigArgs',
|
137
|
+
'CertificateConfigArgsDict',
|
73
138
|
'CertificateConfigPublicKeyArgs',
|
139
|
+
'CertificateConfigPublicKeyArgsDict',
|
74
140
|
'CertificateConfigSubjectConfigArgs',
|
141
|
+
'CertificateConfigSubjectConfigArgsDict',
|
75
142
|
'CertificateConfigSubjectConfigSubjectArgs',
|
143
|
+
'CertificateConfigSubjectConfigSubjectArgsDict',
|
76
144
|
'CertificateConfigSubjectConfigSubjectAltNameArgs',
|
145
|
+
'CertificateConfigSubjectConfigSubjectAltNameArgsDict',
|
77
146
|
'CertificateConfigSubjectKeyIdArgs',
|
147
|
+
'CertificateConfigSubjectKeyIdArgsDict',
|
78
148
|
'CertificateConfigX509ConfigArgs',
|
149
|
+
'CertificateConfigX509ConfigArgsDict',
|
79
150
|
'CertificateConfigX509ConfigAdditionalExtensionArgs',
|
151
|
+
'CertificateConfigX509ConfigAdditionalExtensionArgsDict',
|
80
152
|
'CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs',
|
153
|
+
'CertificateConfigX509ConfigAdditionalExtensionObjectIdArgsDict',
|
81
154
|
'CertificateConfigX509ConfigCaOptionsArgs',
|
155
|
+
'CertificateConfigX509ConfigCaOptionsArgsDict',
|
82
156
|
'CertificateConfigX509ConfigKeyUsageArgs',
|
157
|
+
'CertificateConfigX509ConfigKeyUsageArgsDict',
|
83
158
|
'CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs',
|
159
|
+
'CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgsDict',
|
84
160
|
'CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs',
|
161
|
+
'CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgsDict',
|
85
162
|
'CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs',
|
163
|
+
'CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgsDict',
|
86
164
|
'CertificateConfigX509ConfigNameConstraintsArgs',
|
165
|
+
'CertificateConfigX509ConfigNameConstraintsArgsDict',
|
87
166
|
'CertificateConfigX509ConfigPolicyIdArgs',
|
167
|
+
'CertificateConfigX509ConfigPolicyIdArgsDict',
|
88
168
|
'CertificateRevocationDetailArgs',
|
169
|
+
'CertificateRevocationDetailArgsDict',
|
89
170
|
'CertificateTemplateIamBindingConditionArgs',
|
171
|
+
'CertificateTemplateIamBindingConditionArgsDict',
|
90
172
|
'CertificateTemplateIamMemberConditionArgs',
|
173
|
+
'CertificateTemplateIamMemberConditionArgsDict',
|
91
174
|
'CertificateTemplateIdentityConstraintsArgs',
|
175
|
+
'CertificateTemplateIdentityConstraintsArgsDict',
|
92
176
|
'CertificateTemplateIdentityConstraintsCelExpressionArgs',
|
177
|
+
'CertificateTemplateIdentityConstraintsCelExpressionArgsDict',
|
93
178
|
'CertificateTemplatePassthroughExtensionsArgs',
|
179
|
+
'CertificateTemplatePassthroughExtensionsArgsDict',
|
94
180
|
'CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs',
|
181
|
+
'CertificateTemplatePassthroughExtensionsAdditionalExtensionArgsDict',
|
95
182
|
'CertificateTemplatePredefinedValuesArgs',
|
183
|
+
'CertificateTemplatePredefinedValuesArgsDict',
|
96
184
|
'CertificateTemplatePredefinedValuesAdditionalExtensionArgs',
|
185
|
+
'CertificateTemplatePredefinedValuesAdditionalExtensionArgsDict',
|
97
186
|
'CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs',
|
187
|
+
'CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgsDict',
|
98
188
|
'CertificateTemplatePredefinedValuesCaOptionsArgs',
|
189
|
+
'CertificateTemplatePredefinedValuesCaOptionsArgsDict',
|
99
190
|
'CertificateTemplatePredefinedValuesKeyUsageArgs',
|
191
|
+
'CertificateTemplatePredefinedValuesKeyUsageArgsDict',
|
100
192
|
'CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs',
|
193
|
+
'CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgsDict',
|
101
194
|
'CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs',
|
195
|
+
'CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgsDict',
|
102
196
|
'CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs',
|
197
|
+
'CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgsDict',
|
103
198
|
'CertificateTemplatePredefinedValuesPolicyIdArgs',
|
199
|
+
'CertificateTemplatePredefinedValuesPolicyIdArgsDict',
|
104
200
|
]
|
105
201
|
|
202
|
+
MYPY = False
|
203
|
+
|
204
|
+
if not MYPY:
|
205
|
+
class AuthorityAccessUrlArgsDict(TypedDict):
|
206
|
+
ca_certificate_access_url: NotRequired[pulumi.Input[str]]
|
207
|
+
"""
|
208
|
+
(Output)
|
209
|
+
The URL where this CertificateAuthority's CA certificate is published. This will only be
|
210
|
+
set for CAs that have been activated.
|
211
|
+
"""
|
212
|
+
crl_access_urls: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
213
|
+
"""
|
214
|
+
(Output)
|
215
|
+
The URL where this CertificateAuthority's CRLs are published. This will only be set for
|
216
|
+
CAs that have been activated.
|
217
|
+
"""
|
218
|
+
elif False:
|
219
|
+
AuthorityAccessUrlArgsDict: TypeAlias = Mapping[str, Any]
|
220
|
+
|
106
221
|
@pulumi.input_type
|
107
222
|
class AuthorityAccessUrlArgs:
|
108
223
|
def __init__(__self__, *,
|
@@ -150,6 +265,26 @@ class AuthorityAccessUrlArgs:
|
|
150
265
|
pulumi.set(self, "crl_access_urls", value)
|
151
266
|
|
152
267
|
|
268
|
+
if not MYPY:
|
269
|
+
class AuthorityConfigArgsDict(TypedDict):
|
270
|
+
subject_config: pulumi.Input['AuthorityConfigSubjectConfigArgsDict']
|
271
|
+
"""
|
272
|
+
Specifies some of the values in a certificate that are related to the subject.
|
273
|
+
Structure is documented below.
|
274
|
+
"""
|
275
|
+
x509_config: pulumi.Input['AuthorityConfigX509ConfigArgsDict']
|
276
|
+
"""
|
277
|
+
Describes how some of the technical X.509 fields in a certificate should be populated.
|
278
|
+
Structure is documented below.
|
279
|
+
"""
|
280
|
+
subject_key_id: NotRequired[pulumi.Input['AuthorityConfigSubjectKeyIdArgsDict']]
|
281
|
+
"""
|
282
|
+
When specified this provides a custom SKI to be used in the certificate. This should only be used to maintain a SKI of an existing CA originally created outside CA service, which was not generated using method (1) described in RFC 5280 section 4.2.1.2..
|
283
|
+
Structure is documented below.
|
284
|
+
"""
|
285
|
+
elif False:
|
286
|
+
AuthorityConfigArgsDict: TypeAlias = Mapping[str, Any]
|
287
|
+
|
153
288
|
@pulumi.input_type
|
154
289
|
class AuthorityConfigArgs:
|
155
290
|
def __init__(__self__, *,
|
@@ -209,6 +344,21 @@ class AuthorityConfigArgs:
|
|
209
344
|
pulumi.set(self, "subject_key_id", value)
|
210
345
|
|
211
346
|
|
347
|
+
if not MYPY:
|
348
|
+
class AuthorityConfigSubjectConfigArgsDict(TypedDict):
|
349
|
+
subject: pulumi.Input['AuthorityConfigSubjectConfigSubjectArgsDict']
|
350
|
+
"""
|
351
|
+
Contains distinguished name fields such as the location and organization.
|
352
|
+
Structure is documented below.
|
353
|
+
"""
|
354
|
+
subject_alt_name: NotRequired[pulumi.Input['AuthorityConfigSubjectConfigSubjectAltNameArgsDict']]
|
355
|
+
"""
|
356
|
+
The subject alternative name fields.
|
357
|
+
Structure is documented below.
|
358
|
+
"""
|
359
|
+
elif False:
|
360
|
+
AuthorityConfigSubjectConfigArgsDict: TypeAlias = Mapping[str, Any]
|
361
|
+
|
212
362
|
@pulumi.input_type
|
213
363
|
class AuthorityConfigSubjectConfigArgs:
|
214
364
|
def __init__(__self__, *,
|
@@ -251,6 +401,43 @@ class AuthorityConfigSubjectConfigArgs:
|
|
251
401
|
pulumi.set(self, "subject_alt_name", value)
|
252
402
|
|
253
403
|
|
404
|
+
if not MYPY:
|
405
|
+
class AuthorityConfigSubjectConfigSubjectArgsDict(TypedDict):
|
406
|
+
common_name: pulumi.Input[str]
|
407
|
+
"""
|
408
|
+
The common name of the distinguished name.
|
409
|
+
"""
|
410
|
+
organization: pulumi.Input[str]
|
411
|
+
"""
|
412
|
+
The organization of the subject.
|
413
|
+
"""
|
414
|
+
country_code: NotRequired[pulumi.Input[str]]
|
415
|
+
"""
|
416
|
+
The country code of the subject.
|
417
|
+
"""
|
418
|
+
locality: NotRequired[pulumi.Input[str]]
|
419
|
+
"""
|
420
|
+
The locality or city of the subject.
|
421
|
+
"""
|
422
|
+
organizational_unit: NotRequired[pulumi.Input[str]]
|
423
|
+
"""
|
424
|
+
The organizational unit of the subject.
|
425
|
+
"""
|
426
|
+
postal_code: NotRequired[pulumi.Input[str]]
|
427
|
+
"""
|
428
|
+
The postal code of the subject.
|
429
|
+
"""
|
430
|
+
province: NotRequired[pulumi.Input[str]]
|
431
|
+
"""
|
432
|
+
The province, territory, or regional state of the subject.
|
433
|
+
"""
|
434
|
+
street_address: NotRequired[pulumi.Input[str]]
|
435
|
+
"""
|
436
|
+
The street address of the subject.
|
437
|
+
"""
|
438
|
+
elif False:
|
439
|
+
AuthorityConfigSubjectConfigSubjectArgsDict: TypeAlias = Mapping[str, Any]
|
440
|
+
|
254
441
|
@pulumi.input_type
|
255
442
|
class AuthorityConfigSubjectConfigSubjectArgs:
|
256
443
|
def __init__(__self__, *,
|
@@ -384,6 +571,27 @@ class AuthorityConfigSubjectConfigSubjectArgs:
|
|
384
571
|
pulumi.set(self, "street_address", value)
|
385
572
|
|
386
573
|
|
574
|
+
if not MYPY:
|
575
|
+
class AuthorityConfigSubjectConfigSubjectAltNameArgsDict(TypedDict):
|
576
|
+
dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
577
|
+
"""
|
578
|
+
Contains only valid, fully-qualified host names.
|
579
|
+
"""
|
580
|
+
email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
581
|
+
"""
|
582
|
+
Contains only valid RFC 2822 E-mail addresses.
|
583
|
+
"""
|
584
|
+
ip_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
585
|
+
"""
|
586
|
+
Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
|
587
|
+
"""
|
588
|
+
uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
589
|
+
"""
|
590
|
+
Contains only valid RFC 3986 URIs.
|
591
|
+
"""
|
592
|
+
elif False:
|
593
|
+
AuthorityConfigSubjectConfigSubjectAltNameArgsDict: TypeAlias = Mapping[str, Any]
|
594
|
+
|
387
595
|
@pulumi.input_type
|
388
596
|
class AuthorityConfigSubjectConfigSubjectAltNameArgs:
|
389
597
|
def __init__(__self__, *,
|
@@ -455,6 +663,17 @@ class AuthorityConfigSubjectConfigSubjectAltNameArgs:
|
|
455
663
|
pulumi.set(self, "uris", value)
|
456
664
|
|
457
665
|
|
666
|
+
if not MYPY:
|
667
|
+
class AuthorityConfigSubjectKeyIdArgsDict(TypedDict):
|
668
|
+
key_id: NotRequired[pulumi.Input[str]]
|
669
|
+
"""
|
670
|
+
The value of the KeyId in lowercase hexidecimal.
|
671
|
+
|
672
|
+
<a name="nested_x509_config"></a>The `x509_config` block supports:
|
673
|
+
"""
|
674
|
+
elif False:
|
675
|
+
AuthorityConfigSubjectKeyIdArgsDict: TypeAlias = Mapping[str, Any]
|
676
|
+
|
458
677
|
@pulumi.input_type
|
459
678
|
class AuthorityConfigSubjectKeyIdArgs:
|
460
679
|
def __init__(__self__, *,
|
@@ -482,6 +701,36 @@ class AuthorityConfigSubjectKeyIdArgs:
|
|
482
701
|
pulumi.set(self, "key_id", value)
|
483
702
|
|
484
703
|
|
704
|
+
if not MYPY:
|
705
|
+
class AuthorityConfigX509ConfigArgsDict(TypedDict):
|
706
|
+
ca_options: pulumi.Input['AuthorityConfigX509ConfigCaOptionsArgsDict']
|
707
|
+
"""
|
708
|
+
Describes values that are relevant in a CA certificate.
|
709
|
+
"""
|
710
|
+
key_usage: pulumi.Input['AuthorityConfigX509ConfigKeyUsageArgsDict']
|
711
|
+
"""
|
712
|
+
Indicates the intended use for keys that correspond to a certificate.
|
713
|
+
"""
|
714
|
+
additional_extensions: NotRequired[pulumi.Input[Sequence[pulumi.Input['AuthorityConfigX509ConfigAdditionalExtensionArgsDict']]]]
|
715
|
+
"""
|
716
|
+
Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
|
717
|
+
"""
|
718
|
+
aia_ocsp_servers: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
719
|
+
"""
|
720
|
+
Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
|
721
|
+
"Authority Information Access" extension in the certificate.
|
722
|
+
"""
|
723
|
+
name_constraints: NotRequired[pulumi.Input['AuthorityConfigX509ConfigNameConstraintsArgsDict']]
|
724
|
+
"""
|
725
|
+
Describes the X.509 name constraints extension.
|
726
|
+
"""
|
727
|
+
policy_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input['AuthorityConfigX509ConfigPolicyIdArgsDict']]]]
|
728
|
+
"""
|
729
|
+
Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
|
730
|
+
"""
|
731
|
+
elif False:
|
732
|
+
AuthorityConfigX509ConfigArgsDict: TypeAlias = Mapping[str, Any]
|
733
|
+
|
485
734
|
@pulumi.input_type
|
486
735
|
class AuthorityConfigX509ConfigArgs:
|
487
736
|
def __init__(__self__, *,
|
@@ -585,6 +834,25 @@ class AuthorityConfigX509ConfigArgs:
|
|
585
834
|
pulumi.set(self, "policy_ids", value)
|
586
835
|
|
587
836
|
|
837
|
+
if not MYPY:
|
838
|
+
class AuthorityConfigX509ConfigAdditionalExtensionArgsDict(TypedDict):
|
839
|
+
critical: pulumi.Input[bool]
|
840
|
+
"""
|
841
|
+
Indicates whether or not this extension is critical (i.e., if the client does not know how to
|
842
|
+
handle this extension, the client should consider this to be an error).
|
843
|
+
"""
|
844
|
+
object_id: pulumi.Input['AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgsDict']
|
845
|
+
"""
|
846
|
+
Describes values that are relevant in a CA certificate.
|
847
|
+
Structure is documented below.
|
848
|
+
"""
|
849
|
+
value: pulumi.Input[str]
|
850
|
+
"""
|
851
|
+
The value of this X.509 extension. A base64-encoded string.
|
852
|
+
"""
|
853
|
+
elif False:
|
854
|
+
AuthorityConfigX509ConfigAdditionalExtensionArgsDict: TypeAlias = Mapping[str, Any]
|
855
|
+
|
588
856
|
@pulumi.input_type
|
589
857
|
class AuthorityConfigX509ConfigAdditionalExtensionArgs:
|
590
858
|
def __init__(__self__, *,
|
@@ -641,6 +909,15 @@ class AuthorityConfigX509ConfigAdditionalExtensionArgs:
|
|
641
909
|
pulumi.set(self, "value", value)
|
642
910
|
|
643
911
|
|
912
|
+
if not MYPY:
|
913
|
+
class AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgsDict(TypedDict):
|
914
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
915
|
+
"""
|
916
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
917
|
+
"""
|
918
|
+
elif False:
|
919
|
+
AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgsDict: TypeAlias = Mapping[str, Any]
|
920
|
+
|
644
921
|
@pulumi.input_type
|
645
922
|
class AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs:
|
646
923
|
def __init__(__self__, *,
|
@@ -663,6 +940,32 @@ class AuthorityConfigX509ConfigAdditionalExtensionObjectIdArgs:
|
|
663
940
|
pulumi.set(self, "object_id_paths", value)
|
664
941
|
|
665
942
|
|
943
|
+
if not MYPY:
|
944
|
+
class AuthorityConfigX509ConfigCaOptionsArgsDict(TypedDict):
|
945
|
+
is_ca: pulumi.Input[bool]
|
946
|
+
"""
|
947
|
+
When true, the "CA" in Basic Constraints extension will be set to true.
|
948
|
+
"""
|
949
|
+
max_issuer_path_length: NotRequired[pulumi.Input[int]]
|
950
|
+
"""
|
951
|
+
Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
|
952
|
+
subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. Setting the value to 0
|
953
|
+
requires setting `zero_max_issuer_path_length = true`.
|
954
|
+
"""
|
955
|
+
non_ca: NotRequired[pulumi.Input[bool]]
|
956
|
+
"""
|
957
|
+
When true, the "CA" in Basic Constraints extension will be set to false.
|
958
|
+
If both `is_ca` and `non_ca` are unset, the extension will be omitted from the CA certificate.
|
959
|
+
"""
|
960
|
+
zero_max_issuer_path_length: NotRequired[pulumi.Input[bool]]
|
961
|
+
"""
|
962
|
+
When true, the "path length constraint" in Basic Constraints extension will be set to 0.
|
963
|
+
If both `max_issuer_path_length` and `zero_max_issuer_path_length` are unset,
|
964
|
+
the max path length will be omitted from the CA certificate.
|
965
|
+
"""
|
966
|
+
elif False:
|
967
|
+
AuthorityConfigX509ConfigCaOptionsArgsDict: TypeAlias = Mapping[str, Any]
|
968
|
+
|
666
969
|
@pulumi.input_type
|
667
970
|
class AuthorityConfigX509ConfigCaOptionsArgs:
|
668
971
|
def __init__(__self__, *,
|
@@ -743,6 +1046,26 @@ class AuthorityConfigX509ConfigCaOptionsArgs:
|
|
743
1046
|
pulumi.set(self, "zero_max_issuer_path_length", value)
|
744
1047
|
|
745
1048
|
|
1049
|
+
if not MYPY:
|
1050
|
+
class AuthorityConfigX509ConfigKeyUsageArgsDict(TypedDict):
|
1051
|
+
base_key_usage: pulumi.Input['AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgsDict']
|
1052
|
+
"""
|
1053
|
+
Describes high-level ways in which a key may be used.
|
1054
|
+
Structure is documented below.
|
1055
|
+
"""
|
1056
|
+
extended_key_usage: pulumi.Input['AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgsDict']
|
1057
|
+
"""
|
1058
|
+
Describes high-level ways in which a key may be used.
|
1059
|
+
Structure is documented below.
|
1060
|
+
"""
|
1061
|
+
unknown_extended_key_usages: NotRequired[pulumi.Input[Sequence[pulumi.Input['AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgsDict']]]]
|
1062
|
+
"""
|
1063
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
1064
|
+
Structure is documented below.
|
1065
|
+
"""
|
1066
|
+
elif False:
|
1067
|
+
AuthorityConfigX509ConfigKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
1068
|
+
|
746
1069
|
@pulumi.input_type
|
747
1070
|
class AuthorityConfigX509ConfigKeyUsageArgs:
|
748
1071
|
def __init__(__self__, *,
|
@@ -802,6 +1125,47 @@ class AuthorityConfigX509ConfigKeyUsageArgs:
|
|
802
1125
|
pulumi.set(self, "unknown_extended_key_usages", value)
|
803
1126
|
|
804
1127
|
|
1128
|
+
if not MYPY:
|
1129
|
+
class AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgsDict(TypedDict):
|
1130
|
+
cert_sign: NotRequired[pulumi.Input[bool]]
|
1131
|
+
"""
|
1132
|
+
The key may be used to sign certificates.
|
1133
|
+
"""
|
1134
|
+
content_commitment: NotRequired[pulumi.Input[bool]]
|
1135
|
+
"""
|
1136
|
+
The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
|
1137
|
+
"""
|
1138
|
+
crl_sign: NotRequired[pulumi.Input[bool]]
|
1139
|
+
"""
|
1140
|
+
The key may be used sign certificate revocation lists.
|
1141
|
+
"""
|
1142
|
+
data_encipherment: NotRequired[pulumi.Input[bool]]
|
1143
|
+
"""
|
1144
|
+
The key may be used to encipher data.
|
1145
|
+
"""
|
1146
|
+
decipher_only: NotRequired[pulumi.Input[bool]]
|
1147
|
+
"""
|
1148
|
+
The key may be used to decipher only.
|
1149
|
+
"""
|
1150
|
+
digital_signature: NotRequired[pulumi.Input[bool]]
|
1151
|
+
"""
|
1152
|
+
The key may be used for digital signatures.
|
1153
|
+
"""
|
1154
|
+
encipher_only: NotRequired[pulumi.Input[bool]]
|
1155
|
+
"""
|
1156
|
+
The key may be used to encipher only.
|
1157
|
+
"""
|
1158
|
+
key_agreement: NotRequired[pulumi.Input[bool]]
|
1159
|
+
"""
|
1160
|
+
The key may be used in a key agreement protocol.
|
1161
|
+
"""
|
1162
|
+
key_encipherment: NotRequired[pulumi.Input[bool]]
|
1163
|
+
"""
|
1164
|
+
The key may be used to encipher other keys.
|
1165
|
+
"""
|
1166
|
+
elif False:
|
1167
|
+
AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
1168
|
+
|
805
1169
|
@pulumi.input_type
|
806
1170
|
class AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs:
|
807
1171
|
def __init__(__self__, *,
|
@@ -953,6 +1317,35 @@ class AuthorityConfigX509ConfigKeyUsageBaseKeyUsageArgs:
|
|
953
1317
|
pulumi.set(self, "key_encipherment", value)
|
954
1318
|
|
955
1319
|
|
1320
|
+
if not MYPY:
|
1321
|
+
class AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgsDict(TypedDict):
|
1322
|
+
client_auth: NotRequired[pulumi.Input[bool]]
|
1323
|
+
"""
|
1324
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
|
1325
|
+
"""
|
1326
|
+
code_signing: NotRequired[pulumi.Input[bool]]
|
1327
|
+
"""
|
1328
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
|
1329
|
+
"""
|
1330
|
+
email_protection: NotRequired[pulumi.Input[bool]]
|
1331
|
+
"""
|
1332
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
|
1333
|
+
"""
|
1334
|
+
ocsp_signing: NotRequired[pulumi.Input[bool]]
|
1335
|
+
"""
|
1336
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
|
1337
|
+
"""
|
1338
|
+
server_auth: NotRequired[pulumi.Input[bool]]
|
1339
|
+
"""
|
1340
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
|
1341
|
+
"""
|
1342
|
+
time_stamping: NotRequired[pulumi.Input[bool]]
|
1343
|
+
"""
|
1344
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
|
1345
|
+
"""
|
1346
|
+
elif False:
|
1347
|
+
AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
1348
|
+
|
956
1349
|
@pulumi.input_type
|
957
1350
|
class AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs:
|
958
1351
|
def __init__(__self__, *,
|
@@ -1056,6 +1449,15 @@ class AuthorityConfigX509ConfigKeyUsageExtendedKeyUsageArgs:
|
|
1056
1449
|
pulumi.set(self, "time_stamping", value)
|
1057
1450
|
|
1058
1451
|
|
1452
|
+
if not MYPY:
|
1453
|
+
class AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgsDict(TypedDict):
|
1454
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
1455
|
+
"""
|
1456
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
1457
|
+
"""
|
1458
|
+
elif False:
|
1459
|
+
AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
1460
|
+
|
1059
1461
|
@pulumi.input_type
|
1060
1462
|
class AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs:
|
1061
1463
|
def __init__(__self__, *,
|
@@ -1078,6 +1480,71 @@ class AuthorityConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs:
|
|
1078
1480
|
pulumi.set(self, "object_id_paths", value)
|
1079
1481
|
|
1080
1482
|
|
1483
|
+
if not MYPY:
|
1484
|
+
class AuthorityConfigX509ConfigNameConstraintsArgsDict(TypedDict):
|
1485
|
+
critical: pulumi.Input[bool]
|
1486
|
+
"""
|
1487
|
+
Indicates whether or not the name constraints are marked critical.
|
1488
|
+
"""
|
1489
|
+
excluded_dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
1490
|
+
"""
|
1491
|
+
Contains excluded DNS names. Any DNS name that can be
|
1492
|
+
constructed by simply adding zero or more labels to
|
1493
|
+
the left-hand side of the name satisfies the name constraint.
|
1494
|
+
For example, `example.com`, `www.example.com`, `www.sub.example.com`
|
1495
|
+
would satisfy `example.com` while `example1.com` does not.
|
1496
|
+
"""
|
1497
|
+
excluded_email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
1498
|
+
"""
|
1499
|
+
Contains the excluded email addresses. The value can be a particular
|
1500
|
+
email address, a hostname to indicate all email addresses on that host or
|
1501
|
+
a domain with a leading period (e.g. `.example.com`) to indicate
|
1502
|
+
all email addresses in that domain.
|
1503
|
+
"""
|
1504
|
+
excluded_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
1505
|
+
"""
|
1506
|
+
Contains the excluded IP ranges. For IPv4 addresses, the ranges
|
1507
|
+
are expressed using CIDR notation as specified in RFC 4632.
|
1508
|
+
For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
|
1509
|
+
addresses.
|
1510
|
+
"""
|
1511
|
+
excluded_uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
1512
|
+
"""
|
1513
|
+
Contains the excluded URIs that apply to the host part of the name.
|
1514
|
+
The value can be a hostname or a domain with a
|
1515
|
+
leading period (like `.example.com`)
|
1516
|
+
"""
|
1517
|
+
permitted_dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
1518
|
+
"""
|
1519
|
+
Contains permitted DNS names. Any DNS name that can be
|
1520
|
+
constructed by simply adding zero or more labels to
|
1521
|
+
the left-hand side of the name satisfies the name constraint.
|
1522
|
+
For example, `example.com`, `www.example.com`, `www.sub.example.com`
|
1523
|
+
would satisfy `example.com` while `example1.com` does not.
|
1524
|
+
"""
|
1525
|
+
permitted_email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
1526
|
+
"""
|
1527
|
+
Contains the permitted email addresses. The value can be a particular
|
1528
|
+
email address, a hostname to indicate all email addresses on that host or
|
1529
|
+
a domain with a leading period (e.g. `.example.com`) to indicate
|
1530
|
+
all email addresses in that domain.
|
1531
|
+
"""
|
1532
|
+
permitted_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
1533
|
+
"""
|
1534
|
+
Contains the permitted IP ranges. For IPv4 addresses, the ranges
|
1535
|
+
are expressed using CIDR notation as specified in RFC 4632.
|
1536
|
+
For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
|
1537
|
+
addresses.
|
1538
|
+
"""
|
1539
|
+
permitted_uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
1540
|
+
"""
|
1541
|
+
Contains the permitted URIs that apply to the host part of the name.
|
1542
|
+
The value can be a hostname or a domain with a
|
1543
|
+
leading period (like `.example.com`)
|
1544
|
+
"""
|
1545
|
+
elif False:
|
1546
|
+
AuthorityConfigX509ConfigNameConstraintsArgsDict: TypeAlias = Mapping[str, Any]
|
1547
|
+
|
1081
1548
|
@pulumi.input_type
|
1082
1549
|
class AuthorityConfigX509ConfigNameConstraintsArgs:
|
1083
1550
|
def __init__(__self__, *,
|
@@ -1276,6 +1743,15 @@ class AuthorityConfigX509ConfigNameConstraintsArgs:
|
|
1276
1743
|
pulumi.set(self, "permitted_uris", value)
|
1277
1744
|
|
1278
1745
|
|
1746
|
+
if not MYPY:
|
1747
|
+
class AuthorityConfigX509ConfigPolicyIdArgsDict(TypedDict):
|
1748
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
1749
|
+
"""
|
1750
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
1751
|
+
"""
|
1752
|
+
elif False:
|
1753
|
+
AuthorityConfigX509ConfigPolicyIdArgsDict: TypeAlias = Mapping[str, Any]
|
1754
|
+
|
1279
1755
|
@pulumi.input_type
|
1280
1756
|
class AuthorityConfigX509ConfigPolicyIdArgs:
|
1281
1757
|
def __init__(__self__, *,
|
@@ -1298,10 +1774,28 @@ class AuthorityConfigX509ConfigPolicyIdArgs:
|
|
1298
1774
|
pulumi.set(self, "object_id_paths", value)
|
1299
1775
|
|
1300
1776
|
|
1301
|
-
|
1302
|
-
class
|
1303
|
-
|
1304
|
-
|
1777
|
+
if not MYPY:
|
1778
|
+
class AuthorityKeySpecArgsDict(TypedDict):
|
1779
|
+
algorithm: NotRequired[pulumi.Input[str]]
|
1780
|
+
"""
|
1781
|
+
The algorithm to use for creating a managed Cloud KMS key for a for a simplified
|
1782
|
+
experience. All managed keys will be have their ProtectionLevel as HSM.
|
1783
|
+
Possible values are: `SIGN_HASH_ALGORITHM_UNSPECIFIED`, `RSA_PSS_2048_SHA256`, `RSA_PSS_3072_SHA256`, `RSA_PSS_4096_SHA256`, `RSA_PKCS1_2048_SHA256`, `RSA_PKCS1_3072_SHA256`, `RSA_PKCS1_4096_SHA256`, `EC_P256_SHA256`, `EC_P384_SHA384`.
|
1784
|
+
|
1785
|
+
- - -
|
1786
|
+
"""
|
1787
|
+
cloud_kms_key_version: NotRequired[pulumi.Input[str]]
|
1788
|
+
"""
|
1789
|
+
The resource name for an existing Cloud KMS CryptoKeyVersion in the format
|
1790
|
+
`projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
|
1791
|
+
"""
|
1792
|
+
elif False:
|
1793
|
+
AuthorityKeySpecArgsDict: TypeAlias = Mapping[str, Any]
|
1794
|
+
|
1795
|
+
@pulumi.input_type
|
1796
|
+
class AuthorityKeySpecArgs:
|
1797
|
+
def __init__(__self__, *,
|
1798
|
+
algorithm: Optional[pulumi.Input[str]] = None,
|
1305
1799
|
cloud_kms_key_version: Optional[pulumi.Input[str]] = None):
|
1306
1800
|
"""
|
1307
1801
|
:param pulumi.Input[str] algorithm: The algorithm to use for creating a managed Cloud KMS key for a for a simplified
|
@@ -1347,6 +1841,24 @@ class AuthorityKeySpecArgs:
|
|
1347
1841
|
pulumi.set(self, "cloud_kms_key_version", value)
|
1348
1842
|
|
1349
1843
|
|
1844
|
+
if not MYPY:
|
1845
|
+
class AuthoritySubordinateConfigArgsDict(TypedDict):
|
1846
|
+
certificate_authority: NotRequired[pulumi.Input[str]]
|
1847
|
+
"""
|
1848
|
+
This can refer to a CertificateAuthority that was used to create a
|
1849
|
+
subordinate CertificateAuthority. This field is used for information
|
1850
|
+
and usability purposes only. The resource name is in the format
|
1851
|
+
`projects/*/locations/*/caPools/*/certificateAuthorities/*`.
|
1852
|
+
"""
|
1853
|
+
pem_issuer_chain: NotRequired[pulumi.Input['AuthoritySubordinateConfigPemIssuerChainArgsDict']]
|
1854
|
+
"""
|
1855
|
+
Contains the PEM certificate chain for the issuers of this CertificateAuthority,
|
1856
|
+
but not pem certificate for this CA itself.
|
1857
|
+
Structure is documented below.
|
1858
|
+
"""
|
1859
|
+
elif False:
|
1860
|
+
AuthoritySubordinateConfigArgsDict: TypeAlias = Mapping[str, Any]
|
1861
|
+
|
1350
1862
|
@pulumi.input_type
|
1351
1863
|
class AuthoritySubordinateConfigArgs:
|
1352
1864
|
def __init__(__self__, *,
|
@@ -1396,6 +1908,15 @@ class AuthoritySubordinateConfigArgs:
|
|
1396
1908
|
pulumi.set(self, "pem_issuer_chain", value)
|
1397
1909
|
|
1398
1910
|
|
1911
|
+
if not MYPY:
|
1912
|
+
class AuthoritySubordinateConfigPemIssuerChainArgsDict(TypedDict):
|
1913
|
+
pem_certificates: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
1914
|
+
"""
|
1915
|
+
Expected to be in leaf-to-root order according to RFC 5246.
|
1916
|
+
"""
|
1917
|
+
elif False:
|
1918
|
+
AuthoritySubordinateConfigPemIssuerChainArgsDict: TypeAlias = Mapping[str, Any]
|
1919
|
+
|
1399
1920
|
@pulumi.input_type
|
1400
1921
|
class AuthoritySubordinateConfigPemIssuerChainArgs:
|
1401
1922
|
def __init__(__self__, *,
|
@@ -1419,6 +1940,20 @@ class AuthoritySubordinateConfigPemIssuerChainArgs:
|
|
1419
1940
|
pulumi.set(self, "pem_certificates", value)
|
1420
1941
|
|
1421
1942
|
|
1943
|
+
if not MYPY:
|
1944
|
+
class CaPoolIamBindingConditionArgsDict(TypedDict):
|
1945
|
+
expression: pulumi.Input[str]
|
1946
|
+
"""
|
1947
|
+
Textual representation of an expression in Common Expression Language syntax.
|
1948
|
+
"""
|
1949
|
+
title: pulumi.Input[str]
|
1950
|
+
"""
|
1951
|
+
A title for the expression, i.e. a short string describing its purpose.
|
1952
|
+
"""
|
1953
|
+
description: NotRequired[pulumi.Input[str]]
|
1954
|
+
elif False:
|
1955
|
+
CaPoolIamBindingConditionArgsDict: TypeAlias = Mapping[str, Any]
|
1956
|
+
|
1422
1957
|
@pulumi.input_type
|
1423
1958
|
class CaPoolIamBindingConditionArgs:
|
1424
1959
|
def __init__(__self__, *,
|
@@ -1468,6 +2003,20 @@ class CaPoolIamBindingConditionArgs:
|
|
1468
2003
|
pulumi.set(self, "description", value)
|
1469
2004
|
|
1470
2005
|
|
2006
|
+
if not MYPY:
|
2007
|
+
class CaPoolIamMemberConditionArgsDict(TypedDict):
|
2008
|
+
expression: pulumi.Input[str]
|
2009
|
+
"""
|
2010
|
+
Textual representation of an expression in Common Expression Language syntax.
|
2011
|
+
"""
|
2012
|
+
title: pulumi.Input[str]
|
2013
|
+
"""
|
2014
|
+
A title for the expression, i.e. a short string describing its purpose.
|
2015
|
+
"""
|
2016
|
+
description: NotRequired[pulumi.Input[str]]
|
2017
|
+
elif False:
|
2018
|
+
CaPoolIamMemberConditionArgsDict: TypeAlias = Mapping[str, Any]
|
2019
|
+
|
1471
2020
|
@pulumi.input_type
|
1472
2021
|
class CaPoolIamMemberConditionArgs:
|
1473
2022
|
def __init__(__self__, *,
|
@@ -1517,6 +2066,41 @@ class CaPoolIamMemberConditionArgs:
|
|
1517
2066
|
pulumi.set(self, "description", value)
|
1518
2067
|
|
1519
2068
|
|
2069
|
+
if not MYPY:
|
2070
|
+
class CaPoolIssuancePolicyArgsDict(TypedDict):
|
2071
|
+
allowed_issuance_modes: NotRequired[pulumi.Input['CaPoolIssuancePolicyAllowedIssuanceModesArgsDict']]
|
2072
|
+
"""
|
2073
|
+
IssuanceModes specifies the allowed ways in which Certificates may be requested from this CaPool.
|
2074
|
+
Structure is documented below.
|
2075
|
+
"""
|
2076
|
+
allowed_key_types: NotRequired[pulumi.Input[Sequence[pulumi.Input['CaPoolIssuancePolicyAllowedKeyTypeArgsDict']]]]
|
2077
|
+
"""
|
2078
|
+
If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here.
|
2079
|
+
Otherwise, any key may be used.
|
2080
|
+
Structure is documented below.
|
2081
|
+
"""
|
2082
|
+
baseline_values: NotRequired[pulumi.Input['CaPoolIssuancePolicyBaselineValuesArgsDict']]
|
2083
|
+
"""
|
2084
|
+
A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request
|
2085
|
+
includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate
|
2086
|
+
request uses a CertificateTemplate that defines conflicting predefinedValues for the same properties, the certificate
|
2087
|
+
issuance request will fail.
|
2088
|
+
Structure is documented below.
|
2089
|
+
"""
|
2090
|
+
identity_constraints: NotRequired[pulumi.Input['CaPoolIssuancePolicyIdentityConstraintsArgsDict']]
|
2091
|
+
"""
|
2092
|
+
Describes constraints on identities that may appear in Certificates issued through this CaPool.
|
2093
|
+
If this is omitted, then this CaPool will not add restrictions on a certificate's identity.
|
2094
|
+
Structure is documented below.
|
2095
|
+
"""
|
2096
|
+
maximum_lifetime: NotRequired[pulumi.Input[str]]
|
2097
|
+
"""
|
2098
|
+
The maximum lifetime allowed for issued Certificates. Note that if the issuing CertificateAuthority
|
2099
|
+
expires before a Certificate's requested maximumLifetime, the effective lifetime will be explicitly truncated to match it.
|
2100
|
+
"""
|
2101
|
+
elif False:
|
2102
|
+
CaPoolIssuancePolicyArgsDict: TypeAlias = Mapping[str, Any]
|
2103
|
+
|
1520
2104
|
@pulumi.input_type
|
1521
2105
|
class CaPoolIssuancePolicyArgs:
|
1522
2106
|
def __init__(__self__, *,
|
@@ -1624,6 +2208,19 @@ class CaPoolIssuancePolicyArgs:
|
|
1624
2208
|
pulumi.set(self, "maximum_lifetime", value)
|
1625
2209
|
|
1626
2210
|
|
2211
|
+
if not MYPY:
|
2212
|
+
class CaPoolIssuancePolicyAllowedIssuanceModesArgsDict(TypedDict):
|
2213
|
+
allow_config_based_issuance: pulumi.Input[bool]
|
2214
|
+
"""
|
2215
|
+
When true, allows callers to create Certificates by specifying a CertificateConfig.
|
2216
|
+
"""
|
2217
|
+
allow_csr_based_issuance: pulumi.Input[bool]
|
2218
|
+
"""
|
2219
|
+
When true, allows callers to create Certificates by specifying a CSR.
|
2220
|
+
"""
|
2221
|
+
elif False:
|
2222
|
+
CaPoolIssuancePolicyAllowedIssuanceModesArgsDict: TypeAlias = Mapping[str, Any]
|
2223
|
+
|
1627
2224
|
@pulumi.input_type
|
1628
2225
|
class CaPoolIssuancePolicyAllowedIssuanceModesArgs:
|
1629
2226
|
def __init__(__self__, *,
|
@@ -1661,6 +2258,21 @@ class CaPoolIssuancePolicyAllowedIssuanceModesArgs:
|
|
1661
2258
|
pulumi.set(self, "allow_csr_based_issuance", value)
|
1662
2259
|
|
1663
2260
|
|
2261
|
+
if not MYPY:
|
2262
|
+
class CaPoolIssuancePolicyAllowedKeyTypeArgsDict(TypedDict):
|
2263
|
+
elliptic_curve: NotRequired[pulumi.Input['CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgsDict']]
|
2264
|
+
"""
|
2265
|
+
Represents an allowed Elliptic Curve key type.
|
2266
|
+
Structure is documented below.
|
2267
|
+
"""
|
2268
|
+
rsa: NotRequired[pulumi.Input['CaPoolIssuancePolicyAllowedKeyTypeRsaArgsDict']]
|
2269
|
+
"""
|
2270
|
+
Describes an RSA key that may be used in a Certificate issued from a CaPool.
|
2271
|
+
Structure is documented below.
|
2272
|
+
"""
|
2273
|
+
elif False:
|
2274
|
+
CaPoolIssuancePolicyAllowedKeyTypeArgsDict: TypeAlias = Mapping[str, Any]
|
2275
|
+
|
1664
2276
|
@pulumi.input_type
|
1665
2277
|
class CaPoolIssuancePolicyAllowedKeyTypeArgs:
|
1666
2278
|
def __init__(__self__, *,
|
@@ -1704,6 +2316,16 @@ class CaPoolIssuancePolicyAllowedKeyTypeArgs:
|
|
1704
2316
|
pulumi.set(self, "rsa", value)
|
1705
2317
|
|
1706
2318
|
|
2319
|
+
if not MYPY:
|
2320
|
+
class CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgsDict(TypedDict):
|
2321
|
+
signature_algorithm: pulumi.Input[str]
|
2322
|
+
"""
|
2323
|
+
The algorithm used.
|
2324
|
+
Possible values are: `ECDSA_P256`, `ECDSA_P384`, `EDDSA_25519`.
|
2325
|
+
"""
|
2326
|
+
elif False:
|
2327
|
+
CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgsDict: TypeAlias = Mapping[str, Any]
|
2328
|
+
|
1707
2329
|
@pulumi.input_type
|
1708
2330
|
class CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs:
|
1709
2331
|
def __init__(__self__, *,
|
@@ -1728,6 +2350,21 @@ class CaPoolIssuancePolicyAllowedKeyTypeEllipticCurveArgs:
|
|
1728
2350
|
pulumi.set(self, "signature_algorithm", value)
|
1729
2351
|
|
1730
2352
|
|
2353
|
+
if not MYPY:
|
2354
|
+
class CaPoolIssuancePolicyAllowedKeyTypeRsaArgsDict(TypedDict):
|
2355
|
+
max_modulus_size: NotRequired[pulumi.Input[str]]
|
2356
|
+
"""
|
2357
|
+
The maximum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the
|
2358
|
+
service will not enforce an explicit upper bound on RSA modulus sizes.
|
2359
|
+
"""
|
2360
|
+
min_modulus_size: NotRequired[pulumi.Input[str]]
|
2361
|
+
"""
|
2362
|
+
The minimum allowed RSA modulus size, in bits. If this is not set, or if set to zero, the
|
2363
|
+
service-level min RSA modulus size will continue to apply.
|
2364
|
+
"""
|
2365
|
+
elif False:
|
2366
|
+
CaPoolIssuancePolicyAllowedKeyTypeRsaArgsDict: TypeAlias = Mapping[str, Any]
|
2367
|
+
|
1731
2368
|
@pulumi.input_type
|
1732
2369
|
class CaPoolIssuancePolicyAllowedKeyTypeRsaArgs:
|
1733
2370
|
def __init__(__self__, *,
|
@@ -1771,6 +2408,41 @@ class CaPoolIssuancePolicyAllowedKeyTypeRsaArgs:
|
|
1771
2408
|
pulumi.set(self, "min_modulus_size", value)
|
1772
2409
|
|
1773
2410
|
|
2411
|
+
if not MYPY:
|
2412
|
+
class CaPoolIssuancePolicyBaselineValuesArgsDict(TypedDict):
|
2413
|
+
ca_options: pulumi.Input['CaPoolIssuancePolicyBaselineValuesCaOptionsArgsDict']
|
2414
|
+
"""
|
2415
|
+
Describes values that are relevant in a CA certificate.
|
2416
|
+
Structure is documented below.
|
2417
|
+
"""
|
2418
|
+
key_usage: pulumi.Input['CaPoolIssuancePolicyBaselineValuesKeyUsageArgsDict']
|
2419
|
+
"""
|
2420
|
+
Indicates the intended use for keys that correspond to a certificate.
|
2421
|
+
Structure is documented below.
|
2422
|
+
"""
|
2423
|
+
additional_extensions: NotRequired[pulumi.Input[Sequence[pulumi.Input['CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgsDict']]]]
|
2424
|
+
"""
|
2425
|
+
Specifies an X.509 extension, which may be used in different parts of X.509 objects like certificates, CSRs, and CRLs.
|
2426
|
+
Structure is documented below.
|
2427
|
+
"""
|
2428
|
+
aia_ocsp_servers: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
2429
|
+
"""
|
2430
|
+
Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
|
2431
|
+
"Authority Information Access" extension in the certificate.
|
2432
|
+
"""
|
2433
|
+
name_constraints: NotRequired[pulumi.Input['CaPoolIssuancePolicyBaselineValuesNameConstraintsArgsDict']]
|
2434
|
+
"""
|
2435
|
+
Describes the X.509 name constraints extension.
|
2436
|
+
Structure is documented below.
|
2437
|
+
"""
|
2438
|
+
policy_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input['CaPoolIssuancePolicyBaselineValuesPolicyIdArgsDict']]]]
|
2439
|
+
"""
|
2440
|
+
Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
|
2441
|
+
Structure is documented below.
|
2442
|
+
"""
|
2443
|
+
elif False:
|
2444
|
+
CaPoolIssuancePolicyBaselineValuesArgsDict: TypeAlias = Mapping[str, Any]
|
2445
|
+
|
1774
2446
|
@pulumi.input_type
|
1775
2447
|
class CaPoolIssuancePolicyBaselineValuesArgs:
|
1776
2448
|
def __init__(__self__, *,
|
@@ -1884,6 +2556,25 @@ class CaPoolIssuancePolicyBaselineValuesArgs:
|
|
1884
2556
|
pulumi.set(self, "policy_ids", value)
|
1885
2557
|
|
1886
2558
|
|
2559
|
+
if not MYPY:
|
2560
|
+
class CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgsDict(TypedDict):
|
2561
|
+
critical: pulumi.Input[bool]
|
2562
|
+
"""
|
2563
|
+
Indicates whether or not this extension is critical (i.e., if the client does not know how to
|
2564
|
+
handle this extension, the client should consider this to be an error).
|
2565
|
+
"""
|
2566
|
+
object_id: pulumi.Input['CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgsDict']
|
2567
|
+
"""
|
2568
|
+
Describes values that are relevant in a CA certificate.
|
2569
|
+
Structure is documented below.
|
2570
|
+
"""
|
2571
|
+
value: pulumi.Input[str]
|
2572
|
+
"""
|
2573
|
+
The value of this X.509 extension. A base64-encoded string.
|
2574
|
+
"""
|
2575
|
+
elif False:
|
2576
|
+
CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgsDict: TypeAlias = Mapping[str, Any]
|
2577
|
+
|
1887
2578
|
@pulumi.input_type
|
1888
2579
|
class CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs:
|
1889
2580
|
def __init__(__self__, *,
|
@@ -1940,6 +2631,15 @@ class CaPoolIssuancePolicyBaselineValuesAdditionalExtensionArgs:
|
|
1940
2631
|
pulumi.set(self, "value", value)
|
1941
2632
|
|
1942
2633
|
|
2634
|
+
if not MYPY:
|
2635
|
+
class CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgsDict(TypedDict):
|
2636
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
2637
|
+
"""
|
2638
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
2639
|
+
"""
|
2640
|
+
elif False:
|
2641
|
+
CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgsDict: TypeAlias = Mapping[str, Any]
|
2642
|
+
|
1943
2643
|
@pulumi.input_type
|
1944
2644
|
class CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs:
|
1945
2645
|
def __init__(__self__, *,
|
@@ -1962,6 +2662,31 @@ class CaPoolIssuancePolicyBaselineValuesAdditionalExtensionObjectIdArgs:
|
|
1962
2662
|
pulumi.set(self, "object_id_paths", value)
|
1963
2663
|
|
1964
2664
|
|
2665
|
+
if not MYPY:
|
2666
|
+
class CaPoolIssuancePolicyBaselineValuesCaOptionsArgsDict(TypedDict):
|
2667
|
+
is_ca: NotRequired[pulumi.Input[bool]]
|
2668
|
+
"""
|
2669
|
+
When true, the "CA" in Basic Constraints extension will be set to true.
|
2670
|
+
"""
|
2671
|
+
max_issuer_path_length: NotRequired[pulumi.Input[int]]
|
2672
|
+
"""
|
2673
|
+
Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
|
2674
|
+
subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
|
2675
|
+
"""
|
2676
|
+
non_ca: NotRequired[pulumi.Input[bool]]
|
2677
|
+
"""
|
2678
|
+
When true, the "CA" in Basic Constraints extension will be set to false.
|
2679
|
+
If both `is_ca` and `non_ca` are unset, the extension will be omitted from the CA certificate.
|
2680
|
+
"""
|
2681
|
+
zero_max_issuer_path_length: NotRequired[pulumi.Input[bool]]
|
2682
|
+
"""
|
2683
|
+
When true, the "path length constraint" in Basic Constraints extension will be set to 0.
|
2684
|
+
if both `max_issuer_path_length` and `zero_max_issuer_path_length` are unset,
|
2685
|
+
the max path length will be omitted from the CA certificate.
|
2686
|
+
"""
|
2687
|
+
elif False:
|
2688
|
+
CaPoolIssuancePolicyBaselineValuesCaOptionsArgsDict: TypeAlias = Mapping[str, Any]
|
2689
|
+
|
1965
2690
|
@pulumi.input_type
|
1966
2691
|
class CaPoolIssuancePolicyBaselineValuesCaOptionsArgs:
|
1967
2692
|
def __init__(__self__, *,
|
@@ -2041,6 +2766,26 @@ class CaPoolIssuancePolicyBaselineValuesCaOptionsArgs:
|
|
2041
2766
|
pulumi.set(self, "zero_max_issuer_path_length", value)
|
2042
2767
|
|
2043
2768
|
|
2769
|
+
if not MYPY:
|
2770
|
+
class CaPoolIssuancePolicyBaselineValuesKeyUsageArgsDict(TypedDict):
|
2771
|
+
base_key_usage: pulumi.Input['CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgsDict']
|
2772
|
+
"""
|
2773
|
+
Describes high-level ways in which a key may be used.
|
2774
|
+
Structure is documented below.
|
2775
|
+
"""
|
2776
|
+
extended_key_usage: pulumi.Input['CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgsDict']
|
2777
|
+
"""
|
2778
|
+
Describes high-level ways in which a key may be used.
|
2779
|
+
Structure is documented below.
|
2780
|
+
"""
|
2781
|
+
unknown_extended_key_usages: NotRequired[pulumi.Input[Sequence[pulumi.Input['CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgsDict']]]]
|
2782
|
+
"""
|
2783
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
2784
|
+
Structure is documented below.
|
2785
|
+
"""
|
2786
|
+
elif False:
|
2787
|
+
CaPoolIssuancePolicyBaselineValuesKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
2788
|
+
|
2044
2789
|
@pulumi.input_type
|
2045
2790
|
class CaPoolIssuancePolicyBaselineValuesKeyUsageArgs:
|
2046
2791
|
def __init__(__self__, *,
|
@@ -2100,6 +2845,47 @@ class CaPoolIssuancePolicyBaselineValuesKeyUsageArgs:
|
|
2100
2845
|
pulumi.set(self, "unknown_extended_key_usages", value)
|
2101
2846
|
|
2102
2847
|
|
2848
|
+
if not MYPY:
|
2849
|
+
class CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgsDict(TypedDict):
|
2850
|
+
cert_sign: NotRequired[pulumi.Input[bool]]
|
2851
|
+
"""
|
2852
|
+
The key may be used to sign certificates.
|
2853
|
+
"""
|
2854
|
+
content_commitment: NotRequired[pulumi.Input[bool]]
|
2855
|
+
"""
|
2856
|
+
The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
|
2857
|
+
"""
|
2858
|
+
crl_sign: NotRequired[pulumi.Input[bool]]
|
2859
|
+
"""
|
2860
|
+
The key may be used sign certificate revocation lists.
|
2861
|
+
"""
|
2862
|
+
data_encipherment: NotRequired[pulumi.Input[bool]]
|
2863
|
+
"""
|
2864
|
+
The key may be used to encipher data.
|
2865
|
+
"""
|
2866
|
+
decipher_only: NotRequired[pulumi.Input[bool]]
|
2867
|
+
"""
|
2868
|
+
The key may be used to decipher only.
|
2869
|
+
"""
|
2870
|
+
digital_signature: NotRequired[pulumi.Input[bool]]
|
2871
|
+
"""
|
2872
|
+
The key may be used for digital signatures.
|
2873
|
+
"""
|
2874
|
+
encipher_only: NotRequired[pulumi.Input[bool]]
|
2875
|
+
"""
|
2876
|
+
The key may be used to encipher only.
|
2877
|
+
"""
|
2878
|
+
key_agreement: NotRequired[pulumi.Input[bool]]
|
2879
|
+
"""
|
2880
|
+
The key may be used in a key agreement protocol.
|
2881
|
+
"""
|
2882
|
+
key_encipherment: NotRequired[pulumi.Input[bool]]
|
2883
|
+
"""
|
2884
|
+
The key may be used to encipher other keys.
|
2885
|
+
"""
|
2886
|
+
elif False:
|
2887
|
+
CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
2888
|
+
|
2103
2889
|
@pulumi.input_type
|
2104
2890
|
class CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs:
|
2105
2891
|
def __init__(__self__, *,
|
@@ -2251,6 +3037,35 @@ class CaPoolIssuancePolicyBaselineValuesKeyUsageBaseKeyUsageArgs:
|
|
2251
3037
|
pulumi.set(self, "key_encipherment", value)
|
2252
3038
|
|
2253
3039
|
|
3040
|
+
if not MYPY:
|
3041
|
+
class CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgsDict(TypedDict):
|
3042
|
+
client_auth: NotRequired[pulumi.Input[bool]]
|
3043
|
+
"""
|
3044
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
|
3045
|
+
"""
|
3046
|
+
code_signing: NotRequired[pulumi.Input[bool]]
|
3047
|
+
"""
|
3048
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
|
3049
|
+
"""
|
3050
|
+
email_protection: NotRequired[pulumi.Input[bool]]
|
3051
|
+
"""
|
3052
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
|
3053
|
+
"""
|
3054
|
+
ocsp_signing: NotRequired[pulumi.Input[bool]]
|
3055
|
+
"""
|
3056
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
|
3057
|
+
"""
|
3058
|
+
server_auth: NotRequired[pulumi.Input[bool]]
|
3059
|
+
"""
|
3060
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
|
3061
|
+
"""
|
3062
|
+
time_stamping: NotRequired[pulumi.Input[bool]]
|
3063
|
+
"""
|
3064
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
|
3065
|
+
"""
|
3066
|
+
elif False:
|
3067
|
+
CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
3068
|
+
|
2254
3069
|
@pulumi.input_type
|
2255
3070
|
class CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs:
|
2256
3071
|
def __init__(__self__, *,
|
@@ -2354,6 +3169,15 @@ class CaPoolIssuancePolicyBaselineValuesKeyUsageExtendedKeyUsageArgs:
|
|
2354
3169
|
pulumi.set(self, "time_stamping", value)
|
2355
3170
|
|
2356
3171
|
|
3172
|
+
if not MYPY:
|
3173
|
+
class CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgsDict(TypedDict):
|
3174
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
3175
|
+
"""
|
3176
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
3177
|
+
"""
|
3178
|
+
elif False:
|
3179
|
+
CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
3180
|
+
|
2357
3181
|
@pulumi.input_type
|
2358
3182
|
class CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs:
|
2359
3183
|
def __init__(__self__, *,
|
@@ -2376,6 +3200,71 @@ class CaPoolIssuancePolicyBaselineValuesKeyUsageUnknownExtendedKeyUsageArgs:
|
|
2376
3200
|
pulumi.set(self, "object_id_paths", value)
|
2377
3201
|
|
2378
3202
|
|
3203
|
+
if not MYPY:
|
3204
|
+
class CaPoolIssuancePolicyBaselineValuesNameConstraintsArgsDict(TypedDict):
|
3205
|
+
critical: pulumi.Input[bool]
|
3206
|
+
"""
|
3207
|
+
Indicates whether or not the name constraints are marked critical.
|
3208
|
+
"""
|
3209
|
+
excluded_dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3210
|
+
"""
|
3211
|
+
Contains excluded DNS names. Any DNS name that can be
|
3212
|
+
constructed by simply adding zero or more labels to
|
3213
|
+
the left-hand side of the name satisfies the name constraint.
|
3214
|
+
For example, `example.com`, `www.example.com`, `www.sub.example.com`
|
3215
|
+
would satisfy `example.com` while `example1.com` does not.
|
3216
|
+
"""
|
3217
|
+
excluded_email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3218
|
+
"""
|
3219
|
+
Contains the excluded email addresses. The value can be a particular
|
3220
|
+
email address, a hostname to indicate all email addresses on that host or
|
3221
|
+
a domain with a leading period (e.g. `.example.com`) to indicate
|
3222
|
+
all email addresses in that domain.
|
3223
|
+
"""
|
3224
|
+
excluded_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3225
|
+
"""
|
3226
|
+
Contains the excluded IP ranges. For IPv4 addresses, the ranges
|
3227
|
+
are expressed using CIDR notation as specified in RFC 4632.
|
3228
|
+
For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
|
3229
|
+
addresses.
|
3230
|
+
"""
|
3231
|
+
excluded_uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3232
|
+
"""
|
3233
|
+
Contains the excluded URIs that apply to the host part of the name.
|
3234
|
+
The value can be a hostname or a domain with a
|
3235
|
+
leading period (like `.example.com`)
|
3236
|
+
"""
|
3237
|
+
permitted_dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3238
|
+
"""
|
3239
|
+
Contains permitted DNS names. Any DNS name that can be
|
3240
|
+
constructed by simply adding zero or more labels to
|
3241
|
+
the left-hand side of the name satisfies the name constraint.
|
3242
|
+
For example, `example.com`, `www.example.com`, `www.sub.example.com`
|
3243
|
+
would satisfy `example.com` while `example1.com` does not.
|
3244
|
+
"""
|
3245
|
+
permitted_email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3246
|
+
"""
|
3247
|
+
Contains the permitted email addresses. The value can be a particular
|
3248
|
+
email address, a hostname to indicate all email addresses on that host or
|
3249
|
+
a domain with a leading period (e.g. `.example.com`) to indicate
|
3250
|
+
all email addresses in that domain.
|
3251
|
+
"""
|
3252
|
+
permitted_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3253
|
+
"""
|
3254
|
+
Contains the permitted IP ranges. For IPv4 addresses, the ranges
|
3255
|
+
are expressed using CIDR notation as specified in RFC 4632.
|
3256
|
+
For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
|
3257
|
+
addresses.
|
3258
|
+
"""
|
3259
|
+
permitted_uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3260
|
+
"""
|
3261
|
+
Contains the permitted URIs that apply to the host part of the name.
|
3262
|
+
The value can be a hostname or a domain with a
|
3263
|
+
leading period (like `.example.com`)
|
3264
|
+
"""
|
3265
|
+
elif False:
|
3266
|
+
CaPoolIssuancePolicyBaselineValuesNameConstraintsArgsDict: TypeAlias = Mapping[str, Any]
|
3267
|
+
|
2379
3268
|
@pulumi.input_type
|
2380
3269
|
class CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs:
|
2381
3270
|
def __init__(__self__, *,
|
@@ -2574,6 +3463,15 @@ class CaPoolIssuancePolicyBaselineValuesNameConstraintsArgs:
|
|
2574
3463
|
pulumi.set(self, "permitted_uris", value)
|
2575
3464
|
|
2576
3465
|
|
3466
|
+
if not MYPY:
|
3467
|
+
class CaPoolIssuancePolicyBaselineValuesPolicyIdArgsDict(TypedDict):
|
3468
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
3469
|
+
"""
|
3470
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
3471
|
+
"""
|
3472
|
+
elif False:
|
3473
|
+
CaPoolIssuancePolicyBaselineValuesPolicyIdArgsDict: TypeAlias = Mapping[str, Any]
|
3474
|
+
|
2577
3475
|
@pulumi.input_type
|
2578
3476
|
class CaPoolIssuancePolicyBaselineValuesPolicyIdArgs:
|
2579
3477
|
def __init__(__self__, *,
|
@@ -2596,6 +3494,28 @@ class CaPoolIssuancePolicyBaselineValuesPolicyIdArgs:
|
|
2596
3494
|
pulumi.set(self, "object_id_paths", value)
|
2597
3495
|
|
2598
3496
|
|
3497
|
+
if not MYPY:
|
3498
|
+
class CaPoolIssuancePolicyIdentityConstraintsArgsDict(TypedDict):
|
3499
|
+
allow_subject_alt_names_passthrough: pulumi.Input[bool]
|
3500
|
+
"""
|
3501
|
+
If this is set, the SubjectAltNames extension may be copied from a certificate request into the signed certificate.
|
3502
|
+
Otherwise, the requested SubjectAltNames will be discarded.
|
3503
|
+
"""
|
3504
|
+
allow_subject_passthrough: pulumi.Input[bool]
|
3505
|
+
"""
|
3506
|
+
If this is set, the Subject field may be copied from a certificate request into the signed certificate.
|
3507
|
+
Otherwise, the requested Subject will be discarded.
|
3508
|
+
"""
|
3509
|
+
cel_expression: NotRequired[pulumi.Input['CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgsDict']]
|
3510
|
+
"""
|
3511
|
+
A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a
|
3512
|
+
certificate is signed. To see the full allowed syntax and some examples,
|
3513
|
+
see https://cloud.google.com/certificate-authority-service/docs/cel-guide
|
3514
|
+
Structure is documented below.
|
3515
|
+
"""
|
3516
|
+
elif False:
|
3517
|
+
CaPoolIssuancePolicyIdentityConstraintsArgsDict: TypeAlias = Mapping[str, Any]
|
3518
|
+
|
2599
3519
|
@pulumi.input_type
|
2600
3520
|
class CaPoolIssuancePolicyIdentityConstraintsArgs:
|
2601
3521
|
def __init__(__self__, *,
|
@@ -2659,6 +3579,27 @@ class CaPoolIssuancePolicyIdentityConstraintsArgs:
|
|
2659
3579
|
pulumi.set(self, "cel_expression", value)
|
2660
3580
|
|
2661
3581
|
|
3582
|
+
if not MYPY:
|
3583
|
+
class CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgsDict(TypedDict):
|
3584
|
+
expression: pulumi.Input[str]
|
3585
|
+
"""
|
3586
|
+
Textual representation of an expression in Common Expression Language syntax.
|
3587
|
+
"""
|
3588
|
+
description: NotRequired[pulumi.Input[str]]
|
3589
|
+
"""
|
3590
|
+
Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
|
3591
|
+
"""
|
3592
|
+
location: NotRequired[pulumi.Input[str]]
|
3593
|
+
"""
|
3594
|
+
String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
|
3595
|
+
"""
|
3596
|
+
title: NotRequired[pulumi.Input[str]]
|
3597
|
+
"""
|
3598
|
+
Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
|
3599
|
+
"""
|
3600
|
+
elif False:
|
3601
|
+
CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgsDict: TypeAlias = Mapping[str, Any]
|
3602
|
+
|
2662
3603
|
@pulumi.input_type
|
2663
3604
|
class CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs:
|
2664
3605
|
def __init__(__self__, *,
|
@@ -2729,6 +3670,31 @@ class CaPoolIssuancePolicyIdentityConstraintsCelExpressionArgs:
|
|
2729
3670
|
pulumi.set(self, "title", value)
|
2730
3671
|
|
2731
3672
|
|
3673
|
+
if not MYPY:
|
3674
|
+
class CaPoolPublishingOptionsArgsDict(TypedDict):
|
3675
|
+
publish_ca_cert: pulumi.Input[bool]
|
3676
|
+
"""
|
3677
|
+
When true, publishes each CertificateAuthority's CA certificate and includes its URL in the "Authority Information Access"
|
3678
|
+
X.509 extension in all issued Certificates. If this is false, the CA certificate will not be published and the corresponding
|
3679
|
+
X.509 extension will not be written in issued certificates.
|
3680
|
+
"""
|
3681
|
+
publish_crl: pulumi.Input[bool]
|
3682
|
+
"""
|
3683
|
+
When true, publishes each CertificateAuthority's CRL and includes its URL in the "CRL Distribution Points" X.509 extension
|
3684
|
+
in all issued Certificates. If this is false, CRLs will not be published and the corresponding X.509 extension will not
|
3685
|
+
be written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are
|
3686
|
+
also rebuilt shortly after a certificate is revoked.
|
3687
|
+
"""
|
3688
|
+
encoding_format: NotRequired[pulumi.Input[str]]
|
3689
|
+
"""
|
3690
|
+
Specifies the encoding format of each CertificateAuthority's CA
|
3691
|
+
certificate and CRLs. If this is omitted, CA certificates and CRLs
|
3692
|
+
will be published in PEM.
|
3693
|
+
Possible values are: `PEM`, `DER`.
|
3694
|
+
"""
|
3695
|
+
elif False:
|
3696
|
+
CaPoolPublishingOptionsArgsDict: TypeAlias = Mapping[str, Any]
|
3697
|
+
|
2732
3698
|
@pulumi.input_type
|
2733
3699
|
class CaPoolPublishingOptionsArgs:
|
2734
3700
|
def __init__(__self__, *,
|
@@ -2776,27 +3742,78 @@ class CaPoolPublishingOptionsArgs:
|
|
2776
3742
|
be written in issued certificates. CRLs will expire 7 days from their creation. However, we will rebuild daily. CRLs are
|
2777
3743
|
also rebuilt shortly after a certificate is revoked.
|
2778
3744
|
"""
|
2779
|
-
return pulumi.get(self, "publish_crl")
|
2780
|
-
|
2781
|
-
@publish_crl.setter
|
2782
|
-
def publish_crl(self, value: pulumi.Input[bool]):
|
2783
|
-
pulumi.set(self, "publish_crl", value)
|
2784
|
-
|
2785
|
-
@property
|
2786
|
-
@pulumi.getter(name="encodingFormat")
|
2787
|
-
def encoding_format(self) -> Optional[pulumi.Input[str]]:
|
3745
|
+
return pulumi.get(self, "publish_crl")
|
3746
|
+
|
3747
|
+
@publish_crl.setter
|
3748
|
+
def publish_crl(self, value: pulumi.Input[bool]):
|
3749
|
+
pulumi.set(self, "publish_crl", value)
|
3750
|
+
|
3751
|
+
@property
|
3752
|
+
@pulumi.getter(name="encodingFormat")
|
3753
|
+
def encoding_format(self) -> Optional[pulumi.Input[str]]:
|
3754
|
+
"""
|
3755
|
+
Specifies the encoding format of each CertificateAuthority's CA
|
3756
|
+
certificate and CRLs. If this is omitted, CA certificates and CRLs
|
3757
|
+
will be published in PEM.
|
3758
|
+
Possible values are: `PEM`, `DER`.
|
3759
|
+
"""
|
3760
|
+
return pulumi.get(self, "encoding_format")
|
3761
|
+
|
3762
|
+
@encoding_format.setter
|
3763
|
+
def encoding_format(self, value: Optional[pulumi.Input[str]]):
|
3764
|
+
pulumi.set(self, "encoding_format", value)
|
3765
|
+
|
3766
|
+
|
3767
|
+
if not MYPY:
|
3768
|
+
class CertificateCertificateDescriptionArgsDict(TypedDict):
|
3769
|
+
aia_issuing_certificate_urls: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3770
|
+
"""
|
3771
|
+
(Output)
|
3772
|
+
Describes lists of issuer CA certificate URLs that appear in the "Authority Information Access" extension in the certificate.
|
3773
|
+
"""
|
3774
|
+
authority_key_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionAuthorityKeyIdArgsDict']]]]
|
3775
|
+
"""
|
3776
|
+
(Output)
|
3777
|
+
Identifies the subjectKeyId of the parent certificate, per https://tools.ietf.org/html/rfc5280#section-4.2.1.1
|
3778
|
+
Structure is documented below.
|
3779
|
+
"""
|
3780
|
+
cert_fingerprints: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionCertFingerprintArgsDict']]]]
|
3781
|
+
"""
|
3782
|
+
(Output)
|
3783
|
+
The hash of the x.509 certificate.
|
3784
|
+
Structure is documented below.
|
3785
|
+
"""
|
3786
|
+
crl_distribution_points: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
3787
|
+
"""
|
3788
|
+
(Output)
|
3789
|
+
Describes a list of locations to obtain CRL information, i.e. the DistributionPoint.fullName described by https://tools.ietf.org/html/rfc5280#section-4.2.1.13
|
3790
|
+
"""
|
3791
|
+
public_keys: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionPublicKeyArgsDict']]]]
|
3792
|
+
"""
|
3793
|
+
(Output)
|
3794
|
+
A PublicKey describes a public key.
|
3795
|
+
Structure is documented below.
|
3796
|
+
"""
|
3797
|
+
subject_descriptions: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionSubjectDescriptionArgsDict']]]]
|
3798
|
+
"""
|
3799
|
+
(Output)
|
3800
|
+
Describes some of the values in a certificate that are related to the subject and lifetime.
|
3801
|
+
Structure is documented below.
|
3802
|
+
"""
|
3803
|
+
subject_key_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionSubjectKeyIdArgsDict']]]]
|
3804
|
+
"""
|
3805
|
+
(Output)
|
3806
|
+
Provides a means of identifiying certificates that contain a particular public key, per https://tools.ietf.org/html/rfc5280#section-4.2.1.2.
|
3807
|
+
Structure is documented below.
|
3808
|
+
"""
|
3809
|
+
x509_descriptions: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionArgsDict']]]]
|
2788
3810
|
"""
|
2789
|
-
|
2790
|
-
|
2791
|
-
|
2792
|
-
Possible values are: `PEM`, `DER`.
|
3811
|
+
(Output)
|
3812
|
+
A structured description of the issued X.509 certificate.
|
3813
|
+
Structure is documented below.
|
2793
3814
|
"""
|
2794
|
-
|
2795
|
-
|
2796
|
-
@encoding_format.setter
|
2797
|
-
def encoding_format(self, value: Optional[pulumi.Input[str]]):
|
2798
|
-
pulumi.set(self, "encoding_format", value)
|
2799
|
-
|
3815
|
+
elif False:
|
3816
|
+
CertificateCertificateDescriptionArgsDict: TypeAlias = Mapping[str, Any]
|
2800
3817
|
|
2801
3818
|
@pulumi.input_type
|
2802
3819
|
class CertificateCertificateDescriptionArgs:
|
@@ -2961,6 +3978,16 @@ class CertificateCertificateDescriptionArgs:
|
|
2961
3978
|
pulumi.set(self, "x509_descriptions", value)
|
2962
3979
|
|
2963
3980
|
|
3981
|
+
if not MYPY:
|
3982
|
+
class CertificateCertificateDescriptionAuthorityKeyIdArgsDict(TypedDict):
|
3983
|
+
key_id: NotRequired[pulumi.Input[str]]
|
3984
|
+
"""
|
3985
|
+
(Output)
|
3986
|
+
Optional. The value of this KeyId encoded in lowercase hexadecimal. This is most likely the 160 bit SHA-1 hash of the public key.
|
3987
|
+
"""
|
3988
|
+
elif False:
|
3989
|
+
CertificateCertificateDescriptionAuthorityKeyIdArgsDict: TypeAlias = Mapping[str, Any]
|
3990
|
+
|
2964
3991
|
@pulumi.input_type
|
2965
3992
|
class CertificateCertificateDescriptionAuthorityKeyIdArgs:
|
2966
3993
|
def __init__(__self__, *,
|
@@ -2986,6 +4013,16 @@ class CertificateCertificateDescriptionAuthorityKeyIdArgs:
|
|
2986
4013
|
pulumi.set(self, "key_id", value)
|
2987
4014
|
|
2988
4015
|
|
4016
|
+
if not MYPY:
|
4017
|
+
class CertificateCertificateDescriptionCertFingerprintArgsDict(TypedDict):
|
4018
|
+
sha256_hash: NotRequired[pulumi.Input[str]]
|
4019
|
+
"""
|
4020
|
+
(Output)
|
4021
|
+
The SHA 256 hash, encoded in hexadecimal, of the DER x509 certificate.
|
4022
|
+
"""
|
4023
|
+
elif False:
|
4024
|
+
CertificateCertificateDescriptionCertFingerprintArgsDict: TypeAlias = Mapping[str, Any]
|
4025
|
+
|
2989
4026
|
@pulumi.input_type
|
2990
4027
|
class CertificateCertificateDescriptionCertFingerprintArgs:
|
2991
4028
|
def __init__(__self__, *,
|
@@ -3011,6 +4048,20 @@ class CertificateCertificateDescriptionCertFingerprintArgs:
|
|
3011
4048
|
pulumi.set(self, "sha256_hash", value)
|
3012
4049
|
|
3013
4050
|
|
4051
|
+
if not MYPY:
|
4052
|
+
class CertificateCertificateDescriptionPublicKeyArgsDict(TypedDict):
|
4053
|
+
format: NotRequired[pulumi.Input[str]]
|
4054
|
+
"""
|
4055
|
+
The format of the public key. Currently, only PEM format is supported.
|
4056
|
+
Possible values are: `KEY_TYPE_UNSPECIFIED`, `PEM`.
|
4057
|
+
"""
|
4058
|
+
key: NotRequired[pulumi.Input[str]]
|
4059
|
+
"""
|
4060
|
+
Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.
|
4061
|
+
"""
|
4062
|
+
elif False:
|
4063
|
+
CertificateCertificateDescriptionPublicKeyArgsDict: TypeAlias = Mapping[str, Any]
|
4064
|
+
|
3014
4065
|
@pulumi.input_type
|
3015
4066
|
class CertificateCertificateDescriptionPublicKeyArgs:
|
3016
4067
|
def __init__(__self__, *,
|
@@ -3052,6 +4103,44 @@ class CertificateCertificateDescriptionPublicKeyArgs:
|
|
3052
4103
|
pulumi.set(self, "key", value)
|
3053
4104
|
|
3054
4105
|
|
4106
|
+
if not MYPY:
|
4107
|
+
class CertificateCertificateDescriptionSubjectDescriptionArgsDict(TypedDict):
|
4108
|
+
hex_serial_number: NotRequired[pulumi.Input[str]]
|
4109
|
+
"""
|
4110
|
+
(Output)
|
4111
|
+
The serial number encoded in lowercase hexadecimal.
|
4112
|
+
"""
|
4113
|
+
lifetime: NotRequired[pulumi.Input[str]]
|
4114
|
+
"""
|
4115
|
+
The desired lifetime of the CA certificate. Used to create the "notBeforeTime" and
|
4116
|
+
"notAfterTime" fields inside an X.509 certificate. A duration in seconds with up to nine
|
4117
|
+
fractional digits, terminated by 's'. Example: "3.5s".
|
4118
|
+
"""
|
4119
|
+
not_after_time: NotRequired[pulumi.Input[str]]
|
4120
|
+
"""
|
4121
|
+
(Output)
|
4122
|
+
The time at which the certificate expires.
|
4123
|
+
"""
|
4124
|
+
not_before_time: NotRequired[pulumi.Input[str]]
|
4125
|
+
"""
|
4126
|
+
(Output)
|
4127
|
+
The time at which the certificate becomes valid.
|
4128
|
+
"""
|
4129
|
+
subject_alt_names: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgsDict']]]]
|
4130
|
+
"""
|
4131
|
+
(Output)
|
4132
|
+
The subject alternative name fields.
|
4133
|
+
Structure is documented below.
|
4134
|
+
"""
|
4135
|
+
subjects: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionSubjectDescriptionSubjectArgsDict']]]]
|
4136
|
+
"""
|
4137
|
+
(Output)
|
4138
|
+
Contains distinguished name fields such as the location and organization.
|
4139
|
+
Structure is documented below.
|
4140
|
+
"""
|
4141
|
+
elif False:
|
4142
|
+
CertificateCertificateDescriptionSubjectDescriptionArgsDict: TypeAlias = Mapping[str, Any]
|
4143
|
+
|
3055
4144
|
@pulumi.input_type
|
3056
4145
|
class CertificateCertificateDescriptionSubjectDescriptionArgs:
|
3057
4146
|
def __init__(__self__, *,
|
@@ -3173,6 +4262,43 @@ class CertificateCertificateDescriptionSubjectDescriptionArgs:
|
|
3173
4262
|
pulumi.set(self, "subjects", value)
|
3174
4263
|
|
3175
4264
|
|
4265
|
+
if not MYPY:
|
4266
|
+
class CertificateCertificateDescriptionSubjectDescriptionSubjectArgsDict(TypedDict):
|
4267
|
+
common_name: NotRequired[pulumi.Input[str]]
|
4268
|
+
"""
|
4269
|
+
The common name of the distinguished name.
|
4270
|
+
"""
|
4271
|
+
country_code: NotRequired[pulumi.Input[str]]
|
4272
|
+
"""
|
4273
|
+
The country code of the subject.
|
4274
|
+
"""
|
4275
|
+
locality: NotRequired[pulumi.Input[str]]
|
4276
|
+
"""
|
4277
|
+
The locality or city of the subject.
|
4278
|
+
"""
|
4279
|
+
organization: NotRequired[pulumi.Input[str]]
|
4280
|
+
"""
|
4281
|
+
The organization of the subject.
|
4282
|
+
"""
|
4283
|
+
organizational_unit: NotRequired[pulumi.Input[str]]
|
4284
|
+
"""
|
4285
|
+
The organizational unit of the subject.
|
4286
|
+
"""
|
4287
|
+
postal_code: NotRequired[pulumi.Input[str]]
|
4288
|
+
"""
|
4289
|
+
The postal code of the subject.
|
4290
|
+
"""
|
4291
|
+
province: NotRequired[pulumi.Input[str]]
|
4292
|
+
"""
|
4293
|
+
The province, territory, or regional state of the subject.
|
4294
|
+
"""
|
4295
|
+
street_address: NotRequired[pulumi.Input[str]]
|
4296
|
+
"""
|
4297
|
+
The street address of the subject.
|
4298
|
+
"""
|
4299
|
+
elif False:
|
4300
|
+
CertificateCertificateDescriptionSubjectDescriptionSubjectArgsDict: TypeAlias = Mapping[str, Any]
|
4301
|
+
|
3176
4302
|
@pulumi.input_type
|
3177
4303
|
class CertificateCertificateDescriptionSubjectDescriptionSubjectArgs:
|
3178
4304
|
def __init__(__self__, *,
|
@@ -3308,6 +4434,33 @@ class CertificateCertificateDescriptionSubjectDescriptionSubjectArgs:
|
|
3308
4434
|
pulumi.set(self, "street_address", value)
|
3309
4435
|
|
3310
4436
|
|
4437
|
+
if not MYPY:
|
4438
|
+
class CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgsDict(TypedDict):
|
4439
|
+
custom_sans: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgsDict']]]]
|
4440
|
+
"""
|
4441
|
+
(Output)
|
4442
|
+
Contains additional subject alternative name values.
|
4443
|
+
Structure is documented below.
|
4444
|
+
"""
|
4445
|
+
dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
4446
|
+
"""
|
4447
|
+
Contains only valid, fully-qualified host names.
|
4448
|
+
"""
|
4449
|
+
email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
4450
|
+
"""
|
4451
|
+
Contains only valid RFC 2822 E-mail addresses.
|
4452
|
+
"""
|
4453
|
+
ip_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
4454
|
+
"""
|
4455
|
+
Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
|
4456
|
+
"""
|
4457
|
+
uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
4458
|
+
"""
|
4459
|
+
Contains only valid RFC 3986 URIs.
|
4460
|
+
"""
|
4461
|
+
elif False:
|
4462
|
+
CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgsDict: TypeAlias = Mapping[str, Any]
|
4463
|
+
|
3311
4464
|
@pulumi.input_type
|
3312
4465
|
class CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs:
|
3313
4466
|
def __init__(__self__, *,
|
@@ -3399,6 +4552,26 @@ class CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameArgs:
|
|
3399
4552
|
pulumi.set(self, "uris", value)
|
3400
4553
|
|
3401
4554
|
|
4555
|
+
if not MYPY:
|
4556
|
+
class CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgsDict(TypedDict):
|
4557
|
+
critical: NotRequired[pulumi.Input[bool]]
|
4558
|
+
"""
|
4559
|
+
(Output)
|
4560
|
+
Indicates whether or not the name constraints are marked critical.
|
4561
|
+
"""
|
4562
|
+
obect_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgsDict']]]]
|
4563
|
+
"""
|
4564
|
+
(Output)
|
4565
|
+
Describes how some of the technical fields in a certificate should be populated.
|
4566
|
+
Structure is documented below.
|
4567
|
+
"""
|
4568
|
+
value: NotRequired[pulumi.Input[str]]
|
4569
|
+
"""
|
4570
|
+
The value of this X.509 extension. A base64-encoded string.
|
4571
|
+
"""
|
4572
|
+
elif False:
|
4573
|
+
CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgsDict: TypeAlias = Mapping[str, Any]
|
4574
|
+
|
3402
4575
|
@pulumi.input_type
|
3403
4576
|
class CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanArgs:
|
3404
4577
|
def __init__(__self__, *,
|
@@ -3460,6 +4633,16 @@ class CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSan
|
|
3460
4633
|
pulumi.set(self, "value", value)
|
3461
4634
|
|
3462
4635
|
|
4636
|
+
if not MYPY:
|
4637
|
+
class CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgsDict(TypedDict):
|
4638
|
+
object_id_paths: NotRequired[pulumi.Input[Sequence[pulumi.Input[int]]]]
|
4639
|
+
"""
|
4640
|
+
(Output)
|
4641
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
4642
|
+
"""
|
4643
|
+
elif False:
|
4644
|
+
CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgsDict: TypeAlias = Mapping[str, Any]
|
4645
|
+
|
3463
4646
|
@pulumi.input_type
|
3464
4647
|
class CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSanObectIdArgs:
|
3465
4648
|
def __init__(__self__, *,
|
@@ -3485,6 +4668,15 @@ class CertificateCertificateDescriptionSubjectDescriptionSubjectAltNameCustomSan
|
|
3485
4668
|
pulumi.set(self, "object_id_paths", value)
|
3486
4669
|
|
3487
4670
|
|
4671
|
+
if not MYPY:
|
4672
|
+
class CertificateCertificateDescriptionSubjectKeyIdArgsDict(TypedDict):
|
4673
|
+
key_id: NotRequired[pulumi.Input[str]]
|
4674
|
+
"""
|
4675
|
+
The value of the KeyId in lowercase hexidecimal.
|
4676
|
+
"""
|
4677
|
+
elif False:
|
4678
|
+
CertificateCertificateDescriptionSubjectKeyIdArgsDict: TypeAlias = Mapping[str, Any]
|
4679
|
+
|
3488
4680
|
@pulumi.input_type
|
3489
4681
|
class CertificateCertificateDescriptionSubjectKeyIdArgs:
|
3490
4682
|
def __init__(__self__, *,
|
@@ -3508,6 +4700,47 @@ class CertificateCertificateDescriptionSubjectKeyIdArgs:
|
|
3508
4700
|
pulumi.set(self, "key_id", value)
|
3509
4701
|
|
3510
4702
|
|
4703
|
+
if not MYPY:
|
4704
|
+
class CertificateCertificateDescriptionX509DescriptionArgsDict(TypedDict):
|
4705
|
+
additional_extensions: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgsDict']]]]
|
4706
|
+
"""
|
4707
|
+
(Output)
|
4708
|
+
Describes custom X.509 extensions.
|
4709
|
+
Structure is documented below.
|
4710
|
+
"""
|
4711
|
+
aia_ocsp_servers: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
4712
|
+
"""
|
4713
|
+
(Output)
|
4714
|
+
Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
|
4715
|
+
"Authority Information Access" extension in the certificate.
|
4716
|
+
"""
|
4717
|
+
ca_options: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionCaOptionArgsDict']]]]
|
4718
|
+
"""
|
4719
|
+
(Output)
|
4720
|
+
Describes values that are relevant in a CA certificate.
|
4721
|
+
Structure is documented below.
|
4722
|
+
"""
|
4723
|
+
key_usages: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionKeyUsageArgsDict']]]]
|
4724
|
+
"""
|
4725
|
+
(Output)
|
4726
|
+
Indicates the intended use for keys that correspond to a certificate.
|
4727
|
+
Structure is documented below.
|
4728
|
+
"""
|
4729
|
+
name_constraints: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionNameConstraintArgsDict']]]]
|
4730
|
+
"""
|
4731
|
+
(Output)
|
4732
|
+
Describes the X.509 name constraints extension.
|
4733
|
+
Structure is documented below.
|
4734
|
+
"""
|
4735
|
+
policy_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionPolicyIdArgsDict']]]]
|
4736
|
+
"""
|
4737
|
+
(Output)
|
4738
|
+
Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
|
4739
|
+
Structure is documented below.
|
4740
|
+
"""
|
4741
|
+
elif False:
|
4742
|
+
CertificateCertificateDescriptionX509DescriptionArgsDict: TypeAlias = Mapping[str, Any]
|
4743
|
+
|
3511
4744
|
@pulumi.input_type
|
3512
4745
|
class CertificateCertificateDescriptionX509DescriptionArgs:
|
3513
4746
|
def __init__(__self__, *,
|
@@ -3635,6 +4868,25 @@ class CertificateCertificateDescriptionX509DescriptionArgs:
|
|
3635
4868
|
pulumi.set(self, "policy_ids", value)
|
3636
4869
|
|
3637
4870
|
|
4871
|
+
if not MYPY:
|
4872
|
+
class CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgsDict(TypedDict):
|
4873
|
+
critical: NotRequired[pulumi.Input[bool]]
|
4874
|
+
"""
|
4875
|
+
Indicates whether or not this extension is critical (i.e., if the client does not know how to
|
4876
|
+
handle this extension, the client should consider this to be an error).
|
4877
|
+
"""
|
4878
|
+
object_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgsDict']]]]
|
4879
|
+
"""
|
4880
|
+
Describes values that are relevant in a CA certificate.
|
4881
|
+
Structure is documented below.
|
4882
|
+
"""
|
4883
|
+
value: NotRequired[pulumi.Input[str]]
|
4884
|
+
"""
|
4885
|
+
The value of this X.509 extension. A base64-encoded string.
|
4886
|
+
"""
|
4887
|
+
elif False:
|
4888
|
+
CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgsDict: TypeAlias = Mapping[str, Any]
|
4889
|
+
|
3638
4890
|
@pulumi.input_type
|
3639
4891
|
class CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs:
|
3640
4892
|
def __init__(__self__, *,
|
@@ -3694,6 +4946,15 @@ class CertificateCertificateDescriptionX509DescriptionAdditionalExtensionArgs:
|
|
3694
4946
|
pulumi.set(self, "value", value)
|
3695
4947
|
|
3696
4948
|
|
4949
|
+
if not MYPY:
|
4950
|
+
class CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgsDict(TypedDict):
|
4951
|
+
object_id_paths: NotRequired[pulumi.Input[Sequence[pulumi.Input[int]]]]
|
4952
|
+
"""
|
4953
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
4954
|
+
"""
|
4955
|
+
elif False:
|
4956
|
+
CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgsDict: TypeAlias = Mapping[str, Any]
|
4957
|
+
|
3697
4958
|
@pulumi.input_type
|
3698
4959
|
class CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectIdArgs:
|
3699
4960
|
def __init__(__self__, *,
|
@@ -3717,6 +4978,20 @@ class CertificateCertificateDescriptionX509DescriptionAdditionalExtensionObjectI
|
|
3717
4978
|
pulumi.set(self, "object_id_paths", value)
|
3718
4979
|
|
3719
4980
|
|
4981
|
+
if not MYPY:
|
4982
|
+
class CertificateCertificateDescriptionX509DescriptionCaOptionArgsDict(TypedDict):
|
4983
|
+
is_ca: NotRequired[pulumi.Input[bool]]
|
4984
|
+
"""
|
4985
|
+
When true, the "CA" in Basic Constraints extension will be set to true.
|
4986
|
+
"""
|
4987
|
+
max_issuer_path_length: NotRequired[pulumi.Input[int]]
|
4988
|
+
"""
|
4989
|
+
Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
|
4990
|
+
subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
|
4991
|
+
"""
|
4992
|
+
elif False:
|
4993
|
+
CertificateCertificateDescriptionX509DescriptionCaOptionArgsDict: TypeAlias = Mapping[str, Any]
|
4994
|
+
|
3720
4995
|
@pulumi.input_type
|
3721
4996
|
class CertificateCertificateDescriptionX509DescriptionCaOptionArgs:
|
3722
4997
|
def __init__(__self__, *,
|
@@ -3758,6 +5033,26 @@ class CertificateCertificateDescriptionX509DescriptionCaOptionArgs:
|
|
3758
5033
|
pulumi.set(self, "max_issuer_path_length", value)
|
3759
5034
|
|
3760
5035
|
|
5036
|
+
if not MYPY:
|
5037
|
+
class CertificateCertificateDescriptionX509DescriptionKeyUsageArgsDict(TypedDict):
|
5038
|
+
base_key_usages: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgsDict']]]]
|
5039
|
+
"""
|
5040
|
+
Describes high-level ways in which a key may be used.
|
5041
|
+
Structure is documented below.
|
5042
|
+
"""
|
5043
|
+
extended_key_usages: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgsDict']]]]
|
5044
|
+
"""
|
5045
|
+
Describes high-level ways in which a key may be used.
|
5046
|
+
Structure is documented below.
|
5047
|
+
"""
|
5048
|
+
unknown_extended_key_usages: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgsDict']]]]
|
5049
|
+
"""
|
5050
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
5051
|
+
Structure is documented below.
|
5052
|
+
"""
|
5053
|
+
elif False:
|
5054
|
+
CertificateCertificateDescriptionX509DescriptionKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
5055
|
+
|
3761
5056
|
@pulumi.input_type
|
3762
5057
|
class CertificateCertificateDescriptionX509DescriptionKeyUsageArgs:
|
3763
5058
|
def __init__(__self__, *,
|
@@ -3819,6 +5114,47 @@ class CertificateCertificateDescriptionX509DescriptionKeyUsageArgs:
|
|
3819
5114
|
pulumi.set(self, "unknown_extended_key_usages", value)
|
3820
5115
|
|
3821
5116
|
|
5117
|
+
if not MYPY:
|
5118
|
+
class CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgsDict(TypedDict):
|
5119
|
+
cert_sign: NotRequired[pulumi.Input[bool]]
|
5120
|
+
"""
|
5121
|
+
The key may be used to sign certificates.
|
5122
|
+
"""
|
5123
|
+
content_commitment: NotRequired[pulumi.Input[bool]]
|
5124
|
+
"""
|
5125
|
+
The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
|
5126
|
+
"""
|
5127
|
+
crl_sign: NotRequired[pulumi.Input[bool]]
|
5128
|
+
"""
|
5129
|
+
The key may be used sign certificate revocation lists.
|
5130
|
+
"""
|
5131
|
+
data_encipherment: NotRequired[pulumi.Input[bool]]
|
5132
|
+
"""
|
5133
|
+
The key may be used to encipher data.
|
5134
|
+
"""
|
5135
|
+
decipher_only: NotRequired[pulumi.Input[bool]]
|
5136
|
+
"""
|
5137
|
+
The key may be used to decipher only.
|
5138
|
+
"""
|
5139
|
+
digital_signature: NotRequired[pulumi.Input[bool]]
|
5140
|
+
"""
|
5141
|
+
The key may be used for digital signatures.
|
5142
|
+
"""
|
5143
|
+
encipher_only: NotRequired[pulumi.Input[bool]]
|
5144
|
+
"""
|
5145
|
+
The key may be used to encipher only.
|
5146
|
+
"""
|
5147
|
+
key_agreement: NotRequired[pulumi.Input[bool]]
|
5148
|
+
"""
|
5149
|
+
The key may be used in a key agreement protocol.
|
5150
|
+
"""
|
5151
|
+
key_encipherment: NotRequired[pulumi.Input[bool]]
|
5152
|
+
"""
|
5153
|
+
The key may be used to encipher other keys.
|
5154
|
+
"""
|
5155
|
+
elif False:
|
5156
|
+
CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
5157
|
+
|
3822
5158
|
@pulumi.input_type
|
3823
5159
|
class CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs:
|
3824
5160
|
def __init__(__self__, *,
|
@@ -3961,14 +5297,43 @@ class CertificateCertificateDescriptionX509DescriptionKeyUsageBaseKeyUsageArgs:
|
|
3961
5297
|
@pulumi.getter(name="keyEncipherment")
|
3962
5298
|
def key_encipherment(self) -> Optional[pulumi.Input[bool]]:
|
3963
5299
|
"""
|
3964
|
-
The key may be used to encipher other keys.
|
5300
|
+
The key may be used to encipher other keys.
|
5301
|
+
"""
|
5302
|
+
return pulumi.get(self, "key_encipherment")
|
5303
|
+
|
5304
|
+
@key_encipherment.setter
|
5305
|
+
def key_encipherment(self, value: Optional[pulumi.Input[bool]]):
|
5306
|
+
pulumi.set(self, "key_encipherment", value)
|
5307
|
+
|
5308
|
+
|
5309
|
+
if not MYPY:
|
5310
|
+
class CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgsDict(TypedDict):
|
5311
|
+
client_auth: NotRequired[pulumi.Input[bool]]
|
5312
|
+
"""
|
5313
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
|
5314
|
+
"""
|
5315
|
+
code_signing: NotRequired[pulumi.Input[bool]]
|
5316
|
+
"""
|
5317
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
|
5318
|
+
"""
|
5319
|
+
email_protection: NotRequired[pulumi.Input[bool]]
|
5320
|
+
"""
|
5321
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
|
5322
|
+
"""
|
5323
|
+
ocsp_signing: NotRequired[pulumi.Input[bool]]
|
5324
|
+
"""
|
5325
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
|
5326
|
+
"""
|
5327
|
+
server_auth: NotRequired[pulumi.Input[bool]]
|
5328
|
+
"""
|
5329
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
|
5330
|
+
"""
|
5331
|
+
time_stamping: NotRequired[pulumi.Input[bool]]
|
5332
|
+
"""
|
5333
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
|
3965
5334
|
"""
|
3966
|
-
|
3967
|
-
|
3968
|
-
@key_encipherment.setter
|
3969
|
-
def key_encipherment(self, value: Optional[pulumi.Input[bool]]):
|
3970
|
-
pulumi.set(self, "key_encipherment", value)
|
3971
|
-
|
5335
|
+
elif False:
|
5336
|
+
CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
3972
5337
|
|
3973
5338
|
@pulumi.input_type
|
3974
5339
|
class CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageArgs:
|
@@ -4073,6 +5438,15 @@ class CertificateCertificateDescriptionX509DescriptionKeyUsageExtendedKeyUsageAr
|
|
4073
5438
|
pulumi.set(self, "time_stamping", value)
|
4074
5439
|
|
4075
5440
|
|
5441
|
+
if not MYPY:
|
5442
|
+
class CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgsDict(TypedDict):
|
5443
|
+
object_id_paths: NotRequired[pulumi.Input[Sequence[pulumi.Input[int]]]]
|
5444
|
+
"""
|
5445
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
5446
|
+
"""
|
5447
|
+
elif False:
|
5448
|
+
CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
5449
|
+
|
4076
5450
|
@pulumi.input_type
|
4077
5451
|
class CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKeyUsageArgs:
|
4078
5452
|
def __init__(__self__, *,
|
@@ -4096,6 +5470,71 @@ class CertificateCertificateDescriptionX509DescriptionKeyUsageUnknownExtendedKey
|
|
4096
5470
|
pulumi.set(self, "object_id_paths", value)
|
4097
5471
|
|
4098
5472
|
|
5473
|
+
if not MYPY:
|
5474
|
+
class CertificateCertificateDescriptionX509DescriptionNameConstraintArgsDict(TypedDict):
|
5475
|
+
critical: NotRequired[pulumi.Input[bool]]
|
5476
|
+
"""
|
5477
|
+
Indicates whether or not the name constraints are marked critical.
|
5478
|
+
"""
|
5479
|
+
excluded_dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
5480
|
+
"""
|
5481
|
+
Contains excluded DNS names. Any DNS name that can be
|
5482
|
+
constructed by simply adding zero or more labels to
|
5483
|
+
the left-hand side of the name satisfies the name constraint.
|
5484
|
+
For example, `example.com`, `www.example.com`, `www.sub.example.com`
|
5485
|
+
would satisfy `example.com` while `example1.com` does not.
|
5486
|
+
"""
|
5487
|
+
excluded_email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
5488
|
+
"""
|
5489
|
+
Contains the excluded email addresses. The value can be a particular
|
5490
|
+
email address, a hostname to indicate all email addresses on that host or
|
5491
|
+
a domain with a leading period (e.g. `.example.com`) to indicate
|
5492
|
+
all email addresses in that domain.
|
5493
|
+
"""
|
5494
|
+
excluded_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
5495
|
+
"""
|
5496
|
+
Contains the excluded IP ranges. For IPv4 addresses, the ranges
|
5497
|
+
are expressed using CIDR notation as specified in RFC 4632.
|
5498
|
+
For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
|
5499
|
+
addresses.
|
5500
|
+
"""
|
5501
|
+
excluded_uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
5502
|
+
"""
|
5503
|
+
Contains the excluded URIs that apply to the host part of the name.
|
5504
|
+
The value can be a hostname or a domain with a
|
5505
|
+
leading period (like `.example.com`)
|
5506
|
+
"""
|
5507
|
+
permitted_dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
5508
|
+
"""
|
5509
|
+
Contains permitted DNS names. Any DNS name that can be
|
5510
|
+
constructed by simply adding zero or more labels to
|
5511
|
+
the left-hand side of the name satisfies the name constraint.
|
5512
|
+
For example, `example.com`, `www.example.com`, `www.sub.example.com`
|
5513
|
+
would satisfy `example.com` while `example1.com` does not.
|
5514
|
+
"""
|
5515
|
+
permitted_email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
5516
|
+
"""
|
5517
|
+
Contains the permitted email addresses. The value can be a particular
|
5518
|
+
email address, a hostname to indicate all email addresses on that host or
|
5519
|
+
a domain with a leading period (e.g. `.example.com`) to indicate
|
5520
|
+
all email addresses in that domain.
|
5521
|
+
"""
|
5522
|
+
permitted_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
5523
|
+
"""
|
5524
|
+
Contains the permitted IP ranges. For IPv4 addresses, the ranges
|
5525
|
+
are expressed using CIDR notation as specified in RFC 4632.
|
5526
|
+
For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
|
5527
|
+
addresses.
|
5528
|
+
"""
|
5529
|
+
permitted_uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
5530
|
+
"""
|
5531
|
+
Contains the permitted URIs that apply to the host part of the name.
|
5532
|
+
The value can be a hostname or a domain with a
|
5533
|
+
leading period (like `.example.com`)
|
5534
|
+
"""
|
5535
|
+
elif False:
|
5536
|
+
CertificateCertificateDescriptionX509DescriptionNameConstraintArgsDict: TypeAlias = Mapping[str, Any]
|
5537
|
+
|
4099
5538
|
@pulumi.input_type
|
4100
5539
|
class CertificateCertificateDescriptionX509DescriptionNameConstraintArgs:
|
4101
5540
|
def __init__(__self__, *,
|
@@ -4295,6 +5734,15 @@ class CertificateCertificateDescriptionX509DescriptionNameConstraintArgs:
|
|
4295
5734
|
pulumi.set(self, "permitted_uris", value)
|
4296
5735
|
|
4297
5736
|
|
5737
|
+
if not MYPY:
|
5738
|
+
class CertificateCertificateDescriptionX509DescriptionPolicyIdArgsDict(TypedDict):
|
5739
|
+
object_id_paths: NotRequired[pulumi.Input[Sequence[pulumi.Input[int]]]]
|
5740
|
+
"""
|
5741
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
5742
|
+
"""
|
5743
|
+
elif False:
|
5744
|
+
CertificateCertificateDescriptionX509DescriptionPolicyIdArgsDict: TypeAlias = Mapping[str, Any]
|
5745
|
+
|
4298
5746
|
@pulumi.input_type
|
4299
5747
|
class CertificateCertificateDescriptionX509DescriptionPolicyIdArgs:
|
4300
5748
|
def __init__(__self__, *,
|
@@ -4318,6 +5766,34 @@ class CertificateCertificateDescriptionX509DescriptionPolicyIdArgs:
|
|
4318
5766
|
pulumi.set(self, "object_id_paths", value)
|
4319
5767
|
|
4320
5768
|
|
5769
|
+
if not MYPY:
|
5770
|
+
class CertificateConfigArgsDict(TypedDict):
|
5771
|
+
public_key: pulumi.Input['CertificateConfigPublicKeyArgsDict']
|
5772
|
+
"""
|
5773
|
+
A PublicKey describes a public key.
|
5774
|
+
Structure is documented below.
|
5775
|
+
|
5776
|
+
|
5777
|
+
<a name="nested_x509_config"></a>The `x509_config` block supports:
|
5778
|
+
"""
|
5779
|
+
subject_config: pulumi.Input['CertificateConfigSubjectConfigArgsDict']
|
5780
|
+
"""
|
5781
|
+
Specifies some of the values in a certificate that are related to the subject.
|
5782
|
+
Structure is documented below.
|
5783
|
+
"""
|
5784
|
+
x509_config: pulumi.Input['CertificateConfigX509ConfigArgsDict']
|
5785
|
+
"""
|
5786
|
+
Describes how some of the technical X.509 fields in a certificate should be populated.
|
5787
|
+
Structure is documented below.
|
5788
|
+
"""
|
5789
|
+
subject_key_id: NotRequired[pulumi.Input['CertificateConfigSubjectKeyIdArgsDict']]
|
5790
|
+
"""
|
5791
|
+
When specified this provides a custom SKI to be used in the certificate. This should only be used to maintain a SKI of an existing CA originally created outside CA service, which was not generated using method (1) described in RFC 5280 section 4.2.1.2..
|
5792
|
+
Structure is documented below.
|
5793
|
+
"""
|
5794
|
+
elif False:
|
5795
|
+
CertificateConfigArgsDict: TypeAlias = Mapping[str, Any]
|
5796
|
+
|
4321
5797
|
@pulumi.input_type
|
4322
5798
|
class CertificateConfigArgs:
|
4323
5799
|
def __init__(__self__, *,
|
@@ -4400,6 +5876,20 @@ class CertificateConfigArgs:
|
|
4400
5876
|
pulumi.set(self, "subject_key_id", value)
|
4401
5877
|
|
4402
5878
|
|
5879
|
+
if not MYPY:
|
5880
|
+
class CertificateConfigPublicKeyArgsDict(TypedDict):
|
5881
|
+
format: pulumi.Input[str]
|
5882
|
+
"""
|
5883
|
+
The format of the public key. Currently, only PEM format is supported.
|
5884
|
+
Possible values are: `KEY_TYPE_UNSPECIFIED`, `PEM`.
|
5885
|
+
"""
|
5886
|
+
key: NotRequired[pulumi.Input[str]]
|
5887
|
+
"""
|
5888
|
+
Required. A public key. When this is specified in a request, the padding and encoding can be any of the options described by the respective 'KeyType' value. When this is generated by the service, it will always be an RFC 5280 SubjectPublicKeyInfo structure containing an algorithm identifier and a key. A base64-encoded string.
|
5889
|
+
"""
|
5890
|
+
elif False:
|
5891
|
+
CertificateConfigPublicKeyArgsDict: TypeAlias = Mapping[str, Any]
|
5892
|
+
|
4403
5893
|
@pulumi.input_type
|
4404
5894
|
class CertificateConfigPublicKeyArgs:
|
4405
5895
|
def __init__(__self__, *,
|
@@ -4440,6 +5930,21 @@ class CertificateConfigPublicKeyArgs:
|
|
4440
5930
|
pulumi.set(self, "key", value)
|
4441
5931
|
|
4442
5932
|
|
5933
|
+
if not MYPY:
|
5934
|
+
class CertificateConfigSubjectConfigArgsDict(TypedDict):
|
5935
|
+
subject: pulumi.Input['CertificateConfigSubjectConfigSubjectArgsDict']
|
5936
|
+
"""
|
5937
|
+
Contains distinguished name fields such as the location and organization.
|
5938
|
+
Structure is documented below.
|
5939
|
+
"""
|
5940
|
+
subject_alt_name: NotRequired[pulumi.Input['CertificateConfigSubjectConfigSubjectAltNameArgsDict']]
|
5941
|
+
"""
|
5942
|
+
The subject alternative name fields.
|
5943
|
+
Structure is documented below.
|
5944
|
+
"""
|
5945
|
+
elif False:
|
5946
|
+
CertificateConfigSubjectConfigArgsDict: TypeAlias = Mapping[str, Any]
|
5947
|
+
|
4443
5948
|
@pulumi.input_type
|
4444
5949
|
class CertificateConfigSubjectConfigArgs:
|
4445
5950
|
def __init__(__self__, *,
|
@@ -4482,6 +5987,43 @@ class CertificateConfigSubjectConfigArgs:
|
|
4482
5987
|
pulumi.set(self, "subject_alt_name", value)
|
4483
5988
|
|
4484
5989
|
|
5990
|
+
if not MYPY:
|
5991
|
+
class CertificateConfigSubjectConfigSubjectArgsDict(TypedDict):
|
5992
|
+
common_name: pulumi.Input[str]
|
5993
|
+
"""
|
5994
|
+
The common name of the distinguished name.
|
5995
|
+
"""
|
5996
|
+
organization: pulumi.Input[str]
|
5997
|
+
"""
|
5998
|
+
The organization of the subject.
|
5999
|
+
"""
|
6000
|
+
country_code: NotRequired[pulumi.Input[str]]
|
6001
|
+
"""
|
6002
|
+
The country code of the subject.
|
6003
|
+
"""
|
6004
|
+
locality: NotRequired[pulumi.Input[str]]
|
6005
|
+
"""
|
6006
|
+
The locality or city of the subject.
|
6007
|
+
"""
|
6008
|
+
organizational_unit: NotRequired[pulumi.Input[str]]
|
6009
|
+
"""
|
6010
|
+
The organizational unit of the subject.
|
6011
|
+
"""
|
6012
|
+
postal_code: NotRequired[pulumi.Input[str]]
|
6013
|
+
"""
|
6014
|
+
The postal code of the subject.
|
6015
|
+
"""
|
6016
|
+
province: NotRequired[pulumi.Input[str]]
|
6017
|
+
"""
|
6018
|
+
The province, territory, or regional state of the subject.
|
6019
|
+
"""
|
6020
|
+
street_address: NotRequired[pulumi.Input[str]]
|
6021
|
+
"""
|
6022
|
+
The street address of the subject.
|
6023
|
+
"""
|
6024
|
+
elif False:
|
6025
|
+
CertificateConfigSubjectConfigSubjectArgsDict: TypeAlias = Mapping[str, Any]
|
6026
|
+
|
4485
6027
|
@pulumi.input_type
|
4486
6028
|
class CertificateConfigSubjectConfigSubjectArgs:
|
4487
6029
|
def __init__(__self__, *,
|
@@ -4615,6 +6157,27 @@ class CertificateConfigSubjectConfigSubjectArgs:
|
|
4615
6157
|
pulumi.set(self, "street_address", value)
|
4616
6158
|
|
4617
6159
|
|
6160
|
+
if not MYPY:
|
6161
|
+
class CertificateConfigSubjectConfigSubjectAltNameArgsDict(TypedDict):
|
6162
|
+
dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
6163
|
+
"""
|
6164
|
+
Contains only valid, fully-qualified host names.
|
6165
|
+
"""
|
6166
|
+
email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
6167
|
+
"""
|
6168
|
+
Contains only valid RFC 2822 E-mail addresses.
|
6169
|
+
"""
|
6170
|
+
ip_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
6171
|
+
"""
|
6172
|
+
Contains only valid 32-bit IPv4 addresses or RFC 4291 IPv6 addresses.
|
6173
|
+
"""
|
6174
|
+
uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
6175
|
+
"""
|
6176
|
+
Contains only valid RFC 3986 URIs.
|
6177
|
+
"""
|
6178
|
+
elif False:
|
6179
|
+
CertificateConfigSubjectConfigSubjectAltNameArgsDict: TypeAlias = Mapping[str, Any]
|
6180
|
+
|
4618
6181
|
@pulumi.input_type
|
4619
6182
|
class CertificateConfigSubjectConfigSubjectAltNameArgs:
|
4620
6183
|
def __init__(__self__, *,
|
@@ -4686,6 +6249,15 @@ class CertificateConfigSubjectConfigSubjectAltNameArgs:
|
|
4686
6249
|
pulumi.set(self, "uris", value)
|
4687
6250
|
|
4688
6251
|
|
6252
|
+
if not MYPY:
|
6253
|
+
class CertificateConfigSubjectKeyIdArgsDict(TypedDict):
|
6254
|
+
key_id: NotRequired[pulumi.Input[str]]
|
6255
|
+
"""
|
6256
|
+
The value of the KeyId in lowercase hexidecimal.
|
6257
|
+
"""
|
6258
|
+
elif False:
|
6259
|
+
CertificateConfigSubjectKeyIdArgsDict: TypeAlias = Mapping[str, Any]
|
6260
|
+
|
4689
6261
|
@pulumi.input_type
|
4690
6262
|
class CertificateConfigSubjectKeyIdArgs:
|
4691
6263
|
def __init__(__self__, *,
|
@@ -4709,6 +6281,47 @@ class CertificateConfigSubjectKeyIdArgs:
|
|
4709
6281
|
pulumi.set(self, "key_id", value)
|
4710
6282
|
|
4711
6283
|
|
6284
|
+
if not MYPY:
|
6285
|
+
class CertificateConfigX509ConfigArgsDict(TypedDict):
|
6286
|
+
key_usage: pulumi.Input['CertificateConfigX509ConfigKeyUsageArgsDict']
|
6287
|
+
"""
|
6288
|
+
(Output)
|
6289
|
+
Indicates the intended use for keys that correspond to a certificate.
|
6290
|
+
Structure is documented below.
|
6291
|
+
"""
|
6292
|
+
additional_extensions: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateConfigX509ConfigAdditionalExtensionArgsDict']]]]
|
6293
|
+
"""
|
6294
|
+
(Output)
|
6295
|
+
Describes custom X.509 extensions.
|
6296
|
+
Structure is documented below.
|
6297
|
+
"""
|
6298
|
+
aia_ocsp_servers: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
6299
|
+
"""
|
6300
|
+
(Output)
|
6301
|
+
Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the
|
6302
|
+
"Authority Information Access" extension in the certificate.
|
6303
|
+
"""
|
6304
|
+
ca_options: NotRequired[pulumi.Input['CertificateConfigX509ConfigCaOptionsArgsDict']]
|
6305
|
+
"""
|
6306
|
+
(Output)
|
6307
|
+
Describes values that are relevant in a CA certificate.
|
6308
|
+
Structure is documented below.
|
6309
|
+
"""
|
6310
|
+
name_constraints: NotRequired[pulumi.Input['CertificateConfigX509ConfigNameConstraintsArgsDict']]
|
6311
|
+
"""
|
6312
|
+
(Output)
|
6313
|
+
Describes the X.509 name constraints extension.
|
6314
|
+
Structure is documented below.
|
6315
|
+
"""
|
6316
|
+
policy_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateConfigX509ConfigPolicyIdArgsDict']]]]
|
6317
|
+
"""
|
6318
|
+
(Output)
|
6319
|
+
Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
|
6320
|
+
Structure is documented below.
|
6321
|
+
"""
|
6322
|
+
elif False:
|
6323
|
+
CertificateConfigX509ConfigArgsDict: TypeAlias = Mapping[str, Any]
|
6324
|
+
|
4712
6325
|
@pulumi.input_type
|
4713
6326
|
class CertificateConfigX509ConfigArgs:
|
4714
6327
|
def __init__(__self__, *,
|
@@ -4835,6 +6448,25 @@ class CertificateConfigX509ConfigArgs:
|
|
4835
6448
|
pulumi.set(self, "policy_ids", value)
|
4836
6449
|
|
4837
6450
|
|
6451
|
+
if not MYPY:
|
6452
|
+
class CertificateConfigX509ConfigAdditionalExtensionArgsDict(TypedDict):
|
6453
|
+
critical: pulumi.Input[bool]
|
6454
|
+
"""
|
6455
|
+
Indicates whether or not this extension is critical (i.e., if the client does not know how to
|
6456
|
+
handle this extension, the client should consider this to be an error).
|
6457
|
+
"""
|
6458
|
+
object_id: pulumi.Input['CertificateConfigX509ConfigAdditionalExtensionObjectIdArgsDict']
|
6459
|
+
"""
|
6460
|
+
Describes values that are relevant in a CA certificate.
|
6461
|
+
Structure is documented below.
|
6462
|
+
"""
|
6463
|
+
value: pulumi.Input[str]
|
6464
|
+
"""
|
6465
|
+
The value of this X.509 extension. A base64-encoded string.
|
6466
|
+
"""
|
6467
|
+
elif False:
|
6468
|
+
CertificateConfigX509ConfigAdditionalExtensionArgsDict: TypeAlias = Mapping[str, Any]
|
6469
|
+
|
4838
6470
|
@pulumi.input_type
|
4839
6471
|
class CertificateConfigX509ConfigAdditionalExtensionArgs:
|
4840
6472
|
def __init__(__self__, *,
|
@@ -4891,6 +6523,15 @@ class CertificateConfigX509ConfigAdditionalExtensionArgs:
|
|
4891
6523
|
pulumi.set(self, "value", value)
|
4892
6524
|
|
4893
6525
|
|
6526
|
+
if not MYPY:
|
6527
|
+
class CertificateConfigX509ConfigAdditionalExtensionObjectIdArgsDict(TypedDict):
|
6528
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
6529
|
+
"""
|
6530
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
6531
|
+
"""
|
6532
|
+
elif False:
|
6533
|
+
CertificateConfigX509ConfigAdditionalExtensionObjectIdArgsDict: TypeAlias = Mapping[str, Any]
|
6534
|
+
|
4894
6535
|
@pulumi.input_type
|
4895
6536
|
class CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs:
|
4896
6537
|
def __init__(__self__, *,
|
@@ -4913,6 +6554,31 @@ class CertificateConfigX509ConfigAdditionalExtensionObjectIdArgs:
|
|
4913
6554
|
pulumi.set(self, "object_id_paths", value)
|
4914
6555
|
|
4915
6556
|
|
6557
|
+
if not MYPY:
|
6558
|
+
class CertificateConfigX509ConfigCaOptionsArgsDict(TypedDict):
|
6559
|
+
is_ca: NotRequired[pulumi.Input[bool]]
|
6560
|
+
"""
|
6561
|
+
When true, the "CA" in Basic Constraints extension will be set to true.
|
6562
|
+
"""
|
6563
|
+
max_issuer_path_length: NotRequired[pulumi.Input[int]]
|
6564
|
+
"""
|
6565
|
+
Refers to the "path length constraint" in Basic Constraints extension. For a CA certificate, this value describes the depth of
|
6566
|
+
subordinate CA certificates that are allowed. If this value is less than 0, the request will fail.
|
6567
|
+
"""
|
6568
|
+
non_ca: NotRequired[pulumi.Input[bool]]
|
6569
|
+
"""
|
6570
|
+
When true, the "CA" in Basic Constraints extension will be set to false.
|
6571
|
+
If both `is_ca` and `non_ca` are unset, the extension will be omitted from the CA certificate.
|
6572
|
+
"""
|
6573
|
+
zero_max_issuer_path_length: NotRequired[pulumi.Input[bool]]
|
6574
|
+
"""
|
6575
|
+
When true, the "path length constraint" in Basic Constraints extension will be set to 0.
|
6576
|
+
if both `max_issuer_path_length` and `zero_max_issuer_path_length` are unset,
|
6577
|
+
the max path length will be omitted from the CA certificate.
|
6578
|
+
"""
|
6579
|
+
elif False:
|
6580
|
+
CertificateConfigX509ConfigCaOptionsArgsDict: TypeAlias = Mapping[str, Any]
|
6581
|
+
|
4916
6582
|
@pulumi.input_type
|
4917
6583
|
class CertificateConfigX509ConfigCaOptionsArgs:
|
4918
6584
|
def __init__(__self__, *,
|
@@ -4992,6 +6658,26 @@ class CertificateConfigX509ConfigCaOptionsArgs:
|
|
4992
6658
|
pulumi.set(self, "zero_max_issuer_path_length", value)
|
4993
6659
|
|
4994
6660
|
|
6661
|
+
if not MYPY:
|
6662
|
+
class CertificateConfigX509ConfigKeyUsageArgsDict(TypedDict):
|
6663
|
+
base_key_usage: pulumi.Input['CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgsDict']
|
6664
|
+
"""
|
6665
|
+
Describes high-level ways in which a key may be used.
|
6666
|
+
Structure is documented below.
|
6667
|
+
"""
|
6668
|
+
extended_key_usage: pulumi.Input['CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgsDict']
|
6669
|
+
"""
|
6670
|
+
Describes high-level ways in which a key may be used.
|
6671
|
+
Structure is documented below.
|
6672
|
+
"""
|
6673
|
+
unknown_extended_key_usages: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgsDict']]]]
|
6674
|
+
"""
|
6675
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
6676
|
+
Structure is documented below.
|
6677
|
+
"""
|
6678
|
+
elif False:
|
6679
|
+
CertificateConfigX509ConfigKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
6680
|
+
|
4995
6681
|
@pulumi.input_type
|
4996
6682
|
class CertificateConfigX509ConfigKeyUsageArgs:
|
4997
6683
|
def __init__(__self__, *,
|
@@ -5044,12 +6730,53 @@ class CertificateConfigX509ConfigKeyUsageArgs:
|
|
5044
6730
|
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
5045
6731
|
Structure is documented below.
|
5046
6732
|
"""
|
5047
|
-
return pulumi.get(self, "unknown_extended_key_usages")
|
5048
|
-
|
5049
|
-
@unknown_extended_key_usages.setter
|
5050
|
-
def unknown_extended_key_usages(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs']]]]):
|
5051
|
-
pulumi.set(self, "unknown_extended_key_usages", value)
|
5052
|
-
|
6733
|
+
return pulumi.get(self, "unknown_extended_key_usages")
|
6734
|
+
|
6735
|
+
@unknown_extended_key_usages.setter
|
6736
|
+
def unknown_extended_key_usages(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs']]]]):
|
6737
|
+
pulumi.set(self, "unknown_extended_key_usages", value)
|
6738
|
+
|
6739
|
+
|
6740
|
+
if not MYPY:
|
6741
|
+
class CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgsDict(TypedDict):
|
6742
|
+
cert_sign: NotRequired[pulumi.Input[bool]]
|
6743
|
+
"""
|
6744
|
+
The key may be used to sign certificates.
|
6745
|
+
"""
|
6746
|
+
content_commitment: NotRequired[pulumi.Input[bool]]
|
6747
|
+
"""
|
6748
|
+
The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
|
6749
|
+
"""
|
6750
|
+
crl_sign: NotRequired[pulumi.Input[bool]]
|
6751
|
+
"""
|
6752
|
+
The key may be used sign certificate revocation lists.
|
6753
|
+
"""
|
6754
|
+
data_encipherment: NotRequired[pulumi.Input[bool]]
|
6755
|
+
"""
|
6756
|
+
The key may be used to encipher data.
|
6757
|
+
"""
|
6758
|
+
decipher_only: NotRequired[pulumi.Input[bool]]
|
6759
|
+
"""
|
6760
|
+
The key may be used to decipher only.
|
6761
|
+
"""
|
6762
|
+
digital_signature: NotRequired[pulumi.Input[bool]]
|
6763
|
+
"""
|
6764
|
+
The key may be used for digital signatures.
|
6765
|
+
"""
|
6766
|
+
encipher_only: NotRequired[pulumi.Input[bool]]
|
6767
|
+
"""
|
6768
|
+
The key may be used to encipher only.
|
6769
|
+
"""
|
6770
|
+
key_agreement: NotRequired[pulumi.Input[bool]]
|
6771
|
+
"""
|
6772
|
+
The key may be used in a key agreement protocol.
|
6773
|
+
"""
|
6774
|
+
key_encipherment: NotRequired[pulumi.Input[bool]]
|
6775
|
+
"""
|
6776
|
+
The key may be used to encipher other keys.
|
6777
|
+
"""
|
6778
|
+
elif False:
|
6779
|
+
CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
5053
6780
|
|
5054
6781
|
@pulumi.input_type
|
5055
6782
|
class CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs:
|
@@ -5202,6 +6929,35 @@ class CertificateConfigX509ConfigKeyUsageBaseKeyUsageArgs:
|
|
5202
6929
|
pulumi.set(self, "key_encipherment", value)
|
5203
6930
|
|
5204
6931
|
|
6932
|
+
if not MYPY:
|
6933
|
+
class CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgsDict(TypedDict):
|
6934
|
+
client_auth: NotRequired[pulumi.Input[bool]]
|
6935
|
+
"""
|
6936
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
|
6937
|
+
"""
|
6938
|
+
code_signing: NotRequired[pulumi.Input[bool]]
|
6939
|
+
"""
|
6940
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
|
6941
|
+
"""
|
6942
|
+
email_protection: NotRequired[pulumi.Input[bool]]
|
6943
|
+
"""
|
6944
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
|
6945
|
+
"""
|
6946
|
+
ocsp_signing: NotRequired[pulumi.Input[bool]]
|
6947
|
+
"""
|
6948
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
|
6949
|
+
"""
|
6950
|
+
server_auth: NotRequired[pulumi.Input[bool]]
|
6951
|
+
"""
|
6952
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
|
6953
|
+
"""
|
6954
|
+
time_stamping: NotRequired[pulumi.Input[bool]]
|
6955
|
+
"""
|
6956
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
|
6957
|
+
"""
|
6958
|
+
elif False:
|
6959
|
+
CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
6960
|
+
|
5205
6961
|
@pulumi.input_type
|
5206
6962
|
class CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs:
|
5207
6963
|
def __init__(__self__, *,
|
@@ -5305,6 +7061,15 @@ class CertificateConfigX509ConfigKeyUsageExtendedKeyUsageArgs:
|
|
5305
7061
|
pulumi.set(self, "time_stamping", value)
|
5306
7062
|
|
5307
7063
|
|
7064
|
+
if not MYPY:
|
7065
|
+
class CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgsDict(TypedDict):
|
7066
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
7067
|
+
"""
|
7068
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
7069
|
+
"""
|
7070
|
+
elif False:
|
7071
|
+
CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
7072
|
+
|
5308
7073
|
@pulumi.input_type
|
5309
7074
|
class CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs:
|
5310
7075
|
def __init__(__self__, *,
|
@@ -5327,6 +7092,71 @@ class CertificateConfigX509ConfigKeyUsageUnknownExtendedKeyUsageArgs:
|
|
5327
7092
|
pulumi.set(self, "object_id_paths", value)
|
5328
7093
|
|
5329
7094
|
|
7095
|
+
if not MYPY:
|
7096
|
+
class CertificateConfigX509ConfigNameConstraintsArgsDict(TypedDict):
|
7097
|
+
critical: pulumi.Input[bool]
|
7098
|
+
"""
|
7099
|
+
Indicates whether or not the name constraints are marked critical.
|
7100
|
+
"""
|
7101
|
+
excluded_dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7102
|
+
"""
|
7103
|
+
Contains excluded DNS names. Any DNS name that can be
|
7104
|
+
constructed by simply adding zero or more labels to
|
7105
|
+
the left-hand side of the name satisfies the name constraint.
|
7106
|
+
For example, `example.com`, `www.example.com`, `www.sub.example.com`
|
7107
|
+
would satisfy `example.com` while `example1.com` does not.
|
7108
|
+
"""
|
7109
|
+
excluded_email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7110
|
+
"""
|
7111
|
+
Contains the excluded email addresses. The value can be a particular
|
7112
|
+
email address, a hostname to indicate all email addresses on that host or
|
7113
|
+
a domain with a leading period (e.g. `.example.com`) to indicate
|
7114
|
+
all email addresses in that domain.
|
7115
|
+
"""
|
7116
|
+
excluded_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7117
|
+
"""
|
7118
|
+
Contains the excluded IP ranges. For IPv4 addresses, the ranges
|
7119
|
+
are expressed using CIDR notation as specified in RFC 4632.
|
7120
|
+
For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
|
7121
|
+
addresses.
|
7122
|
+
"""
|
7123
|
+
excluded_uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7124
|
+
"""
|
7125
|
+
Contains the excluded URIs that apply to the host part of the name.
|
7126
|
+
The value can be a hostname or a domain with a
|
7127
|
+
leading period (like `.example.com`)
|
7128
|
+
"""
|
7129
|
+
permitted_dns_names: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7130
|
+
"""
|
7131
|
+
Contains permitted DNS names. Any DNS name that can be
|
7132
|
+
constructed by simply adding zero or more labels to
|
7133
|
+
the left-hand side of the name satisfies the name constraint.
|
7134
|
+
For example, `example.com`, `www.example.com`, `www.sub.example.com`
|
7135
|
+
would satisfy `example.com` while `example1.com` does not.
|
7136
|
+
"""
|
7137
|
+
permitted_email_addresses: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7138
|
+
"""
|
7139
|
+
Contains the permitted email addresses. The value can be a particular
|
7140
|
+
email address, a hostname to indicate all email addresses on that host or
|
7141
|
+
a domain with a leading period (e.g. `.example.com`) to indicate
|
7142
|
+
all email addresses in that domain.
|
7143
|
+
"""
|
7144
|
+
permitted_ip_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7145
|
+
"""
|
7146
|
+
Contains the permitted IP ranges. For IPv4 addresses, the ranges
|
7147
|
+
are expressed using CIDR notation as specified in RFC 4632.
|
7148
|
+
For IPv6 addresses, the ranges are expressed in similar encoding as IPv4
|
7149
|
+
addresses.
|
7150
|
+
"""
|
7151
|
+
permitted_uris: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7152
|
+
"""
|
7153
|
+
Contains the permitted URIs that apply to the host part of the name.
|
7154
|
+
The value can be a hostname or a domain with a
|
7155
|
+
leading period (like `.example.com`)
|
7156
|
+
"""
|
7157
|
+
elif False:
|
7158
|
+
CertificateConfigX509ConfigNameConstraintsArgsDict: TypeAlias = Mapping[str, Any]
|
7159
|
+
|
5330
7160
|
@pulumi.input_type
|
5331
7161
|
class CertificateConfigX509ConfigNameConstraintsArgs:
|
5332
7162
|
def __init__(__self__, *,
|
@@ -5525,6 +7355,15 @@ class CertificateConfigX509ConfigNameConstraintsArgs:
|
|
5525
7355
|
pulumi.set(self, "permitted_uris", value)
|
5526
7356
|
|
5527
7357
|
|
7358
|
+
if not MYPY:
|
7359
|
+
class CertificateConfigX509ConfigPolicyIdArgsDict(TypedDict):
|
7360
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
7361
|
+
"""
|
7362
|
+
An ObjectId specifies an object identifier (OID). These provide context and describe types in ASN.1 messages.
|
7363
|
+
"""
|
7364
|
+
elif False:
|
7365
|
+
CertificateConfigX509ConfigPolicyIdArgsDict: TypeAlias = Mapping[str, Any]
|
7366
|
+
|
5528
7367
|
@pulumi.input_type
|
5529
7368
|
class CertificateConfigX509ConfigPolicyIdArgs:
|
5530
7369
|
def __init__(__self__, *,
|
@@ -5547,6 +7386,21 @@ class CertificateConfigX509ConfigPolicyIdArgs:
|
|
5547
7386
|
pulumi.set(self, "object_id_paths", value)
|
5548
7387
|
|
5549
7388
|
|
7389
|
+
if not MYPY:
|
7390
|
+
class CertificateRevocationDetailArgsDict(TypedDict):
|
7391
|
+
revocation_state: NotRequired[pulumi.Input[str]]
|
7392
|
+
"""
|
7393
|
+
(Output)
|
7394
|
+
Indicates why a Certificate was revoked.
|
7395
|
+
"""
|
7396
|
+
revocation_time: NotRequired[pulumi.Input[str]]
|
7397
|
+
"""
|
7398
|
+
(Output)
|
7399
|
+
The time at which this Certificate was revoked.
|
7400
|
+
"""
|
7401
|
+
elif False:
|
7402
|
+
CertificateRevocationDetailArgsDict: TypeAlias = Mapping[str, Any]
|
7403
|
+
|
5550
7404
|
@pulumi.input_type
|
5551
7405
|
class CertificateRevocationDetailArgs:
|
5552
7406
|
def __init__(__self__, *,
|
@@ -5590,6 +7444,20 @@ class CertificateRevocationDetailArgs:
|
|
5590
7444
|
pulumi.set(self, "revocation_time", value)
|
5591
7445
|
|
5592
7446
|
|
7447
|
+
if not MYPY:
|
7448
|
+
class CertificateTemplateIamBindingConditionArgsDict(TypedDict):
|
7449
|
+
expression: pulumi.Input[str]
|
7450
|
+
"""
|
7451
|
+
Textual representation of an expression in Common Expression Language syntax.
|
7452
|
+
"""
|
7453
|
+
title: pulumi.Input[str]
|
7454
|
+
"""
|
7455
|
+
A title for the expression, i.e. a short string describing its purpose.
|
7456
|
+
"""
|
7457
|
+
description: NotRequired[pulumi.Input[str]]
|
7458
|
+
elif False:
|
7459
|
+
CertificateTemplateIamBindingConditionArgsDict: TypeAlias = Mapping[str, Any]
|
7460
|
+
|
5593
7461
|
@pulumi.input_type
|
5594
7462
|
class CertificateTemplateIamBindingConditionArgs:
|
5595
7463
|
def __init__(__self__, *,
|
@@ -5639,6 +7507,20 @@ class CertificateTemplateIamBindingConditionArgs:
|
|
5639
7507
|
pulumi.set(self, "description", value)
|
5640
7508
|
|
5641
7509
|
|
7510
|
+
if not MYPY:
|
7511
|
+
class CertificateTemplateIamMemberConditionArgsDict(TypedDict):
|
7512
|
+
expression: pulumi.Input[str]
|
7513
|
+
"""
|
7514
|
+
Textual representation of an expression in Common Expression Language syntax.
|
7515
|
+
"""
|
7516
|
+
title: pulumi.Input[str]
|
7517
|
+
"""
|
7518
|
+
A title for the expression, i.e. a short string describing its purpose.
|
7519
|
+
"""
|
7520
|
+
description: NotRequired[pulumi.Input[str]]
|
7521
|
+
elif False:
|
7522
|
+
CertificateTemplateIamMemberConditionArgsDict: TypeAlias = Mapping[str, Any]
|
7523
|
+
|
5642
7524
|
@pulumi.input_type
|
5643
7525
|
class CertificateTemplateIamMemberConditionArgs:
|
5644
7526
|
def __init__(__self__, *,
|
@@ -5688,6 +7570,24 @@ class CertificateTemplateIamMemberConditionArgs:
|
|
5688
7570
|
pulumi.set(self, "description", value)
|
5689
7571
|
|
5690
7572
|
|
7573
|
+
if not MYPY:
|
7574
|
+
class CertificateTemplateIdentityConstraintsArgsDict(TypedDict):
|
7575
|
+
allow_subject_alt_names_passthrough: pulumi.Input[bool]
|
7576
|
+
"""
|
7577
|
+
Required. If this is true, the SubjectAltNames extension may be copied from a certificate request into the signed certificate. Otherwise, the requested SubjectAltNames will be discarded.
|
7578
|
+
"""
|
7579
|
+
allow_subject_passthrough: pulumi.Input[bool]
|
7580
|
+
"""
|
7581
|
+
Required. If this is true, the Subject field may be copied from a certificate request into the signed certificate. Otherwise, the requested Subject will be discarded.
|
7582
|
+
"""
|
7583
|
+
cel_expression: NotRequired[pulumi.Input['CertificateTemplateIdentityConstraintsCelExpressionArgsDict']]
|
7584
|
+
"""
|
7585
|
+
Optional. A CEL expression that may be used to validate the resolved X.509 Subject and/or Subject Alternative Name before a certificate is signed. To see the full allowed syntax and some examples, see https://cloud.google.com/certificate-authority-service/docs/using-cel
|
7586
|
+
Structure is documented below.
|
7587
|
+
"""
|
7588
|
+
elif False:
|
7589
|
+
CertificateTemplateIdentityConstraintsArgsDict: TypeAlias = Mapping[str, Any]
|
7590
|
+
|
5691
7591
|
@pulumi.input_type
|
5692
7592
|
class CertificateTemplateIdentityConstraintsArgs:
|
5693
7593
|
def __init__(__self__, *,
|
@@ -5743,6 +7643,27 @@ class CertificateTemplateIdentityConstraintsArgs:
|
|
5743
7643
|
pulumi.set(self, "cel_expression", value)
|
5744
7644
|
|
5745
7645
|
|
7646
|
+
if not MYPY:
|
7647
|
+
class CertificateTemplateIdentityConstraintsCelExpressionArgsDict(TypedDict):
|
7648
|
+
description: NotRequired[pulumi.Input[str]]
|
7649
|
+
"""
|
7650
|
+
Optional. Description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
|
7651
|
+
"""
|
7652
|
+
expression: NotRequired[pulumi.Input[str]]
|
7653
|
+
"""
|
7654
|
+
Textual representation of an expression in Common Expression Language syntax.
|
7655
|
+
"""
|
7656
|
+
location: NotRequired[pulumi.Input[str]]
|
7657
|
+
"""
|
7658
|
+
Optional. String indicating the location of the expression for error reporting, e.g. a file name and a position in the file.
|
7659
|
+
"""
|
7660
|
+
title: NotRequired[pulumi.Input[str]]
|
7661
|
+
"""
|
7662
|
+
Optional. Title for the expression, i.e. a short string describing its purpose. This can be used e.g. in UIs which allow to enter the expression.
|
7663
|
+
"""
|
7664
|
+
elif False:
|
7665
|
+
CertificateTemplateIdentityConstraintsCelExpressionArgsDict: TypeAlias = Mapping[str, Any]
|
7666
|
+
|
5746
7667
|
@pulumi.input_type
|
5747
7668
|
class CertificateTemplateIdentityConstraintsCelExpressionArgs:
|
5748
7669
|
def __init__(__self__, *,
|
@@ -5814,6 +7735,20 @@ class CertificateTemplateIdentityConstraintsCelExpressionArgs:
|
|
5814
7735
|
pulumi.set(self, "title", value)
|
5815
7736
|
|
5816
7737
|
|
7738
|
+
if not MYPY:
|
7739
|
+
class CertificateTemplatePassthroughExtensionsArgsDict(TypedDict):
|
7740
|
+
additional_extensions: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateTemplatePassthroughExtensionsAdditionalExtensionArgsDict']]]]
|
7741
|
+
"""
|
7742
|
+
Optional. A set of ObjectIds identifying custom X.509 extensions. Will be combined with known_extensions to determine the full set of X.509 extensions.
|
7743
|
+
Structure is documented below.
|
7744
|
+
"""
|
7745
|
+
known_extensions: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7746
|
+
"""
|
7747
|
+
Optional. A set of named X.509 extensions. Will be combined with additional_extensions to determine the full set of X.509 extensions.
|
7748
|
+
"""
|
7749
|
+
elif False:
|
7750
|
+
CertificateTemplatePassthroughExtensionsArgsDict: TypeAlias = Mapping[str, Any]
|
7751
|
+
|
5817
7752
|
@pulumi.input_type
|
5818
7753
|
class CertificateTemplatePassthroughExtensionsArgs:
|
5819
7754
|
def __init__(__self__, *,
|
@@ -5855,6 +7790,15 @@ class CertificateTemplatePassthroughExtensionsArgs:
|
|
5855
7790
|
pulumi.set(self, "known_extensions", value)
|
5856
7791
|
|
5857
7792
|
|
7793
|
+
if not MYPY:
|
7794
|
+
class CertificateTemplatePassthroughExtensionsAdditionalExtensionArgsDict(TypedDict):
|
7795
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
7796
|
+
"""
|
7797
|
+
Required. The parts of an OID path. The most significant parts of the path come first.
|
7798
|
+
"""
|
7799
|
+
elif False:
|
7800
|
+
CertificateTemplatePassthroughExtensionsAdditionalExtensionArgsDict: TypeAlias = Mapping[str, Any]
|
7801
|
+
|
5858
7802
|
@pulumi.input_type
|
5859
7803
|
class CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs:
|
5860
7804
|
def __init__(__self__, *,
|
@@ -5877,6 +7821,35 @@ class CertificateTemplatePassthroughExtensionsAdditionalExtensionArgs:
|
|
5877
7821
|
pulumi.set(self, "object_id_paths", value)
|
5878
7822
|
|
5879
7823
|
|
7824
|
+
if not MYPY:
|
7825
|
+
class CertificateTemplatePredefinedValuesArgsDict(TypedDict):
|
7826
|
+
additional_extensions: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateTemplatePredefinedValuesAdditionalExtensionArgsDict']]]]
|
7827
|
+
"""
|
7828
|
+
Optional. Describes custom X.509 extensions.
|
7829
|
+
Structure is documented below.
|
7830
|
+
"""
|
7831
|
+
aia_ocsp_servers: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
|
7832
|
+
"""
|
7833
|
+
Optional. Describes Online Certificate Status Protocol (OCSP) endpoint addresses that appear in the "Authority Information Access" extension in the certificate.
|
7834
|
+
"""
|
7835
|
+
ca_options: NotRequired[pulumi.Input['CertificateTemplatePredefinedValuesCaOptionsArgsDict']]
|
7836
|
+
"""
|
7837
|
+
Optional. Describes options in this X509Parameters that are relevant in a CA certificate.
|
7838
|
+
Structure is documented below.
|
7839
|
+
"""
|
7840
|
+
key_usage: NotRequired[pulumi.Input['CertificateTemplatePredefinedValuesKeyUsageArgsDict']]
|
7841
|
+
"""
|
7842
|
+
Optional. Indicates the intended use for keys that correspond to a certificate.
|
7843
|
+
Structure is documented below.
|
7844
|
+
"""
|
7845
|
+
policy_ids: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateTemplatePredefinedValuesPolicyIdArgsDict']]]]
|
7846
|
+
"""
|
7847
|
+
Optional. Describes the X.509 certificate policy object identifiers, per https://tools.ietf.org/html/rfc5280#section-4.2.1.4.
|
7848
|
+
Structure is documented below.
|
7849
|
+
"""
|
7850
|
+
elif False:
|
7851
|
+
CertificateTemplatePredefinedValuesArgsDict: TypeAlias = Mapping[str, Any]
|
7852
|
+
|
5880
7853
|
@pulumi.input_type
|
5881
7854
|
class CertificateTemplatePredefinedValuesArgs:
|
5882
7855
|
def __init__(__self__, *,
|
@@ -5972,6 +7945,24 @@ class CertificateTemplatePredefinedValuesArgs:
|
|
5972
7945
|
pulumi.set(self, "policy_ids", value)
|
5973
7946
|
|
5974
7947
|
|
7948
|
+
if not MYPY:
|
7949
|
+
class CertificateTemplatePredefinedValuesAdditionalExtensionArgsDict(TypedDict):
|
7950
|
+
object_id: pulumi.Input['CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgsDict']
|
7951
|
+
"""
|
7952
|
+
Required. The OID for this X.509 extension.
|
7953
|
+
Structure is documented below.
|
7954
|
+
"""
|
7955
|
+
value: pulumi.Input[str]
|
7956
|
+
"""
|
7957
|
+
Required. The value of this X.509 extension.
|
7958
|
+
"""
|
7959
|
+
critical: NotRequired[pulumi.Input[bool]]
|
7960
|
+
"""
|
7961
|
+
Optional. Indicates whether or not this extension is critical (i.e., if the client does not know how to handle this extension, the client should consider this to be an error).
|
7962
|
+
"""
|
7963
|
+
elif False:
|
7964
|
+
CertificateTemplatePredefinedValuesAdditionalExtensionArgsDict: TypeAlias = Mapping[str, Any]
|
7965
|
+
|
5975
7966
|
@pulumi.input_type
|
5976
7967
|
class CertificateTemplatePredefinedValuesAdditionalExtensionArgs:
|
5977
7968
|
def __init__(__self__, *,
|
@@ -6027,6 +8018,15 @@ class CertificateTemplatePredefinedValuesAdditionalExtensionArgs:
|
|
6027
8018
|
pulumi.set(self, "critical", value)
|
6028
8019
|
|
6029
8020
|
|
8021
|
+
if not MYPY:
|
8022
|
+
class CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgsDict(TypedDict):
|
8023
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
8024
|
+
"""
|
8025
|
+
Required. The parts of an OID path. The most significant parts of the path come first.
|
8026
|
+
"""
|
8027
|
+
elif False:
|
8028
|
+
CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgsDict: TypeAlias = Mapping[str, Any]
|
8029
|
+
|
6030
8030
|
@pulumi.input_type
|
6031
8031
|
class CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs:
|
6032
8032
|
def __init__(__self__, *,
|
@@ -6049,6 +8049,19 @@ class CertificateTemplatePredefinedValuesAdditionalExtensionObjectIdArgs:
|
|
6049
8049
|
pulumi.set(self, "object_id_paths", value)
|
6050
8050
|
|
6051
8051
|
|
8052
|
+
if not MYPY:
|
8053
|
+
class CertificateTemplatePredefinedValuesCaOptionsArgsDict(TypedDict):
|
8054
|
+
is_ca: NotRequired[pulumi.Input[bool]]
|
8055
|
+
"""
|
8056
|
+
Optional. Refers to the "CA" X.509 extension, which is a boolean value. When this value is missing, the extension will be omitted from the CA certificate.
|
8057
|
+
"""
|
8058
|
+
max_issuer_path_length: NotRequired[pulumi.Input[int]]
|
8059
|
+
"""
|
8060
|
+
Optional. Refers to the path length restriction X.509 extension. For a CA certificate, this value describes the depth of subordinate CA certificates that are allowed. If this value is less than 0, the request will fail. If this value is missing, the max path length will be omitted from the CA certificate.
|
8061
|
+
"""
|
8062
|
+
elif False:
|
8063
|
+
CertificateTemplatePredefinedValuesCaOptionsArgsDict: TypeAlias = Mapping[str, Any]
|
8064
|
+
|
6052
8065
|
@pulumi.input_type
|
6053
8066
|
class CertificateTemplatePredefinedValuesCaOptionsArgs:
|
6054
8067
|
def __init__(__self__, *,
|
@@ -6088,6 +8101,26 @@ class CertificateTemplatePredefinedValuesCaOptionsArgs:
|
|
6088
8101
|
pulumi.set(self, "max_issuer_path_length", value)
|
6089
8102
|
|
6090
8103
|
|
8104
|
+
if not MYPY:
|
8105
|
+
class CertificateTemplatePredefinedValuesKeyUsageArgsDict(TypedDict):
|
8106
|
+
base_key_usage: NotRequired[pulumi.Input['CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgsDict']]
|
8107
|
+
"""
|
8108
|
+
Describes high-level ways in which a key may be used.
|
8109
|
+
Structure is documented below.
|
8110
|
+
"""
|
8111
|
+
extended_key_usage: NotRequired[pulumi.Input['CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgsDict']]
|
8112
|
+
"""
|
8113
|
+
Detailed scenarios in which a key may be used.
|
8114
|
+
Structure is documented below.
|
8115
|
+
"""
|
8116
|
+
unknown_extended_key_usages: NotRequired[pulumi.Input[Sequence[pulumi.Input['CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgsDict']]]]
|
8117
|
+
"""
|
8118
|
+
Used to describe extended key usages that are not listed in the KeyUsage.ExtendedKeyUsageOptions message.
|
8119
|
+
Structure is documented below.
|
8120
|
+
"""
|
8121
|
+
elif False:
|
8122
|
+
CertificateTemplatePredefinedValuesKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
8123
|
+
|
6091
8124
|
@pulumi.input_type
|
6092
8125
|
class CertificateTemplatePredefinedValuesKeyUsageArgs:
|
6093
8126
|
def __init__(__self__, *,
|
@@ -6149,6 +8182,47 @@ class CertificateTemplatePredefinedValuesKeyUsageArgs:
|
|
6149
8182
|
pulumi.set(self, "unknown_extended_key_usages", value)
|
6150
8183
|
|
6151
8184
|
|
8185
|
+
if not MYPY:
|
8186
|
+
class CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgsDict(TypedDict):
|
8187
|
+
cert_sign: NotRequired[pulumi.Input[bool]]
|
8188
|
+
"""
|
8189
|
+
The key may be used to sign certificates.
|
8190
|
+
"""
|
8191
|
+
content_commitment: NotRequired[pulumi.Input[bool]]
|
8192
|
+
"""
|
8193
|
+
The key may be used for cryptographic commitments. Note that this may also be referred to as "non-repudiation".
|
8194
|
+
"""
|
8195
|
+
crl_sign: NotRequired[pulumi.Input[bool]]
|
8196
|
+
"""
|
8197
|
+
The key may be used sign certificate revocation lists.
|
8198
|
+
"""
|
8199
|
+
data_encipherment: NotRequired[pulumi.Input[bool]]
|
8200
|
+
"""
|
8201
|
+
The key may be used to encipher data.
|
8202
|
+
"""
|
8203
|
+
decipher_only: NotRequired[pulumi.Input[bool]]
|
8204
|
+
"""
|
8205
|
+
The key may be used to decipher only.
|
8206
|
+
"""
|
8207
|
+
digital_signature: NotRequired[pulumi.Input[bool]]
|
8208
|
+
"""
|
8209
|
+
The key may be used for digital signatures.
|
8210
|
+
"""
|
8211
|
+
encipher_only: NotRequired[pulumi.Input[bool]]
|
8212
|
+
"""
|
8213
|
+
The key may be used to encipher only.
|
8214
|
+
"""
|
8215
|
+
key_agreement: NotRequired[pulumi.Input[bool]]
|
8216
|
+
"""
|
8217
|
+
The key may be used in a key agreement protocol.
|
8218
|
+
"""
|
8219
|
+
key_encipherment: NotRequired[pulumi.Input[bool]]
|
8220
|
+
"""
|
8221
|
+
The key may be used to encipher other keys.
|
8222
|
+
"""
|
8223
|
+
elif False:
|
8224
|
+
CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
8225
|
+
|
6152
8226
|
@pulumi.input_type
|
6153
8227
|
class CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs:
|
6154
8228
|
def __init__(__self__, *,
|
@@ -6300,6 +8374,35 @@ class CertificateTemplatePredefinedValuesKeyUsageBaseKeyUsageArgs:
|
|
6300
8374
|
pulumi.set(self, "key_encipherment", value)
|
6301
8375
|
|
6302
8376
|
|
8377
|
+
if not MYPY:
|
8378
|
+
class CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgsDict(TypedDict):
|
8379
|
+
client_auth: NotRequired[pulumi.Input[bool]]
|
8380
|
+
"""
|
8381
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.2. Officially described as "TLS WWW client authentication", though regularly used for non-WWW TLS.
|
8382
|
+
"""
|
8383
|
+
code_signing: NotRequired[pulumi.Input[bool]]
|
8384
|
+
"""
|
8385
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.3. Officially described as "Signing of downloadable executable code client authentication".
|
8386
|
+
"""
|
8387
|
+
email_protection: NotRequired[pulumi.Input[bool]]
|
8388
|
+
"""
|
8389
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.4. Officially described as "Email protection".
|
8390
|
+
"""
|
8391
|
+
ocsp_signing: NotRequired[pulumi.Input[bool]]
|
8392
|
+
"""
|
8393
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.9. Officially described as "Signing OCSP responses".
|
8394
|
+
"""
|
8395
|
+
server_auth: NotRequired[pulumi.Input[bool]]
|
8396
|
+
"""
|
8397
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.1. Officially described as "TLS WWW server authentication", though regularly used for non-WWW TLS.
|
8398
|
+
"""
|
8399
|
+
time_stamping: NotRequired[pulumi.Input[bool]]
|
8400
|
+
"""
|
8401
|
+
Corresponds to OID 1.3.6.1.5.5.7.3.8. Officially described as "Binding the hash of an object to a time".
|
8402
|
+
"""
|
8403
|
+
elif False:
|
8404
|
+
CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
8405
|
+
|
6303
8406
|
@pulumi.input_type
|
6304
8407
|
class CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs:
|
6305
8408
|
def __init__(__self__, *,
|
@@ -6403,6 +8506,15 @@ class CertificateTemplatePredefinedValuesKeyUsageExtendedKeyUsageArgs:
|
|
6403
8506
|
pulumi.set(self, "time_stamping", value)
|
6404
8507
|
|
6405
8508
|
|
8509
|
+
if not MYPY:
|
8510
|
+
class CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgsDict(TypedDict):
|
8511
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
8512
|
+
"""
|
8513
|
+
Required. The parts of an OID path. The most significant parts of the path come first.
|
8514
|
+
"""
|
8515
|
+
elif False:
|
8516
|
+
CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgsDict: TypeAlias = Mapping[str, Any]
|
8517
|
+
|
6406
8518
|
@pulumi.input_type
|
6407
8519
|
class CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs:
|
6408
8520
|
def __init__(__self__, *,
|
@@ -6425,6 +8537,15 @@ class CertificateTemplatePredefinedValuesKeyUsageUnknownExtendedKeyUsageArgs:
|
|
6425
8537
|
pulumi.set(self, "object_id_paths", value)
|
6426
8538
|
|
6427
8539
|
|
8540
|
+
if not MYPY:
|
8541
|
+
class CertificateTemplatePredefinedValuesPolicyIdArgsDict(TypedDict):
|
8542
|
+
object_id_paths: pulumi.Input[Sequence[pulumi.Input[int]]]
|
8543
|
+
"""
|
8544
|
+
Required. The parts of an OID path. The most significant parts of the path come first.
|
8545
|
+
"""
|
8546
|
+
elif False:
|
8547
|
+
CertificateTemplatePredefinedValuesPolicyIdArgsDict: TypeAlias = Mapping[str, Any]
|
8548
|
+
|
6428
8549
|
@pulumi.input_type
|
6429
8550
|
class CertificateTemplatePredefinedValuesPolicyIdArgs:
|
6430
8551
|
def __init__(__self__, *,
|