pulumi-gcp 7.34.0a1722421695__py3-none-any.whl → 7.34.0a1722604983__py3-none-any.whl

pulumi_gcp/networksecurity/tls_inspection_policy.py

@@ -579,7 +579,7 @@ class TlsInspectionPolicy(pulumi.CustomResource):
         default_ca_pool_iam_member = gcp.certificateauthority.CaPoolIamMember("default",
             ca_pool=default.id,
             role="roles/privateca.certificateManager",
-            member=ns_sa.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=ns_sa.member)
         default_trust_config = gcp.certificatemanager.TrustConfig("default",
             name="my-trust-config",
             description="sample trust config description",
@@ -828,7 +828,7 @@ class TlsInspectionPolicy(pulumi.CustomResource):
         default_ca_pool_iam_member = gcp.certificateauthority.CaPoolIamMember("default",
             ca_pool=default.id,
             role="roles/privateca.certificateManager",
-            member=ns_sa.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=ns_sa.member)
         default_trust_config = gcp.certificatemanager.TrustConfig("default",
             name="my-trust-config",
             description="sample trust config description",

pulumi_gcp/orgpolicy/policy.py

@@ -288,7 +288,7 @@ class Policy(pulumi.CustomResource):
                     {
                         "condition": {
                             "description": "A sample condition for the policy",
-                            "expression": "resource.matchLabels('labelKeys/123', 'labelValues/345')",
+                            "expression": "resource.matchTagId('tagKeys/123', 'tagValues/345')",
                             "location": "sample-location.log",
                             "title": "sample-condition",
                         },
@@ -310,7 +310,7 @@ class Policy(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         constraint = gcp.orgpolicy.CustomConstraint("constraint",
-            name="custom.disableGkeAutoUpgrade_40785",
+            name="custom.disableGkeAutoUpgrade_37559",
             parent="organizations/123456789",
             display_name="Disable GKE auto upgrade",
             description="Only allow GKE NodePool resource to be created or updated if AutoUpgrade is not enabled where this custom constraint is enforced.",
@@ -446,7 +446,7 @@ class Policy(pulumi.CustomResource):
                     {
                         "condition": {
                             "description": "A sample condition for the policy",
-                            "expression": "resource.matchLabels('labelKeys/123', 'labelValues/345')",
+                            "expression": "resource.matchTagId('tagKeys/123', 'tagValues/345')",
                             "location": "sample-location.log",
                             "title": "sample-condition",
                         },
@@ -468,7 +468,7 @@ class Policy(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         constraint = gcp.orgpolicy.CustomConstraint("constraint",
-            name="custom.disableGkeAutoUpgrade_40785",
+            name="custom.disableGkeAutoUpgrade_37559",
             parent="organizations/123456789",
             display_name="Disable GKE auto upgrade",
             description="Only allow GKE NodePool resource to be created or updated if AutoUpgrade is not enabled where this custom constraint is enforced.",

pulumi_gcp/projects/get_project_service.py

@@ -26,7 +26,10 @@ class GetProjectServiceResult:
     """
     A collection of values returned by getProjectService.
     """
-    def __init__(__self__, disable_dependent_services=None, disable_on_destroy=None, id=None, project=None, service=None):
+    def __init__(__self__, check_if_service_has_usage_on_destroy=None, disable_dependent_services=None, disable_on_destroy=None, id=None, project=None, service=None):
+        if check_if_service_has_usage_on_destroy and not isinstance(check_if_service_has_usage_on_destroy, bool):
+            raise TypeError("Expected argument 'check_if_service_has_usage_on_destroy' to be a bool")
+        pulumi.set(__self__, "check_if_service_has_usage_on_destroy", check_if_service_has_usage_on_destroy)
         if disable_dependent_services and not isinstance(disable_dependent_services, bool):
             raise TypeError("Expected argument 'disable_dependent_services' to be a bool")
         pulumi.set(__self__, "disable_dependent_services", disable_dependent_services)
@@ -43,6 +46,11 @@ class GetProjectServiceResult:
             raise TypeError("Expected argument 'service' to be a str")
         pulumi.set(__self__, "service", service)
 
+    @property
+    @pulumi.getter(name="checkIfServiceHasUsageOnDestroy")
+    def check_if_service_has_usage_on_destroy(self) -> bool:
+        return pulumi.get(self, "check_if_service_has_usage_on_destroy")
+
     @property
     @pulumi.getter(name="disableDependentServices")
     def disable_dependent_services(self) -> bool:
@@ -78,6 +86,7 @@ class AwaitableGetProjectServiceResult(GetProjectServiceResult):
         if False:
             yield self
         return GetProjectServiceResult(
+            check_if_service_has_usage_on_destroy=self.check_if_service_has_usage_on_destroy,
             disable_dependent_services=self.disable_dependent_services,
             disable_on_destroy=self.disable_on_destroy,
             id=self.id,
@@ -126,6 +135,7 @@ def get_project_service(project: Optional[str] = None,
     __ret__ = pulumi.runtime.invoke('gcp:projects/getProjectService:getProjectService', __args__, opts=opts, typ=GetProjectServiceResult).value
 
     return AwaitableGetProjectServiceResult(
+        check_if_service_has_usage_on_destroy=pulumi.get(__ret__, 'check_if_service_has_usage_on_destroy'),
         disable_dependent_services=pulumi.get(__ret__, 'disable_dependent_services'),
         disable_on_destroy=pulumi.get(__ret__, 'disable_on_destroy'),
         id=pulumi.get(__ret__, 'id'),

pulumi_gcp/projects/service.py

@@ -20,12 +20,17 @@ __all__ = ['ServiceArgs', 'Service']
 class ServiceArgs:
     def __init__(__self__, *,
                  service: pulumi.Input[str],
+                 check_if_service_has_usage_on_destroy: Optional[pulumi.Input[bool]] = None,
                  disable_dependent_services: Optional[pulumi.Input[bool]] = None,
                  disable_on_destroy: Optional[pulumi.Input[bool]] = None,
                  project: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a Service resource.
         :param pulumi.Input[str] service: The service to enable.
+        :param pulumi.Input[bool] check_if_service_has_usage_on_destroy: Beta
+               If `true`, the usage of the service to be disabled will be checked and an error
+               will be returned if the service to be disabled has usage in last 30 days.
+               Defaults to `false`.
         :param pulumi.Input[bool] disable_dependent_services: If `true`, services that are enabled
                and which depend on this service should also be disabled when this service is
                destroyed. If `false` or unset, an error will be generated if any enabled
@@ -34,6 +39,8 @@ class ServiceArgs:
                is used.
         """
         pulumi.set(__self__, "service", service)
+        if check_if_service_has_usage_on_destroy is not None:
+            pulumi.set(__self__, "check_if_service_has_usage_on_destroy", check_if_service_has_usage_on_destroy)
         if disable_dependent_services is not None:
             pulumi.set(__self__, "disable_dependent_services", disable_dependent_services)
         if disable_on_destroy is not None:
@@ -53,6 +60,21 @@ class ServiceArgs:
     def service(self, value: pulumi.Input[str]):
         pulumi.set(self, "service", value)
 
+    @property
+    @pulumi.getter(name="checkIfServiceHasUsageOnDestroy")
+    def check_if_service_has_usage_on_destroy(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Beta
+        If `true`, the usage of the service to be disabled will be checked and an error
+        will be returned if the service to be disabled has usage in last 30 days.
+        Defaults to `false`.
+        """
+        return pulumi.get(self, "check_if_service_has_usage_on_destroy")
+
+    @check_if_service_has_usage_on_destroy.setter
+    def check_if_service_has_usage_on_destroy(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "check_if_service_has_usage_on_destroy", value)
+
     @property
     @pulumi.getter(name="disableDependentServices")
     def disable_dependent_services(self) -> Optional[pulumi.Input[bool]]:
@@ -94,12 +116,17 @@ class ServiceArgs:
 @pulumi.input_type
 class _ServiceState:
     def __init__(__self__, *,
+                 check_if_service_has_usage_on_destroy: Optional[pulumi.Input[bool]] = None,
                  disable_dependent_services: Optional[pulumi.Input[bool]] = None,
                  disable_on_destroy: Optional[pulumi.Input[bool]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  service: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering Service resources.
+        :param pulumi.Input[bool] check_if_service_has_usage_on_destroy: Beta
+               If `true`, the usage of the service to be disabled will be checked and an error
+               will be returned if the service to be disabled has usage in last 30 days.
+               Defaults to `false`.
         :param pulumi.Input[bool] disable_dependent_services: If `true`, services that are enabled
                and which depend on this service should also be disabled when this service is
                destroyed. If `false` or unset, an error will be generated if any enabled
@@ -108,6 +135,8 @@ class _ServiceState:
                is used.
         :param pulumi.Input[str] service: The service to enable.
         """
+        if check_if_service_has_usage_on_destroy is not None:
+            pulumi.set(__self__, "check_if_service_has_usage_on_destroy", check_if_service_has_usage_on_destroy)
         if disable_dependent_services is not None:
             pulumi.set(__self__, "disable_dependent_services", disable_dependent_services)
         if disable_on_destroy is not None:
@@ -117,6 +146,21 @@ class _ServiceState:
         if service is not None:
             pulumi.set(__self__, "service", service)
 
+    @property
+    @pulumi.getter(name="checkIfServiceHasUsageOnDestroy")
+    def check_if_service_has_usage_on_destroy(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Beta
+        If `true`, the usage of the service to be disabled will be checked and an error
+        will be returned if the service to be disabled has usage in last 30 days.
+        Defaults to `false`.
+        """
+        return pulumi.get(self, "check_if_service_has_usage_on_destroy")
+
+    @check_if_service_has_usage_on_destroy.setter
+    def check_if_service_has_usage_on_destroy(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "check_if_service_has_usage_on_destroy", value)
+
     @property
     @pulumi.getter(name="disableDependentServices")
     def disable_dependent_services(self) -> Optional[pulumi.Input[bool]]:
@@ -172,6 +216,7 @@ class Service(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 check_if_service_has_usage_on_destroy: Optional[pulumi.Input[bool]] = None,
                  disable_dependent_services: Optional[pulumi.Input[bool]] = None,
                  disable_on_destroy: Optional[pulumi.Input[bool]] = None,
                  project: Optional[pulumi.Input[str]] = None,
@@ -214,6 +259,10 @@ class Service(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[bool] check_if_service_has_usage_on_destroy: Beta
+               If `true`, the usage of the service to be disabled will be checked and an error
+               will be returned if the service to be disabled has usage in last 30 days.
+               Defaults to `false`.
         :param pulumi.Input[bool] disable_dependent_services: If `true`, services that are enabled
                and which depend on this service should also be disabled when this service is
                destroyed. If `false` or unset, an error will be generated if any enabled
@@ -278,6 +327,7 @@ class Service(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 check_if_service_has_usage_on_destroy: Optional[pulumi.Input[bool]] = None,
                  disable_dependent_services: Optional[pulumi.Input[bool]] = None,
                  disable_on_destroy: Optional[pulumi.Input[bool]] = None,
                  project: Optional[pulumi.Input[str]] = None,
@@ -291,6 +341,7 @@ class Service(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = ServiceArgs.__new__(ServiceArgs)
 
+            __props__.__dict__["check_if_service_has_usage_on_destroy"] = check_if_service_has_usage_on_destroy
             __props__.__dict__["disable_dependent_services"] = disable_dependent_services
             __props__.__dict__["disable_on_destroy"] = disable_on_destroy
             __props__.__dict__["project"] = project
@@ -307,6 +358,7 @@ class Service(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            check_if_service_has_usage_on_destroy: Optional[pulumi.Input[bool]] = None,
             disable_dependent_services: Optional[pulumi.Input[bool]] = None,
             disable_on_destroy: Optional[pulumi.Input[bool]] = None,
             project: Optional[pulumi.Input[str]] = None,
@@ -318,6 +370,10 @@ class Service(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[bool] check_if_service_has_usage_on_destroy: Beta
+               If `true`, the usage of the service to be disabled will be checked and an error
+               will be returned if the service to be disabled has usage in last 30 days.
+               Defaults to `false`.
         :param pulumi.Input[bool] disable_dependent_services: If `true`, services that are enabled
                and which depend on this service should also be disabled when this service is
                destroyed. If `false` or unset, an error will be generated if any enabled
@@ -330,12 +386,24 @@ class Service(pulumi.CustomResource):
 
         __props__ = _ServiceState.__new__(_ServiceState)
 
+        __props__.__dict__["check_if_service_has_usage_on_destroy"] = check_if_service_has_usage_on_destroy
         __props__.__dict__["disable_dependent_services"] = disable_dependent_services
         __props__.__dict__["disable_on_destroy"] = disable_on_destroy
         __props__.__dict__["project"] = project
         __props__.__dict__["service"] = service
         return Service(resource_name, opts=opts, __props__=__props__)
 
+    @property
+    @pulumi.getter(name="checkIfServiceHasUsageOnDestroy")
+    def check_if_service_has_usage_on_destroy(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Beta
+        If `true`, the usage of the service to be disabled will be checked and an error
+        will be returned if the service to be disabled has usage in last 30 days.
+        Defaults to `false`.
+        """
+        return pulumi.get(self, "check_if_service_has_usage_on_destroy")
+
     @property
     @pulumi.getter(name="disableDependentServices")
     def disable_dependent_services(self) -> pulumi.Output[Optional[bool]]:

pulumi_gcp/projects/service_identity.py

@@ -65,11 +65,13 @@ class ServiceIdentityArgs:
 class _ServiceIdentityState:
     def __init__(__self__, *,
                  email: Optional[pulumi.Input[str]] = None,
+                 member: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  service: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering ServiceIdentity resources.
         :param pulumi.Input[str] email: The email address of the Google managed service account.
+        :param pulumi.Input[str] member: The Identity of the Google managed service account in the form 'serviceAccount:{email}'. This value is often used to refer to the service account in order to grant IAM permissions.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] service: The service to generate identity for.
@@ -78,6 +80,8 @@ class _ServiceIdentityState:
         """
         if email is not None:
             pulumi.set(__self__, "email", email)
+        if member is not None:
+            pulumi.set(__self__, "member", member)
         if project is not None:
             pulumi.set(__self__, "project", project)
         if service is not None:
@@ -95,6 +99,18 @@ class _ServiceIdentityState:
     def email(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "email", value)
 
+    @property
+    @pulumi.getter
+    def member(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Identity of the Google managed service account in the form 'serviceAccount:{email}'. This value is often used to refer to the service account in order to grant IAM permissions.
+        """
+        return pulumi.get(self, "member")
+
+    @member.setter
+    def member(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "member", value)
+
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[str]]:
@@ -160,7 +176,7 @@ class ServiceIdentity(pulumi.CustomResource):
         hc_sa_bq_jobuser = gcp.projects.IAMMember("hc_sa_bq_jobuser",
             project=project.project_id,
             role="roles/bigquery.jobUser",
-            member=hc_sa.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=hc_sa.member)
         ```
 
         ## Import
@@ -210,7 +226,7 @@ class ServiceIdentity(pulumi.CustomResource):
         hc_sa_bq_jobuser = gcp.projects.IAMMember("hc_sa_bq_jobuser",
             project=project.project_id,
             role="roles/bigquery.jobUser",
-            member=hc_sa.email.apply(lambda email: f"serviceAccount:{email}"))
+            member=hc_sa.member)
         ```
 
         ## Import
@@ -248,6 +264,7 @@ class ServiceIdentity(pulumi.CustomResource):
                 raise TypeError("Missing required property 'service'")
             __props__.__dict__["service"] = service
             __props__.__dict__["email"] = None
+            __props__.__dict__["member"] = None
         super(ServiceIdentity, __self__).__init__(
             'gcp:projects/serviceIdentity:ServiceIdentity',
             resource_name,
@@ -259,6 +276,7 @@ class ServiceIdentity(pulumi.CustomResource):
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
             email: Optional[pulumi.Input[str]] = None,
+            member: Optional[pulumi.Input[str]] = None,
             project: Optional[pulumi.Input[str]] = None,
             service: Optional[pulumi.Input[str]] = None) -> 'ServiceIdentity':
         """
@@ -269,6 +287,7 @@ class ServiceIdentity(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] email: The email address of the Google managed service account.
+        :param pulumi.Input[str] member: The Identity of the Google managed service account in the form 'serviceAccount:{email}'. This value is often used to refer to the service account in order to grant IAM permissions.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] service: The service to generate identity for.
@@ -280,6 +299,7 @@ class ServiceIdentity(pulumi.CustomResource):
         __props__ = _ServiceIdentityState.__new__(_ServiceIdentityState)
 
         __props__.__dict__["email"] = email
+        __props__.__dict__["member"] = member
         __props__.__dict__["project"] = project
         __props__.__dict__["service"] = service
         return ServiceIdentity(resource_name, opts=opts, __props__=__props__)
@@ -292,6 +312,14 @@ class ServiceIdentity(pulumi.CustomResource):
         """
         return pulumi.get(self, "email")
 
+    @property
+    @pulumi.getter
+    def member(self) -> pulumi.Output[str]:
+        """
+        The Identity of the Google managed service account in the form 'serviceAccount:{email}'. This value is often used to refer to the service account in order to grant IAM permissions.
+        """
+        return pulumi.get(self, "member")
+
     @property
     @pulumi.getter
     def project(self) -> pulumi.Output[str]:

pulumi_gcp/pubsub/subscription.py

@@ -1104,7 +1104,7 @@ class Subscription(pulumi.CustomResource):
             cloud_storage_config={
                 "bucket": example.name,
                 "filename_prefix": "pre-",
-                "filename_suffix": "-_79169",
+                "filename_suffix": "-_91980",
                 "filename_datetime_format": "YYYY-MM-DD/hh_mm_ssZ",
                 "max_bytes": 1000,
                 "max_duration": "300s",
@@ -1136,7 +1136,7 @@ class Subscription(pulumi.CustomResource):
             cloud_storage_config={
                 "bucket": example.name,
                 "filename_prefix": "pre-",
-                "filename_suffix": "-_56529",
+                "filename_suffix": "-_37118",
                 "filename_datetime_format": "YYYY-MM-DD/hh_mm_ssZ",
                 "max_bytes": 1000,
                 "max_duration": "300s",
@@ -1173,7 +1173,7 @@ class Subscription(pulumi.CustomResource):
             cloud_storage_config={
                 "bucket": example.name,
                 "filename_prefix": "pre-",
-                "filename_suffix": "-_75413",
+                "filename_suffix": "-_80332",
                 "filename_datetime_format": "YYYY-MM-DD/hh_mm_ssZ",
                 "max_bytes": 1000,
                 "max_duration": "300s",
@@ -1532,7 +1532,7 @@ class Subscription(pulumi.CustomResource):
             cloud_storage_config={
                 "bucket": example.name,
                 "filename_prefix": "pre-",
-                "filename_suffix": "-_79169",
+                "filename_suffix": "-_91980",
                 "filename_datetime_format": "YYYY-MM-DD/hh_mm_ssZ",
                 "max_bytes": 1000,
                 "max_duration": "300s",
@@ -1564,7 +1564,7 @@ class Subscription(pulumi.CustomResource):
             cloud_storage_config={
                 "bucket": example.name,
                 "filename_prefix": "pre-",
-                "filename_suffix": "-_56529",
+                "filename_suffix": "-_37118",
                 "filename_datetime_format": "YYYY-MM-DD/hh_mm_ssZ",
                 "max_bytes": 1000,
                 "max_duration": "300s",
@@ -1601,7 +1601,7 @@ class Subscription(pulumi.CustomResource):
             cloud_storage_config={
                 "bucket": example.name,
                 "filename_prefix": "pre-",
-                "filename_suffix": "-_75413",
+                "filename_suffix": "-_80332",
                 "filename_datetime_format": "YYYY-MM-DD/hh_mm_ssZ",
                 "max_bytes": 1000,
                 "max_duration": "300s",

pulumi_gcp/pulumi-plugin.json

@@ -1,5 +1,5 @@
 {
   "resource": true,
   "name": "gcp",
-  "version": "7.34.0-alpha.1722421695"
+  "version": "7.34.0-alpha.1722604983"
 }