pulumi-gcp 7.36.0__py3-none-any.whl → 7.36.0a1723010828__py3-none-any.whl

pulumi_gcp/serviceaccount/key.py

@@ -402,9 +402,9 @@ class Key(pulumi.CustomResource):
             display_name="My Service Account")
         mykey = gcp.serviceaccount.Key("mykey", service_account_id=myaccount.name)
         google_application_credentials = kubernetes.core.v1.Secret("google-application-credentials",
-            metadata={
-                "name": "google-application-credentials",
-            },
+            metadata=kubernetes.meta.v1.ObjectMetaArgs(
+                name="google-application-credentials",
+            ),
             data={
                 "credentials.json": std.base64decode_output(input=mykey.private_key).apply(lambda invoke: invoke.result),
             })
@@ -488,9 +488,9 @@ class Key(pulumi.CustomResource):
             display_name="My Service Account")
         mykey = gcp.serviceaccount.Key("mykey", service_account_id=myaccount.name)
         google_application_credentials = kubernetes.core.v1.Secret("google-application-credentials",
-            metadata={
-                "name": "google-application-credentials",
-            },
+            metadata=kubernetes.meta.v1.ObjectMetaArgs(
+                name="google-application-credentials",
+            ),
             data={
                 "credentials.json": std.base64decode_output(input=mykey.private_key).apply(lambda invoke: invoke.result),
             })

pulumi_gcp/servicedirectory/namespace_iam_binding.py

@@ -280,26 +280,6 @@ class NamespaceIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Namespace
-        Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
-
-        * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
-        * `servicedirectory.NamespaceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the namespace are preserved.
-        * `servicedirectory.NamespaceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the namespace are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.NamespaceIamPolicy`: Retrieves the IAM policy for the namespace
-
-        > **Note:** `servicedirectory.NamespaceIamPolicy` **cannot** be used in conjunction with `servicedirectory.NamespaceIamBinding` and `servicedirectory.NamespaceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.NamespaceIamBinding` resources **can be** used in conjunction with `servicedirectory.NamespaceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_namespace\\_iam\\_policy
 
         ```python
@@ -453,26 +433,6 @@ class NamespaceIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Namespace
-        Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
-
-        * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
-        * `servicedirectory.NamespaceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the namespace are preserved.
-        * `servicedirectory.NamespaceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the namespace are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.NamespaceIamPolicy`: Retrieves the IAM policy for the namespace
-
-        > **Note:** `servicedirectory.NamespaceIamPolicy` **cannot** be used in conjunction with `servicedirectory.NamespaceIamBinding` and `servicedirectory.NamespaceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.NamespaceIamBinding` resources **can be** used in conjunction with `servicedirectory.NamespaceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_namespace\\_iam\\_policy
 
         ```python

pulumi_gcp/servicedirectory/namespace_iam_member.py

@@ -280,26 +280,6 @@ class NamespaceIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Namespace
-        Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
-
-        * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
-        * `servicedirectory.NamespaceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the namespace are preserved.
-        * `servicedirectory.NamespaceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the namespace are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.NamespaceIamPolicy`: Retrieves the IAM policy for the namespace
-
-        > **Note:** `servicedirectory.NamespaceIamPolicy` **cannot** be used in conjunction with `servicedirectory.NamespaceIamBinding` and `servicedirectory.NamespaceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.NamespaceIamBinding` resources **can be** used in conjunction with `servicedirectory.NamespaceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_namespace\\_iam\\_policy
 
         ```python
@@ -453,26 +433,6 @@ class NamespaceIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Namespace
-        Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
-
-        * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
-        * `servicedirectory.NamespaceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the namespace are preserved.
-        * `servicedirectory.NamespaceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the namespace are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.NamespaceIamPolicy`: Retrieves the IAM policy for the namespace
-
-        > **Note:** `servicedirectory.NamespaceIamPolicy` **cannot** be used in conjunction with `servicedirectory.NamespaceIamBinding` and `servicedirectory.NamespaceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.NamespaceIamBinding` resources **can be** used in conjunction with `servicedirectory.NamespaceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_namespace\\_iam\\_policy
 
         ```python

pulumi_gcp/servicedirectory/namespace_iam_policy.py

@@ -177,26 +177,6 @@ class NamespaceIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Namespace
-        Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
-
-        * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
-        * `servicedirectory.NamespaceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the namespace are preserved.
-        * `servicedirectory.NamespaceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the namespace are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.NamespaceIamPolicy`: Retrieves the IAM policy for the namespace
-
-        > **Note:** `servicedirectory.NamespaceIamPolicy` **cannot** be used in conjunction with `servicedirectory.NamespaceIamBinding` and `servicedirectory.NamespaceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.NamespaceIamBinding` resources **can be** used in conjunction with `servicedirectory.NamespaceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_namespace\\_iam\\_policy
 
         ```python
@@ -338,26 +318,6 @@ class NamespaceIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Namespace
-        Three different resources help you manage your IAM policy for Service Directory Namespace. Each of these resources serves a different use case:
-
-        * `servicedirectory.NamespaceIamPolicy`: Authoritative. Sets the IAM policy for the namespace and replaces any existing policy already attached.
-        * `servicedirectory.NamespaceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the namespace are preserved.
-        * `servicedirectory.NamespaceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the namespace are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.NamespaceIamPolicy`: Retrieves the IAM policy for the namespace
-
-        > **Note:** `servicedirectory.NamespaceIamPolicy` **cannot** be used in conjunction with `servicedirectory.NamespaceIamBinding` and `servicedirectory.NamespaceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.NamespaceIamBinding` resources **can be** used in conjunction with `servicedirectory.NamespaceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_namespace\\_iam\\_policy
 
         ```python

pulumi_gcp/servicedirectory/service_iam_binding.py

@@ -280,26 +280,6 @@ class ServiceIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Service
-        Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
-
-        * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
-        * `servicedirectory.ServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service are preserved.
-        * `servicedirectory.ServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.ServiceIamPolicy`: Retrieves the IAM policy for the service
-
-        > **Note:** `servicedirectory.ServiceIamPolicy` **cannot** be used in conjunction with `servicedirectory.ServiceIamBinding` and `servicedirectory.ServiceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.ServiceIamBinding` resources **can be** used in conjunction with `servicedirectory.ServiceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_service\\_iam\\_policy
 
         ```python
@@ -453,26 +433,6 @@ class ServiceIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Service
-        Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
-
-        * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
-        * `servicedirectory.ServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service are preserved.
-        * `servicedirectory.ServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.ServiceIamPolicy`: Retrieves the IAM policy for the service
-
-        > **Note:** `servicedirectory.ServiceIamPolicy` **cannot** be used in conjunction with `servicedirectory.ServiceIamBinding` and `servicedirectory.ServiceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.ServiceIamBinding` resources **can be** used in conjunction with `servicedirectory.ServiceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_service\\_iam\\_policy
 
         ```python

pulumi_gcp/servicedirectory/service_iam_member.py

@@ -280,26 +280,6 @@ class ServiceIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Service
-        Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
-
-        * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
-        * `servicedirectory.ServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service are preserved.
-        * `servicedirectory.ServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.ServiceIamPolicy`: Retrieves the IAM policy for the service
-
-        > **Note:** `servicedirectory.ServiceIamPolicy` **cannot** be used in conjunction with `servicedirectory.ServiceIamBinding` and `servicedirectory.ServiceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.ServiceIamBinding` resources **can be** used in conjunction with `servicedirectory.ServiceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_service\\_iam\\_policy
 
         ```python
@@ -453,26 +433,6 @@ class ServiceIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Service
-        Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
-
-        * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
-        * `servicedirectory.ServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service are preserved.
-        * `servicedirectory.ServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.ServiceIamPolicy`: Retrieves the IAM policy for the service
-
-        > **Note:** `servicedirectory.ServiceIamPolicy` **cannot** be used in conjunction with `servicedirectory.ServiceIamBinding` and `servicedirectory.ServiceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.ServiceIamBinding` resources **can be** used in conjunction with `servicedirectory.ServiceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_service\\_iam\\_policy
 
         ```python

pulumi_gcp/servicedirectory/service_iam_policy.py

@@ -177,26 +177,6 @@ class ServiceIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Service
-        Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
-
-        * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
-        * `servicedirectory.ServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service are preserved.
-        * `servicedirectory.ServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.ServiceIamPolicy`: Retrieves the IAM policy for the service
-
-        > **Note:** `servicedirectory.ServiceIamPolicy` **cannot** be used in conjunction with `servicedirectory.ServiceIamBinding` and `servicedirectory.ServiceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.ServiceIamBinding` resources **can be** used in conjunction with `servicedirectory.ServiceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_service\\_iam\\_policy
 
         ```python
@@ -338,26 +318,6 @@ class ServiceIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
-
-        full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
-        ---
-
-        # IAM policy for Service Directory Service
-        Three different resources help you manage your IAM policy for Service Directory Service. Each of these resources serves a different use case:
-
-        * `servicedirectory.ServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
-        * `servicedirectory.ServiceIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the service are preserved.
-        * `servicedirectory.ServiceIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the service are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `servicedirectory.ServiceIamPolicy`: Retrieves the IAM policy for the service
-
-        > **Note:** `servicedirectory.ServiceIamPolicy` **cannot** be used in conjunction with `servicedirectory.ServiceIamBinding` and `servicedirectory.ServiceIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `servicedirectory.ServiceIamBinding` resources **can be** used in conjunction with `servicedirectory.ServiceIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## google\\_service\\_directory\\_service\\_iam\\_policy
 
         ```python

pulumi_gcp/sourcerepo/repository_iam_binding.py

@@ -319,25 +319,6 @@ class RepositoryIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## This resource supports User Project Overrides.
-
-        - 
-
-        # IAM policy for Cloud Source Repositories Repository
-        Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
-
-        * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
-        * `sourcerepo.RepositoryIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repository are preserved.
-        * `sourcerepo.RepositoryIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repository are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `sourcerepo.RepositoryIamPolicy`: Retrieves the IAM policy for the repository
-
-        > **Note:** `sourcerepo.RepositoryIamPolicy` **cannot** be used in conjunction with `sourcerepo.RepositoryIamBinding` and `sourcerepo.RepositoryIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `sourcerepo.RepositoryIamBinding` resources **can be** used in conjunction with `sourcerepo.RepositoryIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## sourcerepo.RepositoryIamPolicy
 
         ```python
@@ -497,25 +478,6 @@ class RepositoryIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## This resource supports User Project Overrides.
-
-        - 
-
-        # IAM policy for Cloud Source Repositories Repository
-        Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
-
-        * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
-        * `sourcerepo.RepositoryIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repository are preserved.
-        * `sourcerepo.RepositoryIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repository are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `sourcerepo.RepositoryIamPolicy`: Retrieves the IAM policy for the repository
-
-        > **Note:** `sourcerepo.RepositoryIamPolicy` **cannot** be used in conjunction with `sourcerepo.RepositoryIamBinding` and `sourcerepo.RepositoryIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `sourcerepo.RepositoryIamBinding` resources **can be** used in conjunction with `sourcerepo.RepositoryIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## sourcerepo.RepositoryIamPolicy
 
         ```python

pulumi_gcp/sourcerepo/repository_iam_member.py

@@ -319,25 +319,6 @@ class RepositoryIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## This resource supports User Project Overrides.
-
-        - 
-
-        # IAM policy for Cloud Source Repositories Repository
-        Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
-
-        * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
-        * `sourcerepo.RepositoryIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repository are preserved.
-        * `sourcerepo.RepositoryIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repository are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `sourcerepo.RepositoryIamPolicy`: Retrieves the IAM policy for the repository
-
-        > **Note:** `sourcerepo.RepositoryIamPolicy` **cannot** be used in conjunction with `sourcerepo.RepositoryIamBinding` and `sourcerepo.RepositoryIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `sourcerepo.RepositoryIamBinding` resources **can be** used in conjunction with `sourcerepo.RepositoryIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## sourcerepo.RepositoryIamPolicy
 
         ```python
@@ -497,25 +478,6 @@ class RepositoryIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## This resource supports User Project Overrides.
-
-        - 
-
-        # IAM policy for Cloud Source Repositories Repository
-        Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
-
-        * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
-        * `sourcerepo.RepositoryIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repository are preserved.
-        * `sourcerepo.RepositoryIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repository are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `sourcerepo.RepositoryIamPolicy`: Retrieves the IAM policy for the repository
-
-        > **Note:** `sourcerepo.RepositoryIamPolicy` **cannot** be used in conjunction with `sourcerepo.RepositoryIamBinding` and `sourcerepo.RepositoryIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `sourcerepo.RepositoryIamBinding` resources **can be** used in conjunction with `sourcerepo.RepositoryIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## sourcerepo.RepositoryIamPolicy
 
         ```python

pulumi_gcp/sourcerepo/repository_iam_policy.py

@@ -216,25 +216,6 @@ class RepositoryIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## This resource supports User Project Overrides.
-
-        - 
-
-        # IAM policy for Cloud Source Repositories Repository
-        Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
-
-        * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
-        * `sourcerepo.RepositoryIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repository are preserved.
-        * `sourcerepo.RepositoryIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repository are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `sourcerepo.RepositoryIamPolicy`: Retrieves the IAM policy for the repository
-
-        > **Note:** `sourcerepo.RepositoryIamPolicy` **cannot** be used in conjunction with `sourcerepo.RepositoryIamBinding` and `sourcerepo.RepositoryIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `sourcerepo.RepositoryIamBinding` resources **can be** used in conjunction with `sourcerepo.RepositoryIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## sourcerepo.RepositoryIamPolicy
 
         ```python
@@ -382,25 +363,6 @@ class RepositoryIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## This resource supports User Project Overrides.
-
-        - 
-
-        # IAM policy for Cloud Source Repositories Repository
-        Three different resources help you manage your IAM policy for Cloud Source Repositories Repository. Each of these resources serves a different use case:
-
-        * `sourcerepo.RepositoryIamPolicy`: Authoritative. Sets the IAM policy for the repository and replaces any existing policy already attached.
-        * `sourcerepo.RepositoryIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the repository are preserved.
-        * `sourcerepo.RepositoryIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the repository are preserved.
-
-        A data source can be used to retrieve policy data in advent you do not need creation
-
-        * `sourcerepo.RepositoryIamPolicy`: Retrieves the IAM policy for the repository
-
-        > **Note:** `sourcerepo.RepositoryIamPolicy` **cannot** be used in conjunction with `sourcerepo.RepositoryIamBinding` and `sourcerepo.RepositoryIamMember` or they will fight over what your policy should be.
-
-        > **Note:** `sourcerepo.RepositoryIamBinding` resources **can be** used in conjunction with `sourcerepo.RepositoryIamMember` resources **only if** they do not grant privilege to the same role.
-
         ## sourcerepo.RepositoryIamPolicy
 
         ```python

pulumi_gcp/spanner/database_iam_binding.py

@@ -407,6 +407,43 @@ class DatabaseIAMBinding(pulumi.CustomResource):
             })
         ```
 
+        ## spanner.DatabaseIAMPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/editor",
+            "members": ["user:jane@example.com"],
+        }])
+        database = gcp.spanner.DatabaseIAMPolicy("database",
+            instance="your-instance-name",
+            database="your-database-name",
+            policy_data=admin.policy_data)
+        ```
+
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/editor",
+            "members": ["user:jane@example.com"],
+            "condition": {
+                "title": "My Role",
+                "description": "Grant permissions on my_role",
+                "expression": "(resource.type == \\"spanner.googleapis.com/DatabaseRole\\" && (resource.name.endsWith(\\"/myrole\\")))",
+            },
+        }])
+        database = gcp.spanner.DatabaseIAMPolicy("database",
+            instance="your-instance-name",
+            database="your-database-name",
+            policy_data=admin.policy_data)
+        ```
+
         ## spanner.DatabaseIAMBinding
 
         ```python
@@ -634,6 +671,43 @@ class DatabaseIAMBinding(pulumi.CustomResource):
             })
         ```
 
+        ## spanner.DatabaseIAMPolicy
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/editor",
+            "members": ["user:jane@example.com"],
+        }])
+        database = gcp.spanner.DatabaseIAMPolicy("database",
+            instance="your-instance-name",
+            database="your-database-name",
+            policy_data=admin.policy_data)
+        ```
+
+        With IAM Conditions:
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        admin = gcp.organizations.get_iam_policy(bindings=[{
+            "role": "roles/editor",
+            "members": ["user:jane@example.com"],
+            "condition": {
+                "title": "My Role",
+                "description": "Grant permissions on my_role",
+                "expression": "(resource.type == \\"spanner.googleapis.com/DatabaseRole\\" && (resource.name.endsWith(\\"/myrole\\")))",
+            },
+        }])
+        database = gcp.spanner.DatabaseIAMPolicy("database",
+            instance="your-instance-name",
+            database="your-database-name",
+            policy_data=admin.policy_data)
+        ```
+
         ## spanner.DatabaseIAMBinding
 
         ```python