pulumi-gcp 7.8.0a1706829616__py3-none-any.whl → 7.8.0a1706905467__py3-none-any.whl

pulumi_gcp/__init__.py

@@ -110,6 +110,8 @@ if typing.TYPE_CHECKING:
     deploymentmanager = __deploymentmanager
     import pulumi_gcp.diagflow as __diagflow
     diagflow = __diagflow
+    import pulumi_gcp.discoveryengine as __discoveryengine
+    discoveryengine = __discoveryengine
     import pulumi_gcp.dns as __dns
     dns = __dns
     import pulumi_gcp.edgecontainer as __edgecontainer
@@ -200,6 +202,8 @@ if typing.TYPE_CHECKING:
     securesourcemanager = __securesourcemanager
     import pulumi_gcp.securitycenter as __securitycenter
     securitycenter = __securitycenter
+    import pulumi_gcp.securityposture as __securityposture
+    securityposture = __securityposture
     import pulumi_gcp.serviceaccount as __serviceaccount
     serviceaccount = __serviceaccount
     import pulumi_gcp.servicedirectory as __servicedirectory
@@ -283,6 +287,7 @@ else:
     datastream = _utilities.lazy_import('pulumi_gcp.datastream')
     deploymentmanager = _utilities.lazy_import('pulumi_gcp.deploymentmanager')
     diagflow = _utilities.lazy_import('pulumi_gcp.diagflow')
+    discoveryengine = _utilities.lazy_import('pulumi_gcp.discoveryengine')
     dns = _utilities.lazy_import('pulumi_gcp.dns')
     edgecontainer = _utilities.lazy_import('pulumi_gcp.edgecontainer')
     edgenetwork = _utilities.lazy_import('pulumi_gcp.edgenetwork')
@@ -328,6 +333,7 @@ else:
     secretmanager = _utilities.lazy_import('pulumi_gcp.secretmanager')
     securesourcemanager = _utilities.lazy_import('pulumi_gcp.securesourcemanager')
     securitycenter = _utilities.lazy_import('pulumi_gcp.securitycenter')
+    securityposture = _utilities.lazy_import('pulumi_gcp.securityposture')
     serviceaccount = _utilities.lazy_import('pulumi_gcp.serviceaccount')
     servicedirectory = _utilities.lazy_import('pulumi_gcp.servicedirectory')
     servicenetworking = _utilities.lazy_import('pulumi_gcp.servicenetworking')
@@ -3852,6 +3858,14 @@ _utilities.register(
    "gcp:diagflow/intent:Intent": "Intent"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "discoveryengine/dataStore",
+  "fqn": "pulumi_gcp.discoveryengine",
+  "classes": {
+   "gcp:discoveryengine/dataStore:DataStore": "DataStore"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "dns/dnsManagedZoneIamBinding",
@@ -6348,6 +6362,22 @@ _utilities.register(
    "gcp:securitycenter/sourceIamPolicy:SourceIamPolicy": "SourceIamPolicy"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "securityposture/posture",
+  "fqn": "pulumi_gcp.securityposture",
+  "classes": {
+   "gcp:securityposture/posture:Posture": "Posture"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "securityposture/postureDeployment",
+  "fqn": "pulumi_gcp.securityposture",
+  "classes": {
+   "gcp:securityposture/postureDeployment:PostureDeployment": "PostureDeployment"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "serviceaccount/account",

pulumi_gcp/artifactregistry/repository.py

@@ -867,50 +867,49 @@ class Repository(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         my_repo = gcp.artifactregistry.Repository("my-repo",
-            location="us-central1",
-            repository_id="my-repository",
-            description="example docker repository with cleanup policies",
-            format="DOCKER",
-            cleanup_policy_dry_run=False,
             cleanup_policies=[
                 gcp.artifactregistry.RepositoryCleanupPolicyArgs(
-                    id="delete-prerelease",
                     action="DELETE",
                     condition=gcp.artifactregistry.RepositoryCleanupPolicyConditionArgs(
-                        tag_state="TAGGED",
+                        older_than="2592000s",
                         tag_prefixes=[
                             "alpha",
                             "v0",
                         ],
-                        older_than="2592000s",
+                        tag_state="TAGGED",
                     ),
+                    id="delete-prerelease",
                 ),
                 gcp.artifactregistry.RepositoryCleanupPolicyArgs(
-                    id="keep-tagged-release",
                     action="KEEP",
                     condition=gcp.artifactregistry.RepositoryCleanupPolicyConditionArgs(
-                        tag_state="TAGGED",
-                        tag_prefixes=["release"],
                         package_name_prefixes=[
                             "webapp",
                             "mobile",
                         ],
+                        tag_prefixes=["release"],
+                        tag_state="TAGGED",
                     ),
+                    id="keep-tagged-release",
                 ),
                 gcp.artifactregistry.RepositoryCleanupPolicyArgs(
-                    id="keep-minimum-versions",
                     action="KEEP",
+                    id="keep-minimum-versions",
                     most_recent_versions=gcp.artifactregistry.RepositoryCleanupPolicyMostRecentVersionsArgs(
+                        keep_count=5,
                         package_name_prefixes=[
                             "webapp",
                             "mobile",
                             "sandbox",
                         ],
-                        keep_count=5,
                     ),
                 ),
             ],
-            opts=pulumi.ResourceOptions(provider=google_beta))
+            cleanup_policy_dry_run=False,
+            description="example docker repository with cleanup policies",
+            format="DOCKER",
+            location="us-central1",
+            repository_id="my-repository")
         ```
         ### Artifact Registry Repository Remote Custom
 
@@ -1189,50 +1188,49 @@ class Repository(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         my_repo = gcp.artifactregistry.Repository("my-repo",
-            location="us-central1",
-            repository_id="my-repository",
-            description="example docker repository with cleanup policies",
-            format="DOCKER",
-            cleanup_policy_dry_run=False,
             cleanup_policies=[
                 gcp.artifactregistry.RepositoryCleanupPolicyArgs(
-                    id="delete-prerelease",
                     action="DELETE",
                     condition=gcp.artifactregistry.RepositoryCleanupPolicyConditionArgs(
-                        tag_state="TAGGED",
+                        older_than="2592000s",
                         tag_prefixes=[
                             "alpha",
                             "v0",
                         ],
-                        older_than="2592000s",
+                        tag_state="TAGGED",
                     ),
+                    id="delete-prerelease",
                 ),
                 gcp.artifactregistry.RepositoryCleanupPolicyArgs(
-                    id="keep-tagged-release",
                     action="KEEP",
                     condition=gcp.artifactregistry.RepositoryCleanupPolicyConditionArgs(
-                        tag_state="TAGGED",
-                        tag_prefixes=["release"],
                         package_name_prefixes=[
                             "webapp",
                             "mobile",
                         ],
+                        tag_prefixes=["release"],
+                        tag_state="TAGGED",
                     ),
+                    id="keep-tagged-release",
                 ),
                 gcp.artifactregistry.RepositoryCleanupPolicyArgs(
-                    id="keep-minimum-versions",
                     action="KEEP",
+                    id="keep-minimum-versions",
                     most_recent_versions=gcp.artifactregistry.RepositoryCleanupPolicyMostRecentVersionsArgs(
+                        keep_count=5,
                         package_name_prefixes=[
                             "webapp",
                             "mobile",
                             "sandbox",
                         ],
-                        keep_count=5,
                     ),
                 ),
             ],
-            opts=pulumi.ResourceOptions(provider=google_beta))
+            cleanup_policy_dry_run=False,
+            description="example docker repository with cleanup policies",
+            format="DOCKER",
+            location="us-central1",
+            repository_id="my-repository")
         ```
         ### Artifact Registry Repository Remote Custom
 

pulumi_gcp/cloudrun/_inputs.py

@@ -46,6 +46,7 @@ __all__ = [
     'ServiceTemplateSpecContainerStartupProbeTcpSocketArgs',
     'ServiceTemplateSpecContainerVolumeMountArgs',
     'ServiceTemplateSpecVolumeArgs',
+    'ServiceTemplateSpecVolumeCsiArgs',
     'ServiceTemplateSpecVolumeEmptyDirArgs',
     'ServiceTemplateSpecVolumeSecretArgs',
     'ServiceTemplateSpecVolumeSecretItemArgs',
@@ -2879,10 +2880,13 @@ class ServiceTemplateSpecContainerVolumeMountArgs:
 class ServiceTemplateSpecVolumeArgs:
     def __init__(__self__, *,
                  name: pulumi.Input[str],
+                 csi: Optional[pulumi.Input['ServiceTemplateSpecVolumeCsiArgs']] = None,
                  empty_dir: Optional[pulumi.Input['ServiceTemplateSpecVolumeEmptyDirArgs']] = None,
                  secret: Optional[pulumi.Input['ServiceTemplateSpecVolumeSecretArgs']] = None):
         """
         :param pulumi.Input[str] name: Volume's name.
+        :param pulumi.Input['ServiceTemplateSpecVolumeCsiArgs'] csi: A filesystem specified by the Container Storage Interface (CSI).
+               Structure is documented below.
         :param pulumi.Input['ServiceTemplateSpecVolumeEmptyDirArgs'] empty_dir: Ephemeral storage which can be backed by real disks (HD, SSD), network storage or memory (i.e. tmpfs). For now only in memory (tmpfs) is supported. It is ephemeral in the sense that when the sandbox is taken down, the data is destroyed with it (it does not persist across sandbox runs).
                Structure is documented below.
         :param pulumi.Input['ServiceTemplateSpecVolumeSecretArgs'] secret: The secret's value will be presented as the content of a file whose
@@ -2891,6 +2895,8 @@ class ServiceTemplateSpecVolumeArgs:
                Structure is documented below.
         """
         pulumi.set(__self__, "name", name)
+        if csi is not None:
+            pulumi.set(__self__, "csi", csi)
         if empty_dir is not None:
             pulumi.set(__self__, "empty_dir", empty_dir)
         if secret is not None:
@@ -2908,6 +2914,19 @@ class ServiceTemplateSpecVolumeArgs:
     def name(self, value: pulumi.Input[str]):
         pulumi.set(self, "name", value)
 
+    @property
+    @pulumi.getter
+    def csi(self) -> Optional[pulumi.Input['ServiceTemplateSpecVolumeCsiArgs']]:
+        """
+        A filesystem specified by the Container Storage Interface (CSI).
+        Structure is documented below.
+        """
+        return pulumi.get(self, "csi")
+
+    @csi.setter
+    def csi(self, value: Optional[pulumi.Input['ServiceTemplateSpecVolumeCsiArgs']]):
+        pulumi.set(self, "csi", value)
+
     @property
     @pulumi.getter(name="emptyDir")
     def empty_dir(self) -> Optional[pulumi.Input['ServiceTemplateSpecVolumeEmptyDirArgs']]:
@@ -2937,6 +2956,74 @@ class ServiceTemplateSpecVolumeArgs:
         pulumi.set(self, "secret", value)
 
 
+@pulumi.input_type
+class ServiceTemplateSpecVolumeCsiArgs:
+    def __init__(__self__, *,
+                 driver: pulumi.Input[str],
+                 read_only: Optional[pulumi.Input[bool]] = None,
+                 volume_attributes: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
+        """
+        :param pulumi.Input[str] driver: Unique name representing the type of file system to be created. Cloud Run supports the following values:
+               * gcsfuse.run.googleapis.com: Mount a Google Cloud Storage bucket using GCSFuse. This driver requires the
+               run.googleapis.com/execution-environment annotation to be set to "gen2" and
+               run.googleapis.com/launch-stage set to "BETA" or "ALPHA".
+        :param pulumi.Input[bool] read_only: If true, all mounts created from this volume will be read-only.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] volume_attributes: Driver-specific attributes. The following options are supported for available drivers:
+               * gcsfuse.run.googleapis.com
+               * bucketName: The name of the Cloud Storage Bucket that backs this volume. The Cloud Run Service identity must have access to this bucket.
+               
+               - - -
+        """
+        pulumi.set(__self__, "driver", driver)
+        if read_only is not None:
+            pulumi.set(__self__, "read_only", read_only)
+        if volume_attributes is not None:
+            pulumi.set(__self__, "volume_attributes", volume_attributes)
+
+    @property
+    @pulumi.getter
+    def driver(self) -> pulumi.Input[str]:
+        """
+        Unique name representing the type of file system to be created. Cloud Run supports the following values:
+        * gcsfuse.run.googleapis.com: Mount a Google Cloud Storage bucket using GCSFuse. This driver requires the
+        run.googleapis.com/execution-environment annotation to be set to "gen2" and
+        run.googleapis.com/launch-stage set to "BETA" or "ALPHA".
+        """
+        return pulumi.get(self, "driver")
+
+    @driver.setter
+    def driver(self, value: pulumi.Input[str]):
+        pulumi.set(self, "driver", value)
+
+    @property
+    @pulumi.getter(name="readOnly")
+    def read_only(self) -> Optional[pulumi.Input[bool]]:
+        """
+        If true, all mounts created from this volume will be read-only.
+        """
+        return pulumi.get(self, "read_only")
+
+    @read_only.setter
+    def read_only(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "read_only", value)
+
+    @property
+    @pulumi.getter(name="volumeAttributes")
+    def volume_attributes(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        Driver-specific attributes. The following options are supported for available drivers:
+        * gcsfuse.run.googleapis.com
+        * bucketName: The name of the Cloud Storage Bucket that backs this volume. The Cloud Run Service identity must have access to this bucket.
+
+        - - -
+        """
+        return pulumi.get(self, "volume_attributes")
+
+    @volume_attributes.setter
+    def volume_attributes(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "volume_attributes", value)
+
+
 @pulumi.input_type
 class ServiceTemplateSpecVolumeEmptyDirArgs:
     def __init__(__self__, *,
@@ -2945,8 +3032,6 @@ class ServiceTemplateSpecVolumeEmptyDirArgs:
         """
         :param pulumi.Input[str] medium: The medium on which the data is stored. The default is "" which means to use the node's default medium. Must be an empty string (default) or Memory.
         :param pulumi.Input[str] size_limit: Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.
-               
-               - - -
         """
         if medium is not None:
             pulumi.set(__self__, "medium", medium)
@@ -2970,8 +3055,6 @@ class ServiceTemplateSpecVolumeEmptyDirArgs:
     def size_limit(self) -> Optional[pulumi.Input[str]]:
         """
         Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.
-
-        - - -
         """
         return pulumi.get(self, "size_limit")
 

pulumi_gcp/cloudrun/outputs.py

@@ -47,6 +47,7 @@ __all__ = [
     'ServiceTemplateSpecContainerStartupProbeTcpSocket',
     'ServiceTemplateSpecContainerVolumeMount',
     'ServiceTemplateSpecVolume',
+    'ServiceTemplateSpecVolumeCsi',
     'ServiceTemplateSpecVolumeEmptyDir',
     'ServiceTemplateSpecVolumeSecret',
     'ServiceTemplateSpecVolumeSecretItem',
@@ -80,6 +81,7 @@ __all__ = [
     'GetServiceTemplateSpecContainerStartupProbeTcpSocketResult',
     'GetServiceTemplateSpecContainerVolumeMountResult',
     'GetServiceTemplateSpecVolumeResult',
+    'GetServiceTemplateSpecVolumeCsiResult',
     'GetServiceTemplateSpecVolumeEmptyDirResult',
     'GetServiceTemplateSpecVolumeSecretResult',
     'GetServiceTemplateSpecVolumeSecretItemResult',
@@ -2795,10 +2797,13 @@ class ServiceTemplateSpecVolume(dict):
 
     def __init__(__self__, *,
                  name: str,
+                 csi: Optional['outputs.ServiceTemplateSpecVolumeCsi'] = None,
                  empty_dir: Optional['outputs.ServiceTemplateSpecVolumeEmptyDir'] = None,
                  secret: Optional['outputs.ServiceTemplateSpecVolumeSecret'] = None):
         """
         :param str name: Volume's name.
+        :param 'ServiceTemplateSpecVolumeCsiArgs' csi: A filesystem specified by the Container Storage Interface (CSI).
+               Structure is documented below.
         :param 'ServiceTemplateSpecVolumeEmptyDirArgs' empty_dir: Ephemeral storage which can be backed by real disks (HD, SSD), network storage or memory (i.e. tmpfs). For now only in memory (tmpfs) is supported. It is ephemeral in the sense that when the sandbox is taken down, the data is destroyed with it (it does not persist across sandbox runs).
                Structure is documented below.
         :param 'ServiceTemplateSpecVolumeSecretArgs' secret: The secret's value will be presented as the content of a file whose
@@ -2807,6 +2812,8 @@ class ServiceTemplateSpecVolume(dict):
                Structure is documented below.
         """
         pulumi.set(__self__, "name", name)
+        if csi is not None:
+            pulumi.set(__self__, "csi", csi)
         if empty_dir is not None:
             pulumi.set(__self__, "empty_dir", empty_dir)
         if secret is not None:
@@ -2820,6 +2827,15 @@ class ServiceTemplateSpecVolume(dict):
         """
         return pulumi.get(self, "name")
 
+    @property
+    @pulumi.getter
+    def csi(self) -> Optional['outputs.ServiceTemplateSpecVolumeCsi']:
+        """
+        A filesystem specified by the Container Storage Interface (CSI).
+        Structure is documented below.
+        """
+        return pulumi.get(self, "csi")
+
     @property
     @pulumi.getter(name="emptyDir")
     def empty_dir(self) -> Optional['outputs.ServiceTemplateSpecVolumeEmptyDir']:
@@ -2841,6 +2857,81 @@ class ServiceTemplateSpecVolume(dict):
         return pulumi.get(self, "secret")
 
 
+@pulumi.output_type
+class ServiceTemplateSpecVolumeCsi(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "readOnly":
+            suggest = "read_only"
+        elif key == "volumeAttributes":
+            suggest = "volume_attributes"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ServiceTemplateSpecVolumeCsi. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ServiceTemplateSpecVolumeCsi.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ServiceTemplateSpecVolumeCsi.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 driver: str,
+                 read_only: Optional[bool] = None,
+                 volume_attributes: Optional[Mapping[str, str]] = None):
+        """
+        :param str driver: Unique name representing the type of file system to be created. Cloud Run supports the following values:
+               * gcsfuse.run.googleapis.com: Mount a Google Cloud Storage bucket using GCSFuse. This driver requires the
+               run.googleapis.com/execution-environment annotation to be set to "gen2" and
+               run.googleapis.com/launch-stage set to "BETA" or "ALPHA".
+        :param bool read_only: If true, all mounts created from this volume will be read-only.
+        :param Mapping[str, str] volume_attributes: Driver-specific attributes. The following options are supported for available drivers:
+               * gcsfuse.run.googleapis.com
+               * bucketName: The name of the Cloud Storage Bucket that backs this volume. The Cloud Run Service identity must have access to this bucket.
+               
+               - - -
+        """
+        pulumi.set(__self__, "driver", driver)
+        if read_only is not None:
+            pulumi.set(__self__, "read_only", read_only)
+        if volume_attributes is not None:
+            pulumi.set(__self__, "volume_attributes", volume_attributes)
+
+    @property
+    @pulumi.getter
+    def driver(self) -> str:
+        """
+        Unique name representing the type of file system to be created. Cloud Run supports the following values:
+        * gcsfuse.run.googleapis.com: Mount a Google Cloud Storage bucket using GCSFuse. This driver requires the
+        run.googleapis.com/execution-environment annotation to be set to "gen2" and
+        run.googleapis.com/launch-stage set to "BETA" or "ALPHA".
+        """
+        return pulumi.get(self, "driver")
+
+    @property
+    @pulumi.getter(name="readOnly")
+    def read_only(self) -> Optional[bool]:
+        """
+        If true, all mounts created from this volume will be read-only.
+        """
+        return pulumi.get(self, "read_only")
+
+    @property
+    @pulumi.getter(name="volumeAttributes")
+    def volume_attributes(self) -> Optional[Mapping[str, str]]:
+        """
+        Driver-specific attributes. The following options are supported for available drivers:
+        * gcsfuse.run.googleapis.com
+        * bucketName: The name of the Cloud Storage Bucket that backs this volume. The Cloud Run Service identity must have access to this bucket.
+
+        - - -
+        """
+        return pulumi.get(self, "volume_attributes")
+
+
 @pulumi.output_type
 class ServiceTemplateSpecVolumeEmptyDir(dict):
     @staticmethod
@@ -2866,8 +2957,6 @@ class ServiceTemplateSpecVolumeEmptyDir(dict):
         """
         :param str medium: The medium on which the data is stored. The default is "" which means to use the node's default medium. Must be an empty string (default) or Memory.
         :param str size_limit: Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.
-               
-               - - -
         """
         if medium is not None:
             pulumi.set(__self__, "medium", medium)
@@ -2887,8 +2976,6 @@ class ServiceTemplateSpecVolumeEmptyDir(dict):
     def size_limit(self) -> Optional[str]:
         """
         Limit on the storage usable by this EmptyDir volume. The size limit is also applicable for memory medium. The maximum usage on memory medium EmptyDir would be the minimum value between the SizeLimit specified here and the sum of memory limits of all containers in a pod. This field's values are of the 'Quantity' k8s type: https://kubernetes.io/docs/reference/kubernetes-api/common-definitions/quantity/. The default is nil which means that the limit is undefined. More info: https://kubernetes.io/docs/concepts/storage/volumes/#emptydir.
-
-        - - -
         """
         return pulumi.get(self, "size_limit")
 
@@ -4640,20 +4727,31 @@ class GetServiceTemplateSpecContainerVolumeMountResult(dict):
 @pulumi.output_type
 class GetServiceTemplateSpecVolumeResult(dict):
     def __init__(__self__, *,
+                 csis: Sequence['outputs.GetServiceTemplateSpecVolumeCsiResult'],
                  empty_dirs: Sequence['outputs.GetServiceTemplateSpecVolumeEmptyDirResult'],
                  name: str,
                  secrets: Sequence['outputs.GetServiceTemplateSpecVolumeSecretResult']):
         """
+        :param Sequence['GetServiceTemplateSpecVolumeCsiArgs'] csis: A filesystem specified by the Container Storage Interface (CSI).
         :param Sequence['GetServiceTemplateSpecVolumeEmptyDirArgs'] empty_dirs: Ephemeral storage which can be backed by real disks (HD, SSD), network storage or memory (i.e. tmpfs). For now only in memory (tmpfs) is supported. It is ephemeral in the sense that when the sandbox is taken down, the data is destroyed with it (it does not persist across sandbox runs).
         :param str name: The name of the Cloud Run Service.
         :param Sequence['GetServiceTemplateSpecVolumeSecretArgs'] secrets: The secret's value will be presented as the content of a file whose
                name is defined in the item path. If no items are defined, the name of
                the file is the secret_name.
         """
+        pulumi.set(__self__, "csis", csis)
         pulumi.set(__self__, "empty_dirs", empty_dirs)
         pulumi.set(__self__, "name", name)
         pulumi.set(__self__, "secrets", secrets)
 
+    @property
+    @pulumi.getter
+    def csis(self) -> Sequence['outputs.GetServiceTemplateSpecVolumeCsiResult']:
+        """
+        A filesystem specified by the Container Storage Interface (CSI).
+        """
+        return pulumi.get(self, "csis")
+
     @property
     @pulumi.getter(name="emptyDirs")
     def empty_dirs(self) -> Sequence['outputs.GetServiceTemplateSpecVolumeEmptyDirResult']:
@@ -4681,6 +4779,56 @@ class GetServiceTemplateSpecVolumeResult(dict):
         return pulumi.get(self, "secrets")
 
 
+@pulumi.output_type
+class GetServiceTemplateSpecVolumeCsiResult(dict):
+    def __init__(__self__, *,
+                 driver: str,
+                 read_only: bool,
+                 volume_attributes: Mapping[str, str]):
+        """
+        :param str driver: Unique name representing the type of file system to be created. Cloud Run supports the following values:
+                 * gcsfuse.run.googleapis.com: Mount a Google Cloud Storage bucket using GCSFuse. This driver requires the
+                   run.googleapis.com/execution-environment annotation to be set to "gen2" and
+                   run.googleapis.com/launch-stage set to "BETA" or "ALPHA".
+        :param bool read_only: If true, all mounts created from this volume will be read-only.
+        :param Mapping[str, str] volume_attributes: Driver-specific attributes. The following options are supported for available drivers:
+                 * gcsfuse.run.googleapis.com
+                   * bucketName: The name of the Cloud Storage Bucket that backs this volume. The Cloud Run Service identity must have access to this bucket.
+        """
+        pulumi.set(__self__, "driver", driver)
+        pulumi.set(__self__, "read_only", read_only)
+        pulumi.set(__self__, "volume_attributes", volume_attributes)
+
+    @property
+    @pulumi.getter
+    def driver(self) -> str:
+        """
+        Unique name representing the type of file system to be created. Cloud Run supports the following values:
+          * gcsfuse.run.googleapis.com: Mount a Google Cloud Storage bucket using GCSFuse. This driver requires the
+            run.googleapis.com/execution-environment annotation to be set to "gen2" and
+            run.googleapis.com/launch-stage set to "BETA" or "ALPHA".
+        """
+        return pulumi.get(self, "driver")
+
+    @property
+    @pulumi.getter(name="readOnly")
+    def read_only(self) -> bool:
+        """
+        If true, all mounts created from this volume will be read-only.
+        """
+        return pulumi.get(self, "read_only")
+
+    @property
+    @pulumi.getter(name="volumeAttributes")
+    def volume_attributes(self) -> Mapping[str, str]:
+        """
+        Driver-specific attributes. The following options are supported for available drivers:
+          * gcsfuse.run.googleapis.com
+            * bucketName: The name of the Cloud Storage Bucket that backs this volume. The Cloud Run Service identity must have access to this bucket.
+        """
+        return pulumi.get(self, "volume_attributes")
+
+
 @pulumi.output_type
 class GetServiceTemplateSpecVolumeEmptyDirResult(dict):
     def __init__(__self__, *,