pulumi-gcp 8.0.0rc0__py3-none-any.whl → 8.1.0__py3-none-any.whl

pulumi_gcp/networkconnectivity/_inputs.py

@@ -892,6 +892,10 @@ if not MYPY:
         """
         IP ranges encompassing the subnets to be excluded from peering.
         """
+        include_export_ranges: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        IP ranges allowed to be included from peering.
+        """
 elif False:
     SpokeLinkedVpcNetworkArgsDict: TypeAlias = Mapping[str, Any]
 
@@ -899,14 +903,18 @@ elif False:
 class SpokeLinkedVpcNetworkArgs:
     def __init__(__self__, *,
                  uri: pulumi.Input[str],
-                 exclude_export_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
+                 exclude_export_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 include_export_ranges: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None):
         """
         :param pulumi.Input[str] uri: The URI of the VPC network resource.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] exclude_export_ranges: IP ranges encompassing the subnets to be excluded from peering.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] include_export_ranges: IP ranges allowed to be included from peering.
         """
         pulumi.set(__self__, "uri", uri)
         if exclude_export_ranges is not None:
             pulumi.set(__self__, "exclude_export_ranges", exclude_export_ranges)
+        if include_export_ranges is not None:
+            pulumi.set(__self__, "include_export_ranges", include_export_ranges)
 
     @property
     @pulumi.getter
@@ -932,6 +940,18 @@ class SpokeLinkedVpcNetworkArgs:
     def exclude_export_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "exclude_export_ranges", value)
 
+    @property
+    @pulumi.getter(name="includeExportRanges")
+    def include_export_ranges(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        IP ranges allowed to be included from peering.
+        """
+        return pulumi.get(self, "include_export_ranges")
+
+    @include_export_ranges.setter
+    def include_export_ranges(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "include_export_ranges", value)
+
 
 if not MYPY:
     class SpokeLinkedVpnTunnelsArgsDict(TypedDict):

pulumi_gcp/networkconnectivity/outputs.py

@@ -659,6 +659,8 @@ class SpokeLinkedVpcNetwork(dict):
         suggest = None
         if key == "excludeExportRanges":
             suggest = "exclude_export_ranges"
+        elif key == "includeExportRanges":
+            suggest = "include_export_ranges"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in SpokeLinkedVpcNetwork. Access the value via the '{suggest}' property getter instead.")
@@ -673,14 +675,18 @@ class SpokeLinkedVpcNetwork(dict):
 
     def __init__(__self__, *,
                  uri: str,
-                 exclude_export_ranges: Optional[Sequence[str]] = None):
+                 exclude_export_ranges: Optional[Sequence[str]] = None,
+                 include_export_ranges: Optional[Sequence[str]] = None):
         """
         :param str uri: The URI of the VPC network resource.
         :param Sequence[str] exclude_export_ranges: IP ranges encompassing the subnets to be excluded from peering.
+        :param Sequence[str] include_export_ranges: IP ranges allowed to be included from peering.
         """
         pulumi.set(__self__, "uri", uri)
         if exclude_export_ranges is not None:
             pulumi.set(__self__, "exclude_export_ranges", exclude_export_ranges)
+        if include_export_ranges is not None:
+            pulumi.set(__self__, "include_export_ranges", include_export_ranges)
 
     @property
     @pulumi.getter
@@ -698,6 +704,14 @@ class SpokeLinkedVpcNetwork(dict):
         """
         return pulumi.get(self, "exclude_export_ranges")
 
+    @property
+    @pulumi.getter(name="includeExportRanges")
+    def include_export_ranges(self) -> Optional[Sequence[str]]:
+        """
+        IP ranges allowed to be included from peering.
+        """
+        return pulumi.get(self, "include_export_ranges")
+
 
 @pulumi.output_type
 class SpokeLinkedVpnTunnels(dict):

pulumi_gcp/networkconnectivity/spoke.py

@@ -545,6 +545,10 @@ class Spoke(pulumi.CustomResource):
                     "198.51.100.0/24",
                     "10.10.0.0/16",
                 ],
+                "include_export_ranges": [
+                    "198.51.100.0/23",
+                    "10.0.0.0/8",
+                ],
                 "uri": network.self_link,
             })
         ```
@@ -694,6 +698,10 @@ class Spoke(pulumi.CustomResource):
                     "198.51.100.0/24",
                     "10.10.0.0/16",
                 ],
+                "include_export_ranges": [
+                    "198.51.100.0/23",
+                    "10.0.0.0/8",
+                ],
                 "uri": network.self_link,
             })
         ```

pulumi_gcp/networksecurity/client_tls_policy.py

@@ -407,6 +407,14 @@ class ClientTlsPolicy(pulumi.CustomResource):
                  sni: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
+
+        To get more information about ClientTlsPolicy, see:
+
+        * [API documentation](https://cloud.google.com/traffic-director/docs/reference/network-security/rest/v1beta1/projects.locations.clientTlsPolicies)
+        * How-to Guides
+            * [Service Security](https://cloud.google.com/traffic-director/docs/security-use-cases)
+
         ## Example Usage
 
         ### Network Security Client Tls Policy Basic
@@ -440,18 +448,11 @@ class ClientTlsPolicy(pulumi.CustomResource):
                     "plugin_instance": "google_cloud_private_spiffe",
                 },
             },
-            server_validation_cas=[
-                {
-                    "grpc_endpoint": {
-                        "target_uri": "unix:mypath",
-                    },
-                },
-                {
-                    "grpc_endpoint": {
-                        "target_uri": "unix:mypath1",
-                    },
+            server_validation_cas=[{
+                "grpc_endpoint": {
+                    "target_uri": "unix:mypath",
                 },
-            ])
+            }])
         ```
 
         ## Import
@@ -505,6 +506,14 @@ class ClientTlsPolicy(pulumi.CustomResource):
                  args: Optional[ClientTlsPolicyArgs] = None,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
+
+        To get more information about ClientTlsPolicy, see:
+
+        * [API documentation](https://cloud.google.com/traffic-director/docs/reference/network-security/rest/v1beta1/projects.locations.clientTlsPolicies)
+        * How-to Guides
+            * [Service Security](https://cloud.google.com/traffic-director/docs/security-use-cases)
+
         ## Example Usage
 
         ### Network Security Client Tls Policy Basic
@@ -538,18 +547,11 @@ class ClientTlsPolicy(pulumi.CustomResource):
                     "plugin_instance": "google_cloud_private_spiffe",
                 },
             },
-            server_validation_cas=[
-                {
-                    "grpc_endpoint": {
-                        "target_uri": "unix:mypath",
-                    },
-                },
-                {
-                    "grpc_endpoint": {
-                        "target_uri": "unix:mypath1",
-                    },
+            server_validation_cas=[{
+                "grpc_endpoint": {
+                    "target_uri": "unix:mypath",
                 },
-            ])
+            }])
         ```
 
         ## Import

pulumi_gcp/networksecurity/server_tls_policy.py

@@ -419,6 +419,12 @@ class ServerTlsPolicy(pulumi.CustomResource):
                  server_certificate: Optional[pulumi.Input[Union['ServerTlsPolicyServerCertificateArgs', 'ServerTlsPolicyServerCertificateArgsDict']]] = None,
                  __props__=None):
         """
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
+
+        To get more information about ServerTlsPolicy, see:
+
+        * [API documentation](https://cloud.google.com/traffic-director/docs/reference/network-security/rest/v1beta1/projects.locations.serverTlsPolicies)
+
         ## Example Usage
 
         ### Network Security Server Tls Policy Basic
@@ -440,23 +446,11 @@ class ServerTlsPolicy(pulumi.CustomResource):
                 },
             },
             mtls_policy={
-                "client_validation_cas": [
-                    {
-                        "grpc_endpoint": {
-                            "target_uri": "unix:mypath",
-                        },
+                "client_validation_cas": [{
+                    "grpc_endpoint": {
+                        "target_uri": "unix:mypath",
                     },
-                    {
-                        "grpc_endpoint": {
-                            "target_uri": "unix:abc/mypath",
-                        },
-                    },
-                    {
-                        "certificate_provider_instance": {
-                            "plugin_instance": "google_cloud_private_spiffe",
-                        },
-                    },
-                ],
+                }],
             })
         ```
         ### Network Security Server Tls Policy Advanced
@@ -588,6 +582,12 @@ class ServerTlsPolicy(pulumi.CustomResource):
                  args: Optional[ServerTlsPolicyArgs] = None,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
+
+        To get more information about ServerTlsPolicy, see:
+
+        * [API documentation](https://cloud.google.com/traffic-director/docs/reference/network-security/rest/v1beta1/projects.locations.serverTlsPolicies)
+
         ## Example Usage
 
         ### Network Security Server Tls Policy Basic
@@ -609,23 +609,11 @@ class ServerTlsPolicy(pulumi.CustomResource):
                 },
             },
             mtls_policy={
-                "client_validation_cas": [
-                    {
-                        "grpc_endpoint": {
-                            "target_uri": "unix:mypath",
-                        },
+                "client_validation_cas": [{
+                    "grpc_endpoint": {
+                        "target_uri": "unix:mypath",
                     },
-                    {
-                        "grpc_endpoint": {
-                            "target_uri": "unix:abc/mypath",
-                        },
-                    },
-                    {
-                        "certificate_provider_instance": {
-                            "plugin_instance": "google_cloud_private_spiffe",
-                        },
-                    },
-                ],
+                }],
             })
         ```
         ### Network Security Server Tls Policy Advanced

pulumi_gcp/organizations/get_project.py

@@ -26,7 +26,7 @@ class GetProjectResult:
     """
     A collection of values returned by getProject.
     """
-    def __init__(__self__, auto_create_network=None, billing_account=None, deletion_policy=None, effective_labels=None, folder_id=None, id=None, labels=None, name=None, number=None, org_id=None, project_id=None, pulumi_labels=None):
+    def __init__(__self__, auto_create_network=None, billing_account=None, deletion_policy=None, effective_labels=None, folder_id=None, id=None, labels=None, name=None, number=None, org_id=None, project_id=None, pulumi_labels=None, tags=None):
         if auto_create_network and not isinstance(auto_create_network, bool):
             raise TypeError("Expected argument 'auto_create_network' to be a bool")
         pulumi.set(__self__, "auto_create_network", auto_create_network)
@@ -63,6 +63,9 @@ class GetProjectResult:
         if pulumi_labels and not isinstance(pulumi_labels, dict):
             raise TypeError("Expected argument 'pulumi_labels' to be a dict")
         pulumi.set(__self__, "pulumi_labels", pulumi_labels)
+        if tags and not isinstance(tags, dict):
+            raise TypeError("Expected argument 'tags' to be a dict")
+        pulumi.set(__self__, "tags", tags)
 
     @property
     @pulumi.getter(name="autoCreateNetwork")
@@ -130,6 +133,11 @@ class GetProjectResult:
     def pulumi_labels(self) -> Mapping[str, str]:
         return pulumi.get(self, "pulumi_labels")
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Mapping[str, str]:
+        return pulumi.get(self, "tags")
+
 
 class AwaitableGetProjectResult(GetProjectResult):
     # pylint: disable=using-constant-test
@@ -148,7 +156,8 @@ class AwaitableGetProjectResult(GetProjectResult):
             number=self.number,
             org_id=self.org_id,
             project_id=self.project_id,
-            pulumi_labels=self.pulumi_labels)
+            pulumi_labels=self.pulumi_labels,
+            tags=self.tags)
 
 
 def get_project(project_id: Optional[str] = None,
@@ -188,7 +197,8 @@ def get_project(project_id: Optional[str] = None,
         number=pulumi.get(__ret__, 'number'),
         org_id=pulumi.get(__ret__, 'org_id'),
         project_id=pulumi.get(__ret__, 'project_id'),
-        pulumi_labels=pulumi.get(__ret__, 'pulumi_labels'))
+        pulumi_labels=pulumi.get(__ret__, 'pulumi_labels'),
+        tags=pulumi.get(__ret__, 'tags'))
 
 
 @_utilities.lift_output_func(get_project)

pulumi_gcp/organizations/project.py

@@ -26,7 +26,8 @@ class ProjectArgs:
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  org_id: Optional[pulumi.Input[str]] = None,
-                 project_id: Optional[pulumi.Input[str]] = None):
+                 project_id: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
         """
         The set of arguments for constructing a Project resource.
         :param pulumi.Input[bool] auto_create_network: Create the 'default' network automatically. Default true. If set to false, the default network will be deleted. Note
@@ -53,6 +54,7 @@ class ProjectArgs:
                this forces the project to be migrated to the newly specified
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         if auto_create_network is not None:
             pulumi.set(__self__, "auto_create_network", auto_create_network)
@@ -70,6 +72,8 @@ class ProjectArgs:
             pulumi.set(__self__, "org_id", org_id)
         if project_id is not None:
             pulumi.set(__self__, "project_id", project_id)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
 
     @property
     @pulumi.getter(name="autoCreateNetwork")
@@ -181,6 +185,18 @@ class ProjectArgs:
     def project_id(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "project_id", value)
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
+        """
+        return pulumi.get(self, "tags")
+
+    @tags.setter
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "tags", value)
+
 
 @pulumi.input_type
 class _ProjectState:
@@ -195,7 +211,8 @@ class _ProjectState:
                  number: Optional[pulumi.Input[str]] = None,
                  org_id: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
-                 pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
+                 pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
         """
         Input properties used for looking up and filtering Project resources.
         :param pulumi.Input[bool] auto_create_network: Create the 'default' network automatically. Default true. If set to false, the default network will be deleted. Note
@@ -225,6 +242,7 @@ class _ProjectState:
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         if auto_create_network is not None:
             pulumi.set(__self__, "auto_create_network", auto_create_network)
@@ -248,6 +266,8 @@ class _ProjectState:
             pulumi.set(__self__, "project_id", project_id)
         if pulumi_labels is not None:
             pulumi.set(__self__, "pulumi_labels", pulumi_labels)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
 
     @property
     @pulumi.getter(name="autoCreateNetwork")
@@ -395,6 +415,18 @@ class _ProjectState:
     def pulumi_labels(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
         pulumi.set(self, "pulumi_labels", value)
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
+        """
+        return pulumi.get(self, "tags")
+
+    @tags.setter
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "tags", value)
+
 
 class Project(pulumi.CustomResource):
     @overload
@@ -409,6 +441,7 @@ class Project(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  org_id: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  __props__=None):
         """
         Allows creation and management of a Google Cloud Platform project.
@@ -423,6 +456,10 @@ class Project(pulumi.CustomResource):
 
         > This resource reads the specified billing account on every pulumi up and plan operation so you must have permissions on the specified billing account.
 
+        > It is recommended to use the `constraints/compute.skipDefaultNetworkCreation` [constraint](https://www.terraform.io/docs/providers/google/r/google_organization_policy.html) to remove the default network instead of setting `auto_create_network` to false, when possible.
+
+        > It may take a while for the attached tag bindings to be deleted after the project is scheduled to be deleted.
+
         To get more information about projects, see:
 
         * [API documentation](https://cloud.google.com/resource-manager/reference/rest/v1/projects)
@@ -456,6 +493,21 @@ class Project(pulumi.CustomResource):
             folder_id=department1.name)
         ```
 
+        To create a project with a tag
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        my_project = gcp.organizations.Project("my_project",
+            name="My Project",
+            project_id="your-project-id",
+            org_id="1234567",
+            tags={
+                "1234567/env": "staging",
+            })
+        ```
+
         ## Import
 
         Projects can be imported using the `project_id`, e.g.
@@ -494,6 +546,7 @@ class Project(pulumi.CustomResource):
                this forces the project to be migrated to the newly specified
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         ...
     @overload
@@ -514,6 +567,10 @@ class Project(pulumi.CustomResource):
 
         > This resource reads the specified billing account on every pulumi up and plan operation so you must have permissions on the specified billing account.
 
+        > It is recommended to use the `constraints/compute.skipDefaultNetworkCreation` [constraint](https://www.terraform.io/docs/providers/google/r/google_organization_policy.html) to remove the default network instead of setting `auto_create_network` to false, when possible.
+
+        > It may take a while for the attached tag bindings to be deleted after the project is scheduled to be deleted.
+
         To get more information about projects, see:
 
         * [API documentation](https://cloud.google.com/resource-manager/reference/rest/v1/projects)
@@ -547,6 +604,21 @@ class Project(pulumi.CustomResource):
             folder_id=department1.name)
         ```
 
+        To create a project with a tag
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        my_project = gcp.organizations.Project("my_project",
+            name="My Project",
+            project_id="your-project-id",
+            org_id="1234567",
+            tags={
+                "1234567/env": "staging",
+            })
+        ```
+
         ## Import
 
         Projects can be imported using the `project_id`, e.g.
@@ -582,6 +654,7 @@ class Project(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  org_id: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -599,6 +672,7 @@ class Project(pulumi.CustomResource):
             __props__.__dict__["name"] = name
             __props__.__dict__["org_id"] = org_id
             __props__.__dict__["project_id"] = project_id
+            __props__.__dict__["tags"] = tags
             __props__.__dict__["effective_labels"] = None
             __props__.__dict__["number"] = None
             __props__.__dict__["pulumi_labels"] = None
@@ -624,7 +698,8 @@ class Project(pulumi.CustomResource):
             number: Optional[pulumi.Input[str]] = None,
             org_id: Optional[pulumi.Input[str]] = None,
             project_id: Optional[pulumi.Input[str]] = None,
-            pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None) -> 'Project':
+            pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+            tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None) -> 'Project':
         """
         Get an existing Project resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -659,6 +734,7 @@ class Project(pulumi.CustomResource):
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -675,6 +751,7 @@ class Project(pulumi.CustomResource):
         __props__.__dict__["org_id"] = org_id
         __props__.__dict__["project_id"] = project_id
         __props__.__dict__["pulumi_labels"] = pulumi_labels
+        __props__.__dict__["tags"] = tags
         return Project(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -779,3 +856,11 @@ class Project(pulumi.CustomResource):
         """
         return pulumi.get(self, "pulumi_labels")
 
+    @property
+    @pulumi.getter
+    def tags(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
+        """
+        return pulumi.get(self, "tags")
+