pulumi-gcp 8.1.0a1726293903__py3-none-any.whl → 8.2.0__py3-none-any.whl

pulumi_gcp/container/_inputs.py

@@ -37,6 +37,8 @@ __all__ = [
     'AttachedClusterProxyConfigArgsDict',
     'AttachedClusterProxyConfigKubernetesSecretArgs',
     'AttachedClusterProxyConfigKubernetesSecretArgsDict',
+    'AttachedClusterSecurityPostureConfigArgs',
+    'AttachedClusterSecurityPostureConfigArgsDict',
     'AttachedClusterWorkloadIdentityConfigArgs',
     'AttachedClusterWorkloadIdentityConfigArgsDict',
     'AwsClusterAuthorizationArgs',
@@ -323,6 +325,8 @@ __all__ = [
     'ClusterNodePoolAutoConfigArgsDict',
     'ClusterNodePoolAutoConfigNetworkTagsArgs',
     'ClusterNodePoolAutoConfigNetworkTagsArgsDict',
+    'ClusterNodePoolAutoConfigNodeKubeletConfigArgs',
+    'ClusterNodePoolAutoConfigNodeKubeletConfigArgsDict',
     'ClusterNodePoolAutoscalingArgs',
     'ClusterNodePoolAutoscalingArgsDict',
     'ClusterNodePoolDefaultsArgs',
@@ -1016,6 +1020,40 @@ class AttachedClusterProxyConfigKubernetesSecretArgs:
         pulumi.set(self, "namespace", value)
 
 
+if not MYPY:
+    class AttachedClusterSecurityPostureConfigArgsDict(TypedDict):
+        vulnerability_mode: pulumi.Input[str]
+        """
+        Sets the mode of the Kubernetes security posture API's workload vulnerability scanning.
+        Possible values are: `VULNERABILITY_DISABLED`, `VULNERABILITY_ENTERPRISE`.
+        """
+elif False:
+    AttachedClusterSecurityPostureConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AttachedClusterSecurityPostureConfigArgs:
+    def __init__(__self__, *,
+                 vulnerability_mode: pulumi.Input[str]):
+        """
+        :param pulumi.Input[str] vulnerability_mode: Sets the mode of the Kubernetes security posture API's workload vulnerability scanning.
+               Possible values are: `VULNERABILITY_DISABLED`, `VULNERABILITY_ENTERPRISE`.
+        """
+        pulumi.set(__self__, "vulnerability_mode", vulnerability_mode)
+
+    @property
+    @pulumi.getter(name="vulnerabilityMode")
+    def vulnerability_mode(self) -> pulumi.Input[str]:
+        """
+        Sets the mode of the Kubernetes security posture API's workload vulnerability scanning.
+        Possible values are: `VULNERABILITY_DISABLED`, `VULNERABILITY_ENTERPRISE`.
+        """
+        return pulumi.get(self, "vulnerability_mode")
+
+    @vulnerability_mode.setter
+    def vulnerability_mode(self, value: pulumi.Input[str]):
+        pulumi.set(self, "vulnerability_mode", value)
+
+
 if not MYPY:
     class AttachedClusterWorkloadIdentityConfigArgsDict(TypedDict):
         identity_provider: NotRequired[pulumi.Input[str]]
@@ -8201,6 +8239,10 @@ if not MYPY:
         See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
         for more information. Defaults to false.
         """
+        storage_pools: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
         tags: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
         """
         The list of instance tags applied to all nodes. Tags are used to identify
@@ -8265,6 +8307,7 @@ class ClusterNodeConfigArgs:
                  shielded_instance_config: Optional[pulumi.Input['ClusterNodeConfigShieldedInstanceConfigArgs']] = None,
                  sole_tenant_config: Optional[pulumi.Input['ClusterNodeConfigSoleTenantConfigArgs']] = None,
                  spot: Optional[pulumi.Input[bool]] = None,
+                 storage_pools: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  taints: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodeConfigTaintArgs']]]] = None,
                  workload_metadata_config: Optional[pulumi.Input['ClusterNodeConfigWorkloadMetadataConfigArgs']] = None):
@@ -8355,6 +8398,7 @@ class ClusterNodeConfigArgs:
         :param pulumi.Input[bool] spot: A boolean that represents whether the underlying node VMs are spot.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
                for more information. Defaults to false.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: The list of instance tags applied to all nodes. Tags are used to identify
                valid sources or targets for network firewalls.
         :param pulumi.Input[Sequence[pulumi.Input['ClusterNodeConfigTaintArgs']]] taints: A list of [Kubernetes taints](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
@@ -8442,6 +8486,8 @@ class ClusterNodeConfigArgs:
             pulumi.set(__self__, "sole_tenant_config", sole_tenant_config)
         if spot is not None:
             pulumi.set(__self__, "spot", spot)
+        if storage_pools is not None:
+            pulumi.set(__self__, "storage_pools", storage_pools)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
         if taints is not None:
@@ -8942,6 +8988,18 @@ class ClusterNodeConfigArgs:
     def spot(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "spot", value)
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
+    @storage_pools.setter
+    def storage_pools(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "storage_pools", value)
+
     @property
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -9735,6 +9793,10 @@ if not MYPY:
         not specifying the `kubelet_config` block should be the equivalent of specifying
         `none`.
         """
+        insecure_kubelet_readonly_port_enabled: NotRequired[pulumi.Input[str]]
+        """
+        Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
         pod_pids_limit: NotRequired[pulumi.Input[int]]
         """
         Controls the maximum number of processes allowed to run in a pod. The value must be greater than or equal to 1024 and less than 4194304.
@@ -9748,6 +9810,7 @@ class ClusterNodeConfigKubeletConfigArgs:
                  cpu_manager_policy: pulumi.Input[str],
                  cpu_cfs_quota: Optional[pulumi.Input[bool]] = None,
                  cpu_cfs_quota_period: Optional[pulumi.Input[str]] = None,
+                 insecure_kubelet_readonly_port_enabled: Optional[pulumi.Input[str]] = None,
                  pod_pids_limit: Optional[pulumi.Input[int]] = None):
         """
         :param pulumi.Input[str] cpu_manager_policy: The CPU management policy on the node. See
@@ -9764,6 +9827,7 @@ class ClusterNodeConfigKubeletConfigArgs:
                value and accepts an invalid `default` value instead. While this remains true,
                not specifying the `kubelet_config` block should be the equivalent of specifying
                `none`.
+        :param pulumi.Input[str] insecure_kubelet_readonly_port_enabled: Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
         :param pulumi.Input[int] pod_pids_limit: Controls the maximum number of processes allowed to run in a pod. The value must be greater than or equal to 1024 and less than 4194304.
         """
         pulumi.set(__self__, "cpu_manager_policy", cpu_manager_policy)
@@ -9771,6 +9835,8 @@ class ClusterNodeConfigKubeletConfigArgs:
             pulumi.set(__self__, "cpu_cfs_quota", cpu_cfs_quota)
         if cpu_cfs_quota_period is not None:
             pulumi.set(__self__, "cpu_cfs_quota_period", cpu_cfs_quota_period)
+        if insecure_kubelet_readonly_port_enabled is not None:
+            pulumi.set(__self__, "insecure_kubelet_readonly_port_enabled", insecure_kubelet_readonly_port_enabled)
         if pod_pids_limit is not None:
             pulumi.set(__self__, "pod_pids_limit", pod_pids_limit)
 
@@ -9821,6 +9887,18 @@ class ClusterNodeConfigKubeletConfigArgs:
     def cpu_cfs_quota_period(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "cpu_cfs_quota_period", value)
 
+    @property
+    @pulumi.getter(name="insecureKubeletReadonlyPortEnabled")
+    def insecure_kubelet_readonly_port_enabled(self) -> Optional[pulumi.Input[str]]:
+        """
+        Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
+        return pulumi.get(self, "insecure_kubelet_readonly_port_enabled")
+
+    @insecure_kubelet_readonly_port_enabled.setter
+    def insecure_kubelet_readonly_port_enabled(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "insecure_kubelet_readonly_port_enabled", value)
+
     @property
     @pulumi.getter(name="podPidsLimit")
     def pod_pids_limit(self) -> Optional[pulumi.Input[int]]:
@@ -10795,7 +10873,12 @@ if not MYPY:
     class ClusterNodePoolAutoConfigArgsDict(TypedDict):
         network_tags: NotRequired[pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgsDict']]
         """
-        The network tag config for the cluster's automatically provisioned node pools.
+        The network tag config for the cluster's automatically provisioned node pools. Structure is documented below.
+        """
+        node_kubelet_config: NotRequired[pulumi.Input['ClusterNodePoolAutoConfigNodeKubeletConfigArgsDict']]
+        """
+        Kubelet configuration for Autopilot clusters. Currently, only `insecure_kubelet_readonly_port_enabled` is supported here.
+        Structure is documented below.
         """
         resource_manager_tags: NotRequired[pulumi.Input[Mapping[str, pulumi.Input[str]]]]
         """
@@ -10808,13 +10891,18 @@ elif False:
 class ClusterNodePoolAutoConfigArgs:
     def __init__(__self__, *,
                  network_tags: Optional[pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgs']] = None,
+                 node_kubelet_config: Optional[pulumi.Input['ClusterNodePoolAutoConfigNodeKubeletConfigArgs']] = None,
                  resource_manager_tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
         """
-        :param pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgs'] network_tags: The network tag config for the cluster's automatically provisioned node pools.
+        :param pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgs'] network_tags: The network tag config for the cluster's automatically provisioned node pools. Structure is documented below.
+        :param pulumi.Input['ClusterNodePoolAutoConfigNodeKubeletConfigArgs'] node_kubelet_config: Kubelet configuration for Autopilot clusters. Currently, only `insecure_kubelet_readonly_port_enabled` is supported here.
+               Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] resource_manager_tags: A map of resource manager tag keys and values to be attached to the nodes for managing Compute Engine firewalls using Network Firewall Policies. Tags must be according to specifications found [here](https://cloud.google.com/vpc/docs/tags-firewalls-overview#specifications). A maximum of 5 tag key-value pairs can be specified. Existing tags will be replaced with new values. Tags must be in one of the following formats ([KEY]=[VALUE]) 1. `tagKeys/{tag_key_id}=tagValues/{tag_value_id}` 2. `{org_id}/{tag_key_name}={tag_value_name}` 3. `{project_id}/{tag_key_name}={tag_value_name}`.
         """
         if network_tags is not None:
             pulumi.set(__self__, "network_tags", network_tags)
+        if node_kubelet_config is not None:
+            pulumi.set(__self__, "node_kubelet_config", node_kubelet_config)
         if resource_manager_tags is not None:
             pulumi.set(__self__, "resource_manager_tags", resource_manager_tags)
 
@@ -10822,7 +10910,7 @@ class ClusterNodePoolAutoConfigArgs:
     @pulumi.getter(name="networkTags")
     def network_tags(self) -> Optional[pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgs']]:
         """
-        The network tag config for the cluster's automatically provisioned node pools.
+        The network tag config for the cluster's automatically provisioned node pools. Structure is documented below.
         """
         return pulumi.get(self, "network_tags")
 
@@ -10830,6 +10918,19 @@ class ClusterNodePoolAutoConfigArgs:
     def network_tags(self, value: Optional[pulumi.Input['ClusterNodePoolAutoConfigNetworkTagsArgs']]):
         pulumi.set(self, "network_tags", value)
 
+    @property
+    @pulumi.getter(name="nodeKubeletConfig")
+    def node_kubelet_config(self) -> Optional[pulumi.Input['ClusterNodePoolAutoConfigNodeKubeletConfigArgs']]:
+        """
+        Kubelet configuration for Autopilot clusters. Currently, only `insecure_kubelet_readonly_port_enabled` is supported here.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "node_kubelet_config")
+
+    @node_kubelet_config.setter
+    def node_kubelet_config(self, value: Optional[pulumi.Input['ClusterNodePoolAutoConfigNodeKubeletConfigArgs']]):
+        pulumi.set(self, "node_kubelet_config", value)
+
     @property
     @pulumi.getter(name="resourceManagerTags")
     def resource_manager_tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
@@ -10875,6 +10976,38 @@ class ClusterNodePoolAutoConfigNetworkTagsArgs:
         pulumi.set(self, "tags", value)
 
 
+if not MYPY:
+    class ClusterNodePoolAutoConfigNodeKubeletConfigArgsDict(TypedDict):
+        insecure_kubelet_readonly_port_enabled: NotRequired[pulumi.Input[str]]
+        """
+        Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
+elif False:
+    ClusterNodePoolAutoConfigNodeKubeletConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ClusterNodePoolAutoConfigNodeKubeletConfigArgs:
+    def __init__(__self__, *,
+                 insecure_kubelet_readonly_port_enabled: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] insecure_kubelet_readonly_port_enabled: Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
+        if insecure_kubelet_readonly_port_enabled is not None:
+            pulumi.set(__self__, "insecure_kubelet_readonly_port_enabled", insecure_kubelet_readonly_port_enabled)
+
+    @property
+    @pulumi.getter(name="insecureKubeletReadonlyPortEnabled")
+    def insecure_kubelet_readonly_port_enabled(self) -> Optional[pulumi.Input[str]]:
+        """
+        Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
+        return pulumi.get(self, "insecure_kubelet_readonly_port_enabled")
+
+    @insecure_kubelet_readonly_port_enabled.setter
+    def insecure_kubelet_readonly_port_enabled(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "insecure_kubelet_readonly_port_enabled", value)
+
+
 if not MYPY:
     class ClusterNodePoolAutoscalingArgsDict(TypedDict):
         location_policy: NotRequired[pulumi.Input[str]]
@@ -11029,6 +11162,10 @@ if not MYPY:
         """
         The default Google Container Filesystem (GCFS) configuration at the cluster level. e.g. enable [image streaming](https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming) across all the node pools within the cluster. Structure is documented below.
         """
+        insecure_kubelet_readonly_port_enabled: NotRequired[pulumi.Input[str]]
+        """
+        Controls whether the kubelet read-only port is enabled for newly created node pools in the cluster. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
         logging_variant: NotRequired[pulumi.Input[str]]
         """
         The type of logging agent that is deployed by default for newly created node pools in the cluster. Valid values include DEFAULT and MAX_THROUGHPUT. See [Increasing logging agent throughput](https://cloud.google.com/stackdriver/docs/solutions/gke/managing-logs#throughput) for more information.
@@ -11041,16 +11178,20 @@ class ClusterNodePoolDefaultsNodeConfigDefaultsArgs:
     def __init__(__self__, *,
                  containerd_config: Optional[pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigArgs']] = None,
                  gcfs_config: Optional[pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsGcfsConfigArgs']] = None,
+                 insecure_kubelet_readonly_port_enabled: Optional[pulumi.Input[str]] = None,
                  logging_variant: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigArgs'] containerd_config: Parameters for containerd configuration.
         :param pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsGcfsConfigArgs'] gcfs_config: The default Google Container Filesystem (GCFS) configuration at the cluster level. e.g. enable [image streaming](https://cloud.google.com/kubernetes-engine/docs/how-to/image-streaming) across all the node pools within the cluster. Structure is documented below.
+        :param pulumi.Input[str] insecure_kubelet_readonly_port_enabled: Controls whether the kubelet read-only port is enabled for newly created node pools in the cluster. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
         :param pulumi.Input[str] logging_variant: The type of logging agent that is deployed by default for newly created node pools in the cluster. Valid values include DEFAULT and MAX_THROUGHPUT. See [Increasing logging agent throughput](https://cloud.google.com/stackdriver/docs/solutions/gke/managing-logs#throughput) for more information.
         """
         if containerd_config is not None:
             pulumi.set(__self__, "containerd_config", containerd_config)
         if gcfs_config is not None:
             pulumi.set(__self__, "gcfs_config", gcfs_config)
+        if insecure_kubelet_readonly_port_enabled is not None:
+            pulumi.set(__self__, "insecure_kubelet_readonly_port_enabled", insecure_kubelet_readonly_port_enabled)
         if logging_variant is not None:
             pulumi.set(__self__, "logging_variant", logging_variant)
 
@@ -11078,6 +11219,18 @@ class ClusterNodePoolDefaultsNodeConfigDefaultsArgs:
     def gcfs_config(self, value: Optional[pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsGcfsConfigArgs']]):
         pulumi.set(self, "gcfs_config", value)
 
+    @property
+    @pulumi.getter(name="insecureKubeletReadonlyPortEnabled")
+    def insecure_kubelet_readonly_port_enabled(self) -> Optional[pulumi.Input[str]]:
+        """
+        Controls whether the kubelet read-only port is enabled for newly created node pools in the cluster. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
+        return pulumi.get(self, "insecure_kubelet_readonly_port_enabled")
+
+    @insecure_kubelet_readonly_port_enabled.setter
+    def insecure_kubelet_readonly_port_enabled(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "insecure_kubelet_readonly_port_enabled", value)
+
     @property
     @pulumi.getter(name="loggingVariant")
     def logging_variant(self) -> Optional[pulumi.Input[str]]:
@@ -11919,6 +12072,10 @@ if not MYPY:
         See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
         for more information. Defaults to false.
         """
+        storage_pools: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
         tags: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
         """
         The list of instance tags applied to all nodes. Tags are used to identify
@@ -11983,6 +12140,7 @@ class ClusterNodePoolNodeConfigArgs:
                  shielded_instance_config: Optional[pulumi.Input['ClusterNodePoolNodeConfigShieldedInstanceConfigArgs']] = None,
                  sole_tenant_config: Optional[pulumi.Input['ClusterNodePoolNodeConfigSoleTenantConfigArgs']] = None,
                  spot: Optional[pulumi.Input[bool]] = None,
+                 storage_pools: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  taints: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolNodeConfigTaintArgs']]]] = None,
                  workload_metadata_config: Optional[pulumi.Input['ClusterNodePoolNodeConfigWorkloadMetadataConfigArgs']] = None):
@@ -12073,6 +12231,7 @@ class ClusterNodePoolNodeConfigArgs:
         :param pulumi.Input[bool] spot: A boolean that represents whether the underlying node VMs are spot.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
                for more information. Defaults to false.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: The list of instance tags applied to all nodes. Tags are used to identify
                valid sources or targets for network firewalls.
         :param pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolNodeConfigTaintArgs']]] taints: A list of [Kubernetes taints](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
@@ -12160,6 +12319,8 @@ class ClusterNodePoolNodeConfigArgs:
             pulumi.set(__self__, "sole_tenant_config", sole_tenant_config)
         if spot is not None:
             pulumi.set(__self__, "spot", spot)
+        if storage_pools is not None:
+            pulumi.set(__self__, "storage_pools", storage_pools)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
         if taints is not None:
@@ -12660,6 +12821,18 @@ class ClusterNodePoolNodeConfigArgs:
     def spot(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "spot", value)
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
+    @storage_pools.setter
+    def storage_pools(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "storage_pools", value)
+
     @property
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -13453,6 +13626,10 @@ if not MYPY:
         not specifying the `kubelet_config` block should be the equivalent of specifying
         `none`.
         """
+        insecure_kubelet_readonly_port_enabled: NotRequired[pulumi.Input[str]]
+        """
+        Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
         pod_pids_limit: NotRequired[pulumi.Input[int]]
         """
         Controls the maximum number of processes allowed to run in a pod. The value must be greater than or equal to 1024 and less than 4194304.
@@ -13466,6 +13643,7 @@ class ClusterNodePoolNodeConfigKubeletConfigArgs:
                  cpu_manager_policy: pulumi.Input[str],
                  cpu_cfs_quota: Optional[pulumi.Input[bool]] = None,
                  cpu_cfs_quota_period: Optional[pulumi.Input[str]] = None,
+                 insecure_kubelet_readonly_port_enabled: Optional[pulumi.Input[str]] = None,
                  pod_pids_limit: Optional[pulumi.Input[int]] = None):
         """
         :param pulumi.Input[str] cpu_manager_policy: The CPU management policy on the node. See
@@ -13482,6 +13660,7 @@ class ClusterNodePoolNodeConfigKubeletConfigArgs:
                value and accepts an invalid `default` value instead. While this remains true,
                not specifying the `kubelet_config` block should be the equivalent of specifying
                `none`.
+        :param pulumi.Input[str] insecure_kubelet_readonly_port_enabled: Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
         :param pulumi.Input[int] pod_pids_limit: Controls the maximum number of processes allowed to run in a pod. The value must be greater than or equal to 1024 and less than 4194304.
         """
         pulumi.set(__self__, "cpu_manager_policy", cpu_manager_policy)
@@ -13489,6 +13668,8 @@ class ClusterNodePoolNodeConfigKubeletConfigArgs:
             pulumi.set(__self__, "cpu_cfs_quota", cpu_cfs_quota)
         if cpu_cfs_quota_period is not None:
             pulumi.set(__self__, "cpu_cfs_quota_period", cpu_cfs_quota_period)
+        if insecure_kubelet_readonly_port_enabled is not None:
+            pulumi.set(__self__, "insecure_kubelet_readonly_port_enabled", insecure_kubelet_readonly_port_enabled)
         if pod_pids_limit is not None:
             pulumi.set(__self__, "pod_pids_limit", pod_pids_limit)
 
@@ -13539,6 +13720,18 @@ class ClusterNodePoolNodeConfigKubeletConfigArgs:
     def cpu_cfs_quota_period(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "cpu_cfs_quota_period", value)
 
+    @property
+    @pulumi.getter(name="insecureKubeletReadonlyPortEnabled")
+    def insecure_kubelet_readonly_port_enabled(self) -> Optional[pulumi.Input[str]]:
+        """
+        Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
+        return pulumi.get(self, "insecure_kubelet_readonly_port_enabled")
+
+    @insecure_kubelet_readonly_port_enabled.setter
+    def insecure_kubelet_readonly_port_enabled(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "insecure_kubelet_readonly_port_enabled", value)
+
     @property
     @pulumi.getter(name="podPidsLimit")
     def pod_pids_limit(self) -> Optional[pulumi.Input[int]]:
@@ -16107,6 +16300,10 @@ if not MYPY:
         """
         Whether the nodes are created as spot VM instances.
         """
+        storage_pools: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
         tags: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
         """
         The list of instance tags applied to all nodes.
@@ -16162,6 +16359,7 @@ class NodePoolNodeConfigArgs:
                  shielded_instance_config: Optional[pulumi.Input['NodePoolNodeConfigShieldedInstanceConfigArgs']] = None,
                  sole_tenant_config: Optional[pulumi.Input['NodePoolNodeConfigSoleTenantConfigArgs']] = None,
                  spot: Optional[pulumi.Input[bool]] = None,
+                 storage_pools: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  taints: Optional[pulumi.Input[Sequence[pulumi.Input['NodePoolNodeConfigTaintArgs']]]] = None,
                  workload_metadata_config: Optional[pulumi.Input['NodePoolNodeConfigWorkloadMetadataConfigArgs']] = None):
@@ -16206,6 +16404,7 @@ class NodePoolNodeConfigArgs:
         :param pulumi.Input['NodePoolNodeConfigShieldedInstanceConfigArgs'] shielded_instance_config: Shielded Instance options.
         :param pulumi.Input['NodePoolNodeConfigSoleTenantConfigArgs'] sole_tenant_config: Node affinity options for sole tenant node pools.
         :param pulumi.Input[bool] spot: Whether the nodes are created as spot VM instances.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: The list of instance tags applied to all nodes.
         :param pulumi.Input[Sequence[pulumi.Input['NodePoolNodeConfigTaintArgs']]] taints: List of Kubernetes taints to be applied to each node.
         :param pulumi.Input['NodePoolNodeConfigWorkloadMetadataConfigArgs'] workload_metadata_config: The workload metadata configuration for this node.
@@ -16284,6 +16483,8 @@ class NodePoolNodeConfigArgs:
             pulumi.set(__self__, "sole_tenant_config", sole_tenant_config)
         if spot is not None:
             pulumi.set(__self__, "spot", spot)
+        if storage_pools is not None:
+            pulumi.set(__self__, "storage_pools", storage_pools)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
         if taints is not None:
@@ -16738,6 +16939,18 @@ class NodePoolNodeConfigArgs:
     def spot(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "spot", value)
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
+    @storage_pools.setter
+    def storage_pools(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "storage_pools", value)
+
     @property
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -17484,6 +17697,10 @@ if not MYPY:
         """
         Set the CPU CFS quota period value 'cpu.cfs_period_us'.
         """
+        insecure_kubelet_readonly_port_enabled: NotRequired[pulumi.Input[str]]
+        """
+        Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
         pod_pids_limit: NotRequired[pulumi.Input[int]]
         """
         Controls the maximum number of processes allowed to run in a pod.
@@ -17497,11 +17714,13 @@ class NodePoolNodeConfigKubeletConfigArgs:
                  cpu_manager_policy: pulumi.Input[str],
                  cpu_cfs_quota: Optional[pulumi.Input[bool]] = None,
                  cpu_cfs_quota_period: Optional[pulumi.Input[str]] = None,
+                 insecure_kubelet_readonly_port_enabled: Optional[pulumi.Input[str]] = None,
                  pod_pids_limit: Optional[pulumi.Input[int]] = None):
         """
         :param pulumi.Input[str] cpu_manager_policy: Control the CPU management policy on the node.
         :param pulumi.Input[bool] cpu_cfs_quota: Enable CPU CFS quota enforcement for containers that specify CPU limits.
         :param pulumi.Input[str] cpu_cfs_quota_period: Set the CPU CFS quota period value 'cpu.cfs_period_us'.
+        :param pulumi.Input[str] insecure_kubelet_readonly_port_enabled: Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
         :param pulumi.Input[int] pod_pids_limit: Controls the maximum number of processes allowed to run in a pod.
         """
         pulumi.set(__self__, "cpu_manager_policy", cpu_manager_policy)
@@ -17509,6 +17728,8 @@ class NodePoolNodeConfigKubeletConfigArgs:
             pulumi.set(__self__, "cpu_cfs_quota", cpu_cfs_quota)
         if cpu_cfs_quota_period is not None:
             pulumi.set(__self__, "cpu_cfs_quota_period", cpu_cfs_quota_period)
+        if insecure_kubelet_readonly_port_enabled is not None:
+            pulumi.set(__self__, "insecure_kubelet_readonly_port_enabled", insecure_kubelet_readonly_port_enabled)
         if pod_pids_limit is not None:
             pulumi.set(__self__, "pod_pids_limit", pod_pids_limit)
 
@@ -17548,6 +17769,18 @@ class NodePoolNodeConfigKubeletConfigArgs:
     def cpu_cfs_quota_period(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "cpu_cfs_quota_period", value)
 
+    @property
+    @pulumi.getter(name="insecureKubeletReadonlyPortEnabled")
+    def insecure_kubelet_readonly_port_enabled(self) -> Optional[pulumi.Input[str]]:
+        """
+        Controls whether the kubelet read-only port is enabled. It is strongly recommended to set this to `FALSE`. Possible values: `TRUE`, `FALSE`.
+        """
+        return pulumi.get(self, "insecure_kubelet_readonly_port_enabled")
+
+    @insecure_kubelet_readonly_port_enabled.setter
+    def insecure_kubelet_readonly_port_enabled(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "insecure_kubelet_readonly_port_enabled", value)
+
     @property
     @pulumi.getter(name="podPidsLimit")
     def pod_pids_limit(self) -> Optional[pulumi.Input[int]]: