pulumi-gcp 8.1.0a1726293903__py3-none-any.whl → 8.2.0__py3-none-any.whl

pulumi_gcp/networksecurity/client_tls_policy.py

@@ -407,6 +407,14 @@ class ClientTlsPolicy(pulumi.CustomResource):
                  sni: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
+
+        To get more information about ClientTlsPolicy, see:
+
+        * [API documentation](https://cloud.google.com/traffic-director/docs/reference/network-security/rest/v1beta1/projects.locations.clientTlsPolicies)
+        * How-to Guides
+            * [Service Security](https://cloud.google.com/traffic-director/docs/security-use-cases)
+
         ## Example Usage
 
         ### Network Security Client Tls Policy Basic
@@ -440,18 +448,11 @@ class ClientTlsPolicy(pulumi.CustomResource):
                     "plugin_instance": "google_cloud_private_spiffe",
                 },
             },
-            server_validation_cas=[
-                {
-                    "grpc_endpoint": {
-                        "target_uri": "unix:mypath",
-                    },
-                },
-                {
-                    "grpc_endpoint": {
-                        "target_uri": "unix:mypath1",
-                    },
+            server_validation_cas=[{
+                "grpc_endpoint": {
+                    "target_uri": "unix:mypath",
                 },
-            ])
+            }])
         ```
 
         ## Import
@@ -505,6 +506,14 @@ class ClientTlsPolicy(pulumi.CustomResource):
                  args: Optional[ClientTlsPolicyArgs] = None,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
+
+        To get more information about ClientTlsPolicy, see:
+
+        * [API documentation](https://cloud.google.com/traffic-director/docs/reference/network-security/rest/v1beta1/projects.locations.clientTlsPolicies)
+        * How-to Guides
+            * [Service Security](https://cloud.google.com/traffic-director/docs/security-use-cases)
+
         ## Example Usage
 
         ### Network Security Client Tls Policy Basic
@@ -538,18 +547,11 @@ class ClientTlsPolicy(pulumi.CustomResource):
                     "plugin_instance": "google_cloud_private_spiffe",
                 },
             },
-            server_validation_cas=[
-                {
-                    "grpc_endpoint": {
-                        "target_uri": "unix:mypath",
-                    },
-                },
-                {
-                    "grpc_endpoint": {
-                        "target_uri": "unix:mypath1",
-                    },
+            server_validation_cas=[{
+                "grpc_endpoint": {
+                    "target_uri": "unix:mypath",
                 },
-            ])
+            }])
         ```
 
         ## Import

pulumi_gcp/networksecurity/server_tls_policy.py

@@ -419,6 +419,12 @@ class ServerTlsPolicy(pulumi.CustomResource):
                  server_certificate: Optional[pulumi.Input[Union['ServerTlsPolicyServerCertificateArgs', 'ServerTlsPolicyServerCertificateArgsDict']]] = None,
                  __props__=None):
         """
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
+
+        To get more information about ServerTlsPolicy, see:
+
+        * [API documentation](https://cloud.google.com/traffic-director/docs/reference/network-security/rest/v1beta1/projects.locations.serverTlsPolicies)
+
         ## Example Usage
 
         ### Network Security Server Tls Policy Basic
@@ -440,23 +446,11 @@ class ServerTlsPolicy(pulumi.CustomResource):
                 },
             },
             mtls_policy={
-                "client_validation_cas": [
-                    {
-                        "grpc_endpoint": {
-                            "target_uri": "unix:mypath",
-                        },
+                "client_validation_cas": [{
+                    "grpc_endpoint": {
+                        "target_uri": "unix:mypath",
                     },
-                    {
-                        "grpc_endpoint": {
-                            "target_uri": "unix:abc/mypath",
-                        },
-                    },
-                    {
-                        "certificate_provider_instance": {
-                            "plugin_instance": "google_cloud_private_spiffe",
-                        },
-                    },
-                ],
+                }],
             })
         ```
         ### Network Security Server Tls Policy Advanced
@@ -588,6 +582,12 @@ class ServerTlsPolicy(pulumi.CustomResource):
                  args: Optional[ServerTlsPolicyArgs] = None,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
+
+        To get more information about ServerTlsPolicy, see:
+
+        * [API documentation](https://cloud.google.com/traffic-director/docs/reference/network-security/rest/v1beta1/projects.locations.serverTlsPolicies)
+
         ## Example Usage
 
         ### Network Security Server Tls Policy Basic
@@ -609,23 +609,11 @@ class ServerTlsPolicy(pulumi.CustomResource):
                 },
             },
             mtls_policy={
-                "client_validation_cas": [
-                    {
-                        "grpc_endpoint": {
-                            "target_uri": "unix:mypath",
-                        },
+                "client_validation_cas": [{
+                    "grpc_endpoint": {
+                        "target_uri": "unix:mypath",
                     },
-                    {
-                        "grpc_endpoint": {
-                            "target_uri": "unix:abc/mypath",
-                        },
-                    },
-                    {
-                        "certificate_provider_instance": {
-                            "plugin_instance": "google_cloud_private_spiffe",
-                        },
-                    },
-                ],
+                }],
             })
         ```
         ### Network Security Server Tls Policy Advanced

pulumi_gcp/organizations/folder.py

@@ -21,18 +21,22 @@ class FolderArgs:
     def __init__(__self__, *,
                  display_name: pulumi.Input[str],
                  parent: pulumi.Input[str],
-                 deletion_protection: Optional[pulumi.Input[bool]] = None):
+                 deletion_protection: Optional[pulumi.Input[bool]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
         """
         The set of arguments for constructing a Folder resource.
         :param pulumi.Input[str] display_name: The folder’s display name.
                A folder’s display name must be unique amongst its siblings, e.g. no two folders with the same parent can share the same display name. The display name must start and end with a letter or digit, may contain letters, digits, spaces, hyphens and underscores and can be no longer than 30 characters.
         :param pulumi.Input[str] parent: The resource name of the parent Folder or Organization.
                Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         pulumi.set(__self__, "display_name", display_name)
         pulumi.set(__self__, "parent", parent)
         if deletion_protection is not None:
             pulumi.set(__self__, "deletion_protection", deletion_protection)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
 
     @property
     @pulumi.getter(name="displayName")
@@ -69,6 +73,18 @@ class FolderArgs:
     def deletion_protection(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "deletion_protection", value)
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
+        """
+        return pulumi.get(self, "tags")
+
+    @tags.setter
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "tags", value)
+
 
 @pulumi.input_type
 class _FolderState:
@@ -79,7 +95,8 @@ class _FolderState:
                  folder_id: Optional[pulumi.Input[str]] = None,
                  lifecycle_state: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
-                 parent: Optional[pulumi.Input[str]] = None):
+                 parent: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
         """
         Input properties used for looking up and filtering Folder resources.
         :param pulumi.Input[str] create_time: Timestamp when the Folder was created. Assigned by the server.
@@ -91,6 +108,7 @@ class _FolderState:
         :param pulumi.Input[str] name: The resource name of the Folder. Its format is folders/{folder_id}.
         :param pulumi.Input[str] parent: The resource name of the parent Folder or Organization.
                Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         if create_time is not None:
             pulumi.set(__self__, "create_time", create_time)
@@ -106,6 +124,8 @@ class _FolderState:
             pulumi.set(__self__, "name", name)
         if parent is not None:
             pulumi.set(__self__, "parent", parent)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
 
     @property
     @pulumi.getter(name="createTime")
@@ -191,6 +211,18 @@ class _FolderState:
     def parent(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "parent", value)
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
+        """
+        return pulumi.get(self, "tags")
+
+    @tags.setter
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "tags", value)
+
 
 class Folder(pulumi.CustomResource):
     @overload
@@ -200,6 +232,7 @@ class Folder(pulumi.CustomResource):
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  __props__=None):
         """
         Allows management of a Google Cloud Platform folder. For more information see
@@ -216,21 +249,7 @@ class Folder(pulumi.CustomResource):
         [Access Control for Folders Using IAM](https://cloud.google.com/resource-manager/docs/access-control-folders)
         doc for more information.
 
-        ## Example Usage
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        # Top-level folder under an organization.
-        department1 = gcp.organizations.Folder("department1",
-            display_name="Department 1",
-            parent="organizations/1234567")
-        # Folder nested under another folder.
-        team_abc = gcp.organizations.Folder("team-abc",
-            display_name="Team ABC",
-            parent=department1.name)
-        ```
+        > It may take a while for the attached tag bindings to be deleted after the folder is scheduled to be deleted.
 
         ## Import
 
@@ -256,6 +275,7 @@ class Folder(pulumi.CustomResource):
                A folder’s display name must be unique amongst its siblings, e.g. no two folders with the same parent can share the same display name. The display name must start and end with a letter or digit, may contain letters, digits, spaces, hyphens and underscores and can be no longer than 30 characters.
         :param pulumi.Input[str] parent: The resource name of the parent Folder or Organization.
                Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         ...
     @overload
@@ -278,21 +298,7 @@ class Folder(pulumi.CustomResource):
         [Access Control for Folders Using IAM](https://cloud.google.com/resource-manager/docs/access-control-folders)
         doc for more information.
 
-        ## Example Usage
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        # Top-level folder under an organization.
-        department1 = gcp.organizations.Folder("department1",
-            display_name="Department 1",
-            parent="organizations/1234567")
-        # Folder nested under another folder.
-        team_abc = gcp.organizations.Folder("team-abc",
-            display_name="Team ABC",
-            parent=department1.name)
-        ```
+        > It may take a while for the attached tag bindings to be deleted after the folder is scheduled to be deleted.
 
         ## Import
 
@@ -330,6 +336,7 @@ class Folder(pulumi.CustomResource):
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  display_name: Optional[pulumi.Input[str]] = None,
                  parent: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -346,6 +353,7 @@ class Folder(pulumi.CustomResource):
             if parent is None and not opts.urn:
                 raise TypeError("Missing required property 'parent'")
             __props__.__dict__["parent"] = parent
+            __props__.__dict__["tags"] = tags
             __props__.__dict__["create_time"] = None
             __props__.__dict__["folder_id"] = None
             __props__.__dict__["lifecycle_state"] = None
@@ -366,7 +374,8 @@ class Folder(pulumi.CustomResource):
             folder_id: Optional[pulumi.Input[str]] = None,
             lifecycle_state: Optional[pulumi.Input[str]] = None,
             name: Optional[pulumi.Input[str]] = None,
-            parent: Optional[pulumi.Input[str]] = None) -> 'Folder':
+            parent: Optional[pulumi.Input[str]] = None,
+            tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None) -> 'Folder':
         """
         Get an existing Folder resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -383,6 +392,7 @@ class Folder(pulumi.CustomResource):
         :param pulumi.Input[str] name: The resource name of the Folder. Its format is folders/{folder_id}.
         :param pulumi.Input[str] parent: The resource name of the parent Folder or Organization.
                Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -395,6 +405,7 @@ class Folder(pulumi.CustomResource):
         __props__.__dict__["lifecycle_state"] = lifecycle_state
         __props__.__dict__["name"] = name
         __props__.__dict__["parent"] = parent
+        __props__.__dict__["tags"] = tags
         return Folder(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -453,3 +464,11 @@ class Folder(pulumi.CustomResource):
         """
         return pulumi.get(self, "parent")
 
+    @property
+    @pulumi.getter
+    def tags(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
+        """
+        return pulumi.get(self, "tags")
+

pulumi_gcp/organizations/get_project.py

@@ -26,7 +26,7 @@ class GetProjectResult:
     """
     A collection of values returned by getProject.
     """
-    def __init__(__self__, auto_create_network=None, billing_account=None, deletion_policy=None, effective_labels=None, folder_id=None, id=None, labels=None, name=None, number=None, org_id=None, project_id=None, pulumi_labels=None):
+    def __init__(__self__, auto_create_network=None, billing_account=None, deletion_policy=None, effective_labels=None, folder_id=None, id=None, labels=None, name=None, number=None, org_id=None, project_id=None, pulumi_labels=None, tags=None):
         if auto_create_network and not isinstance(auto_create_network, bool):
             raise TypeError("Expected argument 'auto_create_network' to be a bool")
         pulumi.set(__self__, "auto_create_network", auto_create_network)
@@ -63,6 +63,9 @@ class GetProjectResult:
         if pulumi_labels and not isinstance(pulumi_labels, dict):
             raise TypeError("Expected argument 'pulumi_labels' to be a dict")
         pulumi.set(__self__, "pulumi_labels", pulumi_labels)
+        if tags and not isinstance(tags, dict):
+            raise TypeError("Expected argument 'tags' to be a dict")
+        pulumi.set(__self__, "tags", tags)
 
     @property
     @pulumi.getter(name="autoCreateNetwork")
@@ -130,6 +133,11 @@ class GetProjectResult:
     def pulumi_labels(self) -> Mapping[str, str]:
         return pulumi.get(self, "pulumi_labels")
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Mapping[str, str]:
+        return pulumi.get(self, "tags")
+
 
 class AwaitableGetProjectResult(GetProjectResult):
     # pylint: disable=using-constant-test
@@ -148,7 +156,8 @@ class AwaitableGetProjectResult(GetProjectResult):
             number=self.number,
             org_id=self.org_id,
             project_id=self.project_id,
-            pulumi_labels=self.pulumi_labels)
+            pulumi_labels=self.pulumi_labels,
+            tags=self.tags)
 
 
 def get_project(project_id: Optional[str] = None,
@@ -188,7 +197,8 @@ def get_project(project_id: Optional[str] = None,
         number=pulumi.get(__ret__, 'number'),
         org_id=pulumi.get(__ret__, 'org_id'),
         project_id=pulumi.get(__ret__, 'project_id'),
-        pulumi_labels=pulumi.get(__ret__, 'pulumi_labels'))
+        pulumi_labels=pulumi.get(__ret__, 'pulumi_labels'),
+        tags=pulumi.get(__ret__, 'tags'))
 
 
 @_utilities.lift_output_func(get_project)

pulumi_gcp/organizations/project.py

@@ -26,7 +26,8 @@ class ProjectArgs:
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  org_id: Optional[pulumi.Input[str]] = None,
-                 project_id: Optional[pulumi.Input[str]] = None):
+                 project_id: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
         """
         The set of arguments for constructing a Project resource.
         :param pulumi.Input[bool] auto_create_network: Create the 'default' network automatically. Default true. If set to false, the default network will be deleted. Note
@@ -53,6 +54,7 @@ class ProjectArgs:
                this forces the project to be migrated to the newly specified
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         if auto_create_network is not None:
             pulumi.set(__self__, "auto_create_network", auto_create_network)
@@ -70,6 +72,8 @@ class ProjectArgs:
             pulumi.set(__self__, "org_id", org_id)
         if project_id is not None:
             pulumi.set(__self__, "project_id", project_id)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
 
     @property
     @pulumi.getter(name="autoCreateNetwork")
@@ -181,6 +185,18 @@ class ProjectArgs:
     def project_id(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "project_id", value)
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
+        """
+        return pulumi.get(self, "tags")
+
+    @tags.setter
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "tags", value)
+
 
 @pulumi.input_type
 class _ProjectState:
@@ -195,7 +211,8 @@ class _ProjectState:
                  number: Optional[pulumi.Input[str]] = None,
                  org_id: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
-                 pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
+                 pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
         """
         Input properties used for looking up and filtering Project resources.
         :param pulumi.Input[bool] auto_create_network: Create the 'default' network automatically. Default true. If set to false, the default network will be deleted. Note
@@ -225,6 +242,7 @@ class _ProjectState:
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         if auto_create_network is not None:
             pulumi.set(__self__, "auto_create_network", auto_create_network)
@@ -248,6 +266,8 @@ class _ProjectState:
             pulumi.set(__self__, "project_id", project_id)
         if pulumi_labels is not None:
             pulumi.set(__self__, "pulumi_labels", pulumi_labels)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
 
     @property
     @pulumi.getter(name="autoCreateNetwork")
@@ -395,6 +415,18 @@ class _ProjectState:
     def pulumi_labels(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
         pulumi.set(self, "pulumi_labels", value)
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
+        """
+        return pulumi.get(self, "tags")
+
+    @tags.setter
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "tags", value)
+
 
 class Project(pulumi.CustomResource):
     @overload
@@ -409,6 +441,7 @@ class Project(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  org_id: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  __props__=None):
         """
         Allows creation and management of a Google Cloud Platform project.
@@ -423,6 +456,10 @@ class Project(pulumi.CustomResource):
 
         > This resource reads the specified billing account on every pulumi up and plan operation so you must have permissions on the specified billing account.
 
+        > It is recommended to use the `constraints/compute.skipDefaultNetworkCreation` [constraint](https://www.terraform.io/docs/providers/google/r/google_organization_policy.html) to remove the default network instead of setting `auto_create_network` to false, when possible.
+
+        > It may take a while for the attached tag bindings to be deleted after the project is scheduled to be deleted.
+
         To get more information about projects, see:
 
         * [API documentation](https://cloud.google.com/resource-manager/reference/rest/v1/projects)
@@ -456,6 +493,21 @@ class Project(pulumi.CustomResource):
             folder_id=department1.name)
         ```
 
+        To create a project with a tag
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        my_project = gcp.organizations.Project("my_project",
+            name="My Project",
+            project_id="your-project-id",
+            org_id="1234567",
+            tags={
+                "1234567/env": "staging",
+            })
+        ```
+
         ## Import
 
         Projects can be imported using the `project_id`, e.g.
@@ -494,6 +546,7 @@ class Project(pulumi.CustomResource):
                this forces the project to be migrated to the newly specified
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         ...
     @overload
@@ -514,6 +567,10 @@ class Project(pulumi.CustomResource):
 
         > This resource reads the specified billing account on every pulumi up and plan operation so you must have permissions on the specified billing account.
 
+        > It is recommended to use the `constraints/compute.skipDefaultNetworkCreation` [constraint](https://www.terraform.io/docs/providers/google/r/google_organization_policy.html) to remove the default network instead of setting `auto_create_network` to false, when possible.
+
+        > It may take a while for the attached tag bindings to be deleted after the project is scheduled to be deleted.
+
         To get more information about projects, see:
 
         * [API documentation](https://cloud.google.com/resource-manager/reference/rest/v1/projects)
@@ -547,6 +604,21 @@ class Project(pulumi.CustomResource):
             folder_id=department1.name)
         ```
 
+        To create a project with a tag
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        my_project = gcp.organizations.Project("my_project",
+            name="My Project",
+            project_id="your-project-id",
+            org_id="1234567",
+            tags={
+                "1234567/env": "staging",
+            })
+        ```
+
         ## Import
 
         Projects can be imported using the `project_id`, e.g.
@@ -582,6 +654,7 @@ class Project(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  org_id: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -599,6 +672,7 @@ class Project(pulumi.CustomResource):
             __props__.__dict__["name"] = name
             __props__.__dict__["org_id"] = org_id
             __props__.__dict__["project_id"] = project_id
+            __props__.__dict__["tags"] = tags
             __props__.__dict__["effective_labels"] = None
             __props__.__dict__["number"] = None
             __props__.__dict__["pulumi_labels"] = None
@@ -624,7 +698,8 @@ class Project(pulumi.CustomResource):
             number: Optional[pulumi.Input[str]] = None,
             org_id: Optional[pulumi.Input[str]] = None,
             project_id: Optional[pulumi.Input[str]] = None,
-            pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None) -> 'Project':
+            pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+            tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None) -> 'Project':
         """
         Get an existing Project resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -659,6 +734,7 @@ class Project(pulumi.CustomResource):
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -675,6 +751,7 @@ class Project(pulumi.CustomResource):
         __props__.__dict__["org_id"] = org_id
         __props__.__dict__["project_id"] = project_id
         __props__.__dict__["pulumi_labels"] = pulumi_labels
+        __props__.__dict__["tags"] = tags
         return Project(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -779,3 +856,11 @@ class Project(pulumi.CustomResource):
         """
         return pulumi.get(self, "pulumi_labels")
 
+    @property
+    @pulumi.getter
+    def tags(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
+        """
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
+        """
+        return pulumi.get(self, "tags")
+