pulumi-gcp 8.10.0a1731739693__py3-none-any.whl → 8.10.0a1732125494__py3-none-any.whl

pulumi_gcp/securesourcemanager/instance.py

@@ -26,7 +26,8 @@ class InstanceArgs:
                  kms_key: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  private_config: Optional[pulumi.Input['InstancePrivateConfigArgs']] = None,
-                 project: Optional[pulumi.Input[str]] = None):
+                 project: Optional[pulumi.Input[str]] = None,
+                 workforce_identity_federation_config: Optional[pulumi.Input['InstanceWorkforceIdentityFederationConfigArgs']] = None):
         """
         The set of arguments for constructing a Instance resource.
         :param pulumi.Input[str] instance_id: The name for the Instance.
@@ -43,6 +44,9 @@ class InstanceArgs:
                Structure is documented below.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
+        :param pulumi.Input['InstanceWorkforceIdentityFederationConfigArgs'] workforce_identity_federation_config: Configuration for Workforce Identity Federation to support third party identity provider.
+               If unset, defaults to the Google OIDC IdP.
+               Structure is documented below.
         """
         pulumi.set(__self__, "instance_id", instance_id)
         pulumi.set(__self__, "location", location)
@@ -54,6 +58,8 @@ class InstanceArgs:
             pulumi.set(__self__, "private_config", private_config)
         if project is not None:
             pulumi.set(__self__, "project", project)
+        if workforce_identity_federation_config is not None:
+            pulumi.set(__self__, "workforce_identity_federation_config", workforce_identity_federation_config)
 
     @property
     @pulumi.getter(name="instanceId")
@@ -135,6 +141,20 @@ class InstanceArgs:
     def project(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "project", value)
 
+    @property
+    @pulumi.getter(name="workforceIdentityFederationConfig")
+    def workforce_identity_federation_config(self) -> Optional[pulumi.Input['InstanceWorkforceIdentityFederationConfigArgs']]:
+        """
+        Configuration for Workforce Identity Federation to support third party identity provider.
+        If unset, defaults to the Google OIDC IdP.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "workforce_identity_federation_config")
+
+    @workforce_identity_federation_config.setter
+    def workforce_identity_federation_config(self, value: Optional[pulumi.Input['InstanceWorkforceIdentityFederationConfigArgs']]):
+        pulumi.set(self, "workforce_identity_federation_config", value)
+
 
 @pulumi.input_type
 class _InstanceState:
@@ -152,7 +172,8 @@ class _InstanceState:
                  pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  state: Optional[pulumi.Input[str]] = None,
                  state_note: Optional[pulumi.Input[str]] = None,
-                 update_time: Optional[pulumi.Input[str]] = None):
+                 update_time: Optional[pulumi.Input[str]] = None,
+                 workforce_identity_federation_config: Optional[pulumi.Input['InstanceWorkforceIdentityFederationConfigArgs']] = None):
         """
         Input properties used for looking up and filtering Instance resources.
         :param pulumi.Input[str] create_time: Time the Instance was created in UTC.
@@ -179,6 +200,9 @@ class _InstanceState:
         :param pulumi.Input[str] state: The current state of the Instance.
         :param pulumi.Input[str] state_note: Provides information about the current instance state.
         :param pulumi.Input[str] update_time: Time the Instance was updated in UTC.
+        :param pulumi.Input['InstanceWorkforceIdentityFederationConfigArgs'] workforce_identity_federation_config: Configuration for Workforce Identity Federation to support third party identity provider.
+               If unset, defaults to the Google OIDC IdP.
+               Structure is documented below.
         """
         if create_time is not None:
             pulumi.set(__self__, "create_time", create_time)
@@ -208,6 +232,8 @@ class _InstanceState:
             pulumi.set(__self__, "state_note", state_note)
         if update_time is not None:
             pulumi.set(__self__, "update_time", update_time)
+        if workforce_identity_federation_config is not None:
+            pulumi.set(__self__, "workforce_identity_federation_config", workforce_identity_federation_config)
 
     @property
     @pulumi.getter(name="createTime")
@@ -387,6 +413,20 @@ class _InstanceState:
     def update_time(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "update_time", value)
 
+    @property
+    @pulumi.getter(name="workforceIdentityFederationConfig")
+    def workforce_identity_federation_config(self) -> Optional[pulumi.Input['InstanceWorkforceIdentityFederationConfigArgs']]:
+        """
+        Configuration for Workforce Identity Federation to support third party identity provider.
+        If unset, defaults to the Google OIDC IdP.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "workforce_identity_federation_config")
+
+    @workforce_identity_federation_config.setter
+    def workforce_identity_federation_config(self, value: Optional[pulumi.Input['InstanceWorkforceIdentityFederationConfigArgs']]):
+        pulumi.set(self, "workforce_identity_federation_config", value)
+
 
 class Instance(pulumi.CustomResource):
     @overload
@@ -399,6 +439,7 @@ class Instance(pulumi.CustomResource):
                  location: Optional[pulumi.Input[str]] = None,
                  private_config: Optional[pulumi.Input[Union['InstancePrivateConfigArgs', 'InstancePrivateConfigArgsDict']]] = None,
                  project: Optional[pulumi.Input[str]] = None,
+                 workforce_identity_federation_config: Optional[pulumi.Input[Union['InstanceWorkforceIdentityFederationConfigArgs', 'InstanceWorkforceIdentityFederationConfigArgsDict']]] = None,
                  __props__=None):
         """
         Instances are deployed to an available Google Cloud region and are accessible via their web interface.
@@ -776,6 +817,19 @@ class Instance(pulumi.CustomResource):
             managed_zone=private_zone.name,
             rrdatas=[fw_rule_service_attachment.ip_address])
         ```
+        ### Secure Source Manager Instance Workforce Identity Federation
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.securesourcemanager.Instance("default",
+            location="us-central1",
+            instance_id="my-instance",
+            workforce_identity_federation_config={
+                "enabled": True,
+            })
+        ```
 
         ## Import
 
@@ -823,6 +877,9 @@ class Instance(pulumi.CustomResource):
                Structure is documented below.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
+        :param pulumi.Input[Union['InstanceWorkforceIdentityFederationConfigArgs', 'InstanceWorkforceIdentityFederationConfigArgsDict']] workforce_identity_federation_config: Configuration for Workforce Identity Federation to support third party identity provider.
+               If unset, defaults to the Google OIDC IdP.
+               Structure is documented below.
         """
         ...
     @overload
@@ -1206,6 +1263,19 @@ class Instance(pulumi.CustomResource):
             managed_zone=private_zone.name,
             rrdatas=[fw_rule_service_attachment.ip_address])
         ```
+        ### Secure Source Manager Instance Workforce Identity Federation
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.securesourcemanager.Instance("default",
+            location="us-central1",
+            instance_id="my-instance",
+            workforce_identity_federation_config={
+                "enabled": True,
+            })
+        ```
 
         ## Import
 
@@ -1258,6 +1328,7 @@ class Instance(pulumi.CustomResource):
                  location: Optional[pulumi.Input[str]] = None,
                  private_config: Optional[pulumi.Input[Union['InstancePrivateConfigArgs', 'InstancePrivateConfigArgsDict']]] = None,
                  project: Optional[pulumi.Input[str]] = None,
+                 workforce_identity_federation_config: Optional[pulumi.Input[Union['InstanceWorkforceIdentityFederationConfigArgs', 'InstanceWorkforceIdentityFederationConfigArgsDict']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -1277,6 +1348,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["location"] = location
             __props__.__dict__["private_config"] = private_config
             __props__.__dict__["project"] = project
+            __props__.__dict__["workforce_identity_federation_config"] = workforce_identity_federation_config
             __props__.__dict__["create_time"] = None
             __props__.__dict__["effective_labels"] = None
             __props__.__dict__["host_configs"] = None
@@ -1310,7 +1382,8 @@ class Instance(pulumi.CustomResource):
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             state: Optional[pulumi.Input[str]] = None,
             state_note: Optional[pulumi.Input[str]] = None,
-            update_time: Optional[pulumi.Input[str]] = None) -> 'Instance':
+            update_time: Optional[pulumi.Input[str]] = None,
+            workforce_identity_federation_config: Optional[pulumi.Input[Union['InstanceWorkforceIdentityFederationConfigArgs', 'InstanceWorkforceIdentityFederationConfigArgsDict']]] = None) -> 'Instance':
         """
         Get an existing Instance resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -1342,6 +1415,9 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] state: The current state of the Instance.
         :param pulumi.Input[str] state_note: Provides information about the current instance state.
         :param pulumi.Input[str] update_time: Time the Instance was updated in UTC.
+        :param pulumi.Input[Union['InstanceWorkforceIdentityFederationConfigArgs', 'InstanceWorkforceIdentityFederationConfigArgsDict']] workforce_identity_federation_config: Configuration for Workforce Identity Federation to support third party identity provider.
+               If unset, defaults to the Google OIDC IdP.
+               Structure is documented below.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -1361,6 +1437,7 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["state"] = state
         __props__.__dict__["state_note"] = state_note
         __props__.__dict__["update_time"] = update_time
+        __props__.__dict__["workforce_identity_federation_config"] = workforce_identity_federation_config
         return Instance(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -1485,3 +1562,13 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "update_time")
 
+    @property
+    @pulumi.getter(name="workforceIdentityFederationConfig")
+    def workforce_identity_federation_config(self) -> pulumi.Output[Optional['outputs.InstanceWorkforceIdentityFederationConfig']]:
+        """
+        Configuration for Workforce Identity Federation to support third party identity provider.
+        If unset, defaults to the Google OIDC IdP.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "workforce_identity_federation_config")
+

pulumi_gcp/securesourcemanager/outputs.py

@@ -19,6 +19,7 @@ __all__ = [
     'InstanceIamBindingCondition',
     'InstanceIamMemberCondition',
     'InstancePrivateConfig',
+    'InstanceWorkforceIdentityFederationConfig',
     'RepositoryIamBindingCondition',
     'RepositoryIamMemberCondition',
     'RepositoryInitialConfig',
@@ -241,6 +242,24 @@ class InstancePrivateConfig(dict):
         return pulumi.get(self, "ssh_service_attachment")
 
 
+@pulumi.output_type
+class InstanceWorkforceIdentityFederationConfig(dict):
+    def __init__(__self__, *,
+                 enabled: bool):
+        """
+        :param bool enabled: 'Whether Workforce Identity Federation is enabled.'
+        """
+        pulumi.set(__self__, "enabled", enabled)
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> bool:
+        """
+        'Whether Workforce Identity Federation is enabled.'
+        """
+        return pulumi.get(self, "enabled")
+
+
 @pulumi.output_type
 class RepositoryIamBindingCondition(dict):
     def __init__(__self__, *,

pulumi_gcp/spanner/database.py

@@ -47,8 +47,8 @@ class DatabaseArgs:
                in state, a `destroy` or `update` that would delete the instance will fail.
         :param pulumi.Input['DatabaseEncryptionConfigArgs'] encryption_config: Encryption configuration for the database
                Structure is documented below.
-        :param pulumi.Input[str] name: A unique identifier for the database, which cannot be changed after
-               the instance is created. Values are of the form [a-z][-a-z0-9]*[a-z0-9].
+        :param pulumi.Input[str] name: A unique identifier for the database, which cannot be changed after the
+               instance is created. Values are of the form `[a-z][-_a-z0-9]*[a-z0-9]`.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] version_retention_period: The retention period for the database. The retention period must be between 1 hour
@@ -158,8 +158,8 @@ class DatabaseArgs:
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
         """
-        A unique identifier for the database, which cannot be changed after
-        the instance is created. Values are of the form [a-z][-a-z0-9]*[a-z0-9].
+        A unique identifier for the database, which cannot be changed after the
+        instance is created. Values are of the form `[a-z][-_a-z0-9]*[a-z0-9]`.
         """
         return pulumi.get(self, "name")
 
@@ -227,8 +227,8 @@ class _DatabaseState:
                
                
                - - -
-        :param pulumi.Input[str] name: A unique identifier for the database, which cannot be changed after
-               the instance is created. Values are of the form [a-z][-a-z0-9]*[a-z0-9].
+        :param pulumi.Input[str] name: A unique identifier for the database, which cannot be changed after the
+               instance is created. Values are of the form `[a-z][-_a-z0-9]*[a-z0-9]`.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] state: An explanation of the status of the database.
@@ -342,8 +342,8 @@ class _DatabaseState:
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
         """
-        A unique identifier for the database, which cannot be changed after
-        the instance is created. Values are of the form [a-z][-a-z0-9]*[a-z0-9].
+        A unique identifier for the database, which cannot be changed after the
+        instance is created. Values are of the form `[a-z][-_a-z0-9]*[a-z0-9]`.
         """
         return pulumi.get(self, "name")
 
@@ -493,8 +493,8 @@ class Database(pulumi.CustomResource):
                
                
                - - -
-        :param pulumi.Input[str] name: A unique identifier for the database, which cannot be changed after
-               the instance is created. Values are of the form [a-z][-a-z0-9]*[a-z0-9].
+        :param pulumi.Input[str] name: A unique identifier for the database, which cannot be changed after the
+               instance is created. Values are of the form `[a-z][-_a-z0-9]*[a-z0-9]`.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] version_retention_period: The retention period for the database. The retention period must be between 1 hour
@@ -664,8 +664,8 @@ class Database(pulumi.CustomResource):
                
                
                - - -
-        :param pulumi.Input[str] name: A unique identifier for the database, which cannot be changed after
-               the instance is created. Values are of the form [a-z][-a-z0-9]*[a-z0-9].
+        :param pulumi.Input[str] name: A unique identifier for the database, which cannot be changed after the
+               instance is created. Values are of the form `[a-z][-_a-z0-9]*[a-z0-9]`.
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] state: An explanation of the status of the database.
@@ -750,8 +750,8 @@ class Database(pulumi.CustomResource):
     @pulumi.getter
     def name(self) -> pulumi.Output[str]:
         """
-        A unique identifier for the database, which cannot be changed after
-        the instance is created. Values are of the form [a-z][-a-z0-9]*[a-z0-9].
+        A unique identifier for the database, which cannot be changed after the
+        instance is created. Values are of the form `[a-z][-_a-z0-9]*[a-z0-9]`.
         """
         return pulumi.get(self, "name")
 

pulumi_gcp/sql/_inputs.py

@@ -49,6 +49,8 @@ __all__ = [
     'DatabaseInstanceSettingsIpConfigurationAuthorizedNetworkArgsDict',
     'DatabaseInstanceSettingsIpConfigurationPscConfigArgs',
     'DatabaseInstanceSettingsIpConfigurationPscConfigArgsDict',
+    'DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgs',
+    'DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgsDict',
     'DatabaseInstanceSettingsLocationPreferenceArgs',
     'DatabaseInstanceSettingsLocationPreferenceArgsDict',
     'DatabaseInstanceSettingsMaintenanceWindowArgs',
@@ -2104,6 +2106,10 @@ if not MYPY:
         """
         List of consumer projects that are allow-listed for PSC connections to this instance. This instance can be connected to with PSC from any network in these projects. Each consumer project in this list may be represented by a project number (numeric) or by a project id (alphanumeric).
         """
+        psc_auto_connections: NotRequired[pulumi.Input[Sequence[pulumi.Input['DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgsDict']]]]
+        """
+        A comma-separated list of networks or a comma-separated list of network-project pairs. Each project in this list is represented by a project number (numeric) or by a project ID (alphanumeric). This allows Private Service Connect connections to be created automatically for the specified networks.
+        """
         psc_enabled: NotRequired[pulumi.Input[bool]]
         """
         Whether PSC connectivity is enabled for this instance.
@@ -2115,13 +2121,17 @@ elif False:
 class DatabaseInstanceSettingsIpConfigurationPscConfigArgs:
     def __init__(__self__, *,
                  allowed_consumer_projects: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 psc_auto_connections: Optional[pulumi.Input[Sequence[pulumi.Input['DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgs']]]] = None,
                  psc_enabled: Optional[pulumi.Input[bool]] = None):
         """
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_consumer_projects: List of consumer projects that are allow-listed for PSC connections to this instance. This instance can be connected to with PSC from any network in these projects. Each consumer project in this list may be represented by a project number (numeric) or by a project id (alphanumeric).
+        :param pulumi.Input[Sequence[pulumi.Input['DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgs']]] psc_auto_connections: A comma-separated list of networks or a comma-separated list of network-project pairs. Each project in this list is represented by a project number (numeric) or by a project ID (alphanumeric). This allows Private Service Connect connections to be created automatically for the specified networks.
         :param pulumi.Input[bool] psc_enabled: Whether PSC connectivity is enabled for this instance.
         """
         if allowed_consumer_projects is not None:
             pulumi.set(__self__, "allowed_consumer_projects", allowed_consumer_projects)
+        if psc_auto_connections is not None:
+            pulumi.set(__self__, "psc_auto_connections", psc_auto_connections)
         if psc_enabled is not None:
             pulumi.set(__self__, "psc_enabled", psc_enabled)
 
@@ -2137,6 +2147,18 @@ class DatabaseInstanceSettingsIpConfigurationPscConfigArgs:
     def allowed_consumer_projects(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "allowed_consumer_projects", value)
 
+    @property
+    @pulumi.getter(name="pscAutoConnections")
+    def psc_auto_connections(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgs']]]]:
+        """
+        A comma-separated list of networks or a comma-separated list of network-project pairs. Each project in this list is represented by a project number (numeric) or by a project ID (alphanumeric). This allows Private Service Connect connections to be created automatically for the specified networks.
+        """
+        return pulumi.get(self, "psc_auto_connections")
+
+    @psc_auto_connections.setter
+    def psc_auto_connections(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgs']]]]):
+        pulumi.set(self, "psc_auto_connections", value)
+
     @property
     @pulumi.getter(name="pscEnabled")
     def psc_enabled(self) -> Optional[pulumi.Input[bool]]:
@@ -2150,6 +2172,57 @@ class DatabaseInstanceSettingsIpConfigurationPscConfigArgs:
         pulumi.set(self, "psc_enabled", value)
 
 
+if not MYPY:
+    class DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgsDict(TypedDict):
+        consumer_network: pulumi.Input[str]
+        """
+        "The consumer network of this consumer endpoint. This must be a resource path that includes both the host project and the network name. For example, `projects/project1/global/networks/network1`. The consumer host project of this network might be different from the consumer service project."
+        """
+        consumer_service_project_id: NotRequired[pulumi.Input[str]]
+        """
+        The project ID of consumer service project of this consumer endpoint.
+        """
+elif False:
+    DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DatabaseInstanceSettingsIpConfigurationPscConfigPscAutoConnectionArgs:
+    def __init__(__self__, *,
+                 consumer_network: pulumi.Input[str],
+                 consumer_service_project_id: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] consumer_network: "The consumer network of this consumer endpoint. This must be a resource path that includes both the host project and the network name. For example, `projects/project1/global/networks/network1`. The consumer host project of this network might be different from the consumer service project."
+        :param pulumi.Input[str] consumer_service_project_id: The project ID of consumer service project of this consumer endpoint.
+        """
+        pulumi.set(__self__, "consumer_network", consumer_network)
+        if consumer_service_project_id is not None:
+            pulumi.set(__self__, "consumer_service_project_id", consumer_service_project_id)
+
+    @property
+    @pulumi.getter(name="consumerNetwork")
+    def consumer_network(self) -> pulumi.Input[str]:
+        """
+        "The consumer network of this consumer endpoint. This must be a resource path that includes both the host project and the network name. For example, `projects/project1/global/networks/network1`. The consumer host project of this network might be different from the consumer service project."
+        """
+        return pulumi.get(self, "consumer_network")
+
+    @consumer_network.setter
+    def consumer_network(self, value: pulumi.Input[str]):
+        pulumi.set(self, "consumer_network", value)
+
+    @property
+    @pulumi.getter(name="consumerServiceProjectId")
+    def consumer_service_project_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The project ID of consumer service project of this consumer endpoint.
+        """
+        return pulumi.get(self, "consumer_service_project_id")
+
+    @consumer_service_project_id.setter
+    def consumer_service_project_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "consumer_service_project_id", value)
+
+
 if not MYPY:
     class DatabaseInstanceSettingsLocationPreferenceArgsDict(TypedDict):
         follow_gae_application: NotRequired[pulumi.Input[str]]

pulumi_gcp/sql/database_instance.py

@@ -943,6 +943,36 @@ class DatabaseInstance(pulumi.CustomResource):
             })
         ```
 
+        ### Cloud SQL Instance with PSC auto connections
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        main = gcp.sql.DatabaseInstance("main",
+            name="psc-enabled-main-instance",
+            database_version="MYSQL_8_0",
+            settings={
+                "tier": "db-f1-micro",
+                "ip_configuration": {
+                    "psc_configs": [{
+                        "psc_enabled": True,
+                        "allowed_consumer_projects": ["allowed-consumer-project-name"],
+                        "psc_auto_connections": [{
+                            "consumer_network": "network-name",
+                            "consumer_service_project_id": "project-id",
+                        }],
+                    }],
+                    "ipv4_enabled": False,
+                },
+                "backup_configuration": {
+                    "enabled": True,
+                    "binary_log_enabled": True,
+                },
+                "availability_type": "REGIONAL",
+            })
+        ```
+
         ## Switchover (SQL Server Only)
 
         Users can perform a switchover on any direct `cascadable` replica by following the steps below.
@@ -1171,6 +1201,36 @@ class DatabaseInstance(pulumi.CustomResource):
             })
         ```
 
+        ### Cloud SQL Instance with PSC auto connections
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        main = gcp.sql.DatabaseInstance("main",
+            name="psc-enabled-main-instance",
+            database_version="MYSQL_8_0",
+            settings={
+                "tier": "db-f1-micro",
+                "ip_configuration": {
+                    "psc_configs": [{
+                        "psc_enabled": True,
+                        "allowed_consumer_projects": ["allowed-consumer-project-name"],
+                        "psc_auto_connections": [{
+                            "consumer_network": "network-name",
+                            "consumer_service_project_id": "project-id",
+                        }],
+                    }],
+                    "ipv4_enabled": False,
+                },
+                "backup_configuration": {
+                    "enabled": True,
+                    "binary_log_enabled": True,
+                },
+                "availability_type": "REGIONAL",
+            })
+        ```
+
         ## Switchover (SQL Server Only)
 
         Users can perform a switchover on any direct `cascadable` replica by following the steps below.