pulumi-gcp 8.11.0a1734157575__py3-none-any.whl → 8.11.0a1734385115__py3-none-any.whl

pulumi_gcp/gemini/repository_group_iam_policy.py

@@ -0,0 +1,443 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+
+__all__ = ['RepositoryGroupIamPolicyArgs', 'RepositoryGroupIamPolicy']
+
+@pulumi.input_type
+class RepositoryGroupIamPolicyArgs:
+    def __init__(__self__, *,
+                 code_repository_index: pulumi.Input[str],
+                 policy_data: pulumi.Input[str],
+                 repository_group_id: pulumi.Input[str],
+                 location: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None):
+        """
+        The set of arguments for constructing a RepositoryGroupIamPolicy resource.
+        :param pulumi.Input[str] policy_data: The policy data generated by
+               a `organizations_get_iam_policy` data source.
+        :param pulumi.Input[str] location: The location of the Code Repository Index, for example `us-central1`. Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+               location is specified, it is taken from the provider configuration.
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        """
+        pulumi.set(__self__, "code_repository_index", code_repository_index)
+        pulumi.set(__self__, "policy_data", policy_data)
+        pulumi.set(__self__, "repository_group_id", repository_group_id)
+        if location is not None:
+            pulumi.set(__self__, "location", location)
+        if project is not None:
+            pulumi.set(__self__, "project", project)
+
+    @property
+    @pulumi.getter(name="codeRepositoryIndex")
+    def code_repository_index(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "code_repository_index")
+
+    @code_repository_index.setter
+    def code_repository_index(self, value: pulumi.Input[str]):
+        pulumi.set(self, "code_repository_index", value)
+
+    @property
+    @pulumi.getter(name="policyData")
+    def policy_data(self) -> pulumi.Input[str]:
+        """
+        The policy data generated by
+        a `organizations_get_iam_policy` data source.
+        """
+        return pulumi.get(self, "policy_data")
+
+    @policy_data.setter
+    def policy_data(self, value: pulumi.Input[str]):
+        pulumi.set(self, "policy_data", value)
+
+    @property
+    @pulumi.getter(name="repositoryGroupId")
+    def repository_group_id(self) -> pulumi.Input[str]:
+        return pulumi.get(self, "repository_group_id")
+
+    @repository_group_id.setter
+    def repository_group_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "repository_group_id", value)
+
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[pulumi.Input[str]]:
+        """
+        The location of the Code Repository Index, for example `us-central1`. Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+        location is specified, it is taken from the provider configuration.
+        """
+        return pulumi.get(self, "location")
+
+    @location.setter
+    def location(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "location", value)
+
+    @property
+    @pulumi.getter
+    def project(self) -> Optional[pulumi.Input[str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        """
+        return pulumi.get(self, "project")
+
+    @project.setter
+    def project(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "project", value)
+
+
+@pulumi.input_type
+class _RepositoryGroupIamPolicyState:
+    def __init__(__self__, *,
+                 code_repository_index: Optional[pulumi.Input[str]] = None,
+                 etag: Optional[pulumi.Input[str]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
+                 policy_data: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 repository_group_id: Optional[pulumi.Input[str]] = None):
+        """
+        Input properties used for looking up and filtering RepositoryGroupIamPolicy resources.
+        :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
+        :param pulumi.Input[str] location: The location of the Code Repository Index, for example `us-central1`. Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+               location is specified, it is taken from the provider configuration.
+        :param pulumi.Input[str] policy_data: The policy data generated by
+               a `organizations_get_iam_policy` data source.
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        """
+        if code_repository_index is not None:
+            pulumi.set(__self__, "code_repository_index", code_repository_index)
+        if etag is not None:
+            pulumi.set(__self__, "etag", etag)
+        if location is not None:
+            pulumi.set(__self__, "location", location)
+        if policy_data is not None:
+            pulumi.set(__self__, "policy_data", policy_data)
+        if project is not None:
+            pulumi.set(__self__, "project", project)
+        if repository_group_id is not None:
+            pulumi.set(__self__, "repository_group_id", repository_group_id)
+
+    @property
+    @pulumi.getter(name="codeRepositoryIndex")
+    def code_repository_index(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "code_repository_index")
+
+    @code_repository_index.setter
+    def code_repository_index(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "code_repository_index", value)
+
+    @property
+    @pulumi.getter
+    def etag(self) -> Optional[pulumi.Input[str]]:
+        """
+        (Computed) The etag of the IAM policy.
+        """
+        return pulumi.get(self, "etag")
+
+    @etag.setter
+    def etag(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "etag", value)
+
+    @property
+    @pulumi.getter
+    def location(self) -> Optional[pulumi.Input[str]]:
+        """
+        The location of the Code Repository Index, for example `us-central1`. Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+        location is specified, it is taken from the provider configuration.
+        """
+        return pulumi.get(self, "location")
+
+    @location.setter
+    def location(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "location", value)
+
+    @property
+    @pulumi.getter(name="policyData")
+    def policy_data(self) -> Optional[pulumi.Input[str]]:
+        """
+        The policy data generated by
+        a `organizations_get_iam_policy` data source.
+        """
+        return pulumi.get(self, "policy_data")
+
+    @policy_data.setter
+    def policy_data(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "policy_data", value)
+
+    @property
+    @pulumi.getter
+    def project(self) -> Optional[pulumi.Input[str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        """
+        return pulumi.get(self, "project")
+
+    @project.setter
+    def project(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "project", value)
+
+    @property
+    @pulumi.getter(name="repositoryGroupId")
+    def repository_group_id(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "repository_group_id")
+
+    @repository_group_id.setter
+    def repository_group_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "repository_group_id", value)
+
+
+class RepositoryGroupIamPolicy(pulumi.CustomResource):
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 code_repository_index: Optional[pulumi.Input[str]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
+                 policy_data: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 repository_group_id: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        """
+        ## Import
+
+        For all import syntaxes, the "resource in question" can take any of the following forms:
+
+        * projects/{{project}}/locations/{{location}}/codeRepositoryIndexes/{{code_repository_index}}/repositoryGroups/{{repository_group_id}}
+
+        * {{project}}/{{location}}/{{code_repository_index}}/{{repository_group_id}}
+
+        * {{location}}/{{code_repository_index}}/{{repository_group_id}}
+
+        * {{repository_group_id}}
+
+        Any variables not passed in the import command will be taken from the provider configuration.
+
+        Gemini for Google Cloud repositorygroup IAM resources can be imported using the resource identifiers, role, and member.
+
+        IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
+
+        ```sh
+        $ pulumi import gcp:gemini/repositoryGroupIamPolicy:RepositoryGroupIamPolicy editor "projects/{{project}}/locations/{{location}}/codeRepositoryIndexes/{{code_repository_index}}/repositoryGroups/{{repository_group_id}} roles/cloudaicompanion.repositoryGroupsUser user:jane@example.com"
+        ```
+
+        IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
+
+        ```sh
+        $ pulumi import gcp:gemini/repositoryGroupIamPolicy:RepositoryGroupIamPolicy editor "projects/{{project}}/locations/{{location}}/codeRepositoryIndexes/{{code_repository_index}}/repositoryGroups/{{repository_group_id}} roles/cloudaicompanion.repositoryGroupsUser"
+        ```
+
+        IAM policy imports use the identifier of the resource in question, e.g.
+
+        ```sh
+        $ pulumi import gcp:gemini/repositoryGroupIamPolicy:RepositoryGroupIamPolicy editor projects/{{project}}/locations/{{location}}/codeRepositoryIndexes/{{code_repository_index}}/repositoryGroups/{{repository_group_id}}
+        ```
+
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
+
+         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+
+        :param str resource_name: The name of the resource.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] location: The location of the Code Repository Index, for example `us-central1`. Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+               location is specified, it is taken from the provider configuration.
+        :param pulumi.Input[str] policy_data: The policy data generated by
+               a `organizations_get_iam_policy` data source.
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        """
+        ...
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 args: RepositoryGroupIamPolicyArgs,
+                 opts: Optional[pulumi.ResourceOptions] = None):
+        """
+        ## Import
+
+        For all import syntaxes, the "resource in question" can take any of the following forms:
+
+        * projects/{{project}}/locations/{{location}}/codeRepositoryIndexes/{{code_repository_index}}/repositoryGroups/{{repository_group_id}}
+
+        * {{project}}/{{location}}/{{code_repository_index}}/{{repository_group_id}}
+
+        * {{location}}/{{code_repository_index}}/{{repository_group_id}}
+
+        * {{repository_group_id}}
+
+        Any variables not passed in the import command will be taken from the provider configuration.
+
+        Gemini for Google Cloud repositorygroup IAM resources can be imported using the resource identifiers, role, and member.
+
+        IAM member imports use space-delimited identifiers: the resource in question, the role, and the member identity, e.g.
+
+        ```sh
+        $ pulumi import gcp:gemini/repositoryGroupIamPolicy:RepositoryGroupIamPolicy editor "projects/{{project}}/locations/{{location}}/codeRepositoryIndexes/{{code_repository_index}}/repositoryGroups/{{repository_group_id}} roles/cloudaicompanion.repositoryGroupsUser user:jane@example.com"
+        ```
+
+        IAM binding imports use space-delimited identifiers: the resource in question and the role, e.g.
+
+        ```sh
+        $ pulumi import gcp:gemini/repositoryGroupIamPolicy:RepositoryGroupIamPolicy editor "projects/{{project}}/locations/{{location}}/codeRepositoryIndexes/{{code_repository_index}}/repositoryGroups/{{repository_group_id}} roles/cloudaicompanion.repositoryGroupsUser"
+        ```
+
+        IAM policy imports use the identifier of the resource in question, e.g.
+
+        ```sh
+        $ pulumi import gcp:gemini/repositoryGroupIamPolicy:RepositoryGroupIamPolicy editor projects/{{project}}/locations/{{location}}/codeRepositoryIndexes/{{code_repository_index}}/repositoryGroups/{{repository_group_id}}
+        ```
+
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
+
+         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
+
+        :param str resource_name: The name of the resource.
+        :param RepositoryGroupIamPolicyArgs args: The arguments to use to populate this resource's properties.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        ...
+    def __init__(__self__, resource_name: str, *args, **kwargs):
+        resource_args, opts = _utilities.get_resource_args_opts(RepositoryGroupIamPolicyArgs, pulumi.ResourceOptions, *args, **kwargs)
+        if resource_args is not None:
+            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
+        else:
+            __self__._internal_init(resource_name, *args, **kwargs)
+
+    def _internal_init(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 code_repository_index: Optional[pulumi.Input[str]] = None,
+                 location: Optional[pulumi.Input[str]] = None,
+                 policy_data: Optional[pulumi.Input[str]] = None,
+                 project: Optional[pulumi.Input[str]] = None,
+                 repository_group_id: Optional[pulumi.Input[str]] = None,
+                 __props__=None):
+        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
+        if not isinstance(opts, pulumi.ResourceOptions):
+            raise TypeError('Expected resource options to be a ResourceOptions instance')
+        if opts.id is None:
+            if __props__ is not None:
+                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
+            __props__ = RepositoryGroupIamPolicyArgs.__new__(RepositoryGroupIamPolicyArgs)
+
+            if code_repository_index is None and not opts.urn:
+                raise TypeError("Missing required property 'code_repository_index'")
+            __props__.__dict__["code_repository_index"] = code_repository_index
+            __props__.__dict__["location"] = location
+            if policy_data is None and not opts.urn:
+                raise TypeError("Missing required property 'policy_data'")
+            __props__.__dict__["policy_data"] = policy_data
+            __props__.__dict__["project"] = project
+            if repository_group_id is None and not opts.urn:
+                raise TypeError("Missing required property 'repository_group_id'")
+            __props__.__dict__["repository_group_id"] = repository_group_id
+            __props__.__dict__["etag"] = None
+        super(RepositoryGroupIamPolicy, __self__).__init__(
+            'gcp:gemini/repositoryGroupIamPolicy:RepositoryGroupIamPolicy',
+            resource_name,
+            __props__,
+            opts)
+
+    @staticmethod
+    def get(resource_name: str,
+            id: pulumi.Input[str],
+            opts: Optional[pulumi.ResourceOptions] = None,
+            code_repository_index: Optional[pulumi.Input[str]] = None,
+            etag: Optional[pulumi.Input[str]] = None,
+            location: Optional[pulumi.Input[str]] = None,
+            policy_data: Optional[pulumi.Input[str]] = None,
+            project: Optional[pulumi.Input[str]] = None,
+            repository_group_id: Optional[pulumi.Input[str]] = None) -> 'RepositoryGroupIamPolicy':
+        """
+        Get an existing RepositoryGroupIamPolicy resource's state with the given name, id, and optional extra
+        properties used to qualify the lookup.
+
+        :param str resource_name: The unique name of the resulting resource.
+        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[str] etag: (Computed) The etag of the IAM policy.
+        :param pulumi.Input[str] location: The location of the Code Repository Index, for example `us-central1`. Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+               location is specified, it is taken from the provider configuration.
+        :param pulumi.Input[str] policy_data: The policy data generated by
+               a `organizations_get_iam_policy` data source.
+        :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        """
+        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
+
+        __props__ = _RepositoryGroupIamPolicyState.__new__(_RepositoryGroupIamPolicyState)
+
+        __props__.__dict__["code_repository_index"] = code_repository_index
+        __props__.__dict__["etag"] = etag
+        __props__.__dict__["location"] = location
+        __props__.__dict__["policy_data"] = policy_data
+        __props__.__dict__["project"] = project
+        __props__.__dict__["repository_group_id"] = repository_group_id
+        return RepositoryGroupIamPolicy(resource_name, opts=opts, __props__=__props__)
+
+    @property
+    @pulumi.getter(name="codeRepositoryIndex")
+    def code_repository_index(self) -> pulumi.Output[str]:
+        return pulumi.get(self, "code_repository_index")
+
+    @property
+    @pulumi.getter
+    def etag(self) -> pulumi.Output[str]:
+        """
+        (Computed) The etag of the IAM policy.
+        """
+        return pulumi.get(self, "etag")
+
+    @property
+    @pulumi.getter
+    def location(self) -> pulumi.Output[str]:
+        """
+        The location of the Code Repository Index, for example `us-central1`. Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no location is provided in the parent identifier and no
+        location is specified, it is taken from the provider configuration.
+        """
+        return pulumi.get(self, "location")
+
+    @property
+    @pulumi.getter(name="policyData")
+    def policy_data(self) -> pulumi.Output[str]:
+        """
+        The policy data generated by
+        a `organizations_get_iam_policy` data source.
+        """
+        return pulumi.get(self, "policy_data")
+
+    @property
+    @pulumi.getter
+    def project(self) -> pulumi.Output[str]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        """
+        return pulumi.get(self, "project")
+
+    @property
+    @pulumi.getter(name="repositoryGroupId")
+    def repository_group_id(self) -> pulumi.Output[str]:
+        return pulumi.get(self, "repository_group_id")
+

pulumi_gcp/gkehub/_inputs.py

@@ -1589,7 +1589,7 @@ if not MYPY:
         installation: NotRequired[pulumi.Input[str]]
         """
         Configures the manner in which the template library is installed on the cluster.
-        Possible values are: `INSTALATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
+        Possible values are: `INSTALLATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
         """
 elif False:
     FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigPolicyContentTemplateLibraryArgsDict: TypeAlias = Mapping[str, Any]
@@ -1600,7 +1600,7 @@ class FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigPo
                  installation: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input[str] installation: Configures the manner in which the template library is installed on the cluster.
-               Possible values are: `INSTALATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
+               Possible values are: `INSTALLATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
         """
         if installation is not None:
             pulumi.set(__self__, "installation", installation)
@@ -1610,7 +1610,7 @@ class FeatureFleetDefaultMemberConfigPolicycontrollerPolicyControllerHubConfigPo
     def installation(self) -> Optional[pulumi.Input[str]]:
         """
         Configures the manner in which the template library is installed on the cluster.
-        Possible values are: `INSTALATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
+        Possible values are: `INSTALLATION_UNSPECIFIED`, `NOT_INSTALLED`, `ALL`.
         """
         return pulumi.get(self, "installation")
 
@@ -1913,7 +1913,7 @@ if not MYPY:
         """
         metrics_gcp_service_account_email: NotRequired[pulumi.Input[str]]
         """
-        The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring. The GSA should have the Monitoring Metric Writer(roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA.
+        Deprecated: If Workload Identity Federation for GKE is enabled, Google Cloud Service Account is no longer needed for exporting Config Sync metrics: https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring.
         """
         oci: NotRequired[pulumi.Input['FeatureMembershipConfigmanagementConfigSyncOciArgsDict']]
         """
@@ -1923,12 +1923,16 @@ if not MYPY:
         """
         prevent_drift: NotRequired[pulumi.Input[bool]]
         """
-        Supported from Config Sync versions 1.10.0 onwards. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to "false", disables the Config Sync admission webhook and does not prevent drifts.
+        Supported from Config Sync versions 1.10.0 onwards. Set to `true` to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.
         """
         source_format: NotRequired[pulumi.Input[str]]
         """
         Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
         """
+        stop_syncing: NotRequired[pulumi.Input[bool]]
+        """
+        Set to `true` to stop syncing configurations for a single cluster. This field is only available on clusters using Config Sync [auto-upgrades](http://cloud/kubernetes-engine/enterprise/config-sync/docs/how-to/upgrade-config-sync#auto-upgrade-config) or on Config Sync version 1.20.0 or later. Defaults: `false`.
+        """
 elif False:
     FeatureMembershipConfigmanagementConfigSyncArgsDict: TypeAlias = Mapping[str, Any]
 
@@ -1940,16 +1944,18 @@ class FeatureMembershipConfigmanagementConfigSyncArgs:
                  metrics_gcp_service_account_email: Optional[pulumi.Input[str]] = None,
                  oci: Optional[pulumi.Input['FeatureMembershipConfigmanagementConfigSyncOciArgs']] = None,
                  prevent_drift: Optional[pulumi.Input[bool]] = None,
-                 source_format: Optional[pulumi.Input[str]] = None):
+                 source_format: Optional[pulumi.Input[str]] = None,
+                 stop_syncing: Optional[pulumi.Input[bool]] = None):
         """
         :param pulumi.Input[bool] enabled: Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
         :param pulumi.Input['FeatureMembershipConfigmanagementConfigSyncGitArgs'] git: (Optional) Structure is documented below.
-        :param pulumi.Input[str] metrics_gcp_service_account_email: The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring. The GSA should have the Monitoring Metric Writer(roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA.
+        :param pulumi.Input[str] metrics_gcp_service_account_email: Deprecated: If Workload Identity Federation for GKE is enabled, Google Cloud Service Account is no longer needed for exporting Config Sync metrics: https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring.
         :param pulumi.Input['FeatureMembershipConfigmanagementConfigSyncOciArgs'] oci: (Optional) Supported from Config Sync versions 1.12.0 onwards. Structure is documented below.
                
                Use either `git` or `oci` config option.
-        :param pulumi.Input[bool] prevent_drift: Supported from Config Sync versions 1.10.0 onwards. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to "false", disables the Config Sync admission webhook and does not prevent drifts.
+        :param pulumi.Input[bool] prevent_drift: Supported from Config Sync versions 1.10.0 onwards. Set to `true` to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.
         :param pulumi.Input[str] source_format: Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
+        :param pulumi.Input[bool] stop_syncing: Set to `true` to stop syncing configurations for a single cluster. This field is only available on clusters using Config Sync [auto-upgrades](http://cloud/kubernetes-engine/enterprise/config-sync/docs/how-to/upgrade-config-sync#auto-upgrade-config) or on Config Sync version 1.20.0 or later. Defaults: `false`.
         """
         if enabled is not None:
             pulumi.set(__self__, "enabled", enabled)
@@ -1963,6 +1969,8 @@ class FeatureMembershipConfigmanagementConfigSyncArgs:
             pulumi.set(__self__, "prevent_drift", prevent_drift)
         if source_format is not None:
             pulumi.set(__self__, "source_format", source_format)
+        if stop_syncing is not None:
+            pulumi.set(__self__, "stop_syncing", stop_syncing)
 
     @property
     @pulumi.getter
@@ -1992,7 +2000,7 @@ class FeatureMembershipConfigmanagementConfigSyncArgs:
     @pulumi.getter(name="metricsGcpServiceAccountEmail")
     def metrics_gcp_service_account_email(self) -> Optional[pulumi.Input[str]]:
         """
-        The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring. The GSA should have the Monitoring Metric Writer(roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA.
+        Deprecated: If Workload Identity Federation for GKE is enabled, Google Cloud Service Account is no longer needed for exporting Config Sync metrics: https://cloud.google.com/kubernetes-engine/enterprise/config-sync/docs/how-to/monitor-config-sync-cloud-monitoring#custom-monitoring.
         """
         return pulumi.get(self, "metrics_gcp_service_account_email")
 
@@ -2018,7 +2026,7 @@ class FeatureMembershipConfigmanagementConfigSyncArgs:
     @pulumi.getter(name="preventDrift")
     def prevent_drift(self) -> Optional[pulumi.Input[bool]]:
         """
-        Supported from Config Sync versions 1.10.0 onwards. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to "false", disables the Config Sync admission webhook and does not prevent drifts.
+        Supported from Config Sync versions 1.10.0 onwards. Set to `true` to enable the Config Sync admission webhook to prevent drifts. If set to `false`, disables the Config Sync admission webhook and does not prevent drifts.
         """
         return pulumi.get(self, "prevent_drift")
 
@@ -2038,6 +2046,18 @@ class FeatureMembershipConfigmanagementConfigSyncArgs:
     def source_format(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "source_format", value)
 
+    @property
+    @pulumi.getter(name="stopSyncing")
+    def stop_syncing(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Set to `true` to stop syncing configurations for a single cluster. This field is only available on clusters using Config Sync [auto-upgrades](http://cloud/kubernetes-engine/enterprise/config-sync/docs/how-to/upgrade-config-sync#auto-upgrade-config) or on Config Sync version 1.20.0 or later. Defaults: `false`.
+        """
+        return pulumi.get(self, "stop_syncing")
+
+    @stop_syncing.setter
+    def stop_syncing(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "stop_syncing", value)
+
 
 if not MYPY:
     class FeatureMembershipConfigmanagementConfigSyncGitArgsDict(TypedDict):

pulumi_gcp/gkehub/membership_binding.py

@@ -423,16 +423,16 @@ class MembershipBinding(pulumi.CustomResource):
             network="default",
             subnetwork="default")
         membership = gcp.gkehub.Membership("membership",
-            membership_id="tf-test-membership_9106",
+            membership_id="tf-test-membership_27169",
             endpoint={
                 "gke_cluster": {
                     "resource_link": primary.id.apply(lambda id: f"//container.googleapis.com/{id}"),
                 },
             },
             opts = pulumi.ResourceOptions(depends_on=[primary]))
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_27169")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_75223")
         membership_binding = gcp.gkehub.MembershipBinding("membership_binding",
-            membership_binding_id="tf-test-membership-binding_75223",
+            membership_binding_id="tf-test-membership-binding_41819",
             scope=scope.name,
             membership_id=membership.membership_id,
             location="global",
@@ -519,16 +519,16 @@ class MembershipBinding(pulumi.CustomResource):
             network="default",
             subnetwork="default")
         membership = gcp.gkehub.Membership("membership",
-            membership_id="tf-test-membership_9106",
+            membership_id="tf-test-membership_27169",
             endpoint={
                 "gke_cluster": {
                     "resource_link": primary.id.apply(lambda id: f"//container.googleapis.com/{id}"),
                 },
             },
             opts = pulumi.ResourceOptions(depends_on=[primary]))
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_27169")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_75223")
         membership_binding = gcp.gkehub.MembershipBinding("membership_binding",
-            membership_binding_id="tf-test-membership-binding_75223",
+            membership_binding_id="tf-test-membership-binding_41819",
             scope=scope.name,
             membership_id=membership.membership_id,
             location="global",

pulumi_gcp/gkehub/membership_rbac_role_binding.py

@@ -356,7 +356,7 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
             network="default",
             subnetwork="default")
         membership = gcp.gkehub.Membership("membership",
-            membership_id="tf-test-membership_41819",
+            membership_id="tf-test-membership_75092",
             endpoint={
                 "gke_cluster": {
                     "resource_link": primary.id.apply(lambda id: f"//container.googleapis.com/{id}"),
@@ -365,7 +365,7 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
             opts = pulumi.ResourceOptions(depends_on=[primary]))
         project = gcp.organizations.get_project()
         membership_rbac_role_binding = gcp.gkehub.MembershipRbacRoleBinding("membership_rbac_role_binding",
-            membership_rbac_role_binding_id="tf-test-membership-rbac-role-binding_75092",
+            membership_rbac_role_binding_id="tf-test-membership-rbac-role-binding_2605",
             membership_id=membership.membership_id,
             user=f"service-{project.number}@gcp-sa-anthossupport.iam.gserviceaccount.com",
             role={
@@ -434,7 +434,7 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
             network="default",
             subnetwork="default")
         membership = gcp.gkehub.Membership("membership",
-            membership_id="tf-test-membership_41819",
+            membership_id="tf-test-membership_75092",
             endpoint={
                 "gke_cluster": {
                     "resource_link": primary.id.apply(lambda id: f"//container.googleapis.com/{id}"),
@@ -443,7 +443,7 @@ class MembershipRbacRoleBinding(pulumi.CustomResource):
             opts = pulumi.ResourceOptions(depends_on=[primary]))
         project = gcp.organizations.get_project()
         membership_rbac_role_binding = gcp.gkehub.MembershipRbacRoleBinding("membership_rbac_role_binding",
-            membership_rbac_role_binding_id="tf-test-membership-rbac-role-binding_75092",
+            membership_rbac_role_binding_id="tf-test-membership-rbac-role-binding_2605",
             membership_id=membership.membership_id,
             user=f"service-{project.number}@gcp-sa-anthossupport.iam.gserviceaccount.com",
             role={