pulumi-gcp 8.13.0__py3-none-any.whl → 8.13.0a1734503365__py3-none-any.whl

pulumi_gcp/bigquery/dataset_access.py

@@ -23,7 +23,6 @@ class DatasetAccessInitArgs:
     def __init__(__self__, *,
                  dataset_id: pulumi.Input[str],
                  authorized_dataset: Optional[pulumi.Input['DatasetAccessAuthorizedDatasetArgs']] = None,
-                 condition: Optional[pulumi.Input['DatasetAccessConditionArgs']] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  group_by_email: Optional[pulumi.Input[str]] = None,
                  iam_member: Optional[pulumi.Input[str]] = None,
@@ -43,9 +42,6 @@ class DatasetAccessInitArgs:
                - - -
         :param pulumi.Input['DatasetAccessAuthorizedDatasetArgs'] authorized_dataset: Grants all resources of particular types in a particular dataset read access to the current dataset.
                Structure is documented below.
-        :param pulumi.Input['DatasetAccessConditionArgs'] condition: Condition for the binding. If CEL expression in this field is true, this
-               access binding will be considered.
-               Structure is documented below.
         :param pulumi.Input[str] domain: A domain to grant access to. Any users signed in with the
                domain specified will be granted the specified access
         :param pulumi.Input[str] group_by_email: An email address of a Google Group to grant access to.
@@ -82,8 +78,6 @@ class DatasetAccessInitArgs:
         pulumi.set(__self__, "dataset_id", dataset_id)
         if authorized_dataset is not None:
             pulumi.set(__self__, "authorized_dataset", authorized_dataset)
-        if condition is not None:
-            pulumi.set(__self__, "condition", condition)
         if domain is not None:
             pulumi.set(__self__, "domain", domain)
         if group_by_email is not None:
@@ -133,20 +127,6 @@ class DatasetAccessInitArgs:
     def authorized_dataset(self, value: Optional[pulumi.Input['DatasetAccessAuthorizedDatasetArgs']]):
         pulumi.set(self, "authorized_dataset", value)
 
-    @property
-    @pulumi.getter
-    def condition(self) -> Optional[pulumi.Input['DatasetAccessConditionArgs']]:
-        """
-        Condition for the binding. If CEL expression in this field is true, this
-        access binding will be considered.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "condition")
-
-    @condition.setter
-    def condition(self, value: Optional[pulumi.Input['DatasetAccessConditionArgs']]):
-        pulumi.set(self, "condition", value)
-
     @property
     @pulumi.getter
     def domain(self) -> Optional[pulumi.Input[str]]:
@@ -284,7 +264,6 @@ class _DatasetAccessState:
     def __init__(__self__, *,
                  api_updated_member: Optional[pulumi.Input[bool]] = None,
                  authorized_dataset: Optional[pulumi.Input['DatasetAccessAuthorizedDatasetArgs']] = None,
-                 condition: Optional[pulumi.Input['DatasetAccessConditionArgs']] = None,
                  dataset_id: Optional[pulumi.Input[str]] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  group_by_email: Optional[pulumi.Input[str]] = None,
@@ -301,9 +280,6 @@ class _DatasetAccessState:
                stored in state as a different member type
         :param pulumi.Input['DatasetAccessAuthorizedDatasetArgs'] authorized_dataset: Grants all resources of particular types in a particular dataset read access to the current dataset.
                Structure is documented below.
-        :param pulumi.Input['DatasetAccessConditionArgs'] condition: Condition for the binding. If CEL expression in this field is true, this
-               access binding will be considered.
-               Structure is documented below.
         :param pulumi.Input[str] dataset_id: A unique ID for this dataset, without the project name. The ID
                must contain only letters (a-z, A-Z), numbers (0-9), or
                underscores (_). The maximum length is 1,024 characters.
@@ -347,8 +323,6 @@ class _DatasetAccessState:
             pulumi.set(__self__, "api_updated_member", api_updated_member)
         if authorized_dataset is not None:
             pulumi.set(__self__, "authorized_dataset", authorized_dataset)
-        if condition is not None:
-            pulumi.set(__self__, "condition", condition)
         if dataset_id is not None:
             pulumi.set(__self__, "dataset_id", dataset_id)
         if domain is not None:
@@ -396,20 +370,6 @@ class _DatasetAccessState:
     def authorized_dataset(self, value: Optional[pulumi.Input['DatasetAccessAuthorizedDatasetArgs']]):
         pulumi.set(self, "authorized_dataset", value)
 
-    @property
-    @pulumi.getter
-    def condition(self) -> Optional[pulumi.Input['DatasetAccessConditionArgs']]:
-        """
-        Condition for the binding. If CEL expression in this field is true, this
-        access binding will be considered.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "condition")
-
-    @condition.setter
-    def condition(self, value: Optional[pulumi.Input['DatasetAccessConditionArgs']]):
-        pulumi.set(self, "condition", value)
-
     @property
     @pulumi.getter(name="datasetId")
     def dataset_id(self) -> Optional[pulumi.Input[str]]:
@@ -565,7 +525,6 @@ class DatasetAccess(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  authorized_dataset: Optional[pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']]] = None,
-                 condition: Optional[pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']]] = None,
                  dataset_id: Optional[pulumi.Input[str]] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  group_by_email: Optional[pulumi.Input[str]] = None,
@@ -686,9 +645,6 @@ class DatasetAccess(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']] authorized_dataset: Grants all resources of particular types in a particular dataset read access to the current dataset.
                Structure is documented below.
-        :param pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']] condition: Condition for the binding. If CEL expression in this field is true, this
-               access binding will be considered.
-               Structure is documented below.
         :param pulumi.Input[str] dataset_id: A unique ID for this dataset, without the project name. The ID
                must contain only letters (a-z, A-Z), numbers (0-9), or
                underscores (_). The maximum length is 1,024 characters.
@@ -855,7 +811,6 @@ class DatasetAccess(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  authorized_dataset: Optional[pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']]] = None,
-                 condition: Optional[pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']]] = None,
                  dataset_id: Optional[pulumi.Input[str]] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  group_by_email: Optional[pulumi.Input[str]] = None,
@@ -876,7 +831,6 @@ class DatasetAccess(pulumi.CustomResource):
             __props__ = DatasetAccessInitArgs.__new__(DatasetAccessInitArgs)
 
             __props__.__dict__["authorized_dataset"] = authorized_dataset
-            __props__.__dict__["condition"] = condition
             if dataset_id is None and not opts.urn:
                 raise TypeError("Missing required property 'dataset_id'")
             __props__.__dict__["dataset_id"] = dataset_id
@@ -902,7 +856,6 @@ class DatasetAccess(pulumi.CustomResource):
             opts: Optional[pulumi.ResourceOptions] = None,
             api_updated_member: Optional[pulumi.Input[bool]] = None,
             authorized_dataset: Optional[pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']]] = None,
-            condition: Optional[pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']]] = None,
             dataset_id: Optional[pulumi.Input[str]] = None,
             domain: Optional[pulumi.Input[str]] = None,
             group_by_email: Optional[pulumi.Input[str]] = None,
@@ -924,9 +877,6 @@ class DatasetAccess(pulumi.CustomResource):
                stored in state as a different member type
         :param pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']] authorized_dataset: Grants all resources of particular types in a particular dataset read access to the current dataset.
                Structure is documented below.
-        :param pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']] condition: Condition for the binding. If CEL expression in this field is true, this
-               access binding will be considered.
-               Structure is documented below.
         :param pulumi.Input[str] dataset_id: A unique ID for this dataset, without the project name. The ID
                must contain only letters (a-z, A-Z), numbers (0-9), or
                underscores (_). The maximum length is 1,024 characters.
@@ -972,7 +922,6 @@ class DatasetAccess(pulumi.CustomResource):
 
         __props__.__dict__["api_updated_member"] = api_updated_member
         __props__.__dict__["authorized_dataset"] = authorized_dataset
-        __props__.__dict__["condition"] = condition
         __props__.__dict__["dataset_id"] = dataset_id
         __props__.__dict__["domain"] = domain
         __props__.__dict__["group_by_email"] = group_by_email
@@ -1003,16 +952,6 @@ class DatasetAccess(pulumi.CustomResource):
         """
         return pulumi.get(self, "authorized_dataset")
 
-    @property
-    @pulumi.getter
-    def condition(self) -> pulumi.Output[Optional['outputs.DatasetAccessCondition']]:
-        """
-        Condition for the binding. If CEL expression in this field is true, this
-        access binding will be considered.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "condition")
-
     @property
     @pulumi.getter(name="datasetId")
     def dataset_id(self) -> pulumi.Output[str]:

pulumi_gcp/bigquery/job.py

@@ -687,9 +687,15 @@ class Job(pulumi.CustomResource):
             friendly_name="test",
             description="This is a test description",
             location="US")
+        key_ring = gcp.kms.KeyRing("key_ring",
+            name="example-keyring",
+            location="global")
+        crypto_key = gcp.kms.CryptoKey("crypto_key",
+            name="example-key",
+            key_ring=key_ring.id)
         project = gcp.organizations.get_project(project_id="my-project-name")
         encrypt_role = gcp.kms.CryptoKeyIAMMember("encrypt_role",
-            crypto_key_id="example-key",
+            crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
         dest = gcp.bigquery.Table("dest",
@@ -715,7 +721,7 @@ class Job(pulumi.CustomResource):
         ]
         \"\"\",
             encryption_configuration={
-                "kms_key_name": "example-key",
+                "kms_key_name": crypto_key.id,
             },
             opts = pulumi.ResourceOptions(depends_on=[encrypt_role]))
         job = gcp.bigquery.Job("job",
@@ -739,7 +745,7 @@ class Job(pulumi.CustomResource):
                     "table_id": dest.table_id,
                 },
                 "destination_encryption_configuration": {
-                    "kms_key_name": "example-key",
+                    "kms_key_name": crypto_key.id,
                 },
             },
             opts = pulumi.ResourceOptions(depends_on=[encrypt_role]))
@@ -1117,9 +1123,15 @@ class Job(pulumi.CustomResource):
             friendly_name="test",
             description="This is a test description",
             location="US")
+        key_ring = gcp.kms.KeyRing("key_ring",
+            name="example-keyring",
+            location="global")
+        crypto_key = gcp.kms.CryptoKey("crypto_key",
+            name="example-key",
+            key_ring=key_ring.id)
         project = gcp.organizations.get_project(project_id="my-project-name")
         encrypt_role = gcp.kms.CryptoKeyIAMMember("encrypt_role",
-            crypto_key_id="example-key",
+            crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
         dest = gcp.bigquery.Table("dest",
@@ -1145,7 +1157,7 @@ class Job(pulumi.CustomResource):
         ]
         \"\"\",
             encryption_configuration={
-                "kms_key_name": "example-key",
+                "kms_key_name": crypto_key.id,
             },
             opts = pulumi.ResourceOptions(depends_on=[encrypt_role]))
         job = gcp.bigquery.Job("job",
@@ -1169,7 +1181,7 @@ class Job(pulumi.CustomResource):
                     "table_id": dest.table_id,
                 },
                 "destination_encryption_configuration": {
-                    "kms_key_name": "example-key",
+                    "kms_key_name": crypto_key.id,
                 },
             },
             opts = pulumi.ResourceOptions(depends_on=[encrypt_role]))