pulumi-gcp 8.13.0a1736231082__py3-none-any.whl → 8.13.1__py3-none-any.whl

pulumi_gcp/bigquery/dataset_access.py

@@ -23,6 +23,7 @@ class DatasetAccessInitArgs:
     def __init__(__self__, *,
                  dataset_id: pulumi.Input[str],
                  authorized_dataset: Optional[pulumi.Input['DatasetAccessAuthorizedDatasetArgs']] = None,
+                 condition: Optional[pulumi.Input['DatasetAccessConditionArgs']] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  group_by_email: Optional[pulumi.Input[str]] = None,
                  iam_member: Optional[pulumi.Input[str]] = None,
@@ -42,6 +43,9 @@ class DatasetAccessInitArgs:
                - - -
         :param pulumi.Input['DatasetAccessAuthorizedDatasetArgs'] authorized_dataset: Grants all resources of particular types in a particular dataset read access to the current dataset.
                Structure is documented below.
+        :param pulumi.Input['DatasetAccessConditionArgs'] condition: Condition for the binding. If CEL expression in this field is true, this
+               access binding will be considered.
+               Structure is documented below.
         :param pulumi.Input[str] domain: A domain to grant access to. Any users signed in with the
                domain specified will be granted the specified access
         :param pulumi.Input[str] group_by_email: An email address of a Google Group to grant access to.
@@ -78,6 +82,8 @@ class DatasetAccessInitArgs:
         pulumi.set(__self__, "dataset_id", dataset_id)
         if authorized_dataset is not None:
             pulumi.set(__self__, "authorized_dataset", authorized_dataset)
+        if condition is not None:
+            pulumi.set(__self__, "condition", condition)
         if domain is not None:
             pulumi.set(__self__, "domain", domain)
         if group_by_email is not None:
@@ -127,6 +133,20 @@ class DatasetAccessInitArgs:
     def authorized_dataset(self, value: Optional[pulumi.Input['DatasetAccessAuthorizedDatasetArgs']]):
         pulumi.set(self, "authorized_dataset", value)
 
+    @property
+    @pulumi.getter
+    def condition(self) -> Optional[pulumi.Input['DatasetAccessConditionArgs']]:
+        """
+        Condition for the binding. If CEL expression in this field is true, this
+        access binding will be considered.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "condition")
+
+    @condition.setter
+    def condition(self, value: Optional[pulumi.Input['DatasetAccessConditionArgs']]):
+        pulumi.set(self, "condition", value)
+
     @property
     @pulumi.getter
     def domain(self) -> Optional[pulumi.Input[str]]:
@@ -264,6 +284,7 @@ class _DatasetAccessState:
     def __init__(__self__, *,
                  api_updated_member: Optional[pulumi.Input[bool]] = None,
                  authorized_dataset: Optional[pulumi.Input['DatasetAccessAuthorizedDatasetArgs']] = None,
+                 condition: Optional[pulumi.Input['DatasetAccessConditionArgs']] = None,
                  dataset_id: Optional[pulumi.Input[str]] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  group_by_email: Optional[pulumi.Input[str]] = None,
@@ -280,6 +301,9 @@ class _DatasetAccessState:
                stored in state as a different member type
         :param pulumi.Input['DatasetAccessAuthorizedDatasetArgs'] authorized_dataset: Grants all resources of particular types in a particular dataset read access to the current dataset.
                Structure is documented below.
+        :param pulumi.Input['DatasetAccessConditionArgs'] condition: Condition for the binding. If CEL expression in this field is true, this
+               access binding will be considered.
+               Structure is documented below.
         :param pulumi.Input[str] dataset_id: A unique ID for this dataset, without the project name. The ID
                must contain only letters (a-z, A-Z), numbers (0-9), or
                underscores (_). The maximum length is 1,024 characters.
@@ -323,6 +347,8 @@ class _DatasetAccessState:
             pulumi.set(__self__, "api_updated_member", api_updated_member)
         if authorized_dataset is not None:
             pulumi.set(__self__, "authorized_dataset", authorized_dataset)
+        if condition is not None:
+            pulumi.set(__self__, "condition", condition)
         if dataset_id is not None:
             pulumi.set(__self__, "dataset_id", dataset_id)
         if domain is not None:
@@ -370,6 +396,20 @@ class _DatasetAccessState:
     def authorized_dataset(self, value: Optional[pulumi.Input['DatasetAccessAuthorizedDatasetArgs']]):
         pulumi.set(self, "authorized_dataset", value)
 
+    @property
+    @pulumi.getter
+    def condition(self) -> Optional[pulumi.Input['DatasetAccessConditionArgs']]:
+        """
+        Condition for the binding. If CEL expression in this field is true, this
+        access binding will be considered.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "condition")
+
+    @condition.setter
+    def condition(self, value: Optional[pulumi.Input['DatasetAccessConditionArgs']]):
+        pulumi.set(self, "condition", value)
+
     @property
     @pulumi.getter(name="datasetId")
     def dataset_id(self) -> Optional[pulumi.Input[str]]:
@@ -525,6 +565,7 @@ class DatasetAccess(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  authorized_dataset: Optional[pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']]] = None,
+                 condition: Optional[pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']]] = None,
                  dataset_id: Optional[pulumi.Input[str]] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  group_by_email: Optional[pulumi.Input[str]] = None,
@@ -645,6 +686,9 @@ class DatasetAccess(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']] authorized_dataset: Grants all resources of particular types in a particular dataset read access to the current dataset.
                Structure is documented below.
+        :param pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']] condition: Condition for the binding. If CEL expression in this field is true, this
+               access binding will be considered.
+               Structure is documented below.
         :param pulumi.Input[str] dataset_id: A unique ID for this dataset, without the project name. The ID
                must contain only letters (a-z, A-Z), numbers (0-9), or
                underscores (_). The maximum length is 1,024 characters.
@@ -811,6 +855,7 @@ class DatasetAccess(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  authorized_dataset: Optional[pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']]] = None,
+                 condition: Optional[pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']]] = None,
                  dataset_id: Optional[pulumi.Input[str]] = None,
                  domain: Optional[pulumi.Input[str]] = None,
                  group_by_email: Optional[pulumi.Input[str]] = None,
@@ -831,6 +876,7 @@ class DatasetAccess(pulumi.CustomResource):
             __props__ = DatasetAccessInitArgs.__new__(DatasetAccessInitArgs)
 
             __props__.__dict__["authorized_dataset"] = authorized_dataset
+            __props__.__dict__["condition"] = condition
             if dataset_id is None and not opts.urn:
                 raise TypeError("Missing required property 'dataset_id'")
             __props__.__dict__["dataset_id"] = dataset_id
@@ -856,6 +902,7 @@ class DatasetAccess(pulumi.CustomResource):
             opts: Optional[pulumi.ResourceOptions] = None,
             api_updated_member: Optional[pulumi.Input[bool]] = None,
             authorized_dataset: Optional[pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']]] = None,
+            condition: Optional[pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']]] = None,
             dataset_id: Optional[pulumi.Input[str]] = None,
             domain: Optional[pulumi.Input[str]] = None,
             group_by_email: Optional[pulumi.Input[str]] = None,
@@ -877,6 +924,9 @@ class DatasetAccess(pulumi.CustomResource):
                stored in state as a different member type
         :param pulumi.Input[Union['DatasetAccessAuthorizedDatasetArgs', 'DatasetAccessAuthorizedDatasetArgsDict']] authorized_dataset: Grants all resources of particular types in a particular dataset read access to the current dataset.
                Structure is documented below.
+        :param pulumi.Input[Union['DatasetAccessConditionArgs', 'DatasetAccessConditionArgsDict']] condition: Condition for the binding. If CEL expression in this field is true, this
+               access binding will be considered.
+               Structure is documented below.
         :param pulumi.Input[str] dataset_id: A unique ID for this dataset, without the project name. The ID
                must contain only letters (a-z, A-Z), numbers (0-9), or
                underscores (_). The maximum length is 1,024 characters.
@@ -922,6 +972,7 @@ class DatasetAccess(pulumi.CustomResource):
 
         __props__.__dict__["api_updated_member"] = api_updated_member
         __props__.__dict__["authorized_dataset"] = authorized_dataset
+        __props__.__dict__["condition"] = condition
         __props__.__dict__["dataset_id"] = dataset_id
         __props__.__dict__["domain"] = domain
         __props__.__dict__["group_by_email"] = group_by_email
@@ -952,6 +1003,16 @@ class DatasetAccess(pulumi.CustomResource):
         """
         return pulumi.get(self, "authorized_dataset")
 
+    @property
+    @pulumi.getter
+    def condition(self) -> pulumi.Output[Optional['outputs.DatasetAccessCondition']]:
+        """
+        Condition for the binding. If CEL expression in this field is true, this
+        access binding will be considered.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "condition")
+
     @property
     @pulumi.getter(name="datasetId")
     def dataset_id(self) -> pulumi.Output[str]:

pulumi_gcp/bigquery/job.py

@@ -687,15 +687,9 @@ class Job(pulumi.CustomResource):
             friendly_name="test",
             description="This is a test description",
             location="US")
-        key_ring = gcp.kms.KeyRing("key_ring",
-            name="example-keyring",
-            location="global")
-        crypto_key = gcp.kms.CryptoKey("crypto_key",
-            name="example-key",
-            key_ring=key_ring.id)
         project = gcp.organizations.get_project(project_id="my-project-name")
         encrypt_role = gcp.kms.CryptoKeyIAMMember("encrypt_role",
-            crypto_key_id=crypto_key.id,
+            crypto_key_id="example-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
         dest = gcp.bigquery.Table("dest",
@@ -721,7 +715,7 @@ class Job(pulumi.CustomResource):
         ]
         \"\"\",
             encryption_configuration={
-                "kms_key_name": crypto_key.id,
+                "kms_key_name": "example-key",
             },
             opts = pulumi.ResourceOptions(depends_on=[encrypt_role]))
         job = gcp.bigquery.Job("job",
@@ -745,7 +739,7 @@ class Job(pulumi.CustomResource):
                     "table_id": dest.table_id,
                 },
                 "destination_encryption_configuration": {
-                    "kms_key_name": crypto_key.id,
+                    "kms_key_name": "example-key",
                 },
             },
             opts = pulumi.ResourceOptions(depends_on=[encrypt_role]))
@@ -1123,15 +1117,9 @@ class Job(pulumi.CustomResource):
             friendly_name="test",
             description="This is a test description",
             location="US")
-        key_ring = gcp.kms.KeyRing("key_ring",
-            name="example-keyring",
-            location="global")
-        crypto_key = gcp.kms.CryptoKey("crypto_key",
-            name="example-key",
-            key_ring=key_ring.id)
         project = gcp.organizations.get_project(project_id="my-project-name")
         encrypt_role = gcp.kms.CryptoKeyIAMMember("encrypt_role",
-            crypto_key_id=crypto_key.id,
+            crypto_key_id="example-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
         dest = gcp.bigquery.Table("dest",
@@ -1157,7 +1145,7 @@ class Job(pulumi.CustomResource):
         ]
         \"\"\",
             encryption_configuration={
-                "kms_key_name": crypto_key.id,
+                "kms_key_name": "example-key",
             },
             opts = pulumi.ResourceOptions(depends_on=[encrypt_role]))
         job = gcp.bigquery.Job("job",
@@ -1181,7 +1169,7 @@ class Job(pulumi.CustomResource):
                     "table_id": dest.table_id,
                 },
                 "destination_encryption_configuration": {
-                    "kms_key_name": crypto_key.id,
+                    "kms_key_name": "example-key",
                 },
             },
             opts = pulumi.ResourceOptions(depends_on=[encrypt_role]))