pulumi-gcp 8.2.0a1726589141__py3-none-any.whl → 8.2.0a1726675738__py3-none-any.whl

pulumi_gcp/container/_inputs.py

@@ -37,6 +37,8 @@ __all__ = [
     'AttachedClusterProxyConfigArgsDict',
     'AttachedClusterProxyConfigKubernetesSecretArgs',
     'AttachedClusterProxyConfigKubernetesSecretArgsDict',
+    'AttachedClusterSecurityPostureConfigArgs',
+    'AttachedClusterSecurityPostureConfigArgsDict',
     'AttachedClusterWorkloadIdentityConfigArgs',
     'AttachedClusterWorkloadIdentityConfigArgsDict',
     'AwsClusterAuthorizationArgs',
@@ -1018,6 +1020,40 @@ class AttachedClusterProxyConfigKubernetesSecretArgs:
         pulumi.set(self, "namespace", value)
 
 
+if not MYPY:
+    class AttachedClusterSecurityPostureConfigArgsDict(TypedDict):
+        vulnerability_mode: pulumi.Input[str]
+        """
+        Sets the mode of the Kubernetes security posture API's workload vulnerability scanning.
+        Possible values are: `VULNERABILITY_DISABLED`, `VULNERABILITY_ENTERPRISE`.
+        """
+elif False:
+    AttachedClusterSecurityPostureConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AttachedClusterSecurityPostureConfigArgs:
+    def __init__(__self__, *,
+                 vulnerability_mode: pulumi.Input[str]):
+        """
+        :param pulumi.Input[str] vulnerability_mode: Sets the mode of the Kubernetes security posture API's workload vulnerability scanning.
+               Possible values are: `VULNERABILITY_DISABLED`, `VULNERABILITY_ENTERPRISE`.
+        """
+        pulumi.set(__self__, "vulnerability_mode", vulnerability_mode)
+
+    @property
+    @pulumi.getter(name="vulnerabilityMode")
+    def vulnerability_mode(self) -> pulumi.Input[str]:
+        """
+        Sets the mode of the Kubernetes security posture API's workload vulnerability scanning.
+        Possible values are: `VULNERABILITY_DISABLED`, `VULNERABILITY_ENTERPRISE`.
+        """
+        return pulumi.get(self, "vulnerability_mode")
+
+    @vulnerability_mode.setter
+    def vulnerability_mode(self, value: pulumi.Input[str]):
+        pulumi.set(self, "vulnerability_mode", value)
+
+
 if not MYPY:
     class AttachedClusterWorkloadIdentityConfigArgsDict(TypedDict):
         identity_provider: NotRequired[pulumi.Input[str]]
@@ -8203,6 +8239,10 @@ if not MYPY:
         See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
         for more information. Defaults to false.
         """
+        storage_pools: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
         tags: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
         """
         The list of instance tags applied to all nodes. Tags are used to identify
@@ -8267,6 +8307,7 @@ class ClusterNodeConfigArgs:
                  shielded_instance_config: Optional[pulumi.Input['ClusterNodeConfigShieldedInstanceConfigArgs']] = None,
                  sole_tenant_config: Optional[pulumi.Input['ClusterNodeConfigSoleTenantConfigArgs']] = None,
                  spot: Optional[pulumi.Input[bool]] = None,
+                 storage_pools: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  taints: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodeConfigTaintArgs']]]] = None,
                  workload_metadata_config: Optional[pulumi.Input['ClusterNodeConfigWorkloadMetadataConfigArgs']] = None):
@@ -8357,6 +8398,7 @@ class ClusterNodeConfigArgs:
         :param pulumi.Input[bool] spot: A boolean that represents whether the underlying node VMs are spot.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
                for more information. Defaults to false.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: The list of instance tags applied to all nodes. Tags are used to identify
                valid sources or targets for network firewalls.
         :param pulumi.Input[Sequence[pulumi.Input['ClusterNodeConfigTaintArgs']]] taints: A list of [Kubernetes taints](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
@@ -8444,6 +8486,8 @@ class ClusterNodeConfigArgs:
             pulumi.set(__self__, "sole_tenant_config", sole_tenant_config)
         if spot is not None:
             pulumi.set(__self__, "spot", spot)
+        if storage_pools is not None:
+            pulumi.set(__self__, "storage_pools", storage_pools)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
         if taints is not None:
@@ -8944,6 +8988,18 @@ class ClusterNodeConfigArgs:
     def spot(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "spot", value)
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
+    @storage_pools.setter
+    def storage_pools(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "storage_pools", value)
+
     @property
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -12016,6 +12072,10 @@ if not MYPY:
         See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
         for more information. Defaults to false.
         """
+        storage_pools: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
         tags: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
         """
         The list of instance tags applied to all nodes. Tags are used to identify
@@ -12080,6 +12140,7 @@ class ClusterNodePoolNodeConfigArgs:
                  shielded_instance_config: Optional[pulumi.Input['ClusterNodePoolNodeConfigShieldedInstanceConfigArgs']] = None,
                  sole_tenant_config: Optional[pulumi.Input['ClusterNodePoolNodeConfigSoleTenantConfigArgs']] = None,
                  spot: Optional[pulumi.Input[bool]] = None,
+                 storage_pools: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  taints: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolNodeConfigTaintArgs']]]] = None,
                  workload_metadata_config: Optional[pulumi.Input['ClusterNodePoolNodeConfigWorkloadMetadataConfigArgs']] = None):
@@ -12170,6 +12231,7 @@ class ClusterNodePoolNodeConfigArgs:
         :param pulumi.Input[bool] spot: A boolean that represents whether the underlying node VMs are spot.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
                for more information. Defaults to false.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: The list of instance tags applied to all nodes. Tags are used to identify
                valid sources or targets for network firewalls.
         :param pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolNodeConfigTaintArgs']]] taints: A list of [Kubernetes taints](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
@@ -12257,6 +12319,8 @@ class ClusterNodePoolNodeConfigArgs:
             pulumi.set(__self__, "sole_tenant_config", sole_tenant_config)
         if spot is not None:
             pulumi.set(__self__, "spot", spot)
+        if storage_pools is not None:
+            pulumi.set(__self__, "storage_pools", storage_pools)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
         if taints is not None:
@@ -12757,6 +12821,18 @@ class ClusterNodePoolNodeConfigArgs:
     def spot(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "spot", value)
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
+    @storage_pools.setter
+    def storage_pools(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "storage_pools", value)
+
     @property
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -16224,6 +16300,10 @@ if not MYPY:
         """
         Whether the nodes are created as spot VM instances.
         """
+        storage_pools: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
         tags: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
         """
         The list of instance tags applied to all nodes.
@@ -16279,6 +16359,7 @@ class NodePoolNodeConfigArgs:
                  shielded_instance_config: Optional[pulumi.Input['NodePoolNodeConfigShieldedInstanceConfigArgs']] = None,
                  sole_tenant_config: Optional[pulumi.Input['NodePoolNodeConfigSoleTenantConfigArgs']] = None,
                  spot: Optional[pulumi.Input[bool]] = None,
+                 storage_pools: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  tags: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  taints: Optional[pulumi.Input[Sequence[pulumi.Input['NodePoolNodeConfigTaintArgs']]]] = None,
                  workload_metadata_config: Optional[pulumi.Input['NodePoolNodeConfigWorkloadMetadataConfigArgs']] = None):
@@ -16323,6 +16404,7 @@ class NodePoolNodeConfigArgs:
         :param pulumi.Input['NodePoolNodeConfigShieldedInstanceConfigArgs'] shielded_instance_config: Shielded Instance options.
         :param pulumi.Input['NodePoolNodeConfigSoleTenantConfigArgs'] sole_tenant_config: Node affinity options for sole tenant node pools.
         :param pulumi.Input[bool] spot: Whether the nodes are created as spot VM instances.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] tags: The list of instance tags applied to all nodes.
         :param pulumi.Input[Sequence[pulumi.Input['NodePoolNodeConfigTaintArgs']]] taints: List of Kubernetes taints to be applied to each node.
         :param pulumi.Input['NodePoolNodeConfigWorkloadMetadataConfigArgs'] workload_metadata_config: The workload metadata configuration for this node.
@@ -16401,6 +16483,8 @@ class NodePoolNodeConfigArgs:
             pulumi.set(__self__, "sole_tenant_config", sole_tenant_config)
         if spot is not None:
             pulumi.set(__self__, "spot", spot)
+        if storage_pools is not None:
+            pulumi.set(__self__, "storage_pools", storage_pools)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
         if taints is not None:
@@ -16855,6 +16939,18 @@ class NodePoolNodeConfigArgs:
     def spot(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "spot", value)
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
+    @storage_pools.setter
+    def storage_pools(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "storage_pools", value)
+
     @property
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:

pulumi_gcp/container/attached_cluster.py

@@ -35,7 +35,8 @@ class AttachedClusterArgs:
                  monitoring_config: Optional[pulumi.Input['AttachedClusterMonitoringConfigArgs']] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
-                 proxy_config: Optional[pulumi.Input['AttachedClusterProxyConfigArgs']] = None):
+                 proxy_config: Optional[pulumi.Input['AttachedClusterProxyConfigArgs']] = None,
+                 security_posture_config: Optional[pulumi.Input['AttachedClusterSecurityPostureConfigArgs']] = None):
         """
         The set of arguments for constructing a AttachedCluster resource.
         :param pulumi.Input[str] distribution: The Kubernetes distribution of the underlying attached cluster. Supported values:
@@ -69,6 +70,7 @@ class AttachedClusterArgs:
         :param pulumi.Input['AttachedClusterMonitoringConfigArgs'] monitoring_config: Monitoring configuration.
         :param pulumi.Input[str] name: The name of this resource.
         :param pulumi.Input['AttachedClusterProxyConfigArgs'] proxy_config: Support for proxy configuration.
+        :param pulumi.Input['AttachedClusterSecurityPostureConfigArgs'] security_posture_config: Enable/Disable Security Posture API features for the cluster.
         """
         pulumi.set(__self__, "distribution", distribution)
         pulumi.set(__self__, "fleet", fleet)
@@ -95,6 +97,8 @@ class AttachedClusterArgs:
             pulumi.set(__self__, "project", project)
         if proxy_config is not None:
             pulumi.set(__self__, "proxy_config", proxy_config)
+        if security_posture_config is not None:
+            pulumi.set(__self__, "security_posture_config", security_posture_config)
 
     @property
     @pulumi.getter
@@ -290,6 +294,18 @@ class AttachedClusterArgs:
     def proxy_config(self, value: Optional[pulumi.Input['AttachedClusterProxyConfigArgs']]):
         pulumi.set(self, "proxy_config", value)
 
+    @property
+    @pulumi.getter(name="securityPostureConfig")
+    def security_posture_config(self) -> Optional[pulumi.Input['AttachedClusterSecurityPostureConfigArgs']]:
+        """
+        Enable/Disable Security Posture API features for the cluster.
+        """
+        return pulumi.get(self, "security_posture_config")
+
+    @security_posture_config.setter
+    def security_posture_config(self, value: Optional[pulumi.Input['AttachedClusterSecurityPostureConfigArgs']]):
+        pulumi.set(self, "security_posture_config", value)
+
 
 @pulumi.input_type
 class _AttachedClusterState:
@@ -315,6 +331,7 @@ class _AttachedClusterState:
                  project: Optional[pulumi.Input[str]] = None,
                  proxy_config: Optional[pulumi.Input['AttachedClusterProxyConfigArgs']] = None,
                  reconciling: Optional[pulumi.Input[bool]] = None,
+                 security_posture_config: Optional[pulumi.Input['AttachedClusterSecurityPostureConfigArgs']] = None,
                  state: Optional[pulumi.Input[str]] = None,
                  uid: Optional[pulumi.Input[str]] = None,
                  update_time: Optional[pulumi.Input[str]] = None,
@@ -360,6 +377,7 @@ class _AttachedClusterState:
         :param pulumi.Input[str] platform_version: The platform version for the cluster (e.g. `1.23.0-gke.1`).
         :param pulumi.Input['AttachedClusterProxyConfigArgs'] proxy_config: Support for proxy configuration.
         :param pulumi.Input[bool] reconciling: If set, there are currently changes in flight to the cluster.
+        :param pulumi.Input['AttachedClusterSecurityPostureConfigArgs'] security_posture_config: Enable/Disable Security Posture API features for the cluster.
         :param pulumi.Input[str] state: The current state of the cluster. Possible values:
                STATE_UNSPECIFIED, PROVISIONING, RUNNING, RECONCILING, STOPPING, ERROR,
                DEGRADED
@@ -410,6 +428,8 @@ class _AttachedClusterState:
             pulumi.set(__self__, "proxy_config", proxy_config)
         if reconciling is not None:
             pulumi.set(__self__, "reconciling", reconciling)
+        if security_posture_config is not None:
+            pulumi.set(__self__, "security_posture_config", security_posture_config)
         if state is not None:
             pulumi.set(__self__, "state", state)
         if uid is not None:
@@ -685,6 +705,18 @@ class _AttachedClusterState:
     def reconciling(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "reconciling", value)
 
+    @property
+    @pulumi.getter(name="securityPostureConfig")
+    def security_posture_config(self) -> Optional[pulumi.Input['AttachedClusterSecurityPostureConfigArgs']]:
+        """
+        Enable/Disable Security Posture API features for the cluster.
+        """
+        return pulumi.get(self, "security_posture_config")
+
+    @security_posture_config.setter
+    def security_posture_config(self, value: Optional[pulumi.Input['AttachedClusterSecurityPostureConfigArgs']]):
+        pulumi.set(self, "security_posture_config", value)
+
     @property
     @pulumi.getter
     def state(self) -> Optional[pulumi.Input[str]]:
@@ -757,6 +789,7 @@ class AttachedCluster(pulumi.CustomResource):
                  platform_version: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  proxy_config: Optional[pulumi.Input[Union['AttachedClusterProxyConfigArgs', 'AttachedClusterProxyConfigArgsDict']]] = None,
+                 security_posture_config: Optional[pulumi.Input[Union['AttachedClusterSecurityPostureConfigArgs', 'AttachedClusterSecurityPostureConfigArgsDict']]] = None,
                  __props__=None):
         """
         An Anthos cluster running on customer owned infrastructure.
@@ -851,6 +884,9 @@ class AttachedCluster(pulumi.CustomResource):
                     "name": "proxy-config",
                     "namespace": "default",
                 },
+            },
+            security_posture_config={
+                "vulnerability_mode": "VULNERABILITY_ENTERPRISE",
             })
         ```
         ### Container Attached Cluster Ignore Errors
@@ -935,6 +971,7 @@ class AttachedCluster(pulumi.CustomResource):
                Structure is documented below.
         :param pulumi.Input[str] platform_version: The platform version for the cluster (e.g. `1.23.0-gke.1`).
         :param pulumi.Input[Union['AttachedClusterProxyConfigArgs', 'AttachedClusterProxyConfigArgsDict']] proxy_config: Support for proxy configuration.
+        :param pulumi.Input[Union['AttachedClusterSecurityPostureConfigArgs', 'AttachedClusterSecurityPostureConfigArgsDict']] security_posture_config: Enable/Disable Security Posture API features for the cluster.
         """
         ...
     @overload
@@ -1035,6 +1072,9 @@ class AttachedCluster(pulumi.CustomResource):
                     "name": "proxy-config",
                     "namespace": "default",
                 },
+            },
+            security_posture_config={
+                "vulnerability_mode": "VULNERABILITY_ENTERPRISE",
             })
         ```
         ### Container Attached Cluster Ignore Errors
@@ -1116,6 +1156,7 @@ class AttachedCluster(pulumi.CustomResource):
                  platform_version: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  proxy_config: Optional[pulumi.Input[Union['AttachedClusterProxyConfigArgs', 'AttachedClusterProxyConfigArgsDict']]] = None,
+                 security_posture_config: Optional[pulumi.Input[Union['AttachedClusterSecurityPostureConfigArgs', 'AttachedClusterSecurityPostureConfigArgsDict']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -1150,6 +1191,7 @@ class AttachedCluster(pulumi.CustomResource):
             __props__.__dict__["platform_version"] = platform_version
             __props__.__dict__["project"] = project
             __props__.__dict__["proxy_config"] = proxy_config
+            __props__.__dict__["security_posture_config"] = security_posture_config
             __props__.__dict__["cluster_region"] = None
             __props__.__dict__["create_time"] = None
             __props__.__dict__["effective_annotations"] = None
@@ -1191,6 +1233,7 @@ class AttachedCluster(pulumi.CustomResource):
             project: Optional[pulumi.Input[str]] = None,
             proxy_config: Optional[pulumi.Input[Union['AttachedClusterProxyConfigArgs', 'AttachedClusterProxyConfigArgsDict']]] = None,
             reconciling: Optional[pulumi.Input[bool]] = None,
+            security_posture_config: Optional[pulumi.Input[Union['AttachedClusterSecurityPostureConfigArgs', 'AttachedClusterSecurityPostureConfigArgsDict']]] = None,
             state: Optional[pulumi.Input[str]] = None,
             uid: Optional[pulumi.Input[str]] = None,
             update_time: Optional[pulumi.Input[str]] = None,
@@ -1241,6 +1284,7 @@ class AttachedCluster(pulumi.CustomResource):
         :param pulumi.Input[str] platform_version: The platform version for the cluster (e.g. `1.23.0-gke.1`).
         :param pulumi.Input[Union['AttachedClusterProxyConfigArgs', 'AttachedClusterProxyConfigArgsDict']] proxy_config: Support for proxy configuration.
         :param pulumi.Input[bool] reconciling: If set, there are currently changes in flight to the cluster.
+        :param pulumi.Input[Union['AttachedClusterSecurityPostureConfigArgs', 'AttachedClusterSecurityPostureConfigArgsDict']] security_posture_config: Enable/Disable Security Posture API features for the cluster.
         :param pulumi.Input[str] state: The current state of the cluster. Possible values:
                STATE_UNSPECIFIED, PROVISIONING, RUNNING, RECONCILING, STOPPING, ERROR,
                DEGRADED
@@ -1274,6 +1318,7 @@ class AttachedCluster(pulumi.CustomResource):
         __props__.__dict__["project"] = project
         __props__.__dict__["proxy_config"] = proxy_config
         __props__.__dict__["reconciling"] = reconciling
+        __props__.__dict__["security_posture_config"] = security_posture_config
         __props__.__dict__["state"] = state
         __props__.__dict__["uid"] = uid
         __props__.__dict__["update_time"] = update_time
@@ -1462,6 +1507,14 @@ class AttachedCluster(pulumi.CustomResource):
         """
         return pulumi.get(self, "reconciling")
 
+    @property
+    @pulumi.getter(name="securityPostureConfig")
+    def security_posture_config(self) -> pulumi.Output['outputs.AttachedClusterSecurityPostureConfig']:
+        """
+        Enable/Disable Security Posture API features for the cluster.
+        """
+        return pulumi.get(self, "security_posture_config")
+
     @property
     @pulumi.getter
     def state(self) -> pulumi.Output[str]:

pulumi_gcp/container/outputs.py

@@ -27,6 +27,7 @@ __all__ = [
     'AttachedClusterOidcConfig',
     'AttachedClusterProxyConfig',
     'AttachedClusterProxyConfigKubernetesSecret',
+    'AttachedClusterSecurityPostureConfig',
     'AttachedClusterWorkloadIdentityConfig',
     'AwsClusterAuthorization',
     'AwsClusterAuthorizationAdminGroup',
@@ -839,6 +840,43 @@ class AttachedClusterProxyConfigKubernetesSecret(dict):
         return pulumi.get(self, "namespace")
 
 
+@pulumi.output_type
+class AttachedClusterSecurityPostureConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "vulnerabilityMode":
+            suggest = "vulnerability_mode"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in AttachedClusterSecurityPostureConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        AttachedClusterSecurityPostureConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        AttachedClusterSecurityPostureConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 vulnerability_mode: str):
+        """
+        :param str vulnerability_mode: Sets the mode of the Kubernetes security posture API's workload vulnerability scanning.
+               Possible values are: `VULNERABILITY_DISABLED`, `VULNERABILITY_ENTERPRISE`.
+        """
+        pulumi.set(__self__, "vulnerability_mode", vulnerability_mode)
+
+    @property
+    @pulumi.getter(name="vulnerabilityMode")
+    def vulnerability_mode(self) -> str:
+        """
+        Sets the mode of the Kubernetes security posture API's workload vulnerability scanning.
+        Possible values are: `VULNERABILITY_DISABLED`, `VULNERABILITY_ENTERPRISE`.
+        """
+        return pulumi.get(self, "vulnerability_mode")
+
+
 @pulumi.output_type
 class AttachedClusterWorkloadIdentityConfig(dict):
     @staticmethod
@@ -6631,6 +6669,8 @@ class ClusterNodeConfig(dict):
             suggest = "shielded_instance_config"
         elif key == "soleTenantConfig":
             suggest = "sole_tenant_config"
+        elif key == "storagePools":
+            suggest = "storage_pools"
         elif key == "workloadMetadataConfig":
             suggest = "workload_metadata_config"
 
@@ -6683,6 +6723,7 @@ class ClusterNodeConfig(dict):
                  shielded_instance_config: Optional['outputs.ClusterNodeConfigShieldedInstanceConfig'] = None,
                  sole_tenant_config: Optional['outputs.ClusterNodeConfigSoleTenantConfig'] = None,
                  spot: Optional[bool] = None,
+                 storage_pools: Optional[Sequence[str]] = None,
                  tags: Optional[Sequence[str]] = None,
                  taints: Optional[Sequence['outputs.ClusterNodeConfigTaint']] = None,
                  workload_metadata_config: Optional['outputs.ClusterNodeConfigWorkloadMetadataConfig'] = None):
@@ -6773,6 +6814,7 @@ class ClusterNodeConfig(dict):
         :param bool spot: A boolean that represents whether the underlying node VMs are spot.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
                for more information. Defaults to false.
+        :param Sequence[str] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param Sequence[str] tags: The list of instance tags applied to all nodes. Tags are used to identify
                valid sources or targets for network firewalls.
         :param Sequence['ClusterNodeConfigTaintArgs'] taints: A list of [Kubernetes taints](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
@@ -6860,6 +6902,8 @@ class ClusterNodeConfig(dict):
             pulumi.set(__self__, "sole_tenant_config", sole_tenant_config)
         if spot is not None:
             pulumi.set(__self__, "spot", spot)
+        if storage_pools is not None:
+            pulumi.set(__self__, "storage_pools", storage_pools)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
         if taints is not None:
@@ -7212,6 +7256,14 @@ class ClusterNodeConfig(dict):
         """
         return pulumi.get(self, "spot")
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Optional[Sequence[str]]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
     @property
     @pulumi.getter
     def tags(self) -> Optional[Sequence[str]]:
@@ -9640,6 +9692,8 @@ class ClusterNodePoolNodeConfig(dict):
             suggest = "shielded_instance_config"
         elif key == "soleTenantConfig":
             suggest = "sole_tenant_config"
+        elif key == "storagePools":
+            suggest = "storage_pools"
         elif key == "workloadMetadataConfig":
             suggest = "workload_metadata_config"
 
@@ -9692,6 +9746,7 @@ class ClusterNodePoolNodeConfig(dict):
                  shielded_instance_config: Optional['outputs.ClusterNodePoolNodeConfigShieldedInstanceConfig'] = None,
                  sole_tenant_config: Optional['outputs.ClusterNodePoolNodeConfigSoleTenantConfig'] = None,
                  spot: Optional[bool] = None,
+                 storage_pools: Optional[Sequence[str]] = None,
                  tags: Optional[Sequence[str]] = None,
                  taints: Optional[Sequence['outputs.ClusterNodePoolNodeConfigTaint']] = None,
                  workload_metadata_config: Optional['outputs.ClusterNodePoolNodeConfigWorkloadMetadataConfig'] = None):
@@ -9782,6 +9837,7 @@ class ClusterNodePoolNodeConfig(dict):
         :param bool spot: A boolean that represents whether the underlying node VMs are spot.
                See the [official documentation](https://cloud.google.com/kubernetes-engine/docs/concepts/spot-vms)
                for more information. Defaults to false.
+        :param Sequence[str] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param Sequence[str] tags: The list of instance tags applied to all nodes. Tags are used to identify
                valid sources or targets for network firewalls.
         :param Sequence['ClusterNodePoolNodeConfigTaintArgs'] taints: A list of [Kubernetes taints](https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
@@ -9869,6 +9925,8 @@ class ClusterNodePoolNodeConfig(dict):
             pulumi.set(__self__, "sole_tenant_config", sole_tenant_config)
         if spot is not None:
             pulumi.set(__self__, "spot", spot)
+        if storage_pools is not None:
+            pulumi.set(__self__, "storage_pools", storage_pools)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
         if taints is not None:
@@ -10221,6 +10279,14 @@ class ClusterNodePoolNodeConfig(dict):
         """
         return pulumi.get(self, "spot")
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Optional[Sequence[str]]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
     @property
     @pulumi.getter
     def tags(self) -> Optional[Sequence[str]]:
@@ -12996,6 +13062,8 @@ class NodePoolNodeConfig(dict):
             suggest = "shielded_instance_config"
         elif key == "soleTenantConfig":
             suggest = "sole_tenant_config"
+        elif key == "storagePools":
+            suggest = "storage_pools"
         elif key == "workloadMetadataConfig":
             suggest = "workload_metadata_config"
 
@@ -13048,6 +13116,7 @@ class NodePoolNodeConfig(dict):
                  shielded_instance_config: Optional['outputs.NodePoolNodeConfigShieldedInstanceConfig'] = None,
                  sole_tenant_config: Optional['outputs.NodePoolNodeConfigSoleTenantConfig'] = None,
                  spot: Optional[bool] = None,
+                 storage_pools: Optional[Sequence[str]] = None,
                  tags: Optional[Sequence[str]] = None,
                  taints: Optional[Sequence['outputs.NodePoolNodeConfigTaint']] = None,
                  workload_metadata_config: Optional['outputs.NodePoolNodeConfigWorkloadMetadataConfig'] = None):
@@ -13092,6 +13161,7 @@ class NodePoolNodeConfig(dict):
         :param 'NodePoolNodeConfigShieldedInstanceConfigArgs' shielded_instance_config: Shielded Instance options.
         :param 'NodePoolNodeConfigSoleTenantConfigArgs' sole_tenant_config: Node affinity options for sole tenant node pools.
         :param bool spot: Whether the nodes are created as spot VM instances.
+        :param Sequence[str] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param Sequence[str] tags: The list of instance tags applied to all nodes.
         :param Sequence['NodePoolNodeConfigTaintArgs'] taints: List of Kubernetes taints to be applied to each node.
         :param 'NodePoolNodeConfigWorkloadMetadataConfigArgs' workload_metadata_config: The workload metadata configuration for this node.
@@ -13170,6 +13240,8 @@ class NodePoolNodeConfig(dict):
             pulumi.set(__self__, "sole_tenant_config", sole_tenant_config)
         if spot is not None:
             pulumi.set(__self__, "spot", spot)
+        if storage_pools is not None:
+            pulumi.set(__self__, "storage_pools", storage_pools)
         if tags is not None:
             pulumi.set(__self__, "tags", tags)
         if taints is not None:
@@ -13476,6 +13548,14 @@ class NodePoolNodeConfig(dict):
         """
         return pulumi.get(self, "spot")
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Optional[Sequence[str]]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
     @property
     @pulumi.getter
     def tags(self) -> Optional[Sequence[str]]:
@@ -16643,6 +16723,7 @@ class GetClusterNodeConfigResult(dict):
                  shielded_instance_configs: Sequence['outputs.GetClusterNodeConfigShieldedInstanceConfigResult'],
                  sole_tenant_configs: Sequence['outputs.GetClusterNodeConfigSoleTenantConfigResult'],
                  spot: bool,
+                 storage_pools: Sequence[str],
                  tags: Sequence[str],
                  taints: Sequence['outputs.GetClusterNodeConfigTaintResult'],
                  workload_metadata_configs: Sequence['outputs.GetClusterNodeConfigWorkloadMetadataConfigResult']):
@@ -16684,6 +16765,7 @@ class GetClusterNodeConfigResult(dict):
         :param Sequence['GetClusterNodeConfigShieldedInstanceConfigArgs'] shielded_instance_configs: Shielded Instance options.
         :param Sequence['GetClusterNodeConfigSoleTenantConfigArgs'] sole_tenant_configs: Node affinity options for sole tenant node pools.
         :param bool spot: Whether the nodes are created as spot VM instances.
+        :param Sequence[str] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param Sequence[str] tags: The list of instance tags applied to all nodes.
         :param Sequence['GetClusterNodeConfigTaintArgs'] taints: List of Kubernetes taints to be applied to each node.
         :param Sequence['GetClusterNodeConfigWorkloadMetadataConfigArgs'] workload_metadata_configs: The workload metadata configuration for this node.
@@ -16725,6 +16807,7 @@ class GetClusterNodeConfigResult(dict):
         pulumi.set(__self__, "shielded_instance_configs", shielded_instance_configs)
         pulumi.set(__self__, "sole_tenant_configs", sole_tenant_configs)
         pulumi.set(__self__, "spot", spot)
+        pulumi.set(__self__, "storage_pools", storage_pools)
         pulumi.set(__self__, "tags", tags)
         pulumi.set(__self__, "taints", taints)
         pulumi.set(__self__, "workload_metadata_configs", workload_metadata_configs)
@@ -17025,6 +17108,14 @@ class GetClusterNodeConfigResult(dict):
         """
         return pulumi.get(self, "spot")
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Sequence[str]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
     @property
     @pulumi.getter
     def tags(self) -> Sequence[str]:
@@ -18550,6 +18641,7 @@ class GetClusterNodePoolNodeConfigResult(dict):
                  shielded_instance_configs: Sequence['outputs.GetClusterNodePoolNodeConfigShieldedInstanceConfigResult'],
                  sole_tenant_configs: Sequence['outputs.GetClusterNodePoolNodeConfigSoleTenantConfigResult'],
                  spot: bool,
+                 storage_pools: Sequence[str],
                  tags: Sequence[str],
                  taints: Sequence['outputs.GetClusterNodePoolNodeConfigTaintResult'],
                  workload_metadata_configs: Sequence['outputs.GetClusterNodePoolNodeConfigWorkloadMetadataConfigResult']):
@@ -18591,6 +18683,7 @@ class GetClusterNodePoolNodeConfigResult(dict):
         :param Sequence['GetClusterNodePoolNodeConfigShieldedInstanceConfigArgs'] shielded_instance_configs: Shielded Instance options.
         :param Sequence['GetClusterNodePoolNodeConfigSoleTenantConfigArgs'] sole_tenant_configs: Node affinity options for sole tenant node pools.
         :param bool spot: Whether the nodes are created as spot VM instances.
+        :param Sequence[str] storage_pools: The list of Storage Pools where boot disks are provisioned.
         :param Sequence[str] tags: The list of instance tags applied to all nodes.
         :param Sequence['GetClusterNodePoolNodeConfigTaintArgs'] taints: List of Kubernetes taints to be applied to each node.
         :param Sequence['GetClusterNodePoolNodeConfigWorkloadMetadataConfigArgs'] workload_metadata_configs: The workload metadata configuration for this node.
@@ -18632,6 +18725,7 @@ class GetClusterNodePoolNodeConfigResult(dict):
         pulumi.set(__self__, "shielded_instance_configs", shielded_instance_configs)
         pulumi.set(__self__, "sole_tenant_configs", sole_tenant_configs)
         pulumi.set(__self__, "spot", spot)
+        pulumi.set(__self__, "storage_pools", storage_pools)
         pulumi.set(__self__, "tags", tags)
         pulumi.set(__self__, "taints", taints)
         pulumi.set(__self__, "workload_metadata_configs", workload_metadata_configs)
@@ -18932,6 +19026,14 @@ class GetClusterNodePoolNodeConfigResult(dict):
         """
         return pulumi.get(self, "spot")
 
+    @property
+    @pulumi.getter(name="storagePools")
+    def storage_pools(self) -> Sequence[str]:
+        """
+        The list of Storage Pools where boot disks are provisioned.
+        """
+        return pulumi.get(self, "storage_pools")
+
     @property
     @pulumi.getter
     def tags(self) -> Sequence[str]: