pulumi-gcp 8.21.0a1741183435__py3-none-any.whl → 8.22.0__py3-none-any.whl

pulumi_gcp/__init__.py

@@ -4946,6 +4946,14 @@ _utilities.register(
    "gcp:eventarc/channel:Channel": "Channel"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "eventarc/googleApiSource",
+  "fqn": "pulumi_gcp.eventarc",
+  "classes": {
+   "gcp:eventarc/googleApiSource:GoogleApiSource": "GoogleApiSource"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "eventarc/googleChannelConfig",
@@ -5818,6 +5826,22 @@ _utilities.register(
    "gcp:iam/foldersPolicyBinding:FoldersPolicyBinding": "FoldersPolicyBinding"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "iam/oauthClient",
+  "fqn": "pulumi_gcp.iam",
+  "classes": {
+   "gcp:iam/oauthClient:OauthClient": "OauthClient"
+  }
+ },
+ {
+  "pkg": "gcp",
+  "mod": "iam/oauthClientCredential",
+  "fqn": "pulumi_gcp.iam",
+  "classes": {
+   "gcp:iam/oauthClientCredential:OauthClientCredential": "OauthClientCredential"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "iam/organizationsPolicyBinding",
@@ -6882,6 +6906,14 @@ _utilities.register(
    "gcp:networksecurity/authzPolicy:AuthzPolicy": "AuthzPolicy"
   }
  },
+ {
+  "pkg": "gcp",
+  "mod": "networksecurity/backendAuthenticationConfig",
+  "fqn": "pulumi_gcp.networksecurity",
+  "classes": {
+   "gcp:networksecurity/backendAuthenticationConfig:BackendAuthenticationConfig": "BackendAuthenticationConfig"
+  }
+ },
  {
   "pkg": "gcp",
   "mod": "networksecurity/clientTlsPolicy",

pulumi_gcp/alloydb/_inputs.py

@@ -83,6 +83,8 @@ __all__ = [
     'InstanceObservabilityConfigArgsDict',
     'InstancePscInstanceConfigArgs',
     'InstancePscInstanceConfigArgsDict',
+    'InstancePscInstanceConfigPscInterfaceConfigArgs',
+    'InstancePscInstanceConfigPscInterfaceConfigArgsDict',
     'InstanceQueryInsightsConfigArgs',
     'InstanceQueryInsightsConfigArgsDict',
     'InstanceReadPoolConfigArgs',
@@ -2105,6 +2107,12 @@ if not MYPY:
         The DNS name of the instance for PSC connectivity.
         Name convention: <uid>.<uid>.<region>.alloydb-psc.goog
         """
+        psc_interface_configs: NotRequired[pulumi.Input[Sequence[pulumi.Input['InstancePscInstanceConfigPscInterfaceConfigArgsDict']]]]
+        """
+        Configurations for setting up PSC interfaces attached to the instance
+        which are used for outbound connectivity. Currently, AlloyDB supports only 0 or 1 PSC interface.
+        Structure is documented below.
+        """
         service_attachment_link: NotRequired[pulumi.Input[str]]
         """
         (Output)
@@ -2120,6 +2128,7 @@ class InstancePscInstanceConfigArgs:
     def __init__(__self__, *,
                  allowed_consumer_projects: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  psc_dns_name: Optional[pulumi.Input[str]] = None,
+                 psc_interface_configs: Optional[pulumi.Input[Sequence[pulumi.Input['InstancePscInstanceConfigPscInterfaceConfigArgs']]]] = None,
                  service_attachment_link: Optional[pulumi.Input[str]] = None):
         """
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_consumer_projects: List of consumer projects that are allowed to create PSC endpoints to service-attachments to this instance.
@@ -2127,6 +2136,9 @@ class InstancePscInstanceConfigArgs:
         :param pulumi.Input[str] psc_dns_name: (Output)
                The DNS name of the instance for PSC connectivity.
                Name convention: <uid>.<uid>.<region>.alloydb-psc.goog
+        :param pulumi.Input[Sequence[pulumi.Input['InstancePscInstanceConfigPscInterfaceConfigArgs']]] psc_interface_configs: Configurations for setting up PSC interfaces attached to the instance
+               which are used for outbound connectivity. Currently, AlloyDB supports only 0 or 1 PSC interface.
+               Structure is documented below.
         :param pulumi.Input[str] service_attachment_link: (Output)
                The service attachment created when Private Service Connect (PSC) is enabled for the instance.
                The name of the resource will be in the format of
@@ -2136,6 +2148,8 @@ class InstancePscInstanceConfigArgs:
             pulumi.set(__self__, "allowed_consumer_projects", allowed_consumer_projects)
         if psc_dns_name is not None:
             pulumi.set(__self__, "psc_dns_name", psc_dns_name)
+        if psc_interface_configs is not None:
+            pulumi.set(__self__, "psc_interface_configs", psc_interface_configs)
         if service_attachment_link is not None:
             pulumi.set(__self__, "service_attachment_link", service_attachment_link)
 
@@ -2166,6 +2180,20 @@ class InstancePscInstanceConfigArgs:
     def psc_dns_name(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "psc_dns_name", value)
 
+    @property
+    @pulumi.getter(name="pscInterfaceConfigs")
+    def psc_interface_configs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['InstancePscInstanceConfigPscInterfaceConfigArgs']]]]:
+        """
+        Configurations for setting up PSC interfaces attached to the instance
+        which are used for outbound connectivity. Currently, AlloyDB supports only 0 or 1 PSC interface.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "psc_interface_configs")
+
+    @psc_interface_configs.setter
+    def psc_interface_configs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['InstancePscInstanceConfigPscInterfaceConfigArgs']]]]):
+        pulumi.set(self, "psc_interface_configs", value)
+
     @property
     @pulumi.getter(name="serviceAttachmentLink")
     def service_attachment_link(self) -> Optional[pulumi.Input[str]]:
@@ -2182,6 +2210,44 @@ class InstancePscInstanceConfigArgs:
         pulumi.set(self, "service_attachment_link", value)
 
 
+if not MYPY:
+    class InstancePscInstanceConfigPscInterfaceConfigArgsDict(TypedDict):
+        network_attachment_resource: NotRequired[pulumi.Input[str]]
+        """
+        The network attachment resource created in the consumer project to which the PSC interface will be linked.
+        This is of the format: "projects/${CONSUMER_PROJECT}/regions/${REGION}/networkAttachments/${NETWORK_ATTACHMENT_NAME}".
+        The network attachment must be in the same region as the instance.
+        """
+elif False:
+    InstancePscInstanceConfigPscInterfaceConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class InstancePscInstanceConfigPscInterfaceConfigArgs:
+    def __init__(__self__, *,
+                 network_attachment_resource: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] network_attachment_resource: The network attachment resource created in the consumer project to which the PSC interface will be linked.
+               This is of the format: "projects/${CONSUMER_PROJECT}/regions/${REGION}/networkAttachments/${NETWORK_ATTACHMENT_NAME}".
+               The network attachment must be in the same region as the instance.
+        """
+        if network_attachment_resource is not None:
+            pulumi.set(__self__, "network_attachment_resource", network_attachment_resource)
+
+    @property
+    @pulumi.getter(name="networkAttachmentResource")
+    def network_attachment_resource(self) -> Optional[pulumi.Input[str]]:
+        """
+        The network attachment resource created in the consumer project to which the PSC interface will be linked.
+        This is of the format: "projects/${CONSUMER_PROJECT}/regions/${REGION}/networkAttachments/${NETWORK_ATTACHMENT_NAME}".
+        The network attachment must be in the same region as the instance.
+        """
+        return pulumi.get(self, "network_attachment_resource")
+
+    @network_attachment_resource.setter
+    def network_attachment_resource(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "network_attachment_resource", value)
+
+
 if not MYPY:
     class InstanceQueryInsightsConfigArgsDict(TypedDict):
         query_plans_per_minute: NotRequired[pulumi.Input[int]]

pulumi_gcp/alloydb/outputs.py

@@ -50,6 +50,7 @@ __all__ = [
     'InstanceNetworkConfigAuthorizedExternalNetwork',
     'InstanceObservabilityConfig',
     'InstancePscInstanceConfig',
+    'InstancePscInstanceConfigPscInterfaceConfig',
     'InstanceQueryInsightsConfig',
     'InstanceReadPoolConfig',
     'GetClusterAutomatedBackupPolicyResult',
@@ -83,6 +84,7 @@ __all__ = [
     'GetInstanceNetworkConfigAuthorizedExternalNetworkResult',
     'GetInstanceObservabilityConfigResult',
     'GetInstancePscInstanceConfigResult',
+    'GetInstancePscInstanceConfigPscInterfaceConfigResult',
     'GetInstanceQueryInsightsConfigResult',
     'GetInstanceReadPoolConfigResult',
     'GetLocationsLocationResult',
@@ -1843,6 +1845,8 @@ class InstancePscInstanceConfig(dict):
             suggest = "allowed_consumer_projects"
         elif key == "pscDnsName":
             suggest = "psc_dns_name"
+        elif key == "pscInterfaceConfigs":
+            suggest = "psc_interface_configs"
         elif key == "serviceAttachmentLink":
             suggest = "service_attachment_link"
 
@@ -1860,6 +1864,7 @@ class InstancePscInstanceConfig(dict):
     def __init__(__self__, *,
                  allowed_consumer_projects: Optional[Sequence[str]] = None,
                  psc_dns_name: Optional[str] = None,
+                 psc_interface_configs: Optional[Sequence['outputs.InstancePscInstanceConfigPscInterfaceConfig']] = None,
                  service_attachment_link: Optional[str] = None):
         """
         :param Sequence[str] allowed_consumer_projects: List of consumer projects that are allowed to create PSC endpoints to service-attachments to this instance.
@@ -1867,6 +1872,9 @@ class InstancePscInstanceConfig(dict):
         :param str psc_dns_name: (Output)
                The DNS name of the instance for PSC connectivity.
                Name convention: <uid>.<uid>.<region>.alloydb-psc.goog
+        :param Sequence['InstancePscInstanceConfigPscInterfaceConfigArgs'] psc_interface_configs: Configurations for setting up PSC interfaces attached to the instance
+               which are used for outbound connectivity. Currently, AlloyDB supports only 0 or 1 PSC interface.
+               Structure is documented below.
         :param str service_attachment_link: (Output)
                The service attachment created when Private Service Connect (PSC) is enabled for the instance.
                The name of the resource will be in the format of
@@ -1876,6 +1884,8 @@ class InstancePscInstanceConfig(dict):
             pulumi.set(__self__, "allowed_consumer_projects", allowed_consumer_projects)
         if psc_dns_name is not None:
             pulumi.set(__self__, "psc_dns_name", psc_dns_name)
+        if psc_interface_configs is not None:
+            pulumi.set(__self__, "psc_interface_configs", psc_interface_configs)
         if service_attachment_link is not None:
             pulumi.set(__self__, "service_attachment_link", service_attachment_link)
 
@@ -1898,6 +1908,16 @@ class InstancePscInstanceConfig(dict):
         """
         return pulumi.get(self, "psc_dns_name")
 
+    @property
+    @pulumi.getter(name="pscInterfaceConfigs")
+    def psc_interface_configs(self) -> Optional[Sequence['outputs.InstancePscInstanceConfigPscInterfaceConfig']]:
+        """
+        Configurations for setting up PSC interfaces attached to the instance
+        which are used for outbound connectivity. Currently, AlloyDB supports only 0 or 1 PSC interface.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "psc_interface_configs")
+
     @property
     @pulumi.getter(name="serviceAttachmentLink")
     def service_attachment_link(self) -> Optional[str]:
@@ -1910,6 +1930,46 @@ class InstancePscInstanceConfig(dict):
         return pulumi.get(self, "service_attachment_link")
 
 
+@pulumi.output_type
+class InstancePscInstanceConfigPscInterfaceConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "networkAttachmentResource":
+            suggest = "network_attachment_resource"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in InstancePscInstanceConfigPscInterfaceConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        InstancePscInstanceConfigPscInterfaceConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        InstancePscInstanceConfigPscInterfaceConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 network_attachment_resource: Optional[str] = None):
+        """
+        :param str network_attachment_resource: The network attachment resource created in the consumer project to which the PSC interface will be linked.
+               This is of the format: "projects/${CONSUMER_PROJECT}/regions/${REGION}/networkAttachments/${NETWORK_ATTACHMENT_NAME}".
+               The network attachment must be in the same region as the instance.
+        """
+        if network_attachment_resource is not None:
+            pulumi.set(__self__, "network_attachment_resource", network_attachment_resource)
+
+    @property
+    @pulumi.getter(name="networkAttachmentResource")
+    def network_attachment_resource(self) -> Optional[str]:
+        """
+        The network attachment resource created in the consumer project to which the PSC interface will be linked.
+        This is of the format: "projects/${CONSUMER_PROJECT}/regions/${REGION}/networkAttachments/${NETWORK_ATTACHMENT_NAME}".
+        The network attachment must be in the same region as the instance.
+        """
+        return pulumi.get(self, "network_attachment_resource")
+
+
 @pulumi.output_type
 class InstanceQueryInsightsConfig(dict):
     @staticmethod
@@ -3039,18 +3099,22 @@ class GetInstancePscInstanceConfigResult(dict):
     def __init__(__self__, *,
                  allowed_consumer_projects: Sequence[str],
                  psc_dns_name: str,
+                 psc_interface_configs: Sequence['outputs.GetInstancePscInstanceConfigPscInterfaceConfigResult'],
                  service_attachment_link: str):
         """
         :param Sequence[str] allowed_consumer_projects: List of consumer projects that are allowed to create PSC endpoints to service-attachments to this instance.
                These should be specified as project numbers only.
         :param str psc_dns_name: The DNS name of the instance for PSC connectivity.
                Name convention: <uid>.<uid>.<region>.alloydb-psc.goog
+        :param Sequence['GetInstancePscInstanceConfigPscInterfaceConfigArgs'] psc_interface_configs: Configurations for setting up PSC interfaces attached to the instance
+               which are used for outbound connectivity. Currently, AlloyDB supports only 0 or 1 PSC interface.
         :param str service_attachment_link: The service attachment created when Private Service Connect (PSC) is enabled for the instance.
                The name of the resource will be in the format of
                'projects/<alloydb-tenant-project-number>/regions/<region-name>/serviceAttachments/<service-attachment-name>'
         """
         pulumi.set(__self__, "allowed_consumer_projects", allowed_consumer_projects)
         pulumi.set(__self__, "psc_dns_name", psc_dns_name)
+        pulumi.set(__self__, "psc_interface_configs", psc_interface_configs)
         pulumi.set(__self__, "service_attachment_link", service_attachment_link)
 
     @property
@@ -3071,6 +3135,15 @@ class GetInstancePscInstanceConfigResult(dict):
         """
         return pulumi.get(self, "psc_dns_name")
 
+    @property
+    @pulumi.getter(name="pscInterfaceConfigs")
+    def psc_interface_configs(self) -> Sequence['outputs.GetInstancePscInstanceConfigPscInterfaceConfigResult']:
+        """
+        Configurations for setting up PSC interfaces attached to the instance
+        which are used for outbound connectivity. Currently, AlloyDB supports only 0 or 1 PSC interface.
+        """
+        return pulumi.get(self, "psc_interface_configs")
+
     @property
     @pulumi.getter(name="serviceAttachmentLink")
     def service_attachment_link(self) -> str:
@@ -3082,6 +3155,28 @@ class GetInstancePscInstanceConfigResult(dict):
         return pulumi.get(self, "service_attachment_link")
 
 
+@pulumi.output_type
+class GetInstancePscInstanceConfigPscInterfaceConfigResult(dict):
+    def __init__(__self__, *,
+                 network_attachment_resource: str):
+        """
+        :param str network_attachment_resource: The network attachment resource created in the consumer project to which the PSC interface will be linked.
+               This is of the format: "projects/${CONSUMER_PROJECT}/regions/${REGION}/networkAttachments/${NETWORK_ATTACHMENT_NAME}".
+               The network attachment must be in the same region as the instance.
+        """
+        pulumi.set(__self__, "network_attachment_resource", network_attachment_resource)
+
+    @property
+    @pulumi.getter(name="networkAttachmentResource")
+    def network_attachment_resource(self) -> str:
+        """
+        The network attachment resource created in the consumer project to which the PSC interface will be linked.
+        This is of the format: "projects/${CONSUMER_PROJECT}/regions/${REGION}/networkAttachments/${NETWORK_ATTACHMENT_NAME}".
+        The network attachment must be in the same region as the instance.
+        """
+        return pulumi.get(self, "network_attachment_resource")
+
+
 @pulumi.output_type
 class GetInstanceQueryInsightsConfigResult(dict):
     def __init__(__self__, *,

pulumi_gcp/backupdisasterrecovery/_inputs.py

@@ -273,7 +273,7 @@ if not MYPY:
         days_of_weeks: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
         """
         Specifies days of week like MONDAY or TUESDAY, on which jobs will run. This is required for `recurrence_type`, `WEEKLY` and is not applicable otherwise.
-        Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`.
+        Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`, `SUNDAY`.
         """
         hourly_frequency: NotRequired[pulumi.Input[int]]
         """
@@ -313,7 +313,7 @@ class BackupPlanBackupRuleStandardScheduleArgs:
                Structure is documented below.
         :param pulumi.Input[Sequence[pulumi.Input[int]]] days_of_months: Specifies days of months like 1, 5, or 14 on which jobs will run.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] days_of_weeks: Specifies days of week like MONDAY or TUESDAY, on which jobs will run. This is required for `recurrence_type`, `WEEKLY` and is not applicable otherwise.
-               Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`.
+               Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`, `SUNDAY`.
         :param pulumi.Input[int] hourly_frequency: Specifies frequency for hourly backups. An hourly frequency of 2 means jobs will run every 2 hours from start time till end time defined.
                This is required for `recurrence_type`, `HOURLY` and is not applicable otherwise.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] months: Specifies values of months
@@ -392,7 +392,7 @@ class BackupPlanBackupRuleStandardScheduleArgs:
     def days_of_weeks(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
         Specifies days of week like MONDAY or TUESDAY, on which jobs will run. This is required for `recurrence_type`, `WEEKLY` and is not applicable otherwise.
-        Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`.
+        Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`, `SUNDAY`.
         """
         return pulumi.get(self, "days_of_weeks")
 

pulumi_gcp/backupdisasterrecovery/outputs.py

@@ -260,7 +260,7 @@ class BackupPlanBackupRuleStandardSchedule(dict):
                Structure is documented below.
         :param Sequence[int] days_of_months: Specifies days of months like 1, 5, or 14 on which jobs will run.
         :param Sequence[str] days_of_weeks: Specifies days of week like MONDAY or TUESDAY, on which jobs will run. This is required for `recurrence_type`, `WEEKLY` and is not applicable otherwise.
-               Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`.
+               Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`, `SUNDAY`.
         :param int hourly_frequency: Specifies frequency for hourly backups. An hourly frequency of 2 means jobs will run every 2 hours from start time till end time defined.
                This is required for `recurrence_type`, `HOURLY` and is not applicable otherwise.
         :param Sequence[str] months: Specifies values of months
@@ -323,7 +323,7 @@ class BackupPlanBackupRuleStandardSchedule(dict):
     def days_of_weeks(self) -> Optional[Sequence[str]]:
         """
         Specifies days of week like MONDAY or TUESDAY, on which jobs will run. This is required for `recurrence_type`, `WEEKLY` and is not applicable otherwise.
-        Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`.
+        Each value may be one of: `DAY_OF_WEEK_UNSPECIFIED`, `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`, `SUNDAY`.
         """
         return pulumi.get(self, "days_of_weeks")
 
@@ -751,7 +751,7 @@ class GetBackupPlanBackupRuleStandardScheduleResult(dict):
         :param Sequence['GetBackupPlanBackupRuleStandardScheduleBackupWindowArgs'] backup_windows: A BackupWindow defines the window of the day during which backup jobs will run. Jobs are queued at the beginning of the window and will be marked as
                'NOT_RUN' if they do not start by the end of the window.
         :param Sequence[int] days_of_months: Specifies days of months like 1, 5, or 14 on which jobs will run.
-        :param Sequence[str] days_of_weeks: Specifies days of week like MONDAY or TUESDAY, on which jobs will run. This is required for 'recurrence_type', 'WEEKLY' and is not applicable otherwise. Possible values: ["DAY_OF_WEEK_UNSPECIFIED", "MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY"]
+        :param Sequence[str] days_of_weeks: Specifies days of week like MONDAY or TUESDAY, on which jobs will run. This is required for 'recurrence_type', 'WEEKLY' and is not applicable otherwise. Possible values: ["DAY_OF_WEEK_UNSPECIFIED", "MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY"]
         :param int hourly_frequency: Specifies frequency for hourly backups. An hourly frequency of 2 means jobs will run every 2 hours from start time till end time defined.
                This is required for 'recurrence_type', 'HOURLY' and is not applicable otherwise.
         :param Sequence[str] months: Specifies values of months Possible values: ["MONTH_UNSPECIFIED", "JANUARY", "FEBRUARY", "MARCH", "APRIL", "MAY", "JUNE", "JULY", "AUGUST", "SEPTEMBER", "OCTOBER", "NOVEMBER", "DECEMBER"]
@@ -789,7 +789,7 @@ class GetBackupPlanBackupRuleStandardScheduleResult(dict):
     @pulumi.getter(name="daysOfWeeks")
     def days_of_weeks(self) -> Sequence[str]:
         """
-        Specifies days of week like MONDAY or TUESDAY, on which jobs will run. This is required for 'recurrence_type', 'WEEKLY' and is not applicable otherwise. Possible values: ["DAY_OF_WEEK_UNSPECIFIED", "MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY"]
+        Specifies days of week like MONDAY or TUESDAY, on which jobs will run. This is required for 'recurrence_type', 'WEEKLY' and is not applicable otherwise. Possible values: ["DAY_OF_WEEK_UNSPECIFIED", "MONDAY", "TUESDAY", "WEDNESDAY", "THURSDAY", "FRIDAY", "SATURDAY", "SUNDAY"]
         """
         return pulumi.get(self, "days_of_weeks")
 

pulumi_gcp/certificatemanager/certificate.py

@@ -54,7 +54,9 @@ class CertificateArgs:
                EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence.
                See https://cloud.google.com/vpc/docs/edge-locations.
                ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs).
-               See https://cloud.google.com/compute/docs/regions-zones
+               See https://cloud.google.com/compute/docs/regions-zones.
+               CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured.
+               See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.
         :param pulumi.Input['CertificateSelfManagedArgs'] self_managed: Certificate data for a SelfManaged Certificate.
                SelfManaged Certificates are uploaded by the user. Updating such
                certificates before they expire remains the user's responsibility.
@@ -170,7 +172,9 @@ class CertificateArgs:
         EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence.
         See https://cloud.google.com/vpc/docs/edge-locations.
         ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs).
-        See https://cloud.google.com/compute/docs/regions-zones
+        See https://cloud.google.com/compute/docs/regions-zones.
+        CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured.
+        See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.
         """
         return pulumi.get(self, "scope")
 
@@ -237,7 +241,9 @@ class _CertificateState:
                EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence.
                See https://cloud.google.com/vpc/docs/edge-locations.
                ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs).
-               See https://cloud.google.com/compute/docs/regions-zones
+               See https://cloud.google.com/compute/docs/regions-zones.
+               CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured.
+               See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.
         :param pulumi.Input['CertificateSelfManagedArgs'] self_managed: Certificate data for a SelfManaged Certificate.
                SelfManaged Certificates are uploaded by the user. Updating such
                certificates before they expire remains the user's responsibility.
@@ -396,7 +402,9 @@ class _CertificateState:
         EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence.
         See https://cloud.google.com/vpc/docs/edge-locations.
         ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs).
-        See https://cloud.google.com/compute/docs/regions-zones
+        See https://cloud.google.com/compute/docs/regions-zones.
+        CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured.
+        See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.
         """
         return pulumi.get(self, "scope")
 
@@ -699,6 +707,22 @@ class Certificate(pulumi.CustomResource):
                 "dns_authorizations": [instance.id],
             })
         ```
+        ### Certificate Manager Client Auth Certificate
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+        import pulumi_std as std
+
+        default = gcp.certificatemanager.Certificate("default",
+            name="client-auth-cert",
+            description="Global cert",
+            scope="CLIENT_AUTH",
+            self_managed={
+                "pem_certificate": std.file(input="test-fixtures/cert.pem").result,
+                "pem_private_key": std.file(input="test-fixtures/private-key.pem").result,
+            })
+        ```
 
         ## Import
 
@@ -749,7 +773,9 @@ class Certificate(pulumi.CustomResource):
                EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence.
                See https://cloud.google.com/vpc/docs/edge-locations.
                ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs).
-               See https://cloud.google.com/compute/docs/regions-zones
+               See https://cloud.google.com/compute/docs/regions-zones.
+               CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured.
+               See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.
         :param pulumi.Input[Union['CertificateSelfManagedArgs', 'CertificateSelfManagedArgsDict']] self_managed: Certificate data for a SelfManaged Certificate.
                SelfManaged Certificates are uploaded by the user. Updating such
                certificates before they expire remains the user's responsibility.
@@ -1026,6 +1052,22 @@ class Certificate(pulumi.CustomResource):
                 "dns_authorizations": [instance.id],
             })
         ```
+        ### Certificate Manager Client Auth Certificate
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+        import pulumi_std as std
+
+        default = gcp.certificatemanager.Certificate("default",
+            name="client-auth-cert",
+            description="Global cert",
+            scope="CLIENT_AUTH",
+            self_managed={
+                "pem_certificate": std.file(input="test-fixtures/cert.pem").result,
+                "pem_private_key": std.file(input="test-fixtures/private-key.pem").result,
+            })
+        ```
 
         ## Import
 
@@ -1151,7 +1193,9 @@ class Certificate(pulumi.CustomResource):
                EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence.
                See https://cloud.google.com/vpc/docs/edge-locations.
                ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs).
-               See https://cloud.google.com/compute/docs/regions-zones
+               See https://cloud.google.com/compute/docs/regions-zones.
+               CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured.
+               See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.
         :param pulumi.Input[Union['CertificateSelfManagedArgs', 'CertificateSelfManagedArgsDict']] self_managed: Certificate data for a SelfManaged Certificate.
                SelfManaged Certificates are uploaded by the user. Updating such
                certificates before they expire remains the user's responsibility.
@@ -1268,7 +1312,9 @@ class Certificate(pulumi.CustomResource):
         EDGE_CACHE: Certificates with scope EDGE_CACHE are special-purposed certificates, served from Edge Points of Presence.
         See https://cloud.google.com/vpc/docs/edge-locations.
         ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs).
-        See https://cloud.google.com/compute/docs/regions-zones
+        See https://cloud.google.com/compute/docs/regions-zones.
+        CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured.
+        See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.
         """
         return pulumi.get(self, "scope")
 

pulumi_gcp/certificatemanager/outputs.py

@@ -936,7 +936,10 @@ class GetCertificatesCertificateResult(dict):
                See https://cloud.google.com/vpc/docs/edge-locations.
                
                ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs).
-               See https://cloud.google.com/compute/docs/regions-zones
+               See https://cloud.google.com/compute/docs/regions-zones.
+               
+               CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured.
+               See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.
         """
         pulumi.set(__self__, "description", description)
         pulumi.set(__self__, "effective_labels", effective_labels)
@@ -1040,7 +1043,10 @@ class GetCertificatesCertificateResult(dict):
         See https://cloud.google.com/vpc/docs/edge-locations.
 
         ALL_REGIONS: Certificates with ALL_REGIONS scope are served from all GCP regions (You can only use ALL_REGIONS with global certs).
-        See https://cloud.google.com/compute/docs/regions-zones
+        See https://cloud.google.com/compute/docs/regions-zones.
+
+        CLIENT_AUTH: Certificates with CLIENT_AUTH scope are used by a load balancer (TLS client) to be presented to the backend (TLS server) when backend mTLS is configured.
+        See https://cloud.google.com/load-balancing/docs/backend-authenticated-tls-backend-mtls#client-certificate.
         """
         return pulumi.get(self, "scope")
 

pulumi_gcp/compute/__init__.py

@@ -76,6 +76,7 @@ from .get_region_instance_group_manager import *
 from .get_region_instance_template import *
 from .get_region_network_endpoint_group import *
 from .get_region_ssl_certificate import *
+from .get_region_ssl_policy import *
 from .get_regions import *
 from .get_reservation import *
 from .get_resource_policy import *