pulumi-gcp 8.22.0a1741790977__py3-none-any.whl → 8.23.0__py3-none-any.whl

pulumi_gcp/firebase/data_connect_service.py

@@ -505,7 +505,7 @@ class DataConnectService(pulumi.CustomResource):
             project="my-project-name",
             service="firebasedataconnect.googleapis.com",
             disable_on_destroy=False)
-        # Create an FDC service
+        # Create a Firebase Data Connect service
         default = gcp.firebase.DataConnectService("default",
             project="my-project-name",
             location="us-central1",
@@ -520,6 +520,25 @@ class DataConnectService(pulumi.CustomResource):
             },
             opts = pulumi.ResourceOptions(depends_on=[fdc]))
         ```
+        ### Firebasedataconnect Service With Force Deletion
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        # Enable Firebase Data Connect API
+        fdc = gcp.projects.Service("fdc",
+            project="my-project-name",
+            service="firebasedataconnect.googleapis.com",
+            disable_on_destroy=False)
+        # Create a Firebase Data Connect service
+        default = gcp.firebase.DataConnectService("default",
+            project="my-project-name",
+            location="us-central1",
+            service_id="example-service",
+            deletion_policy="FORCE",
+            opts = pulumi.ResourceOptions(depends_on=[fdc]))
+        ```
 
         ## Import
 
@@ -596,7 +615,7 @@ class DataConnectService(pulumi.CustomResource):
             project="my-project-name",
             service="firebasedataconnect.googleapis.com",
             disable_on_destroy=False)
-        # Create an FDC service
+        # Create a Firebase Data Connect service
         default = gcp.firebase.DataConnectService("default",
             project="my-project-name",
             location="us-central1",
@@ -611,6 +630,25 @@ class DataConnectService(pulumi.CustomResource):
             },
             opts = pulumi.ResourceOptions(depends_on=[fdc]))
         ```
+        ### Firebasedataconnect Service With Force Deletion
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        # Enable Firebase Data Connect API
+        fdc = gcp.projects.Service("fdc",
+            project="my-project-name",
+            service="firebasedataconnect.googleapis.com",
+            disable_on_destroy=False)
+        # Create a Firebase Data Connect service
+        default = gcp.firebase.DataConnectService("default",
+            project="my-project-name",
+            location="us-central1",
+            service_id="example-service",
+            deletion_policy="FORCE",
+            opts = pulumi.ResourceOptions(depends_on=[fdc]))
+        ```
 
         ## Import
 

pulumi_gcp/firebase/hosting_version.py

@@ -309,7 +309,7 @@ class HostingVersion(pulumi.CustomResource):
             project="my-project-name",
             name="cloud-function-via-hosting",
             description="A Cloud Function connected to Firebase Hosing",
-            runtime="nodejs16",
+            runtime="nodejs20",
             available_memory_mb=128,
             source_archive_bucket=bucket.name,
             source_archive_object=object.name,
@@ -516,7 +516,7 @@ class HostingVersion(pulumi.CustomResource):
             project="my-project-name",
             name="cloud-function-via-hosting",
             description="A Cloud Function connected to Firebase Hosing",
-            runtime="nodejs16",
+            runtime="nodejs20",
             available_memory_mb=128,
             source_archive_bucket=bucket.name,
             source_archive_object=object.name,

pulumi_gcp/firebase/outputs.py

@@ -16,6 +16,9 @@ from .. import _utilities
 from . import outputs
 
 __all__ = [
+    'AppHostingBackendCodebase',
+    'AppHostingBackendManagedResource',
+    'AppHostingBackendManagedResourceRunService',
     'ExtensionsInstanceConfig',
     'ExtensionsInstanceErrorStatus',
     'ExtensionsInstanceRuntimeData',
@@ -42,6 +45,130 @@ __all__ = [
     'HostingVersionConfigRewriteRun',
 ]
 
+@pulumi.output_type
+class AppHostingBackendCodebase(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "rootDirectory":
+            suggest = "root_directory"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in AppHostingBackendCodebase. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        AppHostingBackendCodebase.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        AppHostingBackendCodebase.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 repository: str,
+                 root_directory: Optional[str] = None):
+        """
+        :param str repository: The resource name for the Developer Connect
+               [`gitRepositoryLink`](https://cloud.google.com/developer-connect/docs/api/reference/rest/v1/projects.locations.connections.gitRepositoryLinks)
+               connected to this backend, in the format:
+               projects/{project}/locations/{location}/connections/{connection}/gitRepositoryLinks/{repositoryLink}
+        :param str root_directory: If `repository` is provided, the directory relative to the root of the
+               repository to use as the root for the deployed web app.
+        """
+        pulumi.set(__self__, "repository", repository)
+        if root_directory is not None:
+            pulumi.set(__self__, "root_directory", root_directory)
+
+    @property
+    @pulumi.getter
+    def repository(self) -> str:
+        """
+        The resource name for the Developer Connect
+        [`gitRepositoryLink`](https://cloud.google.com/developer-connect/docs/api/reference/rest/v1/projects.locations.connections.gitRepositoryLinks)
+        connected to this backend, in the format:
+        projects/{project}/locations/{location}/connections/{connection}/gitRepositoryLinks/{repositoryLink}
+        """
+        return pulumi.get(self, "repository")
+
+    @property
+    @pulumi.getter(name="rootDirectory")
+    def root_directory(self) -> Optional[str]:
+        """
+        If `repository` is provided, the directory relative to the root of the
+        repository to use as the root for the deployed web app.
+        """
+        return pulumi.get(self, "root_directory")
+
+
+@pulumi.output_type
+class AppHostingBackendManagedResource(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "runServices":
+            suggest = "run_services"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in AppHostingBackendManagedResource. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        AppHostingBackendManagedResource.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        AppHostingBackendManagedResource.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 run_services: Optional[Sequence['outputs.AppHostingBackendManagedResourceRunService']] = None):
+        """
+        :param Sequence['AppHostingBackendManagedResourceRunServiceArgs'] run_services: (Output)
+               A managed Cloud Run
+               [`service`](https://cloud.google.com/run/docs/reference/rest/v2/projects.locations.services#resource:-service).
+               Structure is documented below.
+        """
+        if run_services is not None:
+            pulumi.set(__self__, "run_services", run_services)
+
+    @property
+    @pulumi.getter(name="runServices")
+    def run_services(self) -> Optional[Sequence['outputs.AppHostingBackendManagedResourceRunService']]:
+        """
+        (Output)
+        A managed Cloud Run
+        [`service`](https://cloud.google.com/run/docs/reference/rest/v2/projects.locations.services#resource:-service).
+        Structure is documented below.
+        """
+        return pulumi.get(self, "run_services")
+
+
+@pulumi.output_type
+class AppHostingBackendManagedResourceRunService(dict):
+    def __init__(__self__, *,
+                 service: Optional[str] = None):
+        """
+        :param str service: (Output)
+               The name of the Cloud Run
+               [`service`](https://cloud.google.com/run/docs/reference/rest/v2/projects.locations.services#resource:-service),
+               in the format:
+               projects/{project}/locations/{location}/services/{serviceId}
+        """
+        if service is not None:
+            pulumi.set(__self__, "service", service)
+
+    @property
+    @pulumi.getter
+    def service(self) -> Optional[str]:
+        """
+        (Output)
+        The name of the Cloud Run
+        [`service`](https://cloud.google.com/run/docs/reference/rest/v2/projects.locations.services#resource:-service),
+        in the format:
+        projects/{project}/locations/{location}/services/{serviceId}
+        """
+        return pulumi.get(self, "service")
+
+
 @pulumi.output_type
 class ExtensionsInstanceConfig(dict):
     @staticmethod

pulumi_gcp/iam/__init__.py

@@ -12,6 +12,8 @@ from .get_rule import *
 from .get_testable_permissions import *
 from .get_workload_identity_pool import *
 from .get_workload_identity_pool_provider import *
+from .oauth_client import *
+from .oauth_client_credential import *
 from .organizations_policy_binding import *
 from .principal_access_boundary_policy import *
 from .projects_policy_binding import *

pulumi_gcp/iam/_inputs.py

@@ -703,8 +703,10 @@ if not MYPY:
     class FoldersPolicyBindingTargetArgsDict(TypedDict):
         principal_set: NotRequired[pulumi.Input[str]]
         """
-        Required. Immutable. The resource name of the policy to be bound.
-        The binding parent and policy must belong to the same Organization (or Project).
+        Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+        Examples for each one of the following supported principal set types:
+        * Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
+        It must be parent by the policy binding's parent (the folder).
 
         - - -
         """
@@ -716,8 +718,10 @@ class FoldersPolicyBindingTargetArgs:
     def __init__(__self__, *,
                  principal_set: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] principal_set: Required. Immutable. The resource name of the policy to be bound.
-               The binding parent and policy must belong to the same Organization (or Project).
+        :param pulumi.Input[str] principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+               Examples for each one of the following supported principal set types:
+               * Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
+               It must be parent by the policy binding's parent (the folder).
                
                - - -
         """
@@ -728,8 +732,10 @@ class FoldersPolicyBindingTargetArgs:
     @pulumi.getter(name="principalSet")
     def principal_set(self) -> Optional[pulumi.Input[str]]:
         """
-        Required. Immutable. The resource name of the policy to be bound.
-        The binding parent and policy must belong to the same Organization (or Project).
+        Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+        Examples for each one of the following supported principal set types:
+        * Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
+        It must be parent by the policy binding's parent (the folder).
 
         - - -
         """
@@ -836,8 +842,12 @@ if not MYPY:
     class OrganizationsPolicyBindingTargetArgsDict(TypedDict):
         principal_set: NotRequired[pulumi.Input[str]]
         """
-        Required. Immutable. The resource name of the policy to be bound.
-        The binding parent and policy must belong to the same Organization (or Project).
+        Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+        Examples for each one of the following supported principal set types:
+        * Organization `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
+        * Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
+        * Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
+        It must be parent by the policy binding's parent (the organization).
 
         - - -
         """
@@ -849,8 +859,12 @@ class OrganizationsPolicyBindingTargetArgs:
     def __init__(__self__, *,
                  principal_set: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] principal_set: Required. Immutable. The resource name of the policy to be bound.
-               The binding parent and policy must belong to the same Organization (or Project).
+        :param pulumi.Input[str] principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+               Examples for each one of the following supported principal set types:
+               * Organization `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
+               * Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
+               * Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
+               It must be parent by the policy binding's parent (the organization).
                
                - - -
         """
@@ -861,8 +875,12 @@ class OrganizationsPolicyBindingTargetArgs:
     @pulumi.getter(name="principalSet")
     def principal_set(self) -> Optional[pulumi.Input[str]]:
         """
-        Required. Immutable. The resource name of the policy to be bound.
-        The binding parent and policy must belong to the same Organization (or Project).
+        Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+        Examples for each one of the following supported principal set types:
+        * Organization `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
+        * Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
+        * Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
+        It must be parent by the policy binding's parent (the organization).
 
         - - -
         """
@@ -1126,8 +1144,13 @@ if not MYPY:
     class ProjectsPolicyBindingTargetArgsDict(TypedDict):
         principal_set: NotRequired[pulumi.Input[str]]
         """
-        Required. Immutable. The resource name of the policy to be bound.
-        The binding parent and policy must belong to the same Organization (or Project).
+        Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+        Examples for each one of the following supported principal set types:
+        * Project:
+        * `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
+        * `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
+        * Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
+        It must be parent by the policy binding's parent (the project).
 
         - - -
         """
@@ -1139,8 +1162,13 @@ class ProjectsPolicyBindingTargetArgs:
     def __init__(__self__, *,
                  principal_set: Optional[pulumi.Input[str]] = None):
         """
-        :param pulumi.Input[str] principal_set: Required. Immutable. The resource name of the policy to be bound.
-               The binding parent and policy must belong to the same Organization (or Project).
+        :param pulumi.Input[str] principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+               Examples for each one of the following supported principal set types:
+               * Project:
+               * `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
+               * `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
+               * Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
+               It must be parent by the policy binding's parent (the project).
                
                - - -
         """
@@ -1151,8 +1179,13 @@ class ProjectsPolicyBindingTargetArgs:
     @pulumi.getter(name="principalSet")
     def principal_set(self) -> Optional[pulumi.Input[str]]:
         """
-        Required. Immutable. The resource name of the policy to be bound.
-        The binding parent and policy must belong to the same Organization (or Project).
+        Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
+        Examples for each one of the following supported principal set types:
+        * Project:
+        * `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
+        * `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
+        * Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
+        It must be parent by the policy binding's parent (the project).
 
         - - -
         """

pulumi_gcp/iam/folders_policy_binding.py

@@ -497,14 +497,6 @@ class FoldersPolicyBinding(pulumi.CustomResource):
                  target: Optional[pulumi.Input[Union['FoldersPolicyBindingTargetArgs', 'FoldersPolicyBindingTargetArgsDict']]] = None,
                  __props__=None):
         """
-        A policy binding to a folder
-
-        To get more information about FoldersPolicyBinding, see:
-
-        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/folders.locations.policyBindings)
-        * How-to Guides
-            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
-
         ## Example Usage
 
         ### Iam Folders Policy Binding
@@ -517,20 +509,20 @@ class FoldersPolicyBinding(pulumi.CustomResource):
         pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
             organization="123456789",
             location="global",
-            display_name="test folder binding",
+            display_name="binding for all principals in the folder",
             principal_access_boundary_policy_id="my-pab-policy")
         folder = gcp.organizations.Folder("folder",
-            display_name="test folder",
+            display_name="my folder",
             parent="organizations/123456789",
             deletion_protection=False)
         wait120s = time.index.Sleep("wait_120s", create_duration=120s,
         opts = pulumi.ResourceOptions(depends_on=[folder]))
-        my_folder_binding = gcp.iam.FoldersPolicyBinding("my-folder-binding",
+        binding_for_all_folder_principals = gcp.iam.FoldersPolicyBinding("binding-for-all-folder-principals",
             folder=folder.folder_id,
             location="global",
-            display_name="test folder binding",
+            display_name="binding for all principals in the folder",
             policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
-            policy_binding_id="test-folder-binding",
+            policy_binding_id="binding-for-all-folder-principals",
             policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
             target={
                 "principal_set": folder.folder_id.apply(lambda folder_id: f"//cloudresourcemanager.googleapis.com/folders/{folder_id}"),
@@ -589,14 +581,6 @@ class FoldersPolicyBinding(pulumi.CustomResource):
                  args: FoldersPolicyBindingArgs,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        A policy binding to a folder
-
-        To get more information about FoldersPolicyBinding, see:
-
-        * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/folders.locations.policyBindings)
-        * How-to Guides
-            * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
-
         ## Example Usage
 
         ### Iam Folders Policy Binding
@@ -609,20 +593,20 @@ class FoldersPolicyBinding(pulumi.CustomResource):
         pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
             organization="123456789",
             location="global",
-            display_name="test folder binding",
+            display_name="binding for all principals in the folder",
             principal_access_boundary_policy_id="my-pab-policy")
         folder = gcp.organizations.Folder("folder",
-            display_name="test folder",
+            display_name="my folder",
             parent="organizations/123456789",
             deletion_protection=False)
         wait120s = time.index.Sleep("wait_120s", create_duration=120s,
         opts = pulumi.ResourceOptions(depends_on=[folder]))
-        my_folder_binding = gcp.iam.FoldersPolicyBinding("my-folder-binding",
+        binding_for_all_folder_principals = gcp.iam.FoldersPolicyBinding("binding-for-all-folder-principals",
             folder=folder.folder_id,
             location="global",
-            display_name="test folder binding",
+            display_name="binding for all principals in the folder",
             policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
-            policy_binding_id="test-folder-binding",
+            policy_binding_id="binding-for-all-folder-principals",
             policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
             target={
                 "principal_set": folder.folder_id.apply(lambda folder_id: f"//cloudresourcemanager.googleapis.com/folders/{folder_id}"),