pulumi-gcp 8.22.0a1741790977__py3-none-any.whl → 8.23.0__py3-none-any.whl
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- pulumi_gcp/__init__.py +64 -0
- pulumi_gcp/alloydb/_inputs.py +93 -1
- pulumi_gcp/alloydb/outputs.py +128 -2
- pulumi_gcp/applicationintegration/client.py +18 -24
- pulumi_gcp/backupdisasterrecovery/_inputs.py +3 -3
- pulumi_gcp/backupdisasterrecovery/outputs.py +4 -4
- pulumi_gcp/bigquery/_inputs.py +20 -0
- pulumi_gcp/bigquery/outputs.py +12 -0
- pulumi_gcp/bigquery/table.py +61 -0
- pulumi_gcp/bigtable/table.py +7 -7
- pulumi_gcp/certificatemanager/certificate.py +53 -7
- pulumi_gcp/certificatemanager/outputs.py +8 -2
- pulumi_gcp/clouddeploy/_inputs.py +20 -0
- pulumi_gcp/clouddeploy/outputs.py +15 -1
- pulumi_gcp/cloudfunctions/function.py +11 -11
- pulumi_gcp/cloudfunctionsv2/function.py +24 -24
- pulumi_gcp/cloudidentity/get_group_transitive_memberships.py +41 -2
- pulumi_gcp/cloudidentity/outputs.py +18 -38
- pulumi_gcp/compute/__init__.py +1 -0
- pulumi_gcp/compute/_inputs.py +600 -17
- pulumi_gcp/compute/backend_service.py +195 -7
- pulumi_gcp/compute/disk.py +108 -0
- pulumi_gcp/compute/firewall_policy.py +20 -0
- pulumi_gcp/compute/firewall_policy_association.py +28 -2
- pulumi_gcp/compute/get_backend_service.py +12 -1
- pulumi_gcp/compute/get_disk.py +23 -1
- pulumi_gcp/compute/get_region_disk.py +23 -1
- pulumi_gcp/compute/get_region_ssl_policy.py +203 -0
- pulumi_gcp/compute/outputs.py +623 -23
- pulumi_gcp/compute/region_backend_service.py +193 -7
- pulumi_gcp/compute/region_disk.py +114 -0
- pulumi_gcp/compute/region_network_endpoint_group.py +2 -2
- pulumi_gcp/compute/shared_vpc_service_project.py +0 -4
- pulumi_gcp/compute/subnetwork.py +256 -1
- pulumi_gcp/compute/target_https_proxy.py +7 -7
- pulumi_gcp/config/__init__.pyi +2 -0
- pulumi_gcp/config/vars.py +4 -0
- pulumi_gcp/container/_inputs.py +6 -6
- pulumi_gcp/container/get_attached_versions.py +2 -2
- pulumi_gcp/container/outputs.py +8 -8
- pulumi_gcp/dataform/repository.py +49 -0
- pulumi_gcp/dataproc/get_metastore_service.py +26 -4
- pulumi_gcp/dataproc/metastore_federation.py +56 -0
- pulumi_gcp/dataproc/metastore_service.py +58 -2
- pulumi_gcp/datastream/_inputs.py +273 -0
- pulumi_gcp/datastream/connection_profile.py +54 -2
- pulumi_gcp/datastream/outputs.py +224 -0
- pulumi_gcp/eventarc/__init__.py +2 -0
- pulumi_gcp/eventarc/_inputs.py +1798 -0
- pulumi_gcp/eventarc/channel.py +85 -93
- pulumi_gcp/eventarc/google_api_source.py +997 -0
- pulumi_gcp/eventarc/outputs.py +1378 -0
- pulumi_gcp/eventarc/pipeline.py +1596 -0
- pulumi_gcp/firebase/__init__.py +1 -0
- pulumi_gcp/firebase/_inputs.py +154 -0
- pulumi_gcp/firebase/app_hosting_backend.py +1303 -0
- pulumi_gcp/firebase/data_connect_service.py +40 -2
- pulumi_gcp/firebase/hosting_version.py +2 -2
- pulumi_gcp/firebase/outputs.py +127 -0
- pulumi_gcp/iam/__init__.py +2 -0
- pulumi_gcp/iam/_inputs.py +51 -18
- pulumi_gcp/iam/folders_policy_binding.py +10 -26
- pulumi_gcp/iam/oauth_client.py +979 -0
- pulumi_gcp/iam/oauth_client_credential.py +641 -0
- pulumi_gcp/iam/organizations_policy_binding.py +8 -24
- pulumi_gcp/iam/outputs.py +34 -12
- pulumi_gcp/iam/principal_access_boundary_policy.py +58 -22
- pulumi_gcp/iam/projects_policy_binding.py +8 -24
- pulumi_gcp/kms/crypto_key_version.py +14 -7
- pulumi_gcp/kms/get_key_rings.py +39 -2
- pulumi_gcp/managedkafka/__init__.py +2 -0
- pulumi_gcp/managedkafka/_inputs.py +263 -0
- pulumi_gcp/managedkafka/connect_cluster.py +795 -0
- pulumi_gcp/managedkafka/connector.py +695 -0
- pulumi_gcp/managedkafka/outputs.py +248 -0
- pulumi_gcp/memorystore/instance.py +7 -7
- pulumi_gcp/monitoring/_inputs.py +15 -18
- pulumi_gcp/monitoring/alert_policy.py +46 -0
- pulumi_gcp/monitoring/outputs.py +10 -12
- pulumi_gcp/monitoring/uptime_check_config.py +2 -2
- pulumi_gcp/networksecurity/__init__.py +1 -0
- pulumi_gcp/networksecurity/_inputs.py +673 -18
- pulumi_gcp/networksecurity/backend_authentication_config.py +847 -0
- pulumi_gcp/networksecurity/gateway_security_policy.py +0 -7
- pulumi_gcp/networksecurity/intercept_deployment.py +178 -94
- pulumi_gcp/networksecurity/intercept_deployment_group.py +161 -77
- pulumi_gcp/networksecurity/intercept_endpoint_group.py +161 -66
- pulumi_gcp/networksecurity/intercept_endpoint_group_association.py +137 -80
- pulumi_gcp/networksecurity/mirroring_deployment.py +200 -94
- pulumi_gcp/networksecurity/mirroring_deployment_group.py +181 -77
- pulumi_gcp/networksecurity/mirroring_endpoint_group.py +185 -80
- pulumi_gcp/networksecurity/mirroring_endpoint_group_association.py +165 -105
- pulumi_gcp/networksecurity/outputs.py +495 -12
- pulumi_gcp/networksecurity/tls_inspection_policy.py +14 -0
- pulumi_gcp/networkservices/endpoint_policy.py +12 -0
- pulumi_gcp/networkservices/gateway.py +242 -120
- pulumi_gcp/networkservices/grpc_route.py +12 -0
- pulumi_gcp/networkservices/http_route.py +16 -0
- pulumi_gcp/networkservices/mesh.py +16 -0
- pulumi_gcp/networkservices/service_binding.py +14 -0
- pulumi_gcp/networkservices/tcp_route.py +16 -0
- pulumi_gcp/networkservices/tls_route.py +12 -0
- pulumi_gcp/projects/__init__.py +2 -0
- pulumi_gcp/projects/get_iam_custom_role.py +198 -0
- pulumi_gcp/projects/get_iam_custom_roles.py +164 -0
- pulumi_gcp/projects/outputs.py +96 -0
- pulumi_gcp/provider.py +20 -0
- pulumi_gcp/pulumi-plugin.json +1 -1
- pulumi_gcp/servicenetworking/peered_dns_domain.py +4 -0
- pulumi_gcp/sql/outputs.py +8 -8
- pulumi_gcp/storage/_inputs.py +14 -6
- pulumi_gcp/storage/insights_report_config.py +121 -20
- pulumi_gcp/storage/outputs.py +7 -4
- pulumi_gcp/tpu/_inputs.py +21 -1
- pulumi_gcp/tpu/outputs.py +13 -1
- pulumi_gcp/tpu/v2_vm.py +2 -0
- pulumi_gcp/vmwareengine/_inputs.py +6 -0
- pulumi_gcp/vmwareengine/outputs.py +8 -0
- pulumi_gcp/workflows/workflow.py +75 -7
- pulumi_gcp/workstations/workstation_cluster.py +137 -1
- {pulumi_gcp-8.22.0a1741790977.dist-info → pulumi_gcp-8.23.0.dist-info}/METADATA +2 -2
- {pulumi_gcp-8.22.0a1741790977.dist-info → pulumi_gcp-8.23.0.dist-info}/RECORD +124 -113
- {pulumi_gcp-8.22.0a1741790977.dist-info → pulumi_gcp-8.23.0.dist-info}/WHEEL +1 -1
- {pulumi_gcp-8.22.0a1741790977.dist-info → pulumi_gcp-8.23.0.dist-info}/top_level.txt +0 -0
@@ -497,14 +497,6 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
|
|
497
497
|
target: Optional[pulumi.Input[Union['OrganizationsPolicyBindingTargetArgs', 'OrganizationsPolicyBindingTargetArgsDict']]] = None,
|
498
498
|
__props__=None):
|
499
499
|
"""
|
500
|
-
A policy binding to an organizations
|
501
|
-
|
502
|
-
To get more information about OrganizationsPolicyBinding, see:
|
503
|
-
|
504
|
-
* [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.policyBindings)
|
505
|
-
* How-to Guides
|
506
|
-
* [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
|
507
|
-
|
508
500
|
## Example Usage
|
509
501
|
|
510
502
|
### Iam Organizations Policy Binding
|
@@ -517,16 +509,16 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
|
|
517
509
|
pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
|
518
510
|
organization="123456789",
|
519
511
|
location="global",
|
520
|
-
display_name="
|
512
|
+
display_name="binding for all principals in the Organization",
|
521
513
|
principal_access_boundary_policy_id="my-pab-policy")
|
522
514
|
wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
|
523
515
|
opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
|
524
|
-
|
516
|
+
binding_for_all_org_principals = gcp.iam.OrganizationsPolicyBinding("binding-for-all-org-principals",
|
525
517
|
organization="123456789",
|
526
518
|
location="global",
|
527
|
-
display_name="
|
519
|
+
display_name="binding for all principals in the Organization",
|
528
520
|
policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
|
529
|
-
policy_binding_id="
|
521
|
+
policy_binding_id="binding-for-all-org-principals",
|
530
522
|
policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
|
531
523
|
target={
|
532
524
|
"principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
|
@@ -585,14 +577,6 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
|
|
585
577
|
args: OrganizationsPolicyBindingArgs,
|
586
578
|
opts: Optional[pulumi.ResourceOptions] = None):
|
587
579
|
"""
|
588
|
-
A policy binding to an organizations
|
589
|
-
|
590
|
-
To get more information about OrganizationsPolicyBinding, see:
|
591
|
-
|
592
|
-
* [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.policyBindings)
|
593
|
-
* How-to Guides
|
594
|
-
* [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
|
595
|
-
|
596
580
|
## Example Usage
|
597
581
|
|
598
582
|
### Iam Organizations Policy Binding
|
@@ -605,16 +589,16 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
|
|
605
589
|
pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
|
606
590
|
organization="123456789",
|
607
591
|
location="global",
|
608
|
-
display_name="
|
592
|
+
display_name="binding for all principals in the Organization",
|
609
593
|
principal_access_boundary_policy_id="my-pab-policy")
|
610
594
|
wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
|
611
595
|
opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
|
612
|
-
|
596
|
+
binding_for_all_org_principals = gcp.iam.OrganizationsPolicyBinding("binding-for-all-org-principals",
|
613
597
|
organization="123456789",
|
614
598
|
location="global",
|
615
|
-
display_name="
|
599
|
+
display_name="binding for all principals in the Organization",
|
616
600
|
policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
|
617
|
-
policy_binding_id="
|
601
|
+
policy_binding_id="binding-for-all-org-principals",
|
618
602
|
policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
|
619
603
|
target={
|
620
604
|
"principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
|
pulumi_gcp/iam/outputs.py
CHANGED
@@ -531,8 +531,10 @@ class FoldersPolicyBindingTarget(dict):
|
|
531
531
|
def __init__(__self__, *,
|
532
532
|
principal_set: Optional[str] = None):
|
533
533
|
"""
|
534
|
-
:param str principal_set: Required. Immutable.
|
535
|
-
|
534
|
+
:param str principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
|
535
|
+
Examples for each one of the following supported principal set types:
|
536
|
+
* Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
|
537
|
+
It must be parent by the policy binding's parent (the folder).
|
536
538
|
|
537
539
|
- - -
|
538
540
|
"""
|
@@ -543,8 +545,10 @@ class FoldersPolicyBindingTarget(dict):
|
|
543
545
|
@pulumi.getter(name="principalSet")
|
544
546
|
def principal_set(self) -> Optional[str]:
|
545
547
|
"""
|
546
|
-
Required. Immutable.
|
547
|
-
|
548
|
+
Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
|
549
|
+
Examples for each one of the following supported principal set types:
|
550
|
+
* Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
|
551
|
+
It must be parent by the policy binding's parent (the folder).
|
548
552
|
|
549
553
|
- - -
|
550
554
|
"""
|
@@ -628,8 +632,12 @@ class OrganizationsPolicyBindingTarget(dict):
|
|
628
632
|
def __init__(__self__, *,
|
629
633
|
principal_set: Optional[str] = None):
|
630
634
|
"""
|
631
|
-
:param str principal_set: Required. Immutable.
|
632
|
-
|
635
|
+
:param str principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
|
636
|
+
Examples for each one of the following supported principal set types:
|
637
|
+
* Organization `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
|
638
|
+
* Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
|
639
|
+
* Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
|
640
|
+
It must be parent by the policy binding's parent (the organization).
|
633
641
|
|
634
642
|
- - -
|
635
643
|
"""
|
@@ -640,8 +648,12 @@ class OrganizationsPolicyBindingTarget(dict):
|
|
640
648
|
@pulumi.getter(name="principalSet")
|
641
649
|
def principal_set(self) -> Optional[str]:
|
642
650
|
"""
|
643
|
-
Required. Immutable.
|
644
|
-
|
651
|
+
Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
|
652
|
+
Examples for each one of the following supported principal set types:
|
653
|
+
* Organization `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
|
654
|
+
* Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
|
655
|
+
* Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
|
656
|
+
It must be parent by the policy binding's parent (the organization).
|
645
657
|
|
646
658
|
- - -
|
647
659
|
"""
|
@@ -837,8 +849,13 @@ class ProjectsPolicyBindingTarget(dict):
|
|
837
849
|
def __init__(__self__, *,
|
838
850
|
principal_set: Optional[str] = None):
|
839
851
|
"""
|
840
|
-
:param str principal_set: Required. Immutable.
|
841
|
-
|
852
|
+
:param str principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
|
853
|
+
Examples for each one of the following supported principal set types:
|
854
|
+
* Project:
|
855
|
+
* `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
|
856
|
+
* `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
|
857
|
+
* Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
|
858
|
+
It must be parent by the policy binding's parent (the project).
|
842
859
|
|
843
860
|
- - -
|
844
861
|
"""
|
@@ -849,8 +866,13 @@ class ProjectsPolicyBindingTarget(dict):
|
|
849
866
|
@pulumi.getter(name="principalSet")
|
850
867
|
def principal_set(self) -> Optional[str]:
|
851
868
|
"""
|
852
|
-
Required. Immutable.
|
853
|
-
|
869
|
+
Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
|
870
|
+
Examples for each one of the following supported principal set types:
|
871
|
+
* Project:
|
872
|
+
* `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
|
873
|
+
* `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
|
874
|
+
* Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
|
875
|
+
It must be parent by the policy binding's parent (the project).
|
854
876
|
|
855
877
|
- - -
|
856
878
|
"""
|
@@ -366,14 +366,6 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
|
|
366
366
|
principal_access_boundary_policy_id: Optional[pulumi.Input[str]] = None,
|
367
367
|
__props__=None):
|
368
368
|
"""
|
369
|
-
An IAM Principal Access Boundary Policy resource
|
370
|
-
|
371
|
-
To get more information about PrincipalAccessBoundaryPolicy, see:
|
372
|
-
|
373
|
-
* [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.principalAccessBoundaryPolicies)
|
374
|
-
* How-to Guides
|
375
|
-
* [Create and apply Principal Access Boundaries](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create)
|
376
|
-
|
377
369
|
## Example Usage
|
378
370
|
|
379
371
|
### Iam Principal Access Boundary Policy
|
@@ -382,11 +374,37 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
|
|
382
374
|
import pulumi
|
383
375
|
import pulumi_gcp as gcp
|
384
376
|
|
385
|
-
|
377
|
+
pab_policy_for_org = gcp.iam.PrincipalAccessBoundaryPolicy("pab-policy-for-org",
|
378
|
+
organization="123456789",
|
379
|
+
location="global",
|
380
|
+
display_name="PAB policy for Organization",
|
381
|
+
principal_access_boundary_policy_id="pab-policy-for-org")
|
382
|
+
```
|
383
|
+
### Iam Organizations Policy Binding
|
384
|
+
|
385
|
+
```python
|
386
|
+
import pulumi
|
387
|
+
import pulumi_gcp as gcp
|
388
|
+
import pulumi_time as time
|
389
|
+
|
390
|
+
pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
|
391
|
+
organization="123456789",
|
392
|
+
location="global",
|
393
|
+
display_name="Binding for all principals in the Organization",
|
394
|
+
principal_access_boundary_policy_id="my-pab-policy")
|
395
|
+
wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
|
396
|
+
opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
|
397
|
+
my_pab_policy = gcp.iam.OrganizationsPolicyBinding("my-pab-policy",
|
386
398
|
organization="123456789",
|
387
399
|
location="global",
|
388
|
-
display_name="
|
389
|
-
|
400
|
+
display_name="Binding for all principals in the Organization",
|
401
|
+
policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
|
402
|
+
policy_binding_id="binding-for-all-org-principals",
|
403
|
+
policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
|
404
|
+
target={
|
405
|
+
"principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
|
406
|
+
},
|
407
|
+
opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
|
390
408
|
```
|
391
409
|
|
392
410
|
## Import
|
@@ -432,14 +450,6 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
|
|
432
450
|
args: PrincipalAccessBoundaryPolicyArgs,
|
433
451
|
opts: Optional[pulumi.ResourceOptions] = None):
|
434
452
|
"""
|
435
|
-
An IAM Principal Access Boundary Policy resource
|
436
|
-
|
437
|
-
To get more information about PrincipalAccessBoundaryPolicy, see:
|
438
|
-
|
439
|
-
* [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.principalAccessBoundaryPolicies)
|
440
|
-
* How-to Guides
|
441
|
-
* [Create and apply Principal Access Boundaries](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create)
|
442
|
-
|
443
453
|
## Example Usage
|
444
454
|
|
445
455
|
### Iam Principal Access Boundary Policy
|
@@ -448,11 +458,37 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
|
|
448
458
|
import pulumi
|
449
459
|
import pulumi_gcp as gcp
|
450
460
|
|
451
|
-
|
461
|
+
pab_policy_for_org = gcp.iam.PrincipalAccessBoundaryPolicy("pab-policy-for-org",
|
462
|
+
organization="123456789",
|
463
|
+
location="global",
|
464
|
+
display_name="PAB policy for Organization",
|
465
|
+
principal_access_boundary_policy_id="pab-policy-for-org")
|
466
|
+
```
|
467
|
+
### Iam Organizations Policy Binding
|
468
|
+
|
469
|
+
```python
|
470
|
+
import pulumi
|
471
|
+
import pulumi_gcp as gcp
|
472
|
+
import pulumi_time as time
|
473
|
+
|
474
|
+
pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
|
475
|
+
organization="123456789",
|
476
|
+
location="global",
|
477
|
+
display_name="Binding for all principals in the Organization",
|
478
|
+
principal_access_boundary_policy_id="my-pab-policy")
|
479
|
+
wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
|
480
|
+
opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
|
481
|
+
my_pab_policy = gcp.iam.OrganizationsPolicyBinding("my-pab-policy",
|
452
482
|
organization="123456789",
|
453
483
|
location="global",
|
454
|
-
display_name="
|
455
|
-
|
484
|
+
display_name="Binding for all principals in the Organization",
|
485
|
+
policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
|
486
|
+
policy_binding_id="binding-for-all-org-principals",
|
487
|
+
policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
|
488
|
+
target={
|
489
|
+
"principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
|
490
|
+
},
|
491
|
+
opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
|
456
492
|
```
|
457
493
|
|
458
494
|
## Import
|
@@ -490,14 +490,6 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
|
|
490
490
|
target: Optional[pulumi.Input[Union['ProjectsPolicyBindingTargetArgs', 'ProjectsPolicyBindingTargetArgsDict']]] = None,
|
491
491
|
__props__=None):
|
492
492
|
"""
|
493
|
-
A policy binding to a Project
|
494
|
-
|
495
|
-
To get more information about ProjectsPolicyBinding, see:
|
496
|
-
|
497
|
-
* [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/projects.locations.policyBindings)
|
498
|
-
* How-to Guides
|
499
|
-
* [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
|
500
|
-
|
501
493
|
## Example Usage
|
502
494
|
|
503
495
|
### Iam Projects Policy Binding
|
@@ -511,16 +503,16 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
|
|
511
503
|
pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
|
512
504
|
organization="123456789",
|
513
505
|
location="global",
|
514
|
-
display_name="
|
506
|
+
display_name="binding for all principals in the project",
|
515
507
|
principal_access_boundary_policy_id="my-pab-policy")
|
516
508
|
wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
|
517
509
|
opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
|
518
|
-
|
510
|
+
binding_for_all_project_principals = gcp.iam.ProjectsPolicyBinding("binding-for-all-project-principals",
|
519
511
|
project=project.project_id,
|
520
512
|
location="global",
|
521
|
-
display_name="
|
513
|
+
display_name="binding for all principals in the project",
|
522
514
|
policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
|
523
|
-
policy_binding_id="
|
515
|
+
policy_binding_id="binding-for-all-project-principals",
|
524
516
|
policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
|
525
517
|
target={
|
526
518
|
"principal_set": f"//cloudresourcemanager.googleapis.com/projects/{project.project_id}",
|
@@ -584,14 +576,6 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
|
|
584
576
|
args: ProjectsPolicyBindingArgs,
|
585
577
|
opts: Optional[pulumi.ResourceOptions] = None):
|
586
578
|
"""
|
587
|
-
A policy binding to a Project
|
588
|
-
|
589
|
-
To get more information about ProjectsPolicyBinding, see:
|
590
|
-
|
591
|
-
* [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/projects.locations.policyBindings)
|
592
|
-
* How-to Guides
|
593
|
-
* [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
|
594
|
-
|
595
579
|
## Example Usage
|
596
580
|
|
597
581
|
### Iam Projects Policy Binding
|
@@ -605,16 +589,16 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
|
|
605
589
|
pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
|
606
590
|
organization="123456789",
|
607
591
|
location="global",
|
608
|
-
display_name="
|
592
|
+
display_name="binding for all principals in the project",
|
609
593
|
principal_access_boundary_policy_id="my-pab-policy")
|
610
594
|
wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
|
611
595
|
opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
|
612
|
-
|
596
|
+
binding_for_all_project_principals = gcp.iam.ProjectsPolicyBinding("binding-for-all-project-principals",
|
613
597
|
project=project.project_id,
|
614
598
|
location="global",
|
615
|
-
display_name="
|
599
|
+
display_name="binding for all principals in the project",
|
616
600
|
policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
|
617
|
-
policy_binding_id="
|
601
|
+
policy_binding_id="binding-for-all-project-principals",
|
618
602
|
policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
|
619
603
|
target={
|
620
604
|
"principal_set": f"//cloudresourcemanager.googleapis.com/projects/{project.project_id}",
|
@@ -33,7 +33,8 @@ class CryptoKeyVersionArgs:
|
|
33
33
|
- - -
|
34
34
|
:param pulumi.Input['CryptoKeyVersionExternalProtectionLevelOptionsArgs'] external_protection_level_options: ExternalProtectionLevelOptions stores a group of additional fields for configuring a CryptoKeyVersion that are specific to the EXTERNAL protection level and EXTERNAL_VPC protection levels.
|
35
35
|
Structure is documented below.
|
36
|
-
:param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
|
36
|
+
:param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
|
37
|
+
otherwise the value of this field is always retrieved automatically.
|
37
38
|
Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
|
38
39
|
"""
|
39
40
|
pulumi.set(__self__, "crypto_key", crypto_key)
|
@@ -75,7 +76,8 @@ class CryptoKeyVersionArgs:
|
|
75
76
|
@pulumi.getter
|
76
77
|
def state(self) -> Optional[pulumi.Input[str]]:
|
77
78
|
"""
|
78
|
-
The current state of the CryptoKeyVersion.
|
79
|
+
The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
|
80
|
+
otherwise the value of this field is always retrieved automatically.
|
79
81
|
Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
|
80
82
|
"""
|
81
83
|
return pulumi.get(self, "state")
|
@@ -112,7 +114,8 @@ class _CryptoKeyVersionState:
|
|
112
114
|
:param pulumi.Input[str] generate_time: The time this CryptoKeyVersion key material was generated
|
113
115
|
:param pulumi.Input[str] name: The resource name for this CryptoKeyVersion.
|
114
116
|
:param pulumi.Input[str] protection_level: The ProtectionLevel describing how crypto operations are performed with this CryptoKeyVersion.
|
115
|
-
:param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
|
117
|
+
:param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
|
118
|
+
otherwise the value of this field is always retrieved automatically.
|
116
119
|
Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
|
117
120
|
"""
|
118
121
|
if algorithm is not None:
|
@@ -227,7 +230,8 @@ class _CryptoKeyVersionState:
|
|
227
230
|
@pulumi.getter
|
228
231
|
def state(self) -> Optional[pulumi.Input[str]]:
|
229
232
|
"""
|
230
|
-
The current state of the CryptoKeyVersion.
|
233
|
+
The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
|
234
|
+
otherwise the value of this field is always retrieved automatically.
|
231
235
|
Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
|
232
236
|
"""
|
233
237
|
return pulumi.get(self, "state")
|
@@ -296,7 +300,8 @@ class CryptoKeyVersion(pulumi.CustomResource):
|
|
296
300
|
- - -
|
297
301
|
:param pulumi.Input[Union['CryptoKeyVersionExternalProtectionLevelOptionsArgs', 'CryptoKeyVersionExternalProtectionLevelOptionsArgsDict']] external_protection_level_options: ExternalProtectionLevelOptions stores a group of additional fields for configuring a CryptoKeyVersion that are specific to the EXTERNAL protection level and EXTERNAL_VPC protection levels.
|
298
302
|
Structure is documented below.
|
299
|
-
:param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
|
303
|
+
:param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
|
304
|
+
otherwise the value of this field is always retrieved automatically.
|
300
305
|
Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
|
301
306
|
"""
|
302
307
|
...
|
@@ -422,7 +427,8 @@ class CryptoKeyVersion(pulumi.CustomResource):
|
|
422
427
|
:param pulumi.Input[str] generate_time: The time this CryptoKeyVersion key material was generated
|
423
428
|
:param pulumi.Input[str] name: The resource name for this CryptoKeyVersion.
|
424
429
|
:param pulumi.Input[str] protection_level: The ProtectionLevel describing how crypto operations are performed with this CryptoKeyVersion.
|
425
|
-
:param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
|
430
|
+
:param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
|
431
|
+
otherwise the value of this field is always retrieved automatically.
|
426
432
|
Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
|
427
433
|
"""
|
428
434
|
opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
|
@@ -506,7 +512,8 @@ class CryptoKeyVersion(pulumi.CustomResource):
|
|
506
512
|
@pulumi.getter
|
507
513
|
def state(self) -> pulumi.Output[str]:
|
508
514
|
"""
|
509
|
-
The current state of the CryptoKeyVersion.
|
515
|
+
The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
|
516
|
+
otherwise the value of this field is always retrieved automatically.
|
510
517
|
Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
|
511
518
|
"""
|
512
519
|
return pulumi.get(self, "state")
|
pulumi_gcp/kms/get_key_rings.py
CHANGED
@@ -60,6 +60,9 @@ class GetKeyRingsResult:
|
|
60
60
|
@property
|
61
61
|
@pulumi.getter(name="keyRings")
|
62
62
|
def key_rings(self) -> Sequence['outputs.GetKeyRingsKeyRingResult']:
|
63
|
+
"""
|
64
|
+
A list of all the retrieved key rings from the provided location. This list is influenced by the provided filter argument.
|
65
|
+
"""
|
63
66
|
return pulumi.get(self, "key_rings")
|
64
67
|
|
65
68
|
@property
|
@@ -91,7 +94,24 @@ def get_key_rings(filter: Optional[str] = None,
|
|
91
94
|
project: Optional[str] = None,
|
92
95
|
opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetKeyRingsResult:
|
93
96
|
"""
|
94
|
-
|
97
|
+
Provides access to all Google Cloud Platform KMS CryptoKeyRings in a set location. For more information see
|
98
|
+
[the official documentation](https://cloud.google.com/kms/docs/resource-hierarchy#key_rings)
|
99
|
+
and
|
100
|
+
[API](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings).
|
101
|
+
|
102
|
+
A key ring organizes keys in a specific Google Cloud location and lets you manage access control on groups of keys. A key ring's name does not need to be unique across a Google Cloud project, but must be unique within a given location. After creation, a key ring cannot be deleted. Key rings don't incur any costs.
|
103
|
+
|
104
|
+
|
105
|
+
:param str filter: The filter argument is used to add a filter query parameter that limits which key rings are retrieved by the data source: ?filter={{filter}}. When no value is provided there is no filtering.
|
106
|
+
|
107
|
+
Example filter values if filtering on name. Note: names take the form projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}.
|
108
|
+
|
109
|
+
* `"name:my-key-"` will retrieve key rings that contain "my-key-" anywhere in their name.
|
110
|
+
* `"name=projects/my-project/locations/global/keyRings/my-key-ring"` will only retrieve a key with that exact name.
|
111
|
+
|
112
|
+
[See the documentation about using filters](https://cloud.google.com/kms/docs/sorting-and-filtering)
|
113
|
+
:param str location: The location that the underlying key ring resides in. e.g us-west1
|
114
|
+
:param str project: The Project ID of the project.
|
95
115
|
"""
|
96
116
|
__args__ = dict()
|
97
117
|
__args__['filter'] = filter
|
@@ -111,7 +131,24 @@ def get_key_rings_output(filter: Optional[pulumi.Input[Optional[str]]] = None,
|
|
111
131
|
project: Optional[pulumi.Input[Optional[str]]] = None,
|
112
132
|
opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetKeyRingsResult]:
|
113
133
|
"""
|
114
|
-
|
134
|
+
Provides access to all Google Cloud Platform KMS CryptoKeyRings in a set location. For more information see
|
135
|
+
[the official documentation](https://cloud.google.com/kms/docs/resource-hierarchy#key_rings)
|
136
|
+
and
|
137
|
+
[API](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings).
|
138
|
+
|
139
|
+
A key ring organizes keys in a specific Google Cloud location and lets you manage access control on groups of keys. A key ring's name does not need to be unique across a Google Cloud project, but must be unique within a given location. After creation, a key ring cannot be deleted. Key rings don't incur any costs.
|
140
|
+
|
141
|
+
|
142
|
+
:param str filter: The filter argument is used to add a filter query parameter that limits which key rings are retrieved by the data source: ?filter={{filter}}. When no value is provided there is no filtering.
|
143
|
+
|
144
|
+
Example filter values if filtering on name. Note: names take the form projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}.
|
145
|
+
|
146
|
+
* `"name:my-key-"` will retrieve key rings that contain "my-key-" anywhere in their name.
|
147
|
+
* `"name=projects/my-project/locations/global/keyRings/my-key-ring"` will only retrieve a key with that exact name.
|
148
|
+
|
149
|
+
[See the documentation about using filters](https://cloud.google.com/kms/docs/sorting-and-filtering)
|
150
|
+
:param str location: The location that the underlying key ring resides in. e.g us-west1
|
151
|
+
:param str project: The Project ID of the project.
|
115
152
|
"""
|
116
153
|
__args__ = dict()
|
117
154
|
__args__['filter'] = filter
|