pulumi-gcp 8.22.0a1741790977__py3-none-any.whl → 8.23.0__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (124) hide show
  1. pulumi_gcp/__init__.py +64 -0
  2. pulumi_gcp/alloydb/_inputs.py +93 -1
  3. pulumi_gcp/alloydb/outputs.py +128 -2
  4. pulumi_gcp/applicationintegration/client.py +18 -24
  5. pulumi_gcp/backupdisasterrecovery/_inputs.py +3 -3
  6. pulumi_gcp/backupdisasterrecovery/outputs.py +4 -4
  7. pulumi_gcp/bigquery/_inputs.py +20 -0
  8. pulumi_gcp/bigquery/outputs.py +12 -0
  9. pulumi_gcp/bigquery/table.py +61 -0
  10. pulumi_gcp/bigtable/table.py +7 -7
  11. pulumi_gcp/certificatemanager/certificate.py +53 -7
  12. pulumi_gcp/certificatemanager/outputs.py +8 -2
  13. pulumi_gcp/clouddeploy/_inputs.py +20 -0
  14. pulumi_gcp/clouddeploy/outputs.py +15 -1
  15. pulumi_gcp/cloudfunctions/function.py +11 -11
  16. pulumi_gcp/cloudfunctionsv2/function.py +24 -24
  17. pulumi_gcp/cloudidentity/get_group_transitive_memberships.py +41 -2
  18. pulumi_gcp/cloudidentity/outputs.py +18 -38
  19. pulumi_gcp/compute/__init__.py +1 -0
  20. pulumi_gcp/compute/_inputs.py +600 -17
  21. pulumi_gcp/compute/backend_service.py +195 -7
  22. pulumi_gcp/compute/disk.py +108 -0
  23. pulumi_gcp/compute/firewall_policy.py +20 -0
  24. pulumi_gcp/compute/firewall_policy_association.py +28 -2
  25. pulumi_gcp/compute/get_backend_service.py +12 -1
  26. pulumi_gcp/compute/get_disk.py +23 -1
  27. pulumi_gcp/compute/get_region_disk.py +23 -1
  28. pulumi_gcp/compute/get_region_ssl_policy.py +203 -0
  29. pulumi_gcp/compute/outputs.py +623 -23
  30. pulumi_gcp/compute/region_backend_service.py +193 -7
  31. pulumi_gcp/compute/region_disk.py +114 -0
  32. pulumi_gcp/compute/region_network_endpoint_group.py +2 -2
  33. pulumi_gcp/compute/shared_vpc_service_project.py +0 -4
  34. pulumi_gcp/compute/subnetwork.py +256 -1
  35. pulumi_gcp/compute/target_https_proxy.py +7 -7
  36. pulumi_gcp/config/__init__.pyi +2 -0
  37. pulumi_gcp/config/vars.py +4 -0
  38. pulumi_gcp/container/_inputs.py +6 -6
  39. pulumi_gcp/container/get_attached_versions.py +2 -2
  40. pulumi_gcp/container/outputs.py +8 -8
  41. pulumi_gcp/dataform/repository.py +49 -0
  42. pulumi_gcp/dataproc/get_metastore_service.py +26 -4
  43. pulumi_gcp/dataproc/metastore_federation.py +56 -0
  44. pulumi_gcp/dataproc/metastore_service.py +58 -2
  45. pulumi_gcp/datastream/_inputs.py +273 -0
  46. pulumi_gcp/datastream/connection_profile.py +54 -2
  47. pulumi_gcp/datastream/outputs.py +224 -0
  48. pulumi_gcp/eventarc/__init__.py +2 -0
  49. pulumi_gcp/eventarc/_inputs.py +1798 -0
  50. pulumi_gcp/eventarc/channel.py +85 -93
  51. pulumi_gcp/eventarc/google_api_source.py +997 -0
  52. pulumi_gcp/eventarc/outputs.py +1378 -0
  53. pulumi_gcp/eventarc/pipeline.py +1596 -0
  54. pulumi_gcp/firebase/__init__.py +1 -0
  55. pulumi_gcp/firebase/_inputs.py +154 -0
  56. pulumi_gcp/firebase/app_hosting_backend.py +1303 -0
  57. pulumi_gcp/firebase/data_connect_service.py +40 -2
  58. pulumi_gcp/firebase/hosting_version.py +2 -2
  59. pulumi_gcp/firebase/outputs.py +127 -0
  60. pulumi_gcp/iam/__init__.py +2 -0
  61. pulumi_gcp/iam/_inputs.py +51 -18
  62. pulumi_gcp/iam/folders_policy_binding.py +10 -26
  63. pulumi_gcp/iam/oauth_client.py +979 -0
  64. pulumi_gcp/iam/oauth_client_credential.py +641 -0
  65. pulumi_gcp/iam/organizations_policy_binding.py +8 -24
  66. pulumi_gcp/iam/outputs.py +34 -12
  67. pulumi_gcp/iam/principal_access_boundary_policy.py +58 -22
  68. pulumi_gcp/iam/projects_policy_binding.py +8 -24
  69. pulumi_gcp/kms/crypto_key_version.py +14 -7
  70. pulumi_gcp/kms/get_key_rings.py +39 -2
  71. pulumi_gcp/managedkafka/__init__.py +2 -0
  72. pulumi_gcp/managedkafka/_inputs.py +263 -0
  73. pulumi_gcp/managedkafka/connect_cluster.py +795 -0
  74. pulumi_gcp/managedkafka/connector.py +695 -0
  75. pulumi_gcp/managedkafka/outputs.py +248 -0
  76. pulumi_gcp/memorystore/instance.py +7 -7
  77. pulumi_gcp/monitoring/_inputs.py +15 -18
  78. pulumi_gcp/monitoring/alert_policy.py +46 -0
  79. pulumi_gcp/monitoring/outputs.py +10 -12
  80. pulumi_gcp/monitoring/uptime_check_config.py +2 -2
  81. pulumi_gcp/networksecurity/__init__.py +1 -0
  82. pulumi_gcp/networksecurity/_inputs.py +673 -18
  83. pulumi_gcp/networksecurity/backend_authentication_config.py +847 -0
  84. pulumi_gcp/networksecurity/gateway_security_policy.py +0 -7
  85. pulumi_gcp/networksecurity/intercept_deployment.py +178 -94
  86. pulumi_gcp/networksecurity/intercept_deployment_group.py +161 -77
  87. pulumi_gcp/networksecurity/intercept_endpoint_group.py +161 -66
  88. pulumi_gcp/networksecurity/intercept_endpoint_group_association.py +137 -80
  89. pulumi_gcp/networksecurity/mirroring_deployment.py +200 -94
  90. pulumi_gcp/networksecurity/mirroring_deployment_group.py +181 -77
  91. pulumi_gcp/networksecurity/mirroring_endpoint_group.py +185 -80
  92. pulumi_gcp/networksecurity/mirroring_endpoint_group_association.py +165 -105
  93. pulumi_gcp/networksecurity/outputs.py +495 -12
  94. pulumi_gcp/networksecurity/tls_inspection_policy.py +14 -0
  95. pulumi_gcp/networkservices/endpoint_policy.py +12 -0
  96. pulumi_gcp/networkservices/gateway.py +242 -120
  97. pulumi_gcp/networkservices/grpc_route.py +12 -0
  98. pulumi_gcp/networkservices/http_route.py +16 -0
  99. pulumi_gcp/networkservices/mesh.py +16 -0
  100. pulumi_gcp/networkservices/service_binding.py +14 -0
  101. pulumi_gcp/networkservices/tcp_route.py +16 -0
  102. pulumi_gcp/networkservices/tls_route.py +12 -0
  103. pulumi_gcp/projects/__init__.py +2 -0
  104. pulumi_gcp/projects/get_iam_custom_role.py +198 -0
  105. pulumi_gcp/projects/get_iam_custom_roles.py +164 -0
  106. pulumi_gcp/projects/outputs.py +96 -0
  107. pulumi_gcp/provider.py +20 -0
  108. pulumi_gcp/pulumi-plugin.json +1 -1
  109. pulumi_gcp/servicenetworking/peered_dns_domain.py +4 -0
  110. pulumi_gcp/sql/outputs.py +8 -8
  111. pulumi_gcp/storage/_inputs.py +14 -6
  112. pulumi_gcp/storage/insights_report_config.py +121 -20
  113. pulumi_gcp/storage/outputs.py +7 -4
  114. pulumi_gcp/tpu/_inputs.py +21 -1
  115. pulumi_gcp/tpu/outputs.py +13 -1
  116. pulumi_gcp/tpu/v2_vm.py +2 -0
  117. pulumi_gcp/vmwareengine/_inputs.py +6 -0
  118. pulumi_gcp/vmwareengine/outputs.py +8 -0
  119. pulumi_gcp/workflows/workflow.py +75 -7
  120. pulumi_gcp/workstations/workstation_cluster.py +137 -1
  121. {pulumi_gcp-8.22.0a1741790977.dist-info → pulumi_gcp-8.23.0.dist-info}/METADATA +2 -2
  122. {pulumi_gcp-8.22.0a1741790977.dist-info → pulumi_gcp-8.23.0.dist-info}/RECORD +124 -113
  123. {pulumi_gcp-8.22.0a1741790977.dist-info → pulumi_gcp-8.23.0.dist-info}/WHEEL +1 -1
  124. {pulumi_gcp-8.22.0a1741790977.dist-info → pulumi_gcp-8.23.0.dist-info}/top_level.txt +0 -0
@@ -497,14 +497,6 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
497
497
  target: Optional[pulumi.Input[Union['OrganizationsPolicyBindingTargetArgs', 'OrganizationsPolicyBindingTargetArgsDict']]] = None,
498
498
  __props__=None):
499
499
  """
500
- A policy binding to an organizations
501
-
502
- To get more information about OrganizationsPolicyBinding, see:
503
-
504
- * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.policyBindings)
505
- * How-to Guides
506
- * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
507
-
508
500
  ## Example Usage
509
501
 
510
502
  ### Iam Organizations Policy Binding
@@ -517,16 +509,16 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
517
509
  pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
518
510
  organization="123456789",
519
511
  location="global",
520
- display_name="test org binding",
512
+ display_name="binding for all principals in the Organization",
521
513
  principal_access_boundary_policy_id="my-pab-policy")
522
514
  wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
523
515
  opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
524
- my_org_binding = gcp.iam.OrganizationsPolicyBinding("my-org-binding",
516
+ binding_for_all_org_principals = gcp.iam.OrganizationsPolicyBinding("binding-for-all-org-principals",
525
517
  organization="123456789",
526
518
  location="global",
527
- display_name="test org binding",
519
+ display_name="binding for all principals in the Organization",
528
520
  policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
529
- policy_binding_id="test-org-binding",
521
+ policy_binding_id="binding-for-all-org-principals",
530
522
  policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
531
523
  target={
532
524
  "principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
@@ -585,14 +577,6 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
585
577
  args: OrganizationsPolicyBindingArgs,
586
578
  opts: Optional[pulumi.ResourceOptions] = None):
587
579
  """
588
- A policy binding to an organizations
589
-
590
- To get more information about OrganizationsPolicyBinding, see:
591
-
592
- * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.policyBindings)
593
- * How-to Guides
594
- * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
595
-
596
580
  ## Example Usage
597
581
 
598
582
  ### Iam Organizations Policy Binding
@@ -605,16 +589,16 @@ class OrganizationsPolicyBinding(pulumi.CustomResource):
605
589
  pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
606
590
  organization="123456789",
607
591
  location="global",
608
- display_name="test org binding",
592
+ display_name="binding for all principals in the Organization",
609
593
  principal_access_boundary_policy_id="my-pab-policy")
610
594
  wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
611
595
  opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
612
- my_org_binding = gcp.iam.OrganizationsPolicyBinding("my-org-binding",
596
+ binding_for_all_org_principals = gcp.iam.OrganizationsPolicyBinding("binding-for-all-org-principals",
613
597
  organization="123456789",
614
598
  location="global",
615
- display_name="test org binding",
599
+ display_name="binding for all principals in the Organization",
616
600
  policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
617
- policy_binding_id="test-org-binding",
601
+ policy_binding_id="binding-for-all-org-principals",
618
602
  policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
619
603
  target={
620
604
  "principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
pulumi_gcp/iam/outputs.py CHANGED
@@ -531,8 +531,10 @@ class FoldersPolicyBindingTarget(dict):
531
531
  def __init__(__self__, *,
532
532
  principal_set: Optional[str] = None):
533
533
  """
534
- :param str principal_set: Required. Immutable. The resource name of the policy to be bound.
535
- The binding parent and policy must belong to the same Organization (or Project).
534
+ :param str principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
535
+ Examples for each one of the following supported principal set types:
536
+ * Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
537
+ It must be parent by the policy binding's parent (the folder).
536
538
 
537
539
  - - -
538
540
  """
@@ -543,8 +545,10 @@ class FoldersPolicyBindingTarget(dict):
543
545
  @pulumi.getter(name="principalSet")
544
546
  def principal_set(self) -> Optional[str]:
545
547
  """
546
- Required. Immutable. The resource name of the policy to be bound.
547
- The binding parent and policy must belong to the same Organization (or Project).
548
+ Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
549
+ Examples for each one of the following supported principal set types:
550
+ * Folder: `//cloudresourcemanager.googleapis.com/folders/FOLDER_ID`
551
+ It must be parent by the policy binding's parent (the folder).
548
552
 
549
553
  - - -
550
554
  """
@@ -628,8 +632,12 @@ class OrganizationsPolicyBindingTarget(dict):
628
632
  def __init__(__self__, *,
629
633
  principal_set: Optional[str] = None):
630
634
  """
631
- :param str principal_set: Required. Immutable. The resource name of the policy to be bound.
632
- The binding parent and policy must belong to the same Organization (or Project).
635
+ :param str principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
636
+ Examples for each one of the following supported principal set types:
637
+ * Organization `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
638
+ * Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
639
+ * Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
640
+ It must be parent by the policy binding's parent (the organization).
633
641
 
634
642
  - - -
635
643
  """
@@ -640,8 +648,12 @@ class OrganizationsPolicyBindingTarget(dict):
640
648
  @pulumi.getter(name="principalSet")
641
649
  def principal_set(self) -> Optional[str]:
642
650
  """
643
- Required. Immutable. The resource name of the policy to be bound.
644
- The binding parent and policy must belong to the same Organization (or Project).
651
+ Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
652
+ Examples for each one of the following supported principal set types:
653
+ * Organization `//cloudresourcemanager.googleapis.com/organizations/ORGANIZATION_ID`
654
+ * Workforce Identity: `//iam.googleapis.com/locations/global/workforcePools/WORKFORCE_POOL_ID`
655
+ * Workspace Identity: `//iam.googleapis.com/locations/global/workspace/WORKSPACE_ID`
656
+ It must be parent by the policy binding's parent (the organization).
645
657
 
646
658
  - - -
647
659
  """
@@ -837,8 +849,13 @@ class ProjectsPolicyBindingTarget(dict):
837
849
  def __init__(__self__, *,
838
850
  principal_set: Optional[str] = None):
839
851
  """
840
- :param str principal_set: Required. Immutable. The resource name of the policy to be bound.
841
- The binding parent and policy must belong to the same Organization (or Project).
852
+ :param str principal_set: Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
853
+ Examples for each one of the following supported principal set types:
854
+ * Project:
855
+ * `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
856
+ * `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
857
+ * Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
858
+ It must be parent by the policy binding's parent (the project).
842
859
 
843
860
  - - -
844
861
  """
@@ -849,8 +866,13 @@ class ProjectsPolicyBindingTarget(dict):
849
866
  @pulumi.getter(name="principalSet")
850
867
  def principal_set(self) -> Optional[str]:
851
868
  """
852
- Required. Immutable. The resource name of the policy to be bound.
853
- The binding parent and policy must belong to the same Organization (or Project).
869
+ Required. Immutable. Full Resource Name of the principal set used for principal access boundary policy bindings.
870
+ Examples for each one of the following supported principal set types:
871
+ * Project:
872
+ * `//cloudresourcemanager.googleapis.com/projects/PROJECT_NUMBER`
873
+ * `//cloudresourcemanager.googleapis.com/projects/PROJECT_ID`
874
+ * Workload Identity Pool: `//iam.googleapis.com/projects/PROJECT_NUMBER/locations/LOCATION/workloadIdentityPools/WORKLOAD_POOL_ID`
875
+ It must be parent by the policy binding's parent (the project).
854
876
 
855
877
  - - -
856
878
  """
@@ -366,14 +366,6 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
366
366
  principal_access_boundary_policy_id: Optional[pulumi.Input[str]] = None,
367
367
  __props__=None):
368
368
  """
369
- An IAM Principal Access Boundary Policy resource
370
-
371
- To get more information about PrincipalAccessBoundaryPolicy, see:
372
-
373
- * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.principalAccessBoundaryPolicies)
374
- * How-to Guides
375
- * [Create and apply Principal Access Boundaries](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create)
376
-
377
369
  ## Example Usage
378
370
 
379
371
  ### Iam Principal Access Boundary Policy
@@ -382,11 +374,37 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
382
374
  import pulumi
383
375
  import pulumi_gcp as gcp
384
376
 
385
- my_pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("my-pab-policy",
377
+ pab_policy_for_org = gcp.iam.PrincipalAccessBoundaryPolicy("pab-policy-for-org",
378
+ organization="123456789",
379
+ location="global",
380
+ display_name="PAB policy for Organization",
381
+ principal_access_boundary_policy_id="pab-policy-for-org")
382
+ ```
383
+ ### Iam Organizations Policy Binding
384
+
385
+ ```python
386
+ import pulumi
387
+ import pulumi_gcp as gcp
388
+ import pulumi_time as time
389
+
390
+ pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
391
+ organization="123456789",
392
+ location="global",
393
+ display_name="Binding for all principals in the Organization",
394
+ principal_access_boundary_policy_id="my-pab-policy")
395
+ wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
396
+ opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
397
+ my_pab_policy = gcp.iam.OrganizationsPolicyBinding("my-pab-policy",
386
398
  organization="123456789",
387
399
  location="global",
388
- display_name="test pab policy",
389
- principal_access_boundary_policy_id="test-pab-policy")
400
+ display_name="Binding for all principals in the Organization",
401
+ policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
402
+ policy_binding_id="binding-for-all-org-principals",
403
+ policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
404
+ target={
405
+ "principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
406
+ },
407
+ opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
390
408
  ```
391
409
 
392
410
  ## Import
@@ -432,14 +450,6 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
432
450
  args: PrincipalAccessBoundaryPolicyArgs,
433
451
  opts: Optional[pulumi.ResourceOptions] = None):
434
452
  """
435
- An IAM Principal Access Boundary Policy resource
436
-
437
- To get more information about PrincipalAccessBoundaryPolicy, see:
438
-
439
- * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/organizations.locations.principalAccessBoundaryPolicies)
440
- * How-to Guides
441
- * [Create and apply Principal Access Boundaries](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create)
442
-
443
453
  ## Example Usage
444
454
 
445
455
  ### Iam Principal Access Boundary Policy
@@ -448,11 +458,37 @@ class PrincipalAccessBoundaryPolicy(pulumi.CustomResource):
448
458
  import pulumi
449
459
  import pulumi_gcp as gcp
450
460
 
451
- my_pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("my-pab-policy",
461
+ pab_policy_for_org = gcp.iam.PrincipalAccessBoundaryPolicy("pab-policy-for-org",
462
+ organization="123456789",
463
+ location="global",
464
+ display_name="PAB policy for Organization",
465
+ principal_access_boundary_policy_id="pab-policy-for-org")
466
+ ```
467
+ ### Iam Organizations Policy Binding
468
+
469
+ ```python
470
+ import pulumi
471
+ import pulumi_gcp as gcp
472
+ import pulumi_time as time
473
+
474
+ pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
475
+ organization="123456789",
476
+ location="global",
477
+ display_name="Binding for all principals in the Organization",
478
+ principal_access_boundary_policy_id="my-pab-policy")
479
+ wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
480
+ opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
481
+ my_pab_policy = gcp.iam.OrganizationsPolicyBinding("my-pab-policy",
452
482
  organization="123456789",
453
483
  location="global",
454
- display_name="test pab policy",
455
- principal_access_boundary_policy_id="test-pab-policy")
484
+ display_name="Binding for all principals in the Organization",
485
+ policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
486
+ policy_binding_id="binding-for-all-org-principals",
487
+ policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
488
+ target={
489
+ "principal_set": "//cloudresourcemanager.googleapis.com/organizations/123456789",
490
+ },
491
+ opts = pulumi.ResourceOptions(depends_on=[wait60_seconds]))
456
492
  ```
457
493
 
458
494
  ## Import
@@ -490,14 +490,6 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
490
490
  target: Optional[pulumi.Input[Union['ProjectsPolicyBindingTargetArgs', 'ProjectsPolicyBindingTargetArgsDict']]] = None,
491
491
  __props__=None):
492
492
  """
493
- A policy binding to a Project
494
-
495
- To get more information about ProjectsPolicyBinding, see:
496
-
497
- * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/projects.locations.policyBindings)
498
- * How-to Guides
499
- * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
500
-
501
493
  ## Example Usage
502
494
 
503
495
  ### Iam Projects Policy Binding
@@ -511,16 +503,16 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
511
503
  pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
512
504
  organization="123456789",
513
505
  location="global",
514
- display_name="test project binding",
506
+ display_name="binding for all principals in the project",
515
507
  principal_access_boundary_policy_id="my-pab-policy")
516
508
  wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
517
509
  opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
518
- my_project_binding = gcp.iam.ProjectsPolicyBinding("my-project-binding",
510
+ binding_for_all_project_principals = gcp.iam.ProjectsPolicyBinding("binding-for-all-project-principals",
519
511
  project=project.project_id,
520
512
  location="global",
521
- display_name="test project binding",
513
+ display_name="binding for all principals in the project",
522
514
  policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
523
- policy_binding_id="test-project-binding",
515
+ policy_binding_id="binding-for-all-project-principals",
524
516
  policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
525
517
  target={
526
518
  "principal_set": f"//cloudresourcemanager.googleapis.com/projects/{project.project_id}",
@@ -584,14 +576,6 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
584
576
  args: ProjectsPolicyBindingArgs,
585
577
  opts: Optional[pulumi.ResourceOptions] = None):
586
578
  """
587
- A policy binding to a Project
588
-
589
- To get more information about ProjectsPolicyBinding, see:
590
-
591
- * [API documentation](https://cloud.google.com/iam/docs/reference/rest/v3/projects.locations.policyBindings)
592
- * How-to Guides
593
- * [Apply a policy binding](https://cloud.google.com/iam/docs/principal-access-boundary-policies-create#create_binding)
594
-
595
579
  ## Example Usage
596
580
 
597
581
  ### Iam Projects Policy Binding
@@ -605,16 +589,16 @@ class ProjectsPolicyBinding(pulumi.CustomResource):
605
589
  pab_policy = gcp.iam.PrincipalAccessBoundaryPolicy("pab_policy",
606
590
  organization="123456789",
607
591
  location="global",
608
- display_name="test project binding",
592
+ display_name="binding for all principals in the project",
609
593
  principal_access_boundary_policy_id="my-pab-policy")
610
594
  wait60_seconds = time.index.Sleep("wait_60_seconds", create_duration=60s,
611
595
  opts = pulumi.ResourceOptions(depends_on=[pab_policy]))
612
- my_project_binding = gcp.iam.ProjectsPolicyBinding("my-project-binding",
596
+ binding_for_all_project_principals = gcp.iam.ProjectsPolicyBinding("binding-for-all-project-principals",
613
597
  project=project.project_id,
614
598
  location="global",
615
- display_name="test project binding",
599
+ display_name="binding for all principals in the project",
616
600
  policy_kind="PRINCIPAL_ACCESS_BOUNDARY",
617
- policy_binding_id="test-project-binding",
601
+ policy_binding_id="binding-for-all-project-principals",
618
602
  policy=pab_policy.principal_access_boundary_policy_id.apply(lambda principal_access_boundary_policy_id: f"organizations/123456789/locations/global/principalAccessBoundaryPolicies/{principal_access_boundary_policy_id}"),
619
603
  target={
620
604
  "principal_set": f"//cloudresourcemanager.googleapis.com/projects/{project.project_id}",
@@ -33,7 +33,8 @@ class CryptoKeyVersionArgs:
33
33
  - - -
34
34
  :param pulumi.Input['CryptoKeyVersionExternalProtectionLevelOptionsArgs'] external_protection_level_options: ExternalProtectionLevelOptions stores a group of additional fields for configuring a CryptoKeyVersion that are specific to the EXTERNAL protection level and EXTERNAL_VPC protection levels.
35
35
  Structure is documented below.
36
- :param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
36
+ :param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
37
+ otherwise the value of this field is always retrieved automatically.
37
38
  Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
38
39
  """
39
40
  pulumi.set(__self__, "crypto_key", crypto_key)
@@ -75,7 +76,8 @@ class CryptoKeyVersionArgs:
75
76
  @pulumi.getter
76
77
  def state(self) -> Optional[pulumi.Input[str]]:
77
78
  """
78
- The current state of the CryptoKeyVersion.
79
+ The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
80
+ otherwise the value of this field is always retrieved automatically.
79
81
  Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
80
82
  """
81
83
  return pulumi.get(self, "state")
@@ -112,7 +114,8 @@ class _CryptoKeyVersionState:
112
114
  :param pulumi.Input[str] generate_time: The time this CryptoKeyVersion key material was generated
113
115
  :param pulumi.Input[str] name: The resource name for this CryptoKeyVersion.
114
116
  :param pulumi.Input[str] protection_level: The ProtectionLevel describing how crypto operations are performed with this CryptoKeyVersion.
115
- :param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
117
+ :param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
118
+ otherwise the value of this field is always retrieved automatically.
116
119
  Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
117
120
  """
118
121
  if algorithm is not None:
@@ -227,7 +230,8 @@ class _CryptoKeyVersionState:
227
230
  @pulumi.getter
228
231
  def state(self) -> Optional[pulumi.Input[str]]:
229
232
  """
230
- The current state of the CryptoKeyVersion.
233
+ The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
234
+ otherwise the value of this field is always retrieved automatically.
231
235
  Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
232
236
  """
233
237
  return pulumi.get(self, "state")
@@ -296,7 +300,8 @@ class CryptoKeyVersion(pulumi.CustomResource):
296
300
  - - -
297
301
  :param pulumi.Input[Union['CryptoKeyVersionExternalProtectionLevelOptionsArgs', 'CryptoKeyVersionExternalProtectionLevelOptionsArgsDict']] external_protection_level_options: ExternalProtectionLevelOptions stores a group of additional fields for configuring a CryptoKeyVersion that are specific to the EXTERNAL protection level and EXTERNAL_VPC protection levels.
298
302
  Structure is documented below.
299
- :param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
303
+ :param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
304
+ otherwise the value of this field is always retrieved automatically.
300
305
  Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
301
306
  """
302
307
  ...
@@ -422,7 +427,8 @@ class CryptoKeyVersion(pulumi.CustomResource):
422
427
  :param pulumi.Input[str] generate_time: The time this CryptoKeyVersion key material was generated
423
428
  :param pulumi.Input[str] name: The resource name for this CryptoKeyVersion.
424
429
  :param pulumi.Input[str] protection_level: The ProtectionLevel describing how crypto operations are performed with this CryptoKeyVersion.
425
- :param pulumi.Input[str] state: The current state of the CryptoKeyVersion.
430
+ :param pulumi.Input[str] state: The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
431
+ otherwise the value of this field is always retrieved automatically.
426
432
  Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
427
433
  """
428
434
  opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -506,7 +512,8 @@ class CryptoKeyVersion(pulumi.CustomResource):
506
512
  @pulumi.getter
507
513
  def state(self) -> pulumi.Output[str]:
508
514
  """
509
- The current state of the CryptoKeyVersion.
515
+ The current state of the CryptoKeyVersion. Note: you can only specify this field to manually `ENABLE` or `DISABLE` the CryptoKeyVersion,
516
+ otherwise the value of this field is always retrieved automatically.
510
517
  Possible values are: `PENDING_GENERATION`, `ENABLED`, `DISABLED`, `DESTROYED`, `DESTROY_SCHEDULED`, `PENDING_IMPORT`, `IMPORT_FAILED`.
511
518
  """
512
519
  return pulumi.get(self, "state")
@@ -60,6 +60,9 @@ class GetKeyRingsResult:
60
60
  @property
61
61
  @pulumi.getter(name="keyRings")
62
62
  def key_rings(self) -> Sequence['outputs.GetKeyRingsKeyRingResult']:
63
+ """
64
+ A list of all the retrieved key rings from the provided location. This list is influenced by the provided filter argument.
65
+ """
63
66
  return pulumi.get(self, "key_rings")
64
67
 
65
68
  @property
@@ -91,7 +94,24 @@ def get_key_rings(filter: Optional[str] = None,
91
94
  project: Optional[str] = None,
92
95
  opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetKeyRingsResult:
93
96
  """
94
- Use this data source to access information about an existing resource.
97
+ Provides access to all Google Cloud Platform KMS CryptoKeyRings in a set location. For more information see
98
+ [the official documentation](https://cloud.google.com/kms/docs/resource-hierarchy#key_rings)
99
+ and
100
+ [API](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings).
101
+
102
+ A key ring organizes keys in a specific Google Cloud location and lets you manage access control on groups of keys. A key ring's name does not need to be unique across a Google Cloud project, but must be unique within a given location. After creation, a key ring cannot be deleted. Key rings don't incur any costs.
103
+
104
+
105
+ :param str filter: The filter argument is used to add a filter query parameter that limits which key rings are retrieved by the data source: ?filter={{filter}}. When no value is provided there is no filtering.
106
+
107
+ Example filter values if filtering on name. Note: names take the form projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}.
108
+
109
+ * `"name:my-key-"` will retrieve key rings that contain "my-key-" anywhere in their name.
110
+ * `"name=projects/my-project/locations/global/keyRings/my-key-ring"` will only retrieve a key with that exact name.
111
+
112
+ [See the documentation about using filters](https://cloud.google.com/kms/docs/sorting-and-filtering)
113
+ :param str location: The location that the underlying key ring resides in. e.g us-west1
114
+ :param str project: The Project ID of the project.
95
115
  """
96
116
  __args__ = dict()
97
117
  __args__['filter'] = filter
@@ -111,7 +131,24 @@ def get_key_rings_output(filter: Optional[pulumi.Input[Optional[str]]] = None,
111
131
  project: Optional[pulumi.Input[Optional[str]]] = None,
112
132
  opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetKeyRingsResult]:
113
133
  """
114
- Use this data source to access information about an existing resource.
134
+ Provides access to all Google Cloud Platform KMS CryptoKeyRings in a set location. For more information see
135
+ [the official documentation](https://cloud.google.com/kms/docs/resource-hierarchy#key_rings)
136
+ and
137
+ [API](https://cloud.google.com/kms/docs/reference/rest/v1/projects.locations.keyRings).
138
+
139
+ A key ring organizes keys in a specific Google Cloud location and lets you manage access control on groups of keys. A key ring's name does not need to be unique across a Google Cloud project, but must be unique within a given location. After creation, a key ring cannot be deleted. Key rings don't incur any costs.
140
+
141
+
142
+ :param str filter: The filter argument is used to add a filter query parameter that limits which key rings are retrieved by the data source: ?filter={{filter}}. When no value is provided there is no filtering.
143
+
144
+ Example filter values if filtering on name. Note: names take the form projects/{{project}}/locations/{{location}}/keyRings/{{keyRing}}.
145
+
146
+ * `"name:my-key-"` will retrieve key rings that contain "my-key-" anywhere in their name.
147
+ * `"name=projects/my-project/locations/global/keyRings/my-key-ring"` will only retrieve a key with that exact name.
148
+
149
+ [See the documentation about using filters](https://cloud.google.com/kms/docs/sorting-and-filtering)
150
+ :param str location: The location that the underlying key ring resides in. e.g us-west1
151
+ :param str project: The Project ID of the project.
115
152
  """
116
153
  __args__ = dict()
117
154
  __args__['filter'] = filter
@@ -6,6 +6,8 @@ from .. import _utilities
6
6
  import typing
7
7
  # Export this package's modules as members:
8
8
  from .cluster import *
9
+ from .connect_cluster import *
10
+ from .connector import *
9
11
  from .topic import *
10
12
  from ._inputs import *
11
13
  from . import outputs