pulumi-gcp 8.24.0a1743057423__py3-none-any.whl → 8.25.0__py3-none-any.whl

pulumi_gcp/compute/get_subnetwork.py

@@ -27,10 +27,13 @@ class GetSubnetworkResult:
     """
     A collection of values returned by getSubnetwork.
     """
-    def __init__(__self__, description=None, gateway_address=None, id=None, internal_ipv6_prefix=None, ip_cidr_range=None, name=None, network=None, private_ip_google_access=None, project=None, region=None, secondary_ip_ranges=None, self_link=None, subnetwork_id=None):
+    def __init__(__self__, description=None, external_ipv6_prefix=None, gateway_address=None, id=None, internal_ipv6_prefix=None, ip_cidr_range=None, ipv6_access_type=None, name=None, network=None, private_ip_google_access=None, project=None, region=None, secondary_ip_ranges=None, self_link=None, stack_type=None, subnetwork_id=None):
         if description and not isinstance(description, str):
             raise TypeError("Expected argument 'description' to be a str")
         pulumi.set(__self__, "description", description)
+        if external_ipv6_prefix and not isinstance(external_ipv6_prefix, str):
+            raise TypeError("Expected argument 'external_ipv6_prefix' to be a str")
+        pulumi.set(__self__, "external_ipv6_prefix", external_ipv6_prefix)
         if gateway_address and not isinstance(gateway_address, str):
             raise TypeError("Expected argument 'gateway_address' to be a str")
         pulumi.set(__self__, "gateway_address", gateway_address)
@@ -43,6 +46,9 @@ class GetSubnetworkResult:
         if ip_cidr_range and not isinstance(ip_cidr_range, str):
             raise TypeError("Expected argument 'ip_cidr_range' to be a str")
         pulumi.set(__self__, "ip_cidr_range", ip_cidr_range)
+        if ipv6_access_type and not isinstance(ipv6_access_type, str):
+            raise TypeError("Expected argument 'ipv6_access_type' to be a str")
+        pulumi.set(__self__, "ipv6_access_type", ipv6_access_type)
         if name and not isinstance(name, str):
             raise TypeError("Expected argument 'name' to be a str")
         pulumi.set(__self__, "name", name)
@@ -64,6 +70,9 @@ class GetSubnetworkResult:
         if self_link and not isinstance(self_link, str):
             raise TypeError("Expected argument 'self_link' to be a str")
         pulumi.set(__self__, "self_link", self_link)
+        if stack_type and not isinstance(stack_type, str):
+            raise TypeError("Expected argument 'stack_type' to be a str")
+        pulumi.set(__self__, "stack_type", stack_type)
         if subnetwork_id and not isinstance(subnetwork_id, int):
             raise TypeError("Expected argument 'subnetwork_id' to be a int")
         pulumi.set(__self__, "subnetwork_id", subnetwork_id)
@@ -76,6 +85,14 @@ class GetSubnetworkResult:
         """
         return pulumi.get(self, "description")
 
+    @property
+    @pulumi.getter(name="externalIpv6Prefix")
+    def external_ipv6_prefix(self) -> str:
+        """
+        The external IPv6 address range that is assigned to this subnetwork.
+        """
+        return pulumi.get(self, "external_ipv6_prefix")
+
     @property
     @pulumi.getter(name="gatewayAddress")
     def gateway_address(self) -> str:
@@ -109,6 +126,14 @@ class GetSubnetworkResult:
         """
         return pulumi.get(self, "ip_cidr_range")
 
+    @property
+    @pulumi.getter(name="ipv6AccessType")
+    def ipv6_access_type(self) -> str:
+        """
+        The access type of IPv6 address this subnet holds. Possible values are: `EXTERNAL`, `INTERNAL`.
+        """
+        return pulumi.get(self, "ipv6_access_type")
+
     @property
     @pulumi.getter
     def name(self) -> Optional[str]:
@@ -157,6 +182,14 @@ class GetSubnetworkResult:
     def self_link(self) -> str:
         return pulumi.get(self, "self_link")
 
+    @property
+    @pulumi.getter(name="stackType")
+    def stack_type(self) -> str:
+        """
+        The stack type for the subnet. Possible values are: `IPV4_ONLY`, `IPV4_IPV6`, `IPV6_ONLY`.
+        """
+        return pulumi.get(self, "stack_type")
+
     @property
     @pulumi.getter(name="subnetworkId")
     def subnetwork_id(self) -> int:
@@ -173,10 +206,12 @@ class AwaitableGetSubnetworkResult(GetSubnetworkResult):
             yield self
         return GetSubnetworkResult(
             description=self.description,
+            external_ipv6_prefix=self.external_ipv6_prefix,
             gateway_address=self.gateway_address,
             id=self.id,
             internal_ipv6_prefix=self.internal_ipv6_prefix,
             ip_cidr_range=self.ip_cidr_range,
+            ipv6_access_type=self.ipv6_access_type,
             name=self.name,
             network=self.network,
             private_ip_google_access=self.private_ip_google_access,
@@ -184,6 +219,7 @@ class AwaitableGetSubnetworkResult(GetSubnetworkResult):
             region=self.region,
             secondary_ip_ranges=self.secondary_ip_ranges,
             self_link=self.self_link,
+            stack_type=self.stack_type,
             subnetwork_id=self.subnetwork_id)
 
 
@@ -225,10 +261,12 @@ def get_subnetwork(name: Optional[str] = None,
 
     return AwaitableGetSubnetworkResult(
         description=pulumi.get(__ret__, 'description'),
+        external_ipv6_prefix=pulumi.get(__ret__, 'external_ipv6_prefix'),
         gateway_address=pulumi.get(__ret__, 'gateway_address'),
         id=pulumi.get(__ret__, 'id'),
         internal_ipv6_prefix=pulumi.get(__ret__, 'internal_ipv6_prefix'),
         ip_cidr_range=pulumi.get(__ret__, 'ip_cidr_range'),
+        ipv6_access_type=pulumi.get(__ret__, 'ipv6_access_type'),
         name=pulumi.get(__ret__, 'name'),
         network=pulumi.get(__ret__, 'network'),
         private_ip_google_access=pulumi.get(__ret__, 'private_ip_google_access'),
@@ -236,6 +274,7 @@ def get_subnetwork(name: Optional[str] = None,
         region=pulumi.get(__ret__, 'region'),
         secondary_ip_ranges=pulumi.get(__ret__, 'secondary_ip_ranges'),
         self_link=pulumi.get(__ret__, 'self_link'),
+        stack_type=pulumi.get(__ret__, 'stack_type'),
         subnetwork_id=pulumi.get(__ret__, 'subnetwork_id'))
 def get_subnetwork_output(name: Optional[pulumi.Input[Optional[str]]] = None,
                           project: Optional[pulumi.Input[Optional[str]]] = None,
@@ -274,10 +313,12 @@ def get_subnetwork_output(name: Optional[pulumi.Input[Optional[str]]] = None,
     __ret__ = pulumi.runtime.invoke_output('gcp:compute/getSubnetwork:getSubnetwork', __args__, opts=opts, typ=GetSubnetworkResult)
     return __ret__.apply(lambda __response__: GetSubnetworkResult(
         description=pulumi.get(__response__, 'description'),
+        external_ipv6_prefix=pulumi.get(__response__, 'external_ipv6_prefix'),
         gateway_address=pulumi.get(__response__, 'gateway_address'),
         id=pulumi.get(__response__, 'id'),
         internal_ipv6_prefix=pulumi.get(__response__, 'internal_ipv6_prefix'),
         ip_cidr_range=pulumi.get(__response__, 'ip_cidr_range'),
+        ipv6_access_type=pulumi.get(__response__, 'ipv6_access_type'),
         name=pulumi.get(__response__, 'name'),
         network=pulumi.get(__response__, 'network'),
         private_ip_google_access=pulumi.get(__response__, 'private_ip_google_access'),
@@ -285,4 +326,5 @@ def get_subnetwork_output(name: Optional[pulumi.Input[Optional[str]]] = None,
         region=pulumi.get(__response__, 'region'),
         secondary_ip_ranges=pulumi.get(__response__, 'secondary_ip_ranges'),
         self_link=pulumi.get(__response__, 'self_link'),
+        stack_type=pulumi.get(__response__, 'stack_type'),
         subnetwork_id=pulumi.get(__response__, 'subnetwork_id')))

pulumi_gcp/compute/image.py

@@ -31,6 +31,7 @@ class ImageArgs:
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  raw_disk: Optional[pulumi.Input['ImageRawDiskArgs']] = None,
+                 shielded_instance_initial_state: Optional[pulumi.Input['ImageShieldedInstanceInitialStateArgs']] = None,
                  source_disk: Optional[pulumi.Input[str]] = None,
                  source_image: Optional[pulumi.Input[str]] = None,
                  source_snapshot: Optional[pulumi.Input[str]] = None,
@@ -71,6 +72,8 @@ class ImageArgs:
                If it is not provided, the provider project is used.
         :param pulumi.Input['ImageRawDiskArgs'] raw_disk: The parameters of the raw disk image.
                Structure is documented below.
+        :param pulumi.Input['ImageShieldedInstanceInitialStateArgs'] shielded_instance_initial_state: Set the secure boot keys of shielded instance.
+               Structure is documented below.
         :param pulumi.Input[str] source_disk: The source disk to create this image based on.
                You must provide either this property or the
                rawDisk.source property but not both to create an image.
@@ -111,6 +114,8 @@ class ImageArgs:
             pulumi.set(__self__, "project", project)
         if raw_disk is not None:
             pulumi.set(__self__, "raw_disk", raw_disk)
+        if shielded_instance_initial_state is not None:
+            pulumi.set(__self__, "shielded_instance_initial_state", shielded_instance_initial_state)
         if source_disk is not None:
             pulumi.set(__self__, "source_disk", source_disk)
         if source_image is not None:
@@ -264,6 +269,19 @@ class ImageArgs:
     def raw_disk(self, value: Optional[pulumi.Input['ImageRawDiskArgs']]):
         pulumi.set(self, "raw_disk", value)
 
+    @property
+    @pulumi.getter(name="shieldedInstanceInitialState")
+    def shielded_instance_initial_state(self) -> Optional[pulumi.Input['ImageShieldedInstanceInitialStateArgs']]:
+        """
+        Set the secure boot keys of shielded instance.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "shielded_instance_initial_state")
+
+    @shielded_instance_initial_state.setter
+    def shielded_instance_initial_state(self, value: Optional[pulumi.Input['ImageShieldedInstanceInitialStateArgs']]):
+        pulumi.set(self, "shielded_instance_initial_state", value)
+
     @property
     @pulumi.getter(name="sourceDisk")
     def source_disk(self) -> Optional[pulumi.Input[str]]:
@@ -347,6 +365,7 @@ class _ImageState:
                  pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  raw_disk: Optional[pulumi.Input['ImageRawDiskArgs']] = None,
                  self_link: Optional[pulumi.Input[str]] = None,
+                 shielded_instance_initial_state: Optional[pulumi.Input['ImageShieldedInstanceInitialStateArgs']] = None,
                  source_disk: Optional[pulumi.Input[str]] = None,
                  source_image: Optional[pulumi.Input[str]] = None,
                  source_snapshot: Optional[pulumi.Input[str]] = None,
@@ -396,6 +415,8 @@ class _ImageState:
         :param pulumi.Input['ImageRawDiskArgs'] raw_disk: The parameters of the raw disk image.
                Structure is documented below.
         :param pulumi.Input[str] self_link: The URI of the created resource.
+        :param pulumi.Input['ImageShieldedInstanceInitialStateArgs'] shielded_instance_initial_state: Set the secure boot keys of shielded instance.
+               Structure is documented below.
         :param pulumi.Input[str] source_disk: The source disk to create this image based on.
                You must provide either this property or the
                rawDisk.source property but not both to create an image.
@@ -448,6 +469,8 @@ class _ImageState:
             pulumi.set(__self__, "raw_disk", raw_disk)
         if self_link is not None:
             pulumi.set(__self__, "self_link", self_link)
+        if shielded_instance_initial_state is not None:
+            pulumi.set(__self__, "shielded_instance_initial_state", shielded_instance_initial_state)
         if source_disk is not None:
             pulumi.set(__self__, "source_disk", source_disk)
         if source_image is not None:
@@ -676,6 +699,19 @@ class _ImageState:
     def self_link(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "self_link", value)
 
+    @property
+    @pulumi.getter(name="shieldedInstanceInitialState")
+    def shielded_instance_initial_state(self) -> Optional[pulumi.Input['ImageShieldedInstanceInitialStateArgs']]:
+        """
+        Set the secure boot keys of shielded instance.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "shielded_instance_initial_state")
+
+    @shielded_instance_initial_state.setter
+    def shielded_instance_initial_state(self, value: Optional[pulumi.Input['ImageShieldedInstanceInitialStateArgs']]):
+        pulumi.set(self, "shielded_instance_initial_state", value)
+
     @property
     @pulumi.getter(name="sourceDisk")
     def source_disk(self) -> Optional[pulumi.Input[str]]:
@@ -755,6 +791,7 @@ class Image(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  raw_disk: Optional[pulumi.Input[Union['ImageRawDiskArgs', 'ImageRawDiskArgsDict']]] = None,
+                 shielded_instance_initial_state: Optional[pulumi.Input[Union['ImageShieldedInstanceInitialStateArgs', 'ImageShieldedInstanceInitialStateArgsDict']]] = None,
                  source_disk: Optional[pulumi.Input[str]] = None,
                  source_image: Optional[pulumi.Input[str]] = None,
                  source_snapshot: Optional[pulumi.Input[str]] = None,
@@ -919,6 +956,8 @@ class Image(pulumi.CustomResource):
                If it is not provided, the provider project is used.
         :param pulumi.Input[Union['ImageRawDiskArgs', 'ImageRawDiskArgsDict']] raw_disk: The parameters of the raw disk image.
                Structure is documented below.
+        :param pulumi.Input[Union['ImageShieldedInstanceInitialStateArgs', 'ImageShieldedInstanceInitialStateArgsDict']] shielded_instance_initial_state: Set the secure boot keys of shielded instance.
+               Structure is documented below.
         :param pulumi.Input[str] source_disk: The source disk to create this image based on.
                You must provide either this property or the
                rawDisk.source property but not both to create an image.
@@ -1093,6 +1132,7 @@ class Image(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  raw_disk: Optional[pulumi.Input[Union['ImageRawDiskArgs', 'ImageRawDiskArgsDict']]] = None,
+                 shielded_instance_initial_state: Optional[pulumi.Input[Union['ImageShieldedInstanceInitialStateArgs', 'ImageShieldedInstanceInitialStateArgsDict']]] = None,
                  source_disk: Optional[pulumi.Input[str]] = None,
                  source_image: Optional[pulumi.Input[str]] = None,
                  source_snapshot: Optional[pulumi.Input[str]] = None,
@@ -1116,6 +1156,7 @@ class Image(pulumi.CustomResource):
             __props__.__dict__["name"] = name
             __props__.__dict__["project"] = project
             __props__.__dict__["raw_disk"] = raw_disk
+            __props__.__dict__["shielded_instance_initial_state"] = shielded_instance_initial_state
             __props__.__dict__["source_disk"] = source_disk
             __props__.__dict__["source_image"] = source_image
             __props__.__dict__["source_snapshot"] = source_snapshot
@@ -1154,6 +1195,7 @@ class Image(pulumi.CustomResource):
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             raw_disk: Optional[pulumi.Input[Union['ImageRawDiskArgs', 'ImageRawDiskArgsDict']]] = None,
             self_link: Optional[pulumi.Input[str]] = None,
+            shielded_instance_initial_state: Optional[pulumi.Input[Union['ImageShieldedInstanceInitialStateArgs', 'ImageShieldedInstanceInitialStateArgsDict']]] = None,
             source_disk: Optional[pulumi.Input[str]] = None,
             source_image: Optional[pulumi.Input[str]] = None,
             source_snapshot: Optional[pulumi.Input[str]] = None,
@@ -1208,6 +1250,8 @@ class Image(pulumi.CustomResource):
         :param pulumi.Input[Union['ImageRawDiskArgs', 'ImageRawDiskArgsDict']] raw_disk: The parameters of the raw disk image.
                Structure is documented below.
         :param pulumi.Input[str] self_link: The URI of the created resource.
+        :param pulumi.Input[Union['ImageShieldedInstanceInitialStateArgs', 'ImageShieldedInstanceInitialStateArgsDict']] shielded_instance_initial_state: Set the secure boot keys of shielded instance.
+               Structure is documented below.
         :param pulumi.Input[str] source_disk: The source disk to create this image based on.
                You must provide either this property or the
                rawDisk.source property but not both to create an image.
@@ -1248,6 +1292,7 @@ class Image(pulumi.CustomResource):
         __props__.__dict__["pulumi_labels"] = pulumi_labels
         __props__.__dict__["raw_disk"] = raw_disk
         __props__.__dict__["self_link"] = self_link
+        __props__.__dict__["shielded_instance_initial_state"] = shielded_instance_initial_state
         __props__.__dict__["source_disk"] = source_disk
         __props__.__dict__["source_image"] = source_image
         __props__.__dict__["source_snapshot"] = source_snapshot
@@ -1409,6 +1454,15 @@ class Image(pulumi.CustomResource):
         """
         return pulumi.get(self, "self_link")
 
+    @property
+    @pulumi.getter(name="shieldedInstanceInitialState")
+    def shielded_instance_initial_state(self) -> pulumi.Output['outputs.ImageShieldedInstanceInitialState']:
+        """
+        Set the secure boot keys of shielded instance.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "shielded_instance_initial_state")
+
     @property
     @pulumi.getter(name="sourceDisk")
     def source_disk(self) -> pulumi.Output[Optional[str]]:

pulumi_gcp/compute/instance.py

@@ -35,6 +35,7 @@ class InstanceArgs:
                  enable_display: Optional[pulumi.Input[bool]] = None,
                  guest_accelerators: Optional[pulumi.Input[Sequence[pulumi.Input['InstanceGuestAcceleratorArgs']]]] = None,
                  hostname: Optional[pulumi.Input[str]] = None,
+                 instance_encryption_key: Optional[pulumi.Input['InstanceInstanceEncryptionKeyArgs']] = None,
                  key_revocation_action_type: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  metadata: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
@@ -90,6 +91,7 @@ class InstanceArgs:
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid.
                Valid format is a series of labels 1-63 characters long matching the regular expression `a-z`, concatenated with periods.
                The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
+        :param pulumi.Input['InstanceInstanceEncryptionKeyArgs'] instance_encryption_key: Configuration for data encryption on the instance with encryption keys. Structure is documented below.
         :param pulumi.Input[str] key_revocation_action_type: Action to be taken when a customer's encryption key is revoked. Supports `STOP` and `NONE`, with `NONE` being the default.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A map of key/value label pairs to assign to the instance.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
@@ -174,6 +176,8 @@ class InstanceArgs:
             pulumi.set(__self__, "guest_accelerators", guest_accelerators)
         if hostname is not None:
             pulumi.set(__self__, "hostname", hostname)
+        if instance_encryption_key is not None:
+            pulumi.set(__self__, "instance_encryption_key", instance_encryption_key)
         if key_revocation_action_type is not None:
             pulumi.set(__self__, "key_revocation_action_type", key_revocation_action_type)
         if labels is not None:
@@ -400,6 +404,18 @@ class InstanceArgs:
     def hostname(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "hostname", value)
 
+    @property
+    @pulumi.getter(name="instanceEncryptionKey")
+    def instance_encryption_key(self) -> Optional[pulumi.Input['InstanceInstanceEncryptionKeyArgs']]:
+        """
+        Configuration for data encryption on the instance with encryption keys. Structure is documented below.
+        """
+        return pulumi.get(self, "instance_encryption_key")
+
+    @instance_encryption_key.setter
+    def instance_encryption_key(self, value: Optional[pulumi.Input['InstanceInstanceEncryptionKeyArgs']]):
+        pulumi.set(self, "instance_encryption_key", value)
+
     @property
     @pulumi.getter(name="keyRevocationActionType")
     def key_revocation_action_type(self) -> Optional[pulumi.Input[str]]:
@@ -676,6 +692,7 @@ class _InstanceState:
                  enable_display: Optional[pulumi.Input[bool]] = None,
                  guest_accelerators: Optional[pulumi.Input[Sequence[pulumi.Input['InstanceGuestAcceleratorArgs']]]] = None,
                  hostname: Optional[pulumi.Input[str]] = None,
+                 instance_encryption_key: Optional[pulumi.Input['InstanceInstanceEncryptionKeyArgs']] = None,
                  instance_id: Optional[pulumi.Input[str]] = None,
                  key_revocation_action_type: Optional[pulumi.Input[str]] = None,
                  label_fingerprint: Optional[pulumi.Input[str]] = None,
@@ -730,6 +747,7 @@ class _InstanceState:
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid.
                Valid format is a series of labels 1-63 characters long matching the regular expression `a-z`, concatenated with periods.
                The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
+        :param pulumi.Input['InstanceInstanceEncryptionKeyArgs'] instance_encryption_key: Configuration for data encryption on the instance with encryption keys. Structure is documented below.
         :param pulumi.Input[str] instance_id: The server-assigned unique identifier of this instance.
         :param pulumi.Input[str] key_revocation_action_type: Action to be taken when a customer's encryption key is revoked. Supports `STOP` and `NONE`, with `NONE` being the default.
         :param pulumi.Input[str] label_fingerprint: The unique fingerprint of the labels.
@@ -840,6 +858,8 @@ class _InstanceState:
             pulumi.set(__self__, "guest_accelerators", guest_accelerators)
         if hostname is not None:
             pulumi.set(__self__, "hostname", hostname)
+        if instance_encryption_key is not None:
+            pulumi.set(__self__, "instance_encryption_key", instance_encryption_key)
         if instance_id is not None:
             pulumi.set(__self__, "instance_id", instance_id)
         if key_revocation_action_type is not None:
@@ -1095,6 +1115,18 @@ class _InstanceState:
     def hostname(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "hostname", value)
 
+    @property
+    @pulumi.getter(name="instanceEncryptionKey")
+    def instance_encryption_key(self) -> Optional[pulumi.Input['InstanceInstanceEncryptionKeyArgs']]:
+        """
+        Configuration for data encryption on the instance with encryption keys. Structure is documented below.
+        """
+        return pulumi.get(self, "instance_encryption_key")
+
+    @instance_encryption_key.setter
+    def instance_encryption_key(self, value: Optional[pulumi.Input['InstanceInstanceEncryptionKeyArgs']]):
+        pulumi.set(self, "instance_encryption_key", value)
+
     @property
     @pulumi.getter(name="instanceId")
     def instance_id(self) -> Optional[pulumi.Input[str]]:
@@ -1476,6 +1508,7 @@ class Instance(pulumi.CustomResource):
                  enable_display: Optional[pulumi.Input[bool]] = None,
                  guest_accelerators: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceGuestAcceleratorArgs', 'InstanceGuestAcceleratorArgsDict']]]]] = None,
                  hostname: Optional[pulumi.Input[str]] = None,
+                 instance_encryption_key: Optional[pulumi.Input[Union['InstanceInstanceEncryptionKeyArgs', 'InstanceInstanceEncryptionKeyArgsDict']]] = None,
                  key_revocation_action_type: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  machine_type: Optional[pulumi.Input[str]] = None,
@@ -1634,6 +1667,7 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid.
                Valid format is a series of labels 1-63 characters long matching the regular expression `a-z`, concatenated with periods.
                The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
+        :param pulumi.Input[Union['InstanceInstanceEncryptionKeyArgs', 'InstanceInstanceEncryptionKeyArgsDict']] instance_encryption_key: Configuration for data encryption on the instance with encryption keys. Structure is documented below.
         :param pulumi.Input[str] key_revocation_action_type: Action to be taken when a customer's encryption key is revoked. Supports `STOP` and `NONE`, with `NONE` being the default.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: A map of key/value label pairs to assign to the instance.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
@@ -1852,6 +1886,7 @@ class Instance(pulumi.CustomResource):
                  enable_display: Optional[pulumi.Input[bool]] = None,
                  guest_accelerators: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceGuestAcceleratorArgs', 'InstanceGuestAcceleratorArgsDict']]]]] = None,
                  hostname: Optional[pulumi.Input[str]] = None,
+                 instance_encryption_key: Optional[pulumi.Input[Union['InstanceInstanceEncryptionKeyArgs', 'InstanceInstanceEncryptionKeyArgsDict']]] = None,
                  key_revocation_action_type: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  machine_type: Optional[pulumi.Input[str]] = None,
@@ -1895,6 +1930,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["enable_display"] = enable_display
             __props__.__dict__["guest_accelerators"] = guest_accelerators
             __props__.__dict__["hostname"] = hostname
+            __props__.__dict__["instance_encryption_key"] = instance_encryption_key
             __props__.__dict__["key_revocation_action_type"] = key_revocation_action_type
             __props__.__dict__["labels"] = labels
             if machine_type is None and not opts.urn:
@@ -1957,6 +1993,7 @@ class Instance(pulumi.CustomResource):
             enable_display: Optional[pulumi.Input[bool]] = None,
             guest_accelerators: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceGuestAcceleratorArgs', 'InstanceGuestAcceleratorArgsDict']]]]] = None,
             hostname: Optional[pulumi.Input[str]] = None,
+            instance_encryption_key: Optional[pulumi.Input[Union['InstanceInstanceEncryptionKeyArgs', 'InstanceInstanceEncryptionKeyArgsDict']]] = None,
             instance_id: Optional[pulumi.Input[str]] = None,
             key_revocation_action_type: Optional[pulumi.Input[str]] = None,
             label_fingerprint: Optional[pulumi.Input[str]] = None,
@@ -2016,6 +2053,7 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] hostname: A custom hostname for the instance. Must be a fully qualified DNS name and RFC-1035-valid.
                Valid format is a series of labels 1-63 characters long matching the regular expression `a-z`, concatenated with periods.
                The entire hostname must not exceed 253 characters. Changing this forces a new resource to be created.
+        :param pulumi.Input[Union['InstanceInstanceEncryptionKeyArgs', 'InstanceInstanceEncryptionKeyArgsDict']] instance_encryption_key: Configuration for data encryption on the instance with encryption keys. Structure is documented below.
         :param pulumi.Input[str] instance_id: The server-assigned unique identifier of this instance.
         :param pulumi.Input[str] key_revocation_action_type: Action to be taken when a customer's encryption key is revoked. Supports `STOP` and `NONE`, with `NONE` being the default.
         :param pulumi.Input[str] label_fingerprint: The unique fingerprint of the labels.
@@ -2114,6 +2152,7 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["enable_display"] = enable_display
         __props__.__dict__["guest_accelerators"] = guest_accelerators
         __props__.__dict__["hostname"] = hostname
+        __props__.__dict__["instance_encryption_key"] = instance_encryption_key
         __props__.__dict__["instance_id"] = instance_id
         __props__.__dict__["key_revocation_action_type"] = key_revocation_action_type
         __props__.__dict__["label_fingerprint"] = label_fingerprint
@@ -2280,6 +2319,14 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "hostname")
 
+    @property
+    @pulumi.getter(name="instanceEncryptionKey")
+    def instance_encryption_key(self) -> pulumi.Output[Optional['outputs.InstanceInstanceEncryptionKey']]:
+        """
+        Configuration for data encryption on the instance with encryption keys. Structure is documented below.
+        """
+        return pulumi.get(self, "instance_encryption_key")
+
     @property
     @pulumi.getter(name="instanceId")
     def instance_id(self) -> pulumi.Output[str]: