pulumi-gcp 8.24.0a1743177741__py3-none-any.whl → 8.25.0__py3-none-any.whl

pulumi_gcp/compute/public_delegated_prefix.py

@@ -40,8 +40,8 @@ class PublicDelegatedPrefixArgs:
         :param pulumi.Input[str] description: An optional description of this resource.
         :param pulumi.Input[bool] is_live_migration: If true, the prefix will be live migrated.
         :param pulumi.Input[str] mode: Specifies the mode of this IPv6 PDP. MODE must be one of: DELEGATION,
-               EXTERNAL_IPV6_FORWARDING_RULE_CREATION.
-               Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`.
+               EXTERNAL_IPV6_FORWARDING_RULE_CREATION and EXTERNAL_IPV6_SUBNETWORK_CREATION.
+               Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`, `EXTERNAL_IPV6_SUBNETWORK_CREATION`.
         :param pulumi.Input[str] name: Name of the resource. The name must be 1-63 characters long, and
                comply with RFC1035. Specifically, the name must be 1-63 characters
                long and match the regular expression `a-z?`
@@ -147,8 +147,8 @@ class PublicDelegatedPrefixArgs:
     def mode(self) -> Optional[pulumi.Input[str]]:
         """
         Specifies the mode of this IPv6 PDP. MODE must be one of: DELEGATION,
-        EXTERNAL_IPV6_FORWARDING_RULE_CREATION.
-        Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`.
+        EXTERNAL_IPV6_FORWARDING_RULE_CREATION and EXTERNAL_IPV6_SUBNETWORK_CREATION.
+        Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`, `EXTERNAL_IPV6_SUBNETWORK_CREATION`.
         """
         return pulumi.get(self, "mode")
 
@@ -210,8 +210,8 @@ class _PublicDelegatedPrefixState:
                - - -
         :param pulumi.Input[bool] is_live_migration: If true, the prefix will be live migrated.
         :param pulumi.Input[str] mode: Specifies the mode of this IPv6 PDP. MODE must be one of: DELEGATION,
-               EXTERNAL_IPV6_FORWARDING_RULE_CREATION.
-               Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`.
+               EXTERNAL_IPV6_FORWARDING_RULE_CREATION and EXTERNAL_IPV6_SUBNETWORK_CREATION.
+               Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`, `EXTERNAL_IPV6_SUBNETWORK_CREATION`.
         :param pulumi.Input[str] name: Name of the resource. The name must be 1-63 characters long, and
                comply with RFC1035. Specifically, the name must be 1-63 characters
                long and match the regular expression `a-z?`
@@ -301,8 +301,8 @@ class _PublicDelegatedPrefixState:
     def mode(self) -> Optional[pulumi.Input[str]]:
         """
         Specifies the mode of this IPv6 PDP. MODE must be one of: DELEGATION,
-        EXTERNAL_IPV6_FORWARDING_RULE_CREATION.
-        Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`.
+        EXTERNAL_IPV6_FORWARDING_RULE_CREATION and EXTERNAL_IPV6_SUBNETWORK_CREATION.
+        Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`, `EXTERNAL_IPV6_SUBNETWORK_CREATION`.
         """
         return pulumi.get(self, "mode")
 
@@ -449,6 +449,33 @@ class PublicDelegatedPrefix(pulumi.CustomResource):
             allocatable_prefix_length=64,
             mode="EXTERNAL_IPV6_FORWARDING_RULE_CREATION")
         ```
+        ### Public Delegated Prefix Ipv6 Subnet Mode
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        advertised = gcp.compute.PublicAdvertisedPrefix("advertised",
+            name="ipv6-pap",
+            description="description",
+            dns_verification_ip="2001:db8::",
+            ip_cidr_range="2001:db8::/32",
+            pdp_scope="REGIONAL")
+        prefix = gcp.compute.PublicDelegatedPrefix("prefix",
+            name="ipv6-root-pdp",
+            description="test-delegation-mode-pdp",
+            region="us-east1",
+            ip_cidr_range="2001:db8::/40",
+            parent_prefix=advertised.id,
+            mode="DELEGATION")
+        subprefix = gcp.compute.PublicDelegatedPrefix("subprefix",
+            name="ipv6-sub-pdp",
+            description="test-subnet-mode-pdp",
+            region="us-east1",
+            ip_cidr_range="2001:db8::/48",
+            parent_prefix=prefix.id,
+            mode="EXTERNAL_IPV6_SUBNETWORK_CREATION")
+        ```
 
         ## Import
 
@@ -490,8 +517,8 @@ class PublicDelegatedPrefix(pulumi.CustomResource):
                - - -
         :param pulumi.Input[bool] is_live_migration: If true, the prefix will be live migrated.
         :param pulumi.Input[str] mode: Specifies the mode of this IPv6 PDP. MODE must be one of: DELEGATION,
-               EXTERNAL_IPV6_FORWARDING_RULE_CREATION.
-               Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`.
+               EXTERNAL_IPV6_FORWARDING_RULE_CREATION and EXTERNAL_IPV6_SUBNETWORK_CREATION.
+               Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`, `EXTERNAL_IPV6_SUBNETWORK_CREATION`.
         :param pulumi.Input[str] name: Name of the resource. The name must be 1-63 characters long, and
                comply with RFC1035. Specifically, the name must be 1-63 characters
                long and match the regular expression `a-z?`
@@ -566,6 +593,33 @@ class PublicDelegatedPrefix(pulumi.CustomResource):
             allocatable_prefix_length=64,
             mode="EXTERNAL_IPV6_FORWARDING_RULE_CREATION")
         ```
+        ### Public Delegated Prefix Ipv6 Subnet Mode
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        advertised = gcp.compute.PublicAdvertisedPrefix("advertised",
+            name="ipv6-pap",
+            description="description",
+            dns_verification_ip="2001:db8::",
+            ip_cidr_range="2001:db8::/32",
+            pdp_scope="REGIONAL")
+        prefix = gcp.compute.PublicDelegatedPrefix("prefix",
+            name="ipv6-root-pdp",
+            description="test-delegation-mode-pdp",
+            region="us-east1",
+            ip_cidr_range="2001:db8::/40",
+            parent_prefix=advertised.id,
+            mode="DELEGATION")
+        subprefix = gcp.compute.PublicDelegatedPrefix("subprefix",
+            name="ipv6-sub-pdp",
+            description="test-subnet-mode-pdp",
+            region="us-east1",
+            ip_cidr_range="2001:db8::/48",
+            parent_prefix=prefix.id,
+            mode="EXTERNAL_IPV6_SUBNETWORK_CREATION")
+        ```
 
         ## Import
 
@@ -681,8 +735,8 @@ class PublicDelegatedPrefix(pulumi.CustomResource):
                - - -
         :param pulumi.Input[bool] is_live_migration: If true, the prefix will be live migrated.
         :param pulumi.Input[str] mode: Specifies the mode of this IPv6 PDP. MODE must be one of: DELEGATION,
-               EXTERNAL_IPV6_FORWARDING_RULE_CREATION.
-               Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`.
+               EXTERNAL_IPV6_FORWARDING_RULE_CREATION and EXTERNAL_IPV6_SUBNETWORK_CREATION.
+               Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`, `EXTERNAL_IPV6_SUBNETWORK_CREATION`.
         :param pulumi.Input[str] name: Name of the resource. The name must be 1-63 characters long, and
                comply with RFC1035. Specifically, the name must be 1-63 characters
                long and match the regular expression `a-z?`
@@ -713,7 +767,7 @@ class PublicDelegatedPrefix(pulumi.CustomResource):
 
     @property
     @pulumi.getter(name="allocatablePrefixLength")
-    def allocatable_prefix_length(self) -> pulumi.Output[Optional[int]]:
+    def allocatable_prefix_length(self) -> pulumi.Output[int]:
         """
         The allocatable prefix length supported by this public delegated prefix. This field is optional and cannot be set for prefixes in DELEGATION mode. It cannot be set for IPv4 prefixes either, and it always defaults to 32.
         """
@@ -751,8 +805,8 @@ class PublicDelegatedPrefix(pulumi.CustomResource):
     def mode(self) -> pulumi.Output[Optional[str]]:
         """
         Specifies the mode of this IPv6 PDP. MODE must be one of: DELEGATION,
-        EXTERNAL_IPV6_FORWARDING_RULE_CREATION.
-        Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`.
+        EXTERNAL_IPV6_FORWARDING_RULE_CREATION and EXTERNAL_IPV6_SUBNETWORK_CREATION.
+        Possible values are: `DELEGATION`, `EXTERNAL_IPV6_FORWARDING_RULE_CREATION`, `EXTERNAL_IPV6_SUBNETWORK_CREATION`.
         """
         return pulumi.get(self, "mode")
 

pulumi_gcp/compute/router.py

@@ -25,6 +25,7 @@ class RouterArgs:
                  bgp: Optional[pulumi.Input['RouterBgpArgs']] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  encrypted_interconnect_router: Optional[pulumi.Input[bool]] = None,
+                 md5_authentication_keys: Optional[pulumi.Input['RouterMd5AuthenticationKeysArgs']] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None):
@@ -39,6 +40,8 @@ class RouterArgs:
         :param pulumi.Input[str] description: An optional description of this resource.
         :param pulumi.Input[bool] encrypted_interconnect_router: Indicates if a router is dedicated for use with encrypted VLAN
                attachments (interconnectAttachments).
+        :param pulumi.Input['RouterMd5AuthenticationKeysArgs'] md5_authentication_keys: Keys used for MD5 authentication.
+               Structure is documented below.
         :param pulumi.Input[str] name: Name of the resource. The name must be 1-63 characters long, and
                comply with RFC1035. Specifically, the name must be 1-63 characters
                long and match the regular expression `a-z?`
@@ -56,6 +59,8 @@ class RouterArgs:
             pulumi.set(__self__, "description", description)
         if encrypted_interconnect_router is not None:
             pulumi.set(__self__, "encrypted_interconnect_router", encrypted_interconnect_router)
+        if md5_authentication_keys is not None:
+            pulumi.set(__self__, "md5_authentication_keys", md5_authentication_keys)
         if name is not None:
             pulumi.set(__self__, "name", name)
         if project is not None:
@@ -116,6 +121,19 @@ class RouterArgs:
     def encrypted_interconnect_router(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "encrypted_interconnect_router", value)
 
+    @property
+    @pulumi.getter(name="md5AuthenticationKeys")
+    def md5_authentication_keys(self) -> Optional[pulumi.Input['RouterMd5AuthenticationKeysArgs']]:
+        """
+        Keys used for MD5 authentication.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "md5_authentication_keys")
+
+    @md5_authentication_keys.setter
+    def md5_authentication_keys(self, value: Optional[pulumi.Input['RouterMd5AuthenticationKeysArgs']]):
+        pulumi.set(self, "md5_authentication_keys", value)
+
     @property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
@@ -166,6 +184,7 @@ class _RouterState:
                  creation_timestamp: Optional[pulumi.Input[str]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  encrypted_interconnect_router: Optional[pulumi.Input[bool]] = None,
+                 md5_authentication_keys: Optional[pulumi.Input['RouterMd5AuthenticationKeysArgs']] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  network: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
@@ -179,6 +198,8 @@ class _RouterState:
         :param pulumi.Input[str] description: An optional description of this resource.
         :param pulumi.Input[bool] encrypted_interconnect_router: Indicates if a router is dedicated for use with encrypted VLAN
                attachments (interconnectAttachments).
+        :param pulumi.Input['RouterMd5AuthenticationKeysArgs'] md5_authentication_keys: Keys used for MD5 authentication.
+               Structure is documented below.
         :param pulumi.Input[str] name: Name of the resource. The name must be 1-63 characters long, and
                comply with RFC1035. Specifically, the name must be 1-63 characters
                long and match the regular expression `a-z?`
@@ -202,6 +223,8 @@ class _RouterState:
             pulumi.set(__self__, "description", description)
         if encrypted_interconnect_router is not None:
             pulumi.set(__self__, "encrypted_interconnect_router", encrypted_interconnect_router)
+        if md5_authentication_keys is not None:
+            pulumi.set(__self__, "md5_authentication_keys", md5_authentication_keys)
         if name is not None:
             pulumi.set(__self__, "name", name)
         if network is not None:
@@ -263,6 +286,19 @@ class _RouterState:
     def encrypted_interconnect_router(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "encrypted_interconnect_router", value)
 
+    @property
+    @pulumi.getter(name="md5AuthenticationKeys")
+    def md5_authentication_keys(self) -> Optional[pulumi.Input['RouterMd5AuthenticationKeysArgs']]:
+        """
+        Keys used for MD5 authentication.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "md5_authentication_keys")
+
+    @md5_authentication_keys.setter
+    def md5_authentication_keys(self, value: Optional[pulumi.Input['RouterMd5AuthenticationKeysArgs']]):
+        pulumi.set(self, "md5_authentication_keys", value)
+
     @property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[str]]:
@@ -341,6 +377,7 @@ class Router(pulumi.CustomResource):
                  bgp: Optional[pulumi.Input[Union['RouterBgpArgs', 'RouterBgpArgsDict']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  encrypted_interconnect_router: Optional[pulumi.Input[bool]] = None,
+                 md5_authentication_keys: Optional[pulumi.Input[Union['RouterMd5AuthenticationKeysArgs', 'RouterMd5AuthenticationKeysArgsDict']]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  network: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
@@ -438,6 +475,8 @@ class Router(pulumi.CustomResource):
         :param pulumi.Input[str] description: An optional description of this resource.
         :param pulumi.Input[bool] encrypted_interconnect_router: Indicates if a router is dedicated for use with encrypted VLAN
                attachments (interconnectAttachments).
+        :param pulumi.Input[Union['RouterMd5AuthenticationKeysArgs', 'RouterMd5AuthenticationKeysArgsDict']] md5_authentication_keys: Keys used for MD5 authentication.
+               Structure is documented below.
         :param pulumi.Input[str] name: Name of the resource. The name must be 1-63 characters long, and
                comply with RFC1035. Specifically, the name must be 1-63 characters
                long and match the regular expression `a-z?`
@@ -561,6 +600,7 @@ class Router(pulumi.CustomResource):
                  bgp: Optional[pulumi.Input[Union['RouterBgpArgs', 'RouterBgpArgsDict']]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  encrypted_interconnect_router: Optional[pulumi.Input[bool]] = None,
+                 md5_authentication_keys: Optional[pulumi.Input[Union['RouterMd5AuthenticationKeysArgs', 'RouterMd5AuthenticationKeysArgsDict']]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  network: Optional[pulumi.Input[str]] = None,
                  project: Optional[pulumi.Input[str]] = None,
@@ -577,6 +617,7 @@ class Router(pulumi.CustomResource):
             __props__.__dict__["bgp"] = bgp
             __props__.__dict__["description"] = description
             __props__.__dict__["encrypted_interconnect_router"] = encrypted_interconnect_router
+            __props__.__dict__["md5_authentication_keys"] = md5_authentication_keys
             __props__.__dict__["name"] = name
             if network is None and not opts.urn:
                 raise TypeError("Missing required property 'network'")
@@ -599,6 +640,7 @@ class Router(pulumi.CustomResource):
             creation_timestamp: Optional[pulumi.Input[str]] = None,
             description: Optional[pulumi.Input[str]] = None,
             encrypted_interconnect_router: Optional[pulumi.Input[bool]] = None,
+            md5_authentication_keys: Optional[pulumi.Input[Union['RouterMd5AuthenticationKeysArgs', 'RouterMd5AuthenticationKeysArgsDict']]] = None,
             name: Optional[pulumi.Input[str]] = None,
             network: Optional[pulumi.Input[str]] = None,
             project: Optional[pulumi.Input[str]] = None,
@@ -617,6 +659,8 @@ class Router(pulumi.CustomResource):
         :param pulumi.Input[str] description: An optional description of this resource.
         :param pulumi.Input[bool] encrypted_interconnect_router: Indicates if a router is dedicated for use with encrypted VLAN
                attachments (interconnectAttachments).
+        :param pulumi.Input[Union['RouterMd5AuthenticationKeysArgs', 'RouterMd5AuthenticationKeysArgsDict']] md5_authentication_keys: Keys used for MD5 authentication.
+               Structure is documented below.
         :param pulumi.Input[str] name: Name of the resource. The name must be 1-63 characters long, and
                comply with RFC1035. Specifically, the name must be 1-63 characters
                long and match the regular expression `a-z?`
@@ -640,6 +684,7 @@ class Router(pulumi.CustomResource):
         __props__.__dict__["creation_timestamp"] = creation_timestamp
         __props__.__dict__["description"] = description
         __props__.__dict__["encrypted_interconnect_router"] = encrypted_interconnect_router
+        __props__.__dict__["md5_authentication_keys"] = md5_authentication_keys
         __props__.__dict__["name"] = name
         __props__.__dict__["network"] = network
         __props__.__dict__["project"] = project
@@ -681,6 +726,15 @@ class Router(pulumi.CustomResource):
         """
         return pulumi.get(self, "encrypted_interconnect_router")
 
+    @property
+    @pulumi.getter(name="md5AuthenticationKeys")
+    def md5_authentication_keys(self) -> pulumi.Output[Optional['outputs.RouterMd5AuthenticationKeys']]:
+        """
+        Keys used for MD5 authentication.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "md5_authentication_keys")
+
     @property
     @pulumi.getter
     def name(self) -> pulumi.Output[str]:

pulumi_gcp/compute/subnetwork.py

@@ -55,10 +55,13 @@ class SubnetworkArgs:
         :param pulumi.Input[str] description: An optional description of this resource. Provide this property when
                you create the resource. This field can be set only at resource
                creation time.
-        :param pulumi.Input[bool] enable_flow_logs: Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
+        :param pulumi.Input[bool] enable_flow_logs: (Optional, Deprecated)
+               Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
                it will not appear in get listings. If not set the default behavior is determined by the
                org policy, if there is no org policy specified, then it will default to disabled.
                This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+               
+               > **Warning:** This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.
         :param pulumi.Input[str] external_ipv6_prefix: The range of external IPv6 addresses that are owned by this subnetwork.
         :param pulumi.Input[str] ip_cidr_range: The range of internal addresses that are owned by this subnetwork.
                Provide this property when you create the subnetwork. For example,
@@ -132,6 +135,9 @@ class SubnetworkArgs:
             pulumi.set(__self__, "allow_subnet_cidr_routes_overlap", allow_subnet_cidr_routes_overlap)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if enable_flow_logs is not None:
+            warnings.warn("""This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.""", DeprecationWarning)
+            pulumi.log.warn("""enable_flow_logs is deprecated: This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.""")
         if enable_flow_logs is not None:
             pulumi.set(__self__, "enable_flow_logs", enable_flow_logs)
         if external_ipv6_prefix is not None:
@@ -214,12 +220,16 @@ class SubnetworkArgs:
 
     @property
     @pulumi.getter(name="enableFlowLogs")
+    @_utilities.deprecated("""This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.""")
     def enable_flow_logs(self) -> Optional[pulumi.Input[bool]]:
         """
+        (Optional, Deprecated)
         Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
         it will not appear in get listings. If not set the default behavior is determined by the
         org policy, if there is no org policy specified, then it will default to disabled.
         This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+
+        > **Warning:** This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.
         """
         return pulumi.get(self, "enable_flow_logs")
 
@@ -513,10 +523,13 @@ class _SubnetworkState:
         :param pulumi.Input[str] description: An optional description of this resource. Provide this property when
                you create the resource. This field can be set only at resource
                creation time.
-        :param pulumi.Input[bool] enable_flow_logs: Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
+        :param pulumi.Input[bool] enable_flow_logs: (Optional, Deprecated)
+               Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
                it will not appear in get listings. If not set the default behavior is determined by the
                org policy, if there is no org policy specified, then it will default to disabled.
                This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+               
+               > **Warning:** This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.
         :param pulumi.Input[str] external_ipv6_prefix: The range of external IPv6 addresses that are owned by this subnetwork.
         :param pulumi.Input[str] fingerprint: Fingerprint of this resource. This field is used internally during updates of this resource.
         :param pulumi.Input[str] gateway_address: The gateway address for default routes to reach destination addresses
@@ -612,6 +625,9 @@ class _SubnetworkState:
             pulumi.set(__self__, "creation_timestamp", creation_timestamp)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if enable_flow_logs is not None:
+            warnings.warn("""This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.""", DeprecationWarning)
+            pulumi.log.warn("""enable_flow_logs is deprecated: This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.""")
         if enable_flow_logs is not None:
             pulumi.set(__self__, "enable_flow_logs", enable_flow_logs)
         if external_ipv6_prefix is not None:
@@ -711,12 +727,16 @@ class _SubnetworkState:
 
     @property
     @pulumi.getter(name="enableFlowLogs")
+    @_utilities.deprecated("""This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.""")
     def enable_flow_logs(self) -> Optional[pulumi.Input[bool]]:
         """
+        (Optional, Deprecated)
         Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
         it will not appear in get listings. If not set the default behavior is determined by the
         org policy, if there is no org policy specified, then it will default to disabled.
         This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+
+        > **Warning:** This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.
         """
         return pulumi.get(self, "enable_flow_logs")
 
@@ -1366,10 +1386,13 @@ class Subnetwork(pulumi.CustomResource):
         :param pulumi.Input[str] description: An optional description of this resource. Provide this property when
                you create the resource. This field can be set only at resource
                creation time.
-        :param pulumi.Input[bool] enable_flow_logs: Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
+        :param pulumi.Input[bool] enable_flow_logs: (Optional, Deprecated)
+               Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
                it will not appear in get listings. If not set the default behavior is determined by the
                org policy, if there is no org policy specified, then it will default to disabled.
                This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+               
+               > **Warning:** This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.
         :param pulumi.Input[str] external_ipv6_prefix: The range of external IPv6 addresses that are owned by this subnetwork.
         :param pulumi.Input[str] ip_cidr_range: The range of internal addresses that are owned by this subnetwork.
                Provide this property when you create the subnetwork. For example,
@@ -1820,10 +1843,13 @@ class Subnetwork(pulumi.CustomResource):
         :param pulumi.Input[str] description: An optional description of this resource. Provide this property when
                you create the resource. This field can be set only at resource
                creation time.
-        :param pulumi.Input[bool] enable_flow_logs: Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
+        :param pulumi.Input[bool] enable_flow_logs: (Optional, Deprecated)
+               Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
                it will not appear in get listings. If not set the default behavior is determined by the
                org policy, if there is no org policy specified, then it will default to disabled.
                This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+               
+               > **Warning:** This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.
         :param pulumi.Input[str] external_ipv6_prefix: The range of external IPv6 addresses that are owned by this subnetwork.
         :param pulumi.Input[str] fingerprint: Fingerprint of this resource. This field is used internally during updates of this resource.
         :param pulumi.Input[str] gateway_address: The gateway address for default routes to reach destination addresses
@@ -1979,12 +2005,16 @@ class Subnetwork(pulumi.CustomResource):
 
     @property
     @pulumi.getter(name="enableFlowLogs")
+    @_utilities.deprecated("""This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.""")
     def enable_flow_logs(self) -> pulumi.Output[bool]:
         """
+        (Optional, Deprecated)
         Whether to enable flow logging for this subnetwork. If this field is not explicitly set,
         it will not appear in get listings. If not set the default behavior is determined by the
         org policy, if there is no org policy specified, then it will default to disabled.
         This field isn't supported if the subnet purpose field is set to REGIONAL_MANAGED_PROXY.
+
+        > **Warning:** This field is being removed in favor of log_config. If log_config is present, flow logs are enabled.
         """
         return pulumi.get(self, "enable_flow_logs")
 
@@ -2083,7 +2113,7 @@ class Subnetwork(pulumi.CustomResource):
 
     @property
     @pulumi.getter(name="logConfig")
-    def log_config(self) -> pulumi.Output['outputs.SubnetworkLogConfig']:
+    def log_config(self) -> pulumi.Output[Optional['outputs.SubnetworkLogConfig']]:
         """
         This field denotes the VPC flow logging options for this subnetwork. If
         logging is enabled, logs are exported to Cloud Logging. Flow logging

pulumi_gcp/config/__init__.pyi

@@ -185,6 +185,8 @@ essentialContactsCustomEndpoint: Optional[str]
 
 eventarcCustomEndpoint: Optional[str]
 
+externalCredentials: Optional[str]
+
 filestoreCustomEndpoint: Optional[str]
 
 firebaseAppCheckCustomEndpoint: Optional[str]

pulumi_gcp/config/outputs.py

@@ -16,6 +16,7 @@ from .. import _utilities
 
 __all__ = [
     'Batching',
+    'ExternalCredentials',
 ]
 
 @pulumi.output_type
@@ -39,3 +40,29 @@ class Batching(dict):
         return pulumi.get(self, "send_after")
 
 
+@pulumi.output_type
+class ExternalCredentials(dict):
+    def __init__(__self__, *,
+                 audience: str,
+                 identity_token: str,
+                 service_account_email: str):
+        pulumi.set(__self__, "audience", audience)
+        pulumi.set(__self__, "identity_token", identity_token)
+        pulumi.set(__self__, "service_account_email", service_account_email)
+
+    @property
+    @pulumi.getter
+    def audience(self) -> str:
+        return pulumi.get(self, "audience")
+
+    @property
+    @pulumi.getter(name="identityToken")
+    def identity_token(self) -> str:
+        return pulumi.get(self, "identity_token")
+
+    @property
+    @pulumi.getter(name="serviceAccountEmail")
+    def service_account_email(self) -> str:
+        return pulumi.get(self, "service_account_email")
+
+

pulumi_gcp/config/vars.py

@@ -361,6 +361,10 @@ class _ExportableConfig(types.ModuleType):
     def eventarc_custom_endpoint(self) -> Optional[str]:
         return __config__.get('eventarcCustomEndpoint')
 
+    @property
+    def external_credentials(self) -> Optional[str]:
+        return __config__.get('externalCredentials')
+
     @property
     def filestore_custom_endpoint(self) -> Optional[str]:
         return __config__.get('filestoreCustomEndpoint')

pulumi_gcp/container/_inputs.py

@@ -5639,7 +5639,7 @@ if not MYPY:
         """
         auto_provisioning_locations: NotRequired[pulumi.Input[Sequence[pulumi.Input[str]]]]
         """
-        The list of Google Compute Engine 
+        The list of Google Compute Engine
         [zones](https://cloud.google.com/compute/docs/zones#available) in which the
         NodePool's nodes can be created by NAP.
         """
@@ -5677,7 +5677,7 @@ class ClusterClusterAutoscalingArgs:
         :param pulumi.Input['ClusterClusterAutoscalingAutoProvisioningDefaultsArgs'] auto_provisioning_defaults: Contains defaults for a node pool created by NAP. A subset of fields also apply to
                GKE Autopilot clusters.
                Structure is documented below.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] auto_provisioning_locations: The list of Google Compute Engine 
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] auto_provisioning_locations: The list of Google Compute Engine
                [zones](https://cloud.google.com/compute/docs/zones#available) in which the
                NodePool's nodes can be created by NAP.
         :param pulumi.Input[str] autoscaling_profile: Configuration
@@ -5720,7 +5720,7 @@ class ClusterClusterAutoscalingArgs:
     @pulumi.getter(name="autoProvisioningLocations")
     def auto_provisioning_locations(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        The list of Google Compute Engine 
+        The list of Google Compute Engine
         [zones](https://cloud.google.com/compute/docs/zones#available) in which the
         NodePool's nodes can be created by NAP.
         """
@@ -9673,7 +9673,7 @@ if not MYPY:
         """
         certificate_authority_domain_configs: NotRequired[pulumi.Input[Sequence[pulumi.Input['ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgsDict']]]]
         """
-        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
 elif False:
     ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -9685,7 +9685,7 @@ class ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigArgs:
                  certificate_authority_domain_configs: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]]] = None):
         """
         :param pulumi.Input[bool] enabled: Enables private registry config. If set to false, all other fields in this object must not be set.
-        :param pulumi.Input[Sequence[pulumi.Input['ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        :param pulumi.Input[Sequence[pulumi.Input['ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         pulumi.set(__self__, "enabled", enabled)
         if certificate_authority_domain_configs is not None:
@@ -9707,7 +9707,7 @@ class ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigArgs:
     @pulumi.getter(name="certificateAuthorityDomainConfigs")
     def certificate_authority_domain_configs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]]]:
         """
-        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         return pulumi.get(self, "certificate_authority_domain_configs")
 
@@ -12098,7 +12098,7 @@ if not MYPY:
         """
         certificate_authority_domain_configs: NotRequired[pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgsDict']]]]
         """
-        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
 elif False:
     ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -12110,7 +12110,7 @@ class ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAc
                  certificate_authority_domain_configs: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]]] = None):
         """
         :param pulumi.Input[bool] enabled: Enables private registry config. If set to false, all other fields in this object must not be set.
-        :param pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        :param pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         pulumi.set(__self__, "enabled", enabled)
         if certificate_authority_domain_configs is not None:
@@ -12132,7 +12132,7 @@ class ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAc
     @pulumi.getter(name="certificateAuthorityDomainConfigs")
     def certificate_authority_domain_configs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]]]:
         """
-        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         return pulumi.get(self, "certificate_authority_domain_configs")
 
@@ -13887,7 +13887,7 @@ if not MYPY:
         """
         certificate_authority_domain_configs: NotRequired[pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgsDict']]]]
         """
-        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
 elif False:
     ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -13899,7 +13899,7 @@ class ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigArgs:
                  certificate_authority_domain_configs: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]]] = None):
         """
         :param pulumi.Input[bool] enabled: Enables private registry config. If set to false, all other fields in this object must not be set.
-        :param pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        :param pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         pulumi.set(__self__, "enabled", enabled)
         if certificate_authority_domain_configs is not None:
@@ -13921,7 +13921,7 @@ class ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigArgs:
     @pulumi.getter(name="certificateAuthorityDomainConfigs")
     def certificate_authority_domain_configs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs']]]]:
         """
-        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         return pulumi.get(self, "certificate_authority_domain_configs")