pulumi-gcp 8.24.0a1743177741__py3-none-any.whl → 8.25.0__py3-none-any.whl

pulumi_gcp/container/cluster.py

@@ -37,6 +37,7 @@ class ClusterArgs:
                  default_snat_status: Optional[pulumi.Input['ClusterDefaultSnatStatusArgs']] = None,
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
+                 disable_l4_lb_firewall_reconciliation: Optional[pulumi.Input[bool]] = None,
                  dns_config: Optional[pulumi.Input['ClusterDnsConfigArgs']] = None,
                  enable_autopilot: Optional[pulumi.Input[bool]] = None,
                  enable_cilium_clusterwide_network_policy: Optional[pulumi.Input[bool]] = None,
@@ -133,6 +134,7 @@ class ClusterArgs:
                for more information.
         :param pulumi.Input['ClusterDefaultSnatStatusArgs'] default_snat_status: [GKE SNAT](https://cloud.google.com/kubernetes-engine/docs/how-to/ip-masquerade-agent#how_ipmasq_works) DefaultSnatStatus contains the desired state of whether default sNAT should be disabled on the cluster, [API doc](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1beta1/projects.locations.clusters#networkconfig). Structure is documented below
         :param pulumi.Input[str] description: Description of the cluster.
+        :param pulumi.Input[bool] disable_l4_lb_firewall_reconciliation: Disable L4 load balancer VPC firewalls to enable firewall policies.
         :param pulumi.Input['ClusterDnsConfigArgs'] dns_config: Configuration for [Using Cloud DNS for GKE](https://cloud.google.com/kubernetes-engine/docs/how-to/cloud-dns). Structure is documented below.
         :param pulumi.Input[bool] enable_autopilot: Enable Autopilot for this cluster. Defaults to `false`.
                Note that when this option is enabled, certain features of Standard GKE are not available.
@@ -344,6 +346,8 @@ class ClusterArgs:
             pulumi.set(__self__, "deletion_protection", deletion_protection)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if disable_l4_lb_firewall_reconciliation is not None:
+            pulumi.set(__self__, "disable_l4_lb_firewall_reconciliation", disable_l4_lb_firewall_reconciliation)
         if dns_config is not None:
             pulumi.set(__self__, "dns_config", dns_config)
         if enable_autopilot is not None:
@@ -671,6 +675,18 @@ class ClusterArgs:
     def description(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "description", value)
 
+    @property
+    @pulumi.getter(name="disableL4LbFirewallReconciliation")
+    def disable_l4_lb_firewall_reconciliation(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Disable L4 load balancer VPC firewalls to enable firewall policies.
+        """
+        return pulumi.get(self, "disable_l4_lb_firewall_reconciliation")
+
+    @disable_l4_lb_firewall_reconciliation.setter
+    def disable_l4_lb_firewall_reconciliation(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "disable_l4_lb_firewall_reconciliation", value)
+
     @property
     @pulumi.getter(name="dnsConfig")
     def dns_config(self) -> Optional[pulumi.Input['ClusterDnsConfigArgs']]:
@@ -1507,6 +1523,7 @@ class _ClusterState:
                  default_snat_status: Optional[pulumi.Input['ClusterDefaultSnatStatusArgs']] = None,
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
+                 disable_l4_lb_firewall_reconciliation: Optional[pulumi.Input[bool]] = None,
                  dns_config: Optional[pulumi.Input['ClusterDnsConfigArgs']] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  enable_autopilot: Optional[pulumi.Input[bool]] = None,
@@ -1612,6 +1629,7 @@ class _ClusterState:
                for more information.
         :param pulumi.Input['ClusterDefaultSnatStatusArgs'] default_snat_status: [GKE SNAT](https://cloud.google.com/kubernetes-engine/docs/how-to/ip-masquerade-agent#how_ipmasq_works) DefaultSnatStatus contains the desired state of whether default sNAT should be disabled on the cluster, [API doc](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1beta1/projects.locations.clusters#networkconfig). Structure is documented below
         :param pulumi.Input[str] description: Description of the cluster.
+        :param pulumi.Input[bool] disable_l4_lb_firewall_reconciliation: Disable L4 load balancer VPC firewalls to enable firewall policies.
         :param pulumi.Input['ClusterDnsConfigArgs'] dns_config: Configuration for [Using Cloud DNS for GKE](https://cloud.google.com/kubernetes-engine/docs/how-to/cloud-dns). Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[bool] enable_autopilot: Enable Autopilot for this cluster. Defaults to `false`.
@@ -1838,6 +1856,8 @@ class _ClusterState:
             pulumi.set(__self__, "deletion_protection", deletion_protection)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if disable_l4_lb_firewall_reconciliation is not None:
+            pulumi.set(__self__, "disable_l4_lb_firewall_reconciliation", disable_l4_lb_firewall_reconciliation)
         if dns_config is not None:
             pulumi.set(__self__, "dns_config", dns_config)
         if effective_labels is not None:
@@ -2183,6 +2203,18 @@ class _ClusterState:
     def description(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "description", value)
 
+    @property
+    @pulumi.getter(name="disableL4LbFirewallReconciliation")
+    def disable_l4_lb_firewall_reconciliation(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Disable L4 load balancer VPC firewalls to enable firewall policies.
+        """
+        return pulumi.get(self, "disable_l4_lb_firewall_reconciliation")
+
+    @disable_l4_lb_firewall_reconciliation.setter
+    def disable_l4_lb_firewall_reconciliation(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "disable_l4_lb_firewall_reconciliation", value)
+
     @property
     @pulumi.getter(name="dnsConfig")
     def dns_config(self) -> Optional[pulumi.Input['ClusterDnsConfigArgs']]:
@@ -3133,6 +3165,7 @@ class Cluster(pulumi.CustomResource):
                  default_snat_status: Optional[pulumi.Input[Union['ClusterDefaultSnatStatusArgs', 'ClusterDefaultSnatStatusArgsDict']]] = None,
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
+                 disable_l4_lb_firewall_reconciliation: Optional[pulumi.Input[bool]] = None,
                  dns_config: Optional[pulumi.Input[Union['ClusterDnsConfigArgs', 'ClusterDnsConfigArgsDict']]] = None,
                  enable_autopilot: Optional[pulumi.Input[bool]] = None,
                  enable_cilium_clusterwide_network_policy: Optional[pulumi.Input[bool]] = None,
@@ -3351,6 +3384,7 @@ class Cluster(pulumi.CustomResource):
                for more information.
         :param pulumi.Input[Union['ClusterDefaultSnatStatusArgs', 'ClusterDefaultSnatStatusArgsDict']] default_snat_status: [GKE SNAT](https://cloud.google.com/kubernetes-engine/docs/how-to/ip-masquerade-agent#how_ipmasq_works) DefaultSnatStatus contains the desired state of whether default sNAT should be disabled on the cluster, [API doc](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1beta1/projects.locations.clusters#networkconfig). Structure is documented below
         :param pulumi.Input[str] description: Description of the cluster.
+        :param pulumi.Input[bool] disable_l4_lb_firewall_reconciliation: Disable L4 load balancer VPC firewalls to enable firewall policies.
         :param pulumi.Input[Union['ClusterDnsConfigArgs', 'ClusterDnsConfigArgsDict']] dns_config: Configuration for [Using Cloud DNS for GKE](https://cloud.google.com/kubernetes-engine/docs/how-to/cloud-dns). Structure is documented below.
         :param pulumi.Input[bool] enable_autopilot: Enable Autopilot for this cluster. Defaults to `false`.
                Note that when this option is enabled, certain features of Standard GKE are not available.
@@ -3688,6 +3722,7 @@ class Cluster(pulumi.CustomResource):
                  default_snat_status: Optional[pulumi.Input[Union['ClusterDefaultSnatStatusArgs', 'ClusterDefaultSnatStatusArgsDict']]] = None,
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
+                 disable_l4_lb_firewall_reconciliation: Optional[pulumi.Input[bool]] = None,
                  dns_config: Optional[pulumi.Input[Union['ClusterDnsConfigArgs', 'ClusterDnsConfigArgsDict']]] = None,
                  enable_autopilot: Optional[pulumi.Input[bool]] = None,
                  enable_cilium_clusterwide_network_policy: Optional[pulumi.Input[bool]] = None,
@@ -3771,6 +3806,7 @@ class Cluster(pulumi.CustomResource):
             __props__.__dict__["default_snat_status"] = default_snat_status
             __props__.__dict__["deletion_protection"] = deletion_protection
             __props__.__dict__["description"] = description
+            __props__.__dict__["disable_l4_lb_firewall_reconciliation"] = disable_l4_lb_firewall_reconciliation
             __props__.__dict__["dns_config"] = dns_config
             __props__.__dict__["enable_autopilot"] = enable_autopilot
             __props__.__dict__["enable_cilium_clusterwide_network_policy"] = enable_cilium_clusterwide_network_policy
@@ -3866,6 +3902,7 @@ class Cluster(pulumi.CustomResource):
             default_snat_status: Optional[pulumi.Input[Union['ClusterDefaultSnatStatusArgs', 'ClusterDefaultSnatStatusArgsDict']]] = None,
             deletion_protection: Optional[pulumi.Input[bool]] = None,
             description: Optional[pulumi.Input[str]] = None,
+            disable_l4_lb_firewall_reconciliation: Optional[pulumi.Input[bool]] = None,
             dns_config: Optional[pulumi.Input[Union['ClusterDnsConfigArgs', 'ClusterDnsConfigArgsDict']]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             enable_autopilot: Optional[pulumi.Input[bool]] = None,
@@ -3976,6 +4013,7 @@ class Cluster(pulumi.CustomResource):
                for more information.
         :param pulumi.Input[Union['ClusterDefaultSnatStatusArgs', 'ClusterDefaultSnatStatusArgsDict']] default_snat_status: [GKE SNAT](https://cloud.google.com/kubernetes-engine/docs/how-to/ip-masquerade-agent#how_ipmasq_works) DefaultSnatStatus contains the desired state of whether default sNAT should be disabled on the cluster, [API doc](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1beta1/projects.locations.clusters#networkconfig). Structure is documented below
         :param pulumi.Input[str] description: Description of the cluster.
+        :param pulumi.Input[bool] disable_l4_lb_firewall_reconciliation: Disable L4 load balancer VPC firewalls to enable firewall policies.
         :param pulumi.Input[Union['ClusterDnsConfigArgs', 'ClusterDnsConfigArgsDict']] dns_config: Configuration for [Using Cloud DNS for GKE](https://cloud.google.com/kubernetes-engine/docs/how-to/cloud-dns). Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[bool] enable_autopilot: Enable Autopilot for this cluster. Defaults to `false`.
@@ -4190,6 +4228,7 @@ class Cluster(pulumi.CustomResource):
         __props__.__dict__["default_snat_status"] = default_snat_status
         __props__.__dict__["deletion_protection"] = deletion_protection
         __props__.__dict__["description"] = description
+        __props__.__dict__["disable_l4_lb_firewall_reconciliation"] = disable_l4_lb_firewall_reconciliation
         __props__.__dict__["dns_config"] = dns_config
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["enable_autopilot"] = enable_autopilot
@@ -4405,6 +4444,14 @@ class Cluster(pulumi.CustomResource):
         """
         return pulumi.get(self, "description")
 
+    @property
+    @pulumi.getter(name="disableL4LbFirewallReconciliation")
+    def disable_l4_lb_firewall_reconciliation(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Disable L4 load balancer VPC firewalls to enable firewall policies.
+        """
+        return pulumi.get(self, "disable_l4_lb_firewall_reconciliation")
+
     @property
     @pulumi.getter(name="dnsConfig")
     def dns_config(self) -> pulumi.Output[Optional['outputs.ClusterDnsConfig']]:

pulumi_gcp/container/get_cluster.py

@@ -27,7 +27,7 @@ class GetClusterResult:
     """
     A collection of values returned by getCluster.
     """
-    def __init__(__self__, addons_configs=None, allow_net_admin=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, control_plane_endpoints_configs=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, dns_configs=None, effective_labels=None, enable_autopilot=None, enable_cilium_clusterwide_network_policy=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, enterprise_configs=None, fleets=None, gateway_api_configs=None, id=None, identity_service_configs=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_autoscalings=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, pulumi_labels=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, secret_manager_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, user_managed_keys_configs=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
+    def __init__(__self__, addons_configs=None, allow_net_admin=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, control_plane_endpoints_configs=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, disable_l4_lb_firewall_reconciliation=None, dns_configs=None, effective_labels=None, enable_autopilot=None, enable_cilium_clusterwide_network_policy=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, enterprise_configs=None, fleets=None, gateway_api_configs=None, id=None, identity_service_configs=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_autoscalings=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, pulumi_labels=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, secret_manager_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, user_managed_keys_configs=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
         if addons_configs and not isinstance(addons_configs, list):
             raise TypeError("Expected argument 'addons_configs' to be a list")
         pulumi.set(__self__, "addons_configs", addons_configs)
@@ -76,6 +76,9 @@ class GetClusterResult:
         if description and not isinstance(description, str):
             raise TypeError("Expected argument 'description' to be a str")
         pulumi.set(__self__, "description", description)
+        if disable_l4_lb_firewall_reconciliation and not isinstance(disable_l4_lb_firewall_reconciliation, bool):
+            raise TypeError("Expected argument 'disable_l4_lb_firewall_reconciliation' to be a bool")
+        pulumi.set(__self__, "disable_l4_lb_firewall_reconciliation", disable_l4_lb_firewall_reconciliation)
         if dns_configs and not isinstance(dns_configs, list):
             raise TypeError("Expected argument 'dns_configs' to be a list")
         pulumi.set(__self__, "dns_configs", dns_configs)
@@ -361,6 +364,11 @@ class GetClusterResult:
     def description(self) -> str:
         return pulumi.get(self, "description")
 
+    @property
+    @pulumi.getter(name="disableL4LbFirewallReconciliation")
+    def disable_l4_lb_firewall_reconciliation(self) -> bool:
+        return pulumi.get(self, "disable_l4_lb_firewall_reconciliation")
+
     @property
     @pulumi.getter(name="dnsConfigs")
     def dns_configs(self) -> Sequence['outputs.GetClusterDnsConfigResult']:
@@ -727,6 +735,7 @@ class AwaitableGetClusterResult(GetClusterResult):
             default_snat_statuses=self.default_snat_statuses,
             deletion_protection=self.deletion_protection,
             description=self.description,
+            disable_l4_lb_firewall_reconciliation=self.disable_l4_lb_firewall_reconciliation,
             dns_configs=self.dns_configs,
             effective_labels=self.effective_labels,
             enable_autopilot=self.enable_autopilot,
@@ -850,6 +859,7 @@ def get_cluster(location: Optional[str] = None,
         default_snat_statuses=pulumi.get(__ret__, 'default_snat_statuses'),
         deletion_protection=pulumi.get(__ret__, 'deletion_protection'),
         description=pulumi.get(__ret__, 'description'),
+        disable_l4_lb_firewall_reconciliation=pulumi.get(__ret__, 'disable_l4_lb_firewall_reconciliation'),
         dns_configs=pulumi.get(__ret__, 'dns_configs'),
         effective_labels=pulumi.get(__ret__, 'effective_labels'),
         enable_autopilot=pulumi.get(__ret__, 'enable_autopilot'),
@@ -970,6 +980,7 @@ def get_cluster_output(location: Optional[pulumi.Input[Optional[str]]] = None,
         default_snat_statuses=pulumi.get(__response__, 'default_snat_statuses'),
         deletion_protection=pulumi.get(__response__, 'deletion_protection'),
         description=pulumi.get(__response__, 'description'),
+        disable_l4_lb_firewall_reconciliation=pulumi.get(__response__, 'disable_l4_lb_firewall_reconciliation'),
         dns_configs=pulumi.get(__response__, 'dns_configs'),
         effective_labels=pulumi.get(__response__, 'effective_labels'),
         enable_autopilot=pulumi.get(__response__, 'enable_autopilot'),

pulumi_gcp/container/get_registry_image.py

@@ -113,6 +113,8 @@ def get_registry_image(digest: Optional[str] = None,
                        tag: Optional[str] = None,
                        opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetRegistryImageResult:
     """
+    > **Warning**: Container Registry is deprecated. Effective March 18, 2025, Container Registry is shut down and writing images to Container Registry is unavailable. Resource will be removed in future major release.
+
     This data source fetches the project name, and provides the appropriate URLs to use for container registry for this project.
 
     The URLs are computed entirely offline - as long as the project exists, they will be valid, but this data source does not contact Google Container Registry (GCR) at any point.
@@ -158,6 +160,8 @@ def get_registry_image_output(digest: Optional[pulumi.Input[Optional[str]]] = No
                               tag: Optional[pulumi.Input[Optional[str]]] = None,
                               opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetRegistryImageResult]:
     """
+    > **Warning**: Container Registry is deprecated. Effective March 18, 2025, Container Registry is shut down and writing images to Container Registry is unavailable. Resource will be removed in future major release.
+
     This data source fetches the project name, and provides the appropriate URLs to use for container registry for this project.
 
     The URLs are computed entirely offline - as long as the project exists, they will be valid, but this data source does not contact Google Container Registry (GCR) at any point.

pulumi_gcp/container/get_registry_repository.py

@@ -83,6 +83,8 @@ def get_registry_repository(project: Optional[str] = None,
                             region: Optional[str] = None,
                             opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetRegistryRepositoryResult:
     """
+    > **Warning**: Container Registry is deprecated. Effective March 18, 2025, Container Registry is shut down and writing images to Container Registry is unavailable. Resource will be removed in future major release.
+
     This data source fetches the project name, and provides the appropriate URLs to use for container registry for this project.
 
     The URLs are computed entirely offline - as long as the project exists, they will be valid, but this data source does not contact Google Container Registry (GCR) at any point.
@@ -116,6 +118,8 @@ def get_registry_repository_output(project: Optional[pulumi.Input[Optional[str]]
                                    region: Optional[pulumi.Input[Optional[str]]] = None,
                                    opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetRegistryRepositoryResult]:
     """
+    > **Warning**: Container Registry is deprecated. Effective March 18, 2025, Container Registry is shut down and writing images to Container Registry is unavailable. Resource will be removed in future major release.
+
     This data source fetches the project name, and provides the appropriate URLs to use for container registry for this project.
 
     The URLs are computed entirely offline - as long as the project exists, they will be valid, but this data source does not contact Google Container Registry (GCR) at any point.

pulumi_gcp/container/outputs.py

@@ -4669,7 +4669,7 @@ class ClusterClusterAutoscaling(dict):
         :param 'ClusterClusterAutoscalingAutoProvisioningDefaultsArgs' auto_provisioning_defaults: Contains defaults for a node pool created by NAP. A subset of fields also apply to
                GKE Autopilot clusters.
                Structure is documented below.
-        :param Sequence[str] auto_provisioning_locations: The list of Google Compute Engine 
+        :param Sequence[str] auto_provisioning_locations: The list of Google Compute Engine
                [zones](https://cloud.google.com/compute/docs/zones#available) in which the
                NodePool's nodes can be created by NAP.
         :param str autoscaling_profile: Configuration
@@ -4708,7 +4708,7 @@ class ClusterClusterAutoscaling(dict):
     @pulumi.getter(name="autoProvisioningLocations")
     def auto_provisioning_locations(self) -> Optional[Sequence[str]]:
         """
-        The list of Google Compute Engine 
+        The list of Google Compute Engine
         [zones](https://cloud.google.com/compute/docs/zones#available) in which the
         NodePool's nodes can be created by NAP.
         """
@@ -7841,7 +7841,7 @@ class ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfig(dict):
                  certificate_authority_domain_configs: Optional[Sequence['outputs.ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfig']] = None):
         """
         :param bool enabled: Enables private registry config. If set to false, all other fields in this object must not be set.
-        :param Sequence['ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs'] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        :param Sequence['ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs'] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         pulumi.set(__self__, "enabled", enabled)
         if certificate_authority_domain_configs is not None:
@@ -7859,7 +7859,7 @@ class ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfig(dict):
     @pulumi.getter(name="certificateAuthorityDomainConfigs")
     def certificate_authority_domain_configs(self) -> Optional[Sequence['outputs.ClusterNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfig']]:
         """
-        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         return pulumi.get(self, "certificate_authority_domain_configs")
 
@@ -9811,7 +9811,7 @@ class ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAc
                  certificate_authority_domain_configs: Optional[Sequence['outputs.ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfig']] = None):
         """
         :param bool enabled: Enables private registry config. If set to false, all other fields in this object must not be set.
-        :param Sequence['ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs'] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        :param Sequence['ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs'] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         pulumi.set(__self__, "enabled", enabled)
         if certificate_authority_domain_configs is not None:
@@ -9829,7 +9829,7 @@ class ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAc
     @pulumi.getter(name="certificateAuthorityDomainConfigs")
     def certificate_authority_domain_configs(self) -> Optional[Sequence['outputs.ClusterNodePoolDefaultsNodeConfigDefaultsContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfig']]:
         """
-        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         return pulumi.get(self, "certificate_authority_domain_configs")
 
@@ -11154,7 +11154,7 @@ class ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfig(dict)
                  certificate_authority_domain_configs: Optional[Sequence['outputs.ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfig']] = None):
         """
         :param bool enabled: Enables private registry config. If set to false, all other fields in this object must not be set.
-        :param Sequence['ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs'] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        :param Sequence['ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfigArgs'] certificate_authority_domain_configs: List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         pulumi.set(__self__, "enabled", enabled)
         if certificate_authority_domain_configs is not None:
@@ -11172,7 +11172,7 @@ class ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfig(dict)
     @pulumi.getter(name="certificateAuthorityDomainConfigs")
     def certificate_authority_domain_configs(self) -> Optional[Sequence['outputs.ClusterNodePoolNodeConfigContainerdConfigPrivateRegistryAccessConfigCertificateAuthorityDomainConfig']]:
         """
-        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example: 
+        List of configuration objects for CA and domains. Each object identifies a certificate and its assigned domains. See [how to configure for private container registries](https://cloud.google.com/kubernetes-engine/docs/how-to/access-private-registries-private-certificates) for more detail. Example:
         """
         return pulumi.get(self, "certificate_authority_domain_configs")
 

pulumi_gcp/container/registry.py

@@ -121,6 +121,8 @@ class Registry(pulumi.CustomResource):
                  project: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
+        > **Warning**: Container Registry is deprecated. Effective March 18, 2025, Container Registry is shut down and writing images to Container Registry is unavailable. Resource will be removed in future major release.
+
         Ensures that the Google Cloud Storage bucket that backs Google Container Registry exists. Creating this resource will create the backing bucket if it does not exist, or do nothing if the bucket already exists. Destroying this resource does *NOT* destroy the backing bucket. For more information see [the official documentation](https://cloud.google.com/container-registry/docs/overview)
 
         This resource can be used to ensure that the GCS bucket exists prior to assigning permissions. For more information see the [access control page](https://cloud.google.com/container-registry/docs/access-control) for GCR.
@@ -167,6 +169,8 @@ class Registry(pulumi.CustomResource):
                  args: Optional[RegistryArgs] = None,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
+        > **Warning**: Container Registry is deprecated. Effective March 18, 2025, Container Registry is shut down and writing images to Container Registry is unavailable. Resource will be removed in future major release.
+
         Ensures that the Google Cloud Storage bucket that backs Google Container Registry exists. Creating this resource will create the backing bucket if it does not exist, or do nothing if the bucket already exists. Destroying this resource does *NOT* destroy the backing bucket. For more information see [the official documentation](https://cloud.google.com/container-registry/docs/overview)
 
         This resource can be used to ensure that the GCS bucket exists prior to assigning permissions. For more information see the [access control page](https://cloud.google.com/container-registry/docs/access-control) for GCR.

pulumi_gcp/datafusion/instance.py

@@ -38,6 +38,7 @@ class InstanceArgs:
                  private_instance: Optional[pulumi.Input[bool]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  version: Optional[pulumi.Input[str]] = None,
                  zone: Optional[pulumi.Input[str]] = None):
         """
@@ -85,6 +86,10 @@ class InstanceArgs:
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] region: The region of the Data Fusion instance.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags.
+               Resource manager tag keys and values have the same definition as resource manager tags.
+               Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/{tag_value_id}.
+               The field is ignored (both PUT & PATCH) when empty.
         :param pulumi.Input[str] version: Current version of the Data Fusion.
         :param pulumi.Input[str] zone: Name of the zone in which the Data Fusion instance will be created. Only DEVELOPER instances use this field.
         """
@@ -121,6 +126,8 @@ class InstanceArgs:
             pulumi.set(__self__, "project", project)
         if region is not None:
             pulumi.set(__self__, "region", region)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
         if version is not None:
             pulumi.set(__self__, "version", version)
         if zone is not None:
@@ -356,6 +363,21 @@ class InstanceArgs:
     def region(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "region", value)
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        A map of resource manager tags.
+        Resource manager tag keys and values have the same definition as resource manager tags.
+        Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/{tag_value_id}.
+        The field is ignored (both PUT & PATCH) when empty.
+        """
+        return pulumi.get(self, "tags")
+
+    @tags.setter
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "tags", value)
+
     @property
     @pulumi.getter
     def version(self) -> Optional[pulumi.Input[str]]:
@@ -410,6 +432,7 @@ class _InstanceState:
                  service_endpoint: Optional[pulumi.Input[str]] = None,
                  state: Optional[pulumi.Input[str]] = None,
                  state_message: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  tenant_project_id: Optional[pulumi.Input[str]] = None,
                  type: Optional[pulumi.Input[str]] = None,
                  update_time: Optional[pulumi.Input[str]] = None,
@@ -463,6 +486,10 @@ class _InstanceState:
                - UPGRADING: Instance is being upgraded
                - RESTARTING: Instance is being restarted
         :param pulumi.Input[str] state_message: Additional information about the current state of this Data Fusion instance if available.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags.
+               Resource manager tag keys and values have the same definition as resource manager tags.
+               Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/{tag_value_id}.
+               The field is ignored (both PUT & PATCH) when empty.
         :param pulumi.Input[str] tenant_project_id: The name of the tenant project.
         :param pulumi.Input[str] type: Represents the type of Data Fusion instance. Each type is configured with
                the default settings for processing and memory.
@@ -537,6 +564,8 @@ class _InstanceState:
             pulumi.set(__self__, "state", state)
         if state_message is not None:
             pulumi.set(__self__, "state_message", state_message)
+        if tags is not None:
+            pulumi.set(__self__, "tags", tags)
         if tenant_project_id is not None:
             pulumi.set(__self__, "tenant_project_id", tenant_project_id)
         if type is not None:
@@ -881,6 +910,21 @@ class _InstanceState:
     def state_message(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "state_message", value)
 
+    @property
+    @pulumi.getter
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        A map of resource manager tags.
+        Resource manager tag keys and values have the same definition as resource manager tags.
+        Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/{tag_value_id}.
+        The field is ignored (both PUT & PATCH) when empty.
+        """
+        return pulumi.get(self, "tags")
+
+    @tags.setter
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "tags", value)
+
     @property
     @pulumi.getter(name="tenantProjectId")
     def tenant_project_id(self) -> Optional[pulumi.Input[str]]:
@@ -976,6 +1020,7 @@ class Instance(pulumi.CustomResource):
                  private_instance: Optional[pulumi.Input[bool]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  type: Optional[pulumi.Input[str]] = None,
                  version: Optional[pulumi.Input[str]] = None,
                  zone: Optional[pulumi.Input[str]] = None,
@@ -1202,6 +1247,10 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[str] region: The region of the Data Fusion instance.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags.
+               Resource manager tag keys and values have the same definition as resource manager tags.
+               Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/{tag_value_id}.
+               The field is ignored (both PUT & PATCH) when empty.
         :param pulumi.Input[str] type: Represents the type of Data Fusion instance. Each type is configured with
                the default settings for processing and memory.
                - BASIC: Basic Data Fusion instance. In Basic type, the user will be able to create data pipelines
@@ -1447,6 +1496,7 @@ class Instance(pulumi.CustomResource):
                  private_instance: Optional[pulumi.Input[bool]] = None,
                  project: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  type: Optional[pulumi.Input[str]] = None,
                  version: Optional[pulumi.Input[str]] = None,
                  zone: Optional[pulumi.Input[str]] = None,
@@ -1475,6 +1525,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["private_instance"] = private_instance
             __props__.__dict__["project"] = project
             __props__.__dict__["region"] = region
+            __props__.__dict__["tags"] = tags
             if type is None and not opts.urn:
                 raise TypeError("Missing required property 'type'")
             __props__.__dict__["type"] = type
@@ -1530,6 +1581,7 @@ class Instance(pulumi.CustomResource):
             service_endpoint: Optional[pulumi.Input[str]] = None,
             state: Optional[pulumi.Input[str]] = None,
             state_message: Optional[pulumi.Input[str]] = None,
+            tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             tenant_project_id: Optional[pulumi.Input[str]] = None,
             type: Optional[pulumi.Input[str]] = None,
             update_time: Optional[pulumi.Input[str]] = None,
@@ -1588,6 +1640,10 @@ class Instance(pulumi.CustomResource):
                - UPGRADING: Instance is being upgraded
                - RESTARTING: Instance is being restarted
         :param pulumi.Input[str] state_message: Additional information about the current state of this Data Fusion instance if available.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags.
+               Resource manager tag keys and values have the same definition as resource manager tags.
+               Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/{tag_value_id}.
+               The field is ignored (both PUT & PATCH) when empty.
         :param pulumi.Input[str] tenant_project_id: The name of the tenant project.
         :param pulumi.Input[str] type: Represents the type of Data Fusion instance. Each type is configured with
                the default settings for processing and memory.
@@ -1637,6 +1693,7 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["service_endpoint"] = service_endpoint
         __props__.__dict__["state"] = state
         __props__.__dict__["state_message"] = state_message
+        __props__.__dict__["tags"] = tags
         __props__.__dict__["tenant_project_id"] = tenant_project_id
         __props__.__dict__["type"] = type
         __props__.__dict__["update_time"] = update_time
@@ -1873,6 +1930,17 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "state_message")
 
+    @property
+    @pulumi.getter
+    def tags(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
+        """
+        A map of resource manager tags.
+        Resource manager tag keys and values have the same definition as resource manager tags.
+        Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/{tag_value_id}.
+        The field is ignored (both PUT & PATCH) when empty.
+        """
+        return pulumi.get(self, "tags")
+
     @property
     @pulumi.getter(name="tenantProjectId")
     def tenant_project_id(self) -> pulumi.Output[str]:

pulumi_gcp/dataproc/__init__.py

@@ -20,13 +20,18 @@ from .gdc_spark_application import *
 from .get_autoscaling_policy_iam_policy import *
 from .get_cluster_iam_policy import *
 from .get_job_iam_policy import *
+from .get_metastore_database_iam_policy import *
 from .get_metastore_federation_iam_policy import *
 from .get_metastore_service import *
 from .get_metastore_service_iam_policy import *
+from .get_metastore_table_iam_policy import *
 from .job import *
 from .job_iam_binding import *
 from .job_iam_member import *
 from .job_iam_policy import *
+from .metastore_database_iam_binding import *
+from .metastore_database_iam_member import *
+from .metastore_database_iam_policy import *
 from .metastore_federation import *
 from .metastore_federation_iam_binding import *
 from .metastore_federation_iam_member import *
@@ -35,6 +40,9 @@ from .metastore_service import *
 from .metastore_service_iam_binding import *
 from .metastore_service_iam_member import *
 from .metastore_service_iam_policy import *
+from .metastore_table_iam_binding import *
+from .metastore_table_iam_member import *
+from .metastore_table_iam_policy import *
 from .workflow_template import *
 from ._inputs import *
 from . import outputs