pulumi-gcp 8.25.1__py3-none-any.whl → 8.26.0__py3-none-any.whl

pulumi_gcp/parametermanager/get_regional_parameter.py

@@ -28,7 +28,7 @@ class GetRegionalParameterResult:
     """
     A collection of values returned by getRegionalParameter.
     """
-    def __init__(__self__, create_time=None, effective_labels=None, format=None, id=None, labels=None, location=None, name=None, parameter_id=None, policy_members=None, project=None, pulumi_labels=None, update_time=None):
+    def __init__(__self__, create_time=None, effective_labels=None, format=None, id=None, kms_key=None, labels=None, location=None, name=None, parameter_id=None, policy_members=None, project=None, pulumi_labels=None, update_time=None):
         if create_time and not isinstance(create_time, str):
             raise TypeError("Expected argument 'create_time' to be a str")
         pulumi.set(__self__, "create_time", create_time)
@@ -41,6 +41,9 @@ class GetRegionalParameterResult:
         if id and not isinstance(id, str):
             raise TypeError("Expected argument 'id' to be a str")
         pulumi.set(__self__, "id", id)
+        if kms_key and not isinstance(kms_key, str):
+            raise TypeError("Expected argument 'kms_key' to be a str")
+        pulumi.set(__self__, "kms_key", kms_key)
         if labels and not isinstance(labels, dict):
             raise TypeError("Expected argument 'labels' to be a dict")
         pulumi.set(__self__, "labels", labels)
@@ -89,6 +92,11 @@ class GetRegionalParameterResult:
         """
         return pulumi.get(self, "id")
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> builtins.str:
+        return pulumi.get(self, "kms_key")
+
     @property
     @pulumi.getter
     def labels(self) -> Mapping[str, builtins.str]:
@@ -140,6 +148,7 @@ class AwaitableGetRegionalParameterResult(GetRegionalParameterResult):
             effective_labels=self.effective_labels,
             format=self.format,
             id=self.id,
+            kms_key=self.kms_key,
             labels=self.labels,
             location=self.location,
             name=self.name,
@@ -184,6 +193,7 @@ def get_regional_parameter(location: Optional[builtins.str] = None,
         effective_labels=pulumi.get(__ret__, 'effective_labels'),
         format=pulumi.get(__ret__, 'format'),
         id=pulumi.get(__ret__, 'id'),
+        kms_key=pulumi.get(__ret__, 'kms_key'),
         labels=pulumi.get(__ret__, 'labels'),
         location=pulumi.get(__ret__, 'location'),
         name=pulumi.get(__ret__, 'name'),
@@ -225,6 +235,7 @@ def get_regional_parameter_output(location: Optional[pulumi.Input[builtins.str]]
         effective_labels=pulumi.get(__response__, 'effective_labels'),
         format=pulumi.get(__response__, 'format'),
         id=pulumi.get(__response__, 'id'),
+        kms_key=pulumi.get(__response__, 'kms_key'),
         labels=pulumi.get(__response__, 'labels'),
         location=pulumi.get(__response__, 'location'),
         name=pulumi.get(__response__, 'name'),

pulumi_gcp/parametermanager/get_regional_parameter_version.py

@@ -27,7 +27,7 @@ class GetRegionalParameterVersionResult:
     """
     A collection of values returned by getRegionalParameterVersion.
     """
-    def __init__(__self__, create_time=None, disabled=None, id=None, location=None, name=None, parameter=None, parameter_data=None, parameter_version_id=None, project=None, update_time=None):
+    def __init__(__self__, create_time=None, disabled=None, id=None, kms_key_version=None, location=None, name=None, parameter=None, parameter_data=None, parameter_version_id=None, project=None, update_time=None):
         if create_time and not isinstance(create_time, str):
             raise TypeError("Expected argument 'create_time' to be a str")
         pulumi.set(__self__, "create_time", create_time)
@@ -37,6 +37,9 @@ class GetRegionalParameterVersionResult:
         if id and not isinstance(id, str):
             raise TypeError("Expected argument 'id' to be a str")
         pulumi.set(__self__, "id", id)
+        if kms_key_version and not isinstance(kms_key_version, str):
+            raise TypeError("Expected argument 'kms_key_version' to be a str")
+        pulumi.set(__self__, "kms_key_version", kms_key_version)
         if location and not isinstance(location, str):
             raise TypeError("Expected argument 'location' to be a str")
         pulumi.set(__self__, "location", location)
@@ -83,6 +86,14 @@ class GetRegionalParameterVersionResult:
         """
         return pulumi.get(self, "id")
 
+    @property
+    @pulumi.getter(name="kmsKeyVersion")
+    def kms_key_version(self) -> builtins.str:
+        """
+        The resource name of the Cloud KMS CryptoKeyVersion used to decrypt regional parameter version payload. Format `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}/cryptoKeyVersions/{{crypto_key_version}}`
+        """
+        return pulumi.get(self, "kms_key_version")
+
     @property
     @pulumi.getter
     def location(self) -> builtins.str:
@@ -138,6 +149,7 @@ class AwaitableGetRegionalParameterVersionResult(GetRegionalParameterVersionResu
             create_time=self.create_time,
             disabled=self.disabled,
             id=self.id,
+            kms_key_version=self.kms_key_version,
             location=self.location,
             name=self.name,
             parameter=self.parameter,
@@ -186,6 +198,7 @@ def get_regional_parameter_version(location: Optional[builtins.str] = None,
         create_time=pulumi.get(__ret__, 'create_time'),
         disabled=pulumi.get(__ret__, 'disabled'),
         id=pulumi.get(__ret__, 'id'),
+        kms_key_version=pulumi.get(__ret__, 'kms_key_version'),
         location=pulumi.get(__ret__, 'location'),
         name=pulumi.get(__ret__, 'name'),
         parameter=pulumi.get(__ret__, 'parameter'),
@@ -231,6 +244,7 @@ def get_regional_parameter_version_output(location: Optional[pulumi.Input[Option
         create_time=pulumi.get(__response__, 'create_time'),
         disabled=pulumi.get(__response__, 'disabled'),
         id=pulumi.get(__response__, 'id'),
+        kms_key_version=pulumi.get(__response__, 'kms_key_version'),
         location=pulumi.get(__response__, 'location'),
         name=pulumi.get(__response__, 'name'),
         parameter=pulumi.get(__response__, 'parameter'),

pulumi_gcp/parametermanager/outputs.py

@@ -408,6 +408,7 @@ class GetRegionalParametersParameterResult(dict):
                  create_time: builtins.str,
                  effective_labels: Mapping[str, builtins.str],
                  format: builtins.str,
+                 kms_key: builtins.str,
                  labels: Mapping[str, builtins.str],
                  location: builtins.str,
                  name: builtins.str,
@@ -419,6 +420,7 @@ class GetRegionalParametersParameterResult(dict):
         """
         :param builtins.str create_time: The time at which the regional parameter was created.
         :param builtins.str format: The format type of the regional parameter.
+        :param builtins.str kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt regional parameter version payload. Format `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param Mapping[str, builtins.str] labels: The labels assigned to the regional parameter.
         :param builtins.str location: The location of regional parameter.
         :param builtins.str name: The resource name of the regional parameter. Format: `projects/{{project}}/locations/{{location}}/parameters/{{parameter_id}}`
@@ -432,6 +434,7 @@ class GetRegionalParametersParameterResult(dict):
         pulumi.set(__self__, "create_time", create_time)
         pulumi.set(__self__, "effective_labels", effective_labels)
         pulumi.set(__self__, "format", format)
+        pulumi.set(__self__, "kms_key", kms_key)
         pulumi.set(__self__, "labels", labels)
         pulumi.set(__self__, "location", location)
         pulumi.set(__self__, "name", name)
@@ -462,6 +465,14 @@ class GetRegionalParametersParameterResult(dict):
         """
         return pulumi.get(self, "format")
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> builtins.str:
+        """
+        The resource name of the Cloud KMS CryptoKey used to encrypt regional parameter version payload. Format `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
+        """
+        return pulumi.get(self, "kms_key")
+
     @property
     @pulumi.getter
     def labels(self) -> Mapping[str, builtins.str]:

pulumi_gcp/parametermanager/regional_parameter.py

@@ -25,6 +25,7 @@ class RegionalParameterArgs:
                  location: pulumi.Input[builtins.str],
                  parameter_id: pulumi.Input[builtins.str],
                  format: Optional[pulumi.Input[builtins.str]] = None,
+                 kms_key: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None):
         """
@@ -37,6 +38,8 @@ class RegionalParameterArgs:
         :param pulumi.Input[builtins.str] format: The format type of the regional parameter.
                Default value is `UNFORMATTED`.
                Possible values are: `UNFORMATTED`, `YAML`, `JSON`.
+        :param pulumi.Input[builtins.str] kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt regional parameter version payload. Format
+               `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: The labels assigned to this regional Parameter.
                Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes,
                and must conform to the following PCRE regular expression: [\\p{Ll}\\p{Lo}][\\p{Ll}\\p{Lo}\\p{N}_-]{0,62}
@@ -55,6 +58,8 @@ class RegionalParameterArgs:
         pulumi.set(__self__, "parameter_id", parameter_id)
         if format is not None:
             pulumi.set(__self__, "format", format)
+        if kms_key is not None:
+            pulumi.set(__self__, "kms_key", kms_key)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if project is not None:
@@ -101,6 +106,19 @@ class RegionalParameterArgs:
     def format(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "format", value)
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The resource name of the Cloud KMS CryptoKey used to encrypt regional parameter version payload. Format
+        `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
+        """
+        return pulumi.get(self, "kms_key")
+
+    @kms_key.setter
+    def kms_key(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "kms_key", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]]:
@@ -143,6 +161,7 @@ class _RegionalParameterState:
                  create_time: Optional[pulumi.Input[builtins.str]] = None,
                  effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  format: Optional[pulumi.Input[builtins.str]] = None,
+                 kms_key: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
                  name: Optional[pulumi.Input[builtins.str]] = None,
@@ -158,6 +177,8 @@ class _RegionalParameterState:
         :param pulumi.Input[builtins.str] format: The format type of the regional parameter.
                Default value is `UNFORMATTED`.
                Possible values are: `UNFORMATTED`, `YAML`, `JSON`.
+        :param pulumi.Input[builtins.str] kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt regional parameter version payload. Format
+               `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: The labels assigned to this regional Parameter.
                Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes,
                and must conform to the following PCRE regular expression: [\\p{Ll}\\p{Lo}][\\p{Ll}\\p{Lo}\\p{N}_-]{0,62}
@@ -190,6 +211,8 @@ class _RegionalParameterState:
             pulumi.set(__self__, "effective_labels", effective_labels)
         if format is not None:
             pulumi.set(__self__, "format", format)
+        if kms_key is not None:
+            pulumi.set(__self__, "kms_key", kms_key)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if location is not None:
@@ -245,6 +268,19 @@ class _RegionalParameterState:
     def format(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "format", value)
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The resource name of the Cloud KMS CryptoKey used to encrypt regional parameter version payload. Format
+        `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
+        """
+        return pulumi.get(self, "kms_key")
+
+    @kms_key.setter
+    def kms_key(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "kms_key", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]]:
@@ -365,6 +401,7 @@ class RegionalParameter(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  format: Optional[pulumi.Input[builtins.str]] = None,
+                 kms_key: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
                  parameter_id: Optional[pulumi.Input[builtins.str]] = None,
@@ -417,6 +454,18 @@ class RegionalParameter(pulumi.CustomResource):
                 "key5": "val5",
             })
         ```
+        ### Regional Parameter With Kms Key
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        project = gcp.organizations.get_project()
+        regional_parameter_with_kms_key = gcp.parametermanager.RegionalParameter("regional-parameter-with-kms-key",
+            parameter_id="regional_parameter",
+            location="us-central1",
+            kms_key="kms-key")
+        ```
 
         ## Import
 
@@ -447,6 +496,8 @@ class RegionalParameter(pulumi.CustomResource):
         :param pulumi.Input[builtins.str] format: The format type of the regional parameter.
                Default value is `UNFORMATTED`.
                Possible values are: `UNFORMATTED`, `YAML`, `JSON`.
+        :param pulumi.Input[builtins.str] kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt regional parameter version payload. Format
+               `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: The labels assigned to this regional Parameter.
                Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes,
                and must conform to the following PCRE regular expression: [\\p{Ll}\\p{Lo}][\\p{Ll}\\p{Lo}\\p{N}_-]{0,62}
@@ -519,6 +570,18 @@ class RegionalParameter(pulumi.CustomResource):
                 "key5": "val5",
             })
         ```
+        ### Regional Parameter With Kms Key
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        project = gcp.organizations.get_project()
+        regional_parameter_with_kms_key = gcp.parametermanager.RegionalParameter("regional-parameter-with-kms-key",
+            parameter_id="regional_parameter",
+            location="us-central1",
+            kms_key="kms-key")
+        ```
 
         ## Import
 
@@ -560,6 +623,7 @@ class RegionalParameter(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  format: Optional[pulumi.Input[builtins.str]] = None,
+                 kms_key: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
                  parameter_id: Optional[pulumi.Input[builtins.str]] = None,
@@ -574,6 +638,7 @@ class RegionalParameter(pulumi.CustomResource):
             __props__ = RegionalParameterArgs.__new__(RegionalParameterArgs)
 
             __props__.__dict__["format"] = format
+            __props__.__dict__["kms_key"] = kms_key
             __props__.__dict__["labels"] = labels
             if location is None and not opts.urn:
                 raise TypeError("Missing required property 'location'")
@@ -603,6 +668,7 @@ class RegionalParameter(pulumi.CustomResource):
             create_time: Optional[pulumi.Input[builtins.str]] = None,
             effective_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
             format: Optional[pulumi.Input[builtins.str]] = None,
+            kms_key: Optional[pulumi.Input[builtins.str]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
             location: Optional[pulumi.Input[builtins.str]] = None,
             name: Optional[pulumi.Input[builtins.str]] = None,
@@ -623,6 +689,8 @@ class RegionalParameter(pulumi.CustomResource):
         :param pulumi.Input[builtins.str] format: The format type of the regional parameter.
                Default value is `UNFORMATTED`.
                Possible values are: `UNFORMATTED`, `YAML`, `JSON`.
+        :param pulumi.Input[builtins.str] kms_key: The resource name of the Cloud KMS CryptoKey used to encrypt regional parameter version payload. Format
+               `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: The labels assigned to this regional Parameter.
                Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes,
                and must conform to the following PCRE regular expression: [\\p{Ll}\\p{Lo}][\\p{Ll}\\p{Lo}\\p{N}_-]{0,62}
@@ -656,6 +724,7 @@ class RegionalParameter(pulumi.CustomResource):
         __props__.__dict__["create_time"] = create_time
         __props__.__dict__["effective_labels"] = effective_labels
         __props__.__dict__["format"] = format
+        __props__.__dict__["kms_key"] = kms_key
         __props__.__dict__["labels"] = labels
         __props__.__dict__["location"] = location
         __props__.__dict__["name"] = name
@@ -692,6 +761,15 @@ class RegionalParameter(pulumi.CustomResource):
         """
         return pulumi.get(self, "format")
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> pulumi.Output[Optional[builtins.str]]:
+        """
+        The resource name of the Cloud KMS CryptoKey used to encrypt regional parameter version payload. Format
+        `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}`
+        """
+        return pulumi.get(self, "kms_key")
+
     @property
     @pulumi.getter
     def labels(self) -> pulumi.Output[Optional[Mapping[str, builtins.str]]]:

pulumi_gcp/parametermanager/regional_parameter_version.py

@@ -99,6 +99,7 @@ class _RegionalParameterVersionState:
     def __init__(__self__, *,
                  create_time: Optional[pulumi.Input[builtins.str]] = None,
                  disabled: Optional[pulumi.Input[builtins.bool]] = None,
+                 kms_key_version: Optional[pulumi.Input[builtins.str]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
                  name: Optional[pulumi.Input[builtins.str]] = None,
                  parameter: Optional[pulumi.Input[builtins.str]] = None,
@@ -109,6 +110,8 @@ class _RegionalParameterVersionState:
         Input properties used for looking up and filtering RegionalParameterVersion resources.
         :param pulumi.Input[builtins.str] create_time: The time at which the Regional Parameter Version was created.
         :param pulumi.Input[builtins.bool] disabled: The current state of Regional Parameter Version. This field is only applicable for updating Regional Parameter Version.
+        :param pulumi.Input[builtins.str] kms_key_version: The resource name of the Cloud KMS CryptoKeyVersion used to decrypt regional parameter version payload. Format
+               `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}/cryptoKeyVersions/{{crypto_key_version}}`
         :param pulumi.Input[builtins.str] location: Location of Parameter Manager Regional parameter resource.
         :param pulumi.Input[builtins.str] name: The resource name of the Regional Parameter Version. Format:
                `projects/{{project}}/locations/{{location}}/parameters/{{parameter_id}}/versions/{{parameter_version_id}}`
@@ -125,6 +128,8 @@ class _RegionalParameterVersionState:
             pulumi.set(__self__, "create_time", create_time)
         if disabled is not None:
             pulumi.set(__self__, "disabled", disabled)
+        if kms_key_version is not None:
+            pulumi.set(__self__, "kms_key_version", kms_key_version)
         if location is not None:
             pulumi.set(__self__, "location", location)
         if name is not None:
@@ -162,6 +167,19 @@ class _RegionalParameterVersionState:
     def disabled(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "disabled", value)
 
+    @property
+    @pulumi.getter(name="kmsKeyVersion")
+    def kms_key_version(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The resource name of the Cloud KMS CryptoKeyVersion used to decrypt regional parameter version payload. Format
+        `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}/cryptoKeyVersions/{{crypto_key_version}}`
+        """
+        return pulumi.get(self, "kms_key_version")
+
+    @kms_key_version.setter
+    def kms_key_version(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "kms_key_version", value)
+
     @property
     @pulumi.getter
     def location(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -292,6 +310,23 @@ class RegionalParameterVersion(pulumi.CustomResource):
                 "key2": "val2",
             }))
         ```
+        ### Regional Parameter Version With Kms Key
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        project = gcp.organizations.get_project()
+        regional_parameter_basic = gcp.parametermanager.RegionalParameter("regional-parameter-basic",
+            parameter_id="regional_parameter",
+            location="us-central1",
+            kms_key="kms-key")
+        regional_parameter_version_with_kms_key = gcp.parametermanager.RegionalParameterVersion("regional-parameter-version-with-kms-key",
+            parameter=regional_parameter_basic.id,
+            parameter_version_id="regional_parameter_version",
+            parameter_data="regional-parameter-version-data")
+        ```
+
         ## Import
 
         RegionalParameterVersion can be imported using any of these accepted formats:
@@ -363,6 +398,23 @@ class RegionalParameterVersion(pulumi.CustomResource):
                 "key2": "val2",
             }))
         ```
+        ### Regional Parameter Version With Kms Key
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        project = gcp.organizations.get_project()
+        regional_parameter_basic = gcp.parametermanager.RegionalParameter("regional-parameter-basic",
+            parameter_id="regional_parameter",
+            location="us-central1",
+            kms_key="kms-key")
+        regional_parameter_version_with_kms_key = gcp.parametermanager.RegionalParameterVersion("regional-parameter-version-with-kms-key",
+            parameter=regional_parameter_basic.id,
+            parameter_version_id="regional_parameter_version",
+            parameter_data="regional-parameter-version-data")
+        ```
+
         ## Import
 
         RegionalParameterVersion can be imported using any of these accepted formats:
@@ -414,6 +466,7 @@ class RegionalParameterVersion(pulumi.CustomResource):
                 raise TypeError("Missing required property 'parameter_version_id'")
             __props__.__dict__["parameter_version_id"] = parameter_version_id
             __props__.__dict__["create_time"] = None
+            __props__.__dict__["kms_key_version"] = None
             __props__.__dict__["location"] = None
             __props__.__dict__["name"] = None
             __props__.__dict__["update_time"] = None
@@ -431,6 +484,7 @@ class RegionalParameterVersion(pulumi.CustomResource):
             opts: Optional[pulumi.ResourceOptions] = None,
             create_time: Optional[pulumi.Input[builtins.str]] = None,
             disabled: Optional[pulumi.Input[builtins.bool]] = None,
+            kms_key_version: Optional[pulumi.Input[builtins.str]] = None,
             location: Optional[pulumi.Input[builtins.str]] = None,
             name: Optional[pulumi.Input[builtins.str]] = None,
             parameter: Optional[pulumi.Input[builtins.str]] = None,
@@ -446,6 +500,8 @@ class RegionalParameterVersion(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[builtins.str] create_time: The time at which the Regional Parameter Version was created.
         :param pulumi.Input[builtins.bool] disabled: The current state of Regional Parameter Version. This field is only applicable for updating Regional Parameter Version.
+        :param pulumi.Input[builtins.str] kms_key_version: The resource name of the Cloud KMS CryptoKeyVersion used to decrypt regional parameter version payload. Format
+               `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}/cryptoKeyVersions/{{crypto_key_version}}`
         :param pulumi.Input[builtins.str] location: Location of Parameter Manager Regional parameter resource.
         :param pulumi.Input[builtins.str] name: The resource name of the Regional Parameter Version. Format:
                `projects/{{project}}/locations/{{location}}/parameters/{{parameter_id}}/versions/{{parameter_version_id}}`
@@ -464,6 +520,7 @@ class RegionalParameterVersion(pulumi.CustomResource):
 
         __props__.__dict__["create_time"] = create_time
         __props__.__dict__["disabled"] = disabled
+        __props__.__dict__["kms_key_version"] = kms_key_version
         __props__.__dict__["location"] = location
         __props__.__dict__["name"] = name
         __props__.__dict__["parameter"] = parameter
@@ -488,6 +545,15 @@ class RegionalParameterVersion(pulumi.CustomResource):
         """
         return pulumi.get(self, "disabled")
 
+    @property
+    @pulumi.getter(name="kmsKeyVersion")
+    def kms_key_version(self) -> pulumi.Output[builtins.str]:
+        """
+        The resource name of the Cloud KMS CryptoKeyVersion used to decrypt regional parameter version payload. Format
+        `projects/{{project}}/locations/{{location}}/keyRings/{{key_ring}}/cryptoKeys/{{crypto_key}}/cryptoKeyVersions/{{crypto_key_version}}`
+        """
+        return pulumi.get(self, "kms_key_version")
+
     @property
     @pulumi.getter
     def location(self) -> pulumi.Output[builtins.str]:

pulumi_gcp/pulumi-plugin.json

@@ -1,5 +1,5 @@
 {
   "resource": true,
   "name": "gcp",
-  "version": "8.25.1"
+  "version": "8.26.0"
 }

pulumi_gcp/spanner/database.py

@@ -40,10 +40,6 @@ class DatabaseArgs:
         :param pulumi.Input[builtins.str] database_dialect: The dialect of the Cloud Spanner Database.
                If it is not provided, "GOOGLE_STANDARD_SQL" will be used.
                Possible values are: `GOOGLE_STANDARD_SQL`, `POSTGRESQL`.
-        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ddls: An optional list of DDL statements to run inside the newly created
-               database. Statements can create tables, indexes, etc. These statements
-               execute atomically with the creation of the database: if there is an
-               error in any statement, the database is not created.
         :param pulumi.Input[builtins.bool] deletion_protection: Whether or not to allow the provider to destroy the instance. Unless this field is set to false
                in state, a `destroy` or `update` that would delete the instance will fail.
         :param pulumi.Input['DatabaseEncryptionConfigArgs'] encryption_config: Encryption configuration for the database
@@ -108,12 +104,6 @@ class DatabaseArgs:
     @property
     @pulumi.getter
     def ddls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
-        """
-        An optional list of DDL statements to run inside the newly created
-        database. Statements can create tables, indexes, etc. These statements
-        execute atomically with the creation of the database: if there is an
-        error in any statement, the database is not created.
-        """
         return pulumi.get(self, "ddls")
 
     @ddls.setter
@@ -216,10 +206,6 @@ class _DatabaseState:
         :param pulumi.Input[builtins.str] database_dialect: The dialect of the Cloud Spanner Database.
                If it is not provided, "GOOGLE_STANDARD_SQL" will be used.
                Possible values are: `GOOGLE_STANDARD_SQL`, `POSTGRESQL`.
-        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ddls: An optional list of DDL statements to run inside the newly created
-               database. Statements can create tables, indexes, etc. These statements
-               execute atomically with the creation of the database: if there is an
-               error in any statement, the database is not created.
         :param pulumi.Input[builtins.bool] deletion_protection: Whether or not to allow the provider to destroy the instance. Unless this field is set to false
                in state, a `destroy` or `update` that would delete the instance will fail.
         :param pulumi.Input['DatabaseEncryptionConfigArgs'] encryption_config: Encryption configuration for the database
@@ -277,12 +263,6 @@ class _DatabaseState:
     @property
     @pulumi.getter
     def ddls(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
-        """
-        An optional list of DDL statements to run inside the newly created
-        database. Statements can create tables, indexes, etc. These statements
-        execute atomically with the creation of the database: if there is an
-        error in any statement, the database is not created.
-        """
         return pulumi.get(self, "ddls")
 
     @ddls.setter
@@ -482,10 +462,6 @@ class Database(pulumi.CustomResource):
         :param pulumi.Input[builtins.str] database_dialect: The dialect of the Cloud Spanner Database.
                If it is not provided, "GOOGLE_STANDARD_SQL" will be used.
                Possible values are: `GOOGLE_STANDARD_SQL`, `POSTGRESQL`.
-        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ddls: An optional list of DDL statements to run inside the newly created
-               database. Statements can create tables, indexes, etc. These statements
-               execute atomically with the creation of the database: if there is an
-               error in any statement, the database is not created.
         :param pulumi.Input[builtins.bool] deletion_protection: Whether or not to allow the provider to destroy the instance. Unless this field is set to false
                in state, a `destroy` or `update` that would delete the instance will fail.
         :param pulumi.Input[Union['DatabaseEncryptionConfigArgs', 'DatabaseEncryptionConfigArgsDict']] encryption_config: Encryption configuration for the database
@@ -653,10 +629,6 @@ class Database(pulumi.CustomResource):
         :param pulumi.Input[builtins.str] database_dialect: The dialect of the Cloud Spanner Database.
                If it is not provided, "GOOGLE_STANDARD_SQL" will be used.
                Possible values are: `GOOGLE_STANDARD_SQL`, `POSTGRESQL`.
-        :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] ddls: An optional list of DDL statements to run inside the newly created
-               database. Statements can create tables, indexes, etc. These statements
-               execute atomically with the creation of the database: if there is an
-               error in any statement, the database is not created.
         :param pulumi.Input[builtins.bool] deletion_protection: Whether or not to allow the provider to destroy the instance. Unless this field is set to false
                in state, a `destroy` or `update` that would delete the instance will fail.
         :param pulumi.Input[Union['DatabaseEncryptionConfigArgs', 'DatabaseEncryptionConfigArgsDict']] encryption_config: Encryption configuration for the database
@@ -705,12 +677,6 @@ class Database(pulumi.CustomResource):
     @property
     @pulumi.getter
     def ddls(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:
-        """
-        An optional list of DDL statements to run inside the newly created
-        database. Statements can create tables, indexes, etc. These statements
-        execute atomically with the creation of the database: if there is an
-        error in any statement, the database is not created.
-        """
         return pulumi.get(self, "ddls")
 
     @property