pulumi-gcp 8.28.0a1745598508__py3-none-any.whl → 8.29.0a1746076904__py3-none-any.whl

pulumi_gcp/alloydb/outputs.py

@@ -1584,6 +1584,8 @@ class InstanceMachineConfig(dict):
         suggest = None
         if key == "cpuCount":
             suggest = "cpu_count"
+        elif key == "machineType":
+            suggest = "machine_type"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in InstanceMachineConfig. Access the value via the '{suggest}' property getter instead.")
@@ -1597,12 +1599,18 @@ class InstanceMachineConfig(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 cpu_count: Optional[builtins.int] = None):
+                 cpu_count: Optional[builtins.int] = None,
+                 machine_type: Optional[builtins.str] = None):
         """
         :param builtins.int cpu_count: The number of CPU's in the VM instance.
+        :param builtins.str machine_type: Machine type of the VM instance.
+               E.g. "n2-highmem-4", "n2-highmem-8", "c4a-highmem-4-lssd".
+               `cpu_count` must match the number of vCPUs in the machine type.
         """
         if cpu_count is not None:
             pulumi.set(__self__, "cpu_count", cpu_count)
+        if machine_type is not None:
+            pulumi.set(__self__, "machine_type", machine_type)
 
     @property
     @pulumi.getter(name="cpuCount")
@@ -1612,6 +1620,16 @@ class InstanceMachineConfig(dict):
         """
         return pulumi.get(self, "cpu_count")
 
+    @property
+    @pulumi.getter(name="machineType")
+    def machine_type(self) -> Optional[builtins.str]:
+        """
+        Machine type of the VM instance.
+        E.g. "n2-highmem-4", "n2-highmem-8", "c4a-highmem-4-lssd".
+        `cpu_count` must match the number of vCPUs in the machine type.
+        """
+        return pulumi.get(self, "machine_type")
+
 
 @pulumi.output_type
 class InstanceNetworkConfig(dict):
@@ -1728,7 +1746,9 @@ class InstanceObservabilityConfig(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "maxQueryStringLength":
+        if key == "assistiveExperiencesEnabled":
+            suggest = "assistive_experiences_enabled"
+        elif key == "maxQueryStringLength":
             suggest = "max_query_string_length"
         elif key == "preserveComments":
             suggest = "preserve_comments"
@@ -1755,6 +1775,7 @@ class InstanceObservabilityConfig(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 assistive_experiences_enabled: Optional[builtins.bool] = None,
                  enabled: Optional[builtins.bool] = None,
                  max_query_string_length: Optional[builtins.int] = None,
                  preserve_comments: Optional[builtins.bool] = None,
@@ -1764,6 +1785,7 @@ class InstanceObservabilityConfig(dict):
                  track_wait_event_types: Optional[builtins.bool] = None,
                  track_wait_events: Optional[builtins.bool] = None):
         """
+        :param builtins.bool assistive_experiences_enabled: Whether assistive experiences are enabled for this AlloyDB instance.
         :param builtins.bool enabled: Observability feature status for an instance.
         :param builtins.int max_query_string_length: Query string length. The default value is 10240. Any integer between 1024 and 100000 is considered valid.
         :param builtins.bool preserve_comments: Preserve comments in the query string.
@@ -1773,6 +1795,8 @@ class InstanceObservabilityConfig(dict):
         :param builtins.bool track_wait_event_types: Record wait event types during query execution for an instance.
         :param builtins.bool track_wait_events: Record wait events during query execution for an instance.
         """
+        if assistive_experiences_enabled is not None:
+            pulumi.set(__self__, "assistive_experiences_enabled", assistive_experiences_enabled)
         if enabled is not None:
             pulumi.set(__self__, "enabled", enabled)
         if max_query_string_length is not None:
@@ -1790,6 +1814,14 @@ class InstanceObservabilityConfig(dict):
         if track_wait_events is not None:
             pulumi.set(__self__, "track_wait_events", track_wait_events)
 
+    @property
+    @pulumi.getter(name="assistiveExperiencesEnabled")
+    def assistive_experiences_enabled(self) -> Optional[builtins.bool]:
+        """
+        Whether assistive experiences are enabled for this AlloyDB instance.
+        """
+        return pulumi.get(self, "assistive_experiences_enabled")
+
     @property
     @pulumi.getter
     def enabled(self) -> Optional[builtins.bool]:
@@ -2950,11 +2982,16 @@ class GetInstanceClientConnectionConfigSslConfigResult(dict):
 @pulumi.output_type
 class GetInstanceMachineConfigResult(dict):
     def __init__(__self__, *,
-                 cpu_count: builtins.int):
+                 cpu_count: builtins.int,
+                 machine_type: builtins.str):
         """
         :param builtins.int cpu_count: The number of CPU's in the VM instance.
+        :param builtins.str machine_type: Machine type of the VM instance.
+               E.g. "n2-highmem-4", "n2-highmem-8", "c4a-highmem-4-lssd".
+               'cpu_count' must match the number of vCPUs in the machine type.
         """
         pulumi.set(__self__, "cpu_count", cpu_count)
+        pulumi.set(__self__, "machine_type", machine_type)
 
     @property
     @pulumi.getter(name="cpuCount")
@@ -2964,6 +3001,16 @@ class GetInstanceMachineConfigResult(dict):
         """
         return pulumi.get(self, "cpu_count")
 
+    @property
+    @pulumi.getter(name="machineType")
+    def machine_type(self) -> builtins.str:
+        """
+        Machine type of the VM instance.
+        E.g. "n2-highmem-4", "n2-highmem-8", "c4a-highmem-4-lssd".
+        'cpu_count' must match the number of vCPUs in the machine type.
+        """
+        return pulumi.get(self, "machine_type")
+
 
 @pulumi.output_type
 class GetInstanceNetworkConfigResult(dict):
@@ -3034,6 +3081,7 @@ class GetInstanceNetworkConfigAuthorizedExternalNetworkResult(dict):
 @pulumi.output_type
 class GetInstanceObservabilityConfigResult(dict):
     def __init__(__self__, *,
+                 assistive_experiences_enabled: builtins.bool,
                  enabled: builtins.bool,
                  max_query_string_length: builtins.int,
                  preserve_comments: builtins.bool,
@@ -3043,6 +3091,7 @@ class GetInstanceObservabilityConfigResult(dict):
                  track_wait_event_types: builtins.bool,
                  track_wait_events: builtins.bool):
         """
+        :param builtins.bool assistive_experiences_enabled: Whether assistive experiences are enabled for this AlloyDB instance.
         :param builtins.bool enabled: Observability feature status for an instance.
         :param builtins.int max_query_string_length: Query string length. The default value is 10240. Any integer between 1024 and 100000 is considered valid.
         :param builtins.bool preserve_comments: Preserve comments in the query string.
@@ -3052,6 +3101,7 @@ class GetInstanceObservabilityConfigResult(dict):
         :param builtins.bool track_wait_event_types: Record wait event types during query execution for an instance.
         :param builtins.bool track_wait_events: Record wait events during query execution for an instance.
         """
+        pulumi.set(__self__, "assistive_experiences_enabled", assistive_experiences_enabled)
         pulumi.set(__self__, "enabled", enabled)
         pulumi.set(__self__, "max_query_string_length", max_query_string_length)
         pulumi.set(__self__, "preserve_comments", preserve_comments)
@@ -3061,6 +3111,14 @@ class GetInstanceObservabilityConfigResult(dict):
         pulumi.set(__self__, "track_wait_event_types", track_wait_event_types)
         pulumi.set(__self__, "track_wait_events", track_wait_events)
 
+    @property
+    @pulumi.getter(name="assistiveExperiencesEnabled")
+    def assistive_experiences_enabled(self) -> builtins.bool:
+        """
+        Whether assistive experiences are enabled for this AlloyDB instance.
+        """
+        return pulumi.get(self, "assistive_experiences_enabled")
+
     @property
     @pulumi.getter
     def enabled(self) -> builtins.bool:

pulumi_gcp/apigee/keystores_aliases_self_signed_cert.py

@@ -394,6 +394,7 @@ class KeystoresAliasesSelfSignedCert(pulumi.CustomResource):
         ```python
         import pulumi
         import pulumi_gcp as gcp
+        import pulumi_time as time
 
         project = gcp.organizations.Project("project",
             project_id="my-project",
@@ -412,10 +413,12 @@ class KeystoresAliasesSelfSignedCert(pulumi.CustomResource):
             project=project.project_id,
             service="compute.googleapis.com",
             opts = pulumi.ResourceOptions(depends_on=[servicenetworking]))
+        wait120_seconds = time.index.Sleep("wait_120_seconds", create_duration=120s,
+        opts = pulumi.ResourceOptions(depends_on=[compute]))
         apigee_network = gcp.compute.Network("apigee_network",
             name="apigee-network",
             project=project.project_id,
-            opts = pulumi.ResourceOptions(depends_on=[compute]))
+            opts = pulumi.ResourceOptions(depends_on=[wait120_seconds]))
         apigee_range = gcp.compute.GlobalAddress("apigee_range",
             name="apigee-range",
             purpose="VPC_PEERING",
@@ -516,6 +519,7 @@ class KeystoresAliasesSelfSignedCert(pulumi.CustomResource):
         ```python
         import pulumi
         import pulumi_gcp as gcp
+        import pulumi_time as time
 
         project = gcp.organizations.Project("project",
             project_id="my-project",
@@ -534,10 +538,12 @@ class KeystoresAliasesSelfSignedCert(pulumi.CustomResource):
             project=project.project_id,
             service="compute.googleapis.com",
             opts = pulumi.ResourceOptions(depends_on=[servicenetworking]))
+        wait120_seconds = time.index.Sleep("wait_120_seconds", create_duration=120s,
+        opts = pulumi.ResourceOptions(depends_on=[compute]))
         apigee_network = gcp.compute.Network("apigee_network",
             name="apigee-network",
             project=project.project_id,
-            opts = pulumi.ResourceOptions(depends_on=[compute]))
+            opts = pulumi.ResourceOptions(depends_on=[wait120_seconds]))
         apigee_range = gcp.compute.GlobalAddress("apigee_range",
             name="apigee-range",
             purpose="VPC_PEERING",

pulumi_gcp/applicationintegration/client.py

@@ -38,7 +38,10 @@ class ClientArgs:
         :param pulumi.Input[builtins.bool] create_sample_integrations: Indicates if sample integrations should be created along with provisioning.
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[builtins.str] run_as_service_account: User input run-as service account, if empty, will bring up a new default service account.
+        :param pulumi.Input[builtins.str] run_as_service_account: (Optional, Deprecated)
+               User input run-as service account, if empty, will bring up a new default service account.
+               
+               > **Warning:** `run_as_service_account` is deprecated and will be removed in a future major release.
         """
         pulumi.set(__self__, "location", location)
         if cloud_kms_config is not None:
@@ -47,6 +50,9 @@ class ClientArgs:
             pulumi.set(__self__, "create_sample_integrations", create_sample_integrations)
         if project is not None:
             pulumi.set(__self__, "project", project)
+        if run_as_service_account is not None:
+            warnings.warn("""`run_as_service_account` is deprecated and will be removed in a future major release.""", DeprecationWarning)
+            pulumi.log.warn("""run_as_service_account is deprecated: `run_as_service_account` is deprecated and will be removed in a future major release.""")
         if run_as_service_account is not None:
             pulumi.set(__self__, "run_as_service_account", run_as_service_account)
 
@@ -105,9 +111,13 @@ class ClientArgs:
 
     @property
     @pulumi.getter(name="runAsServiceAccount")
+    @_utilities.deprecated("""`run_as_service_account` is deprecated and will be removed in a future major release.""")
     def run_as_service_account(self) -> Optional[pulumi.Input[builtins.str]]:
         """
+        (Optional, Deprecated)
         User input run-as service account, if empty, will bring up a new default service account.
+
+        > **Warning:** `run_as_service_account` is deprecated and will be removed in a future major release.
         """
         return pulumi.get(self, "run_as_service_account")
 
@@ -135,7 +145,10 @@ class _ClientState:
                - - -
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[builtins.str] run_as_service_account: User input run-as service account, if empty, will bring up a new default service account.
+        :param pulumi.Input[builtins.str] run_as_service_account: (Optional, Deprecated)
+               User input run-as service account, if empty, will bring up a new default service account.
+               
+               > **Warning:** `run_as_service_account` is deprecated and will be removed in a future major release.
         """
         if cloud_kms_config is not None:
             pulumi.set(__self__, "cloud_kms_config", cloud_kms_config)
@@ -145,6 +158,9 @@ class _ClientState:
             pulumi.set(__self__, "location", location)
         if project is not None:
             pulumi.set(__self__, "project", project)
+        if run_as_service_account is not None:
+            warnings.warn("""`run_as_service_account` is deprecated and will be removed in a future major release.""", DeprecationWarning)
+            pulumi.log.warn("""run_as_service_account is deprecated: `run_as_service_account` is deprecated and will be removed in a future major release.""")
         if run_as_service_account is not None:
             pulumi.set(__self__, "run_as_service_account", run_as_service_account)
 
@@ -203,9 +219,13 @@ class _ClientState:
 
     @property
     @pulumi.getter(name="runAsServiceAccount")
+    @_utilities.deprecated("""`run_as_service_account` is deprecated and will be removed in a future major release.""")
     def run_as_service_account(self) -> Optional[pulumi.Input[builtins.str]]:
         """
+        (Optional, Deprecated)
         User input run-as service account, if empty, will bring up a new default service account.
+
+        > **Warning:** `run_as_service_account` is deprecated and will be removed in a future major release.
         """
         return pulumi.get(self, "run_as_service_account")
 
@@ -258,13 +278,9 @@ class Client(pulumi.CustomResource):
         cryptokey = gcp.kms.get_kms_crypto_key(name="my-crypto-key",
             key_ring=keyring.id)
         test_key = gcp.kms.get_kms_crypto_key_version(crypto_key=cryptokey.id)
-        service_account = gcp.serviceaccount.Account("service_account",
-            account_id="service-acc",
-            display_name="Service Account")
         example = gcp.applicationintegration.Client("example",
             location="us-east1",
             create_sample_integrations=True,
-            run_as_service_account=service_account.email,
             cloud_kms_config={
                 "kms_location": "us-east1",
                 "kms_ring": std.basename(input=keyring.id).result,
@@ -309,7 +325,10 @@ class Client(pulumi.CustomResource):
                - - -
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[builtins.str] run_as_service_account: User input run-as service account, if empty, will bring up a new default service account.
+        :param pulumi.Input[builtins.str] run_as_service_account: (Optional, Deprecated)
+               User input run-as service account, if empty, will bring up a new default service account.
+               
+               > **Warning:** `run_as_service_account` is deprecated and will be removed in a future major release.
         """
         ...
     @overload
@@ -350,13 +369,9 @@ class Client(pulumi.CustomResource):
         cryptokey = gcp.kms.get_kms_crypto_key(name="my-crypto-key",
             key_ring=keyring.id)
         test_key = gcp.kms.get_kms_crypto_key_version(crypto_key=cryptokey.id)
-        service_account = gcp.serviceaccount.Account("service_account",
-            account_id="service-acc",
-            display_name="Service Account")
         example = gcp.applicationintegration.Client("example",
             location="us-east1",
             create_sample_integrations=True,
-            run_as_service_account=service_account.email,
             cloud_kms_config={
                 "kms_location": "us-east1",
                 "kms_ring": std.basename(input=keyring.id).result,
@@ -457,7 +472,10 @@ class Client(pulumi.CustomResource):
                - - -
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[builtins.str] run_as_service_account: User input run-as service account, if empty, will bring up a new default service account.
+        :param pulumi.Input[builtins.str] run_as_service_account: (Optional, Deprecated)
+               User input run-as service account, if empty, will bring up a new default service account.
+               
+               > **Warning:** `run_as_service_account` is deprecated and will be removed in a future major release.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -509,9 +527,13 @@ class Client(pulumi.CustomResource):
 
     @property
     @pulumi.getter(name="runAsServiceAccount")
+    @_utilities.deprecated("""`run_as_service_account` is deprecated and will be removed in a future major release.""")
     def run_as_service_account(self) -> pulumi.Output[Optional[builtins.str]]:
         """
+        (Optional, Deprecated)
         User input run-as service account, if empty, will bring up a new default service account.
+
+        > **Warning:** `run_as_service_account` is deprecated and will be removed in a future major release.
         """
         return pulumi.get(self, "run_as_service_account")
 

pulumi_gcp/artifactregistry/outputs.py

@@ -1720,7 +1720,7 @@ class GetRepositoryRemoteRepositoryConfigAptRepositoryPublicRepositoryResult(dic
                  repository_base: builtins.str,
                  repository_path: builtins.str):
         """
-        :param builtins.str repository_base: A common public repository base for Apt, e.g. '"debian/dists/buster"' Possible values: ["DEBIAN", "UBUNTU"]
+        :param builtins.str repository_base: A common public repository base for Apt, e.g. '"debian/dists/buster"' Possible values: ["DEBIAN", "UBUNTU", "DEBIAN_SNAPSHOT"]
         :param builtins.str repository_path: Specific repository from the base.
         """
         pulumi.set(__self__, "repository_base", repository_base)
@@ -1730,7 +1730,7 @@ class GetRepositoryRemoteRepositoryConfigAptRepositoryPublicRepositoryResult(dic
     @pulumi.getter(name="repositoryBase")
     def repository_base(self) -> builtins.str:
         """
-        A common public repository base for Apt, e.g. '"debian/dists/buster"' Possible values: ["DEBIAN", "UBUNTU"]
+        A common public repository base for Apt, e.g. '"debian/dists/buster"' Possible values: ["DEBIAN", "UBUNTU", "DEBIAN_SNAPSHOT"]
         """
         return pulumi.get(self, "repository_base")
 

pulumi_gcp/certificateauthority/_inputs.py

@@ -2134,6 +2134,14 @@ if not MYPY:
         Otherwise, any key may be used.
         Structure is documented below.
         """
+        backdate_duration: NotRequired[pulumi.Input[builtins.str]]
+        """
+        The duration to backdate all certificates issued from this CaPool. If not set, the
+        certificates will be issued with a not_before_time of the issuance time (i.e. the current
+        time). If set, the certificates will be issued with a not_before_time of the issuance
+        time minus the backdate_duration. The not_after_time will be adjusted to preserve the
+        requested lifetime. The backdate_duration must be less than or equal to 48 hours.
+        """
         baseline_values: NotRequired[pulumi.Input['CaPoolIssuancePolicyBaselineValuesArgsDict']]
         """
         A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request
@@ -2161,6 +2169,7 @@ class CaPoolIssuancePolicyArgs:
     def __init__(__self__, *,
                  allowed_issuance_modes: Optional[pulumi.Input['CaPoolIssuancePolicyAllowedIssuanceModesArgs']] = None,
                  allowed_key_types: Optional[pulumi.Input[Sequence[pulumi.Input['CaPoolIssuancePolicyAllowedKeyTypeArgs']]]] = None,
+                 backdate_duration: Optional[pulumi.Input[builtins.str]] = None,
                  baseline_values: Optional[pulumi.Input['CaPoolIssuancePolicyBaselineValuesArgs']] = None,
                  identity_constraints: Optional[pulumi.Input['CaPoolIssuancePolicyIdentityConstraintsArgs']] = None,
                  maximum_lifetime: Optional[pulumi.Input[builtins.str]] = None):
@@ -2170,6 +2179,11 @@ class CaPoolIssuancePolicyArgs:
         :param pulumi.Input[Sequence[pulumi.Input['CaPoolIssuancePolicyAllowedKeyTypeArgs']]] allowed_key_types: If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here.
                Otherwise, any key may be used.
                Structure is documented below.
+        :param pulumi.Input[builtins.str] backdate_duration: The duration to backdate all certificates issued from this CaPool. If not set, the
+               certificates will be issued with a not_before_time of the issuance time (i.e. the current
+               time). If set, the certificates will be issued with a not_before_time of the issuance
+               time minus the backdate_duration. The not_after_time will be adjusted to preserve the
+               requested lifetime. The backdate_duration must be less than or equal to 48 hours.
         :param pulumi.Input['CaPoolIssuancePolicyBaselineValuesArgs'] baseline_values: A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request
                includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate
                request uses a CertificateTemplate that defines conflicting predefinedValues for the same properties, the certificate
@@ -2185,6 +2199,8 @@ class CaPoolIssuancePolicyArgs:
             pulumi.set(__self__, "allowed_issuance_modes", allowed_issuance_modes)
         if allowed_key_types is not None:
             pulumi.set(__self__, "allowed_key_types", allowed_key_types)
+        if backdate_duration is not None:
+            pulumi.set(__self__, "backdate_duration", backdate_duration)
         if baseline_values is not None:
             pulumi.set(__self__, "baseline_values", baseline_values)
         if identity_constraints is not None:
@@ -2219,6 +2235,22 @@ class CaPoolIssuancePolicyArgs:
     def allowed_key_types(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['CaPoolIssuancePolicyAllowedKeyTypeArgs']]]]):
         pulumi.set(self, "allowed_key_types", value)
 
+    @property
+    @pulumi.getter(name="backdateDuration")
+    def backdate_duration(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The duration to backdate all certificates issued from this CaPool. If not set, the
+        certificates will be issued with a not_before_time of the issuance time (i.e. the current
+        time). If set, the certificates will be issued with a not_before_time of the issuance
+        time minus the backdate_duration. The not_after_time will be adjusted to preserve the
+        requested lifetime. The backdate_duration must be less than or equal to 48 hours.
+        """
+        return pulumi.get(self, "backdate_duration")
+
+    @backdate_duration.setter
+    def backdate_duration(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "backdate_duration", value)
+
     @property
     @pulumi.getter(name="baselineValues")
     def baseline_values(self) -> Optional[pulumi.Input['CaPoolIssuancePolicyBaselineValuesArgs']]:

pulumi_gcp/certificateauthority/ca_pool.py

@@ -413,6 +413,7 @@ class CaPool(pulumi.CustomResource):
                         },
                     },
                 ],
+                "backdate_duration": "3600s",
                 "maximum_lifetime": "50000s",
                 "allowed_issuance_modes": {
                     "allow_csr_based_issuance": True,
@@ -625,6 +626,7 @@ class CaPool(pulumi.CustomResource):
                         },
                     },
                 ],
+                "backdate_duration": "3600s",
                 "maximum_lifetime": "50000s",
                 "allowed_issuance_modes": {
                     "allow_csr_based_issuance": True,

pulumi_gcp/certificateauthority/outputs.py

@@ -1711,6 +1711,8 @@ class CaPoolIssuancePolicy(dict):
             suggest = "allowed_issuance_modes"
         elif key == "allowedKeyTypes":
             suggest = "allowed_key_types"
+        elif key == "backdateDuration":
+            suggest = "backdate_duration"
         elif key == "baselineValues":
             suggest = "baseline_values"
         elif key == "identityConstraints":
@@ -1732,6 +1734,7 @@ class CaPoolIssuancePolicy(dict):
     def __init__(__self__, *,
                  allowed_issuance_modes: Optional['outputs.CaPoolIssuancePolicyAllowedIssuanceModes'] = None,
                  allowed_key_types: Optional[Sequence['outputs.CaPoolIssuancePolicyAllowedKeyType']] = None,
+                 backdate_duration: Optional[builtins.str] = None,
                  baseline_values: Optional['outputs.CaPoolIssuancePolicyBaselineValues'] = None,
                  identity_constraints: Optional['outputs.CaPoolIssuancePolicyIdentityConstraints'] = None,
                  maximum_lifetime: Optional[builtins.str] = None):
@@ -1741,6 +1744,11 @@ class CaPoolIssuancePolicy(dict):
         :param Sequence['CaPoolIssuancePolicyAllowedKeyTypeArgs'] allowed_key_types: If any AllowedKeyType is specified, then the certificate request's public key must match one of the key types listed here.
                Otherwise, any key may be used.
                Structure is documented below.
+        :param builtins.str backdate_duration: The duration to backdate all certificates issued from this CaPool. If not set, the
+               certificates will be issued with a not_before_time of the issuance time (i.e. the current
+               time). If set, the certificates will be issued with a not_before_time of the issuance
+               time minus the backdate_duration. The not_after_time will be adjusted to preserve the
+               requested lifetime. The backdate_duration must be less than or equal to 48 hours.
         :param 'CaPoolIssuancePolicyBaselineValuesArgs' baseline_values: A set of X.509 values that will be applied to all certificates issued through this CaPool. If a certificate request
                includes conflicting values for the same properties, they will be overwritten by the values defined here. If a certificate
                request uses a CertificateTemplate that defines conflicting predefinedValues for the same properties, the certificate
@@ -1756,6 +1764,8 @@ class CaPoolIssuancePolicy(dict):
             pulumi.set(__self__, "allowed_issuance_modes", allowed_issuance_modes)
         if allowed_key_types is not None:
             pulumi.set(__self__, "allowed_key_types", allowed_key_types)
+        if backdate_duration is not None:
+            pulumi.set(__self__, "backdate_duration", backdate_duration)
         if baseline_values is not None:
             pulumi.set(__self__, "baseline_values", baseline_values)
         if identity_constraints is not None:
@@ -1782,6 +1792,18 @@ class CaPoolIssuancePolicy(dict):
         """
         return pulumi.get(self, "allowed_key_types")
 
+    @property
+    @pulumi.getter(name="backdateDuration")
+    def backdate_duration(self) -> Optional[builtins.str]:
+        """
+        The duration to backdate all certificates issued from this CaPool. If not set, the
+        certificates will be issued with a not_before_time of the issuance time (i.e. the current
+        time). If set, the certificates will be issued with a not_before_time of the issuance
+        time minus the backdate_duration. The not_after_time will be adjusted to preserve the
+        requested lifetime. The backdate_duration must be less than or equal to 48 hours.
+        """
+        return pulumi.get(self, "backdate_duration")
+
     @property
     @pulumi.getter(name="baselineValues")
     def baseline_values(self) -> Optional['outputs.CaPoolIssuancePolicyBaselineValues']:

pulumi_gcp/clouddeploy/_inputs.py

@@ -2223,8 +2223,6 @@ if not MYPY:
         verify: NotRequired[pulumi.Input[builtins.bool]]
         """
         Whether to run verify tests after the deployment.
-
-        - - -
         """
 elif False:
     DeliveryPipelineSerialPipelineStageStrategyCanaryCustomCanaryDeploymentPhaseConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -2245,8 +2243,6 @@ class DeliveryPipelineSerialPipelineStageStrategyCanaryCustomCanaryDeploymentPha
         :param pulumi.Input['DeliveryPipelineSerialPipelineStageStrategyCanaryCustomCanaryDeploymentPhaseConfigPredeployArgs'] predeploy: Optional. Configuration for the predeploy job of this phase. If this is not configured, predeploy job will not be present for this phase.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] profiles: Skaffold profiles to use when rendering the manifest for this phase. These are in addition to the profiles list specified in the `DeliveryPipeline` stage.
         :param pulumi.Input[builtins.bool] verify: Whether to run verify tests after the deployment.
-               
-               - - -
         """
         pulumi.set(__self__, "percentage", percentage)
         pulumi.set(__self__, "phase_id", phase_id)
@@ -2324,8 +2320,6 @@ class DeliveryPipelineSerialPipelineStageStrategyCanaryCustomCanaryDeploymentPha
     def verify(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Whether to run verify tests after the deployment.
-
-        - - -
         """
         return pulumi.get(self, "verify")