pulumi-gcp 8.31.0a1747205151__py3-none-any.whl → 8.32.0__py3-none-any.whl

pulumi_gcp/container/cluster.py

@@ -55,6 +55,7 @@ class ClusterArgs:
                  fleet: Optional[pulumi.Input['ClusterFleetArgs']] = None,
                  gateway_api_config: Optional[pulumi.Input['ClusterGatewayApiConfigArgs']] = None,
                  identity_service_config: Optional[pulumi.Input['ClusterIdentityServiceConfigArgs']] = None,
+                 in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
                  initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
                  ip_allocation_policy: Optional[pulumi.Input['ClusterIpAllocationPolicyArgs']] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
@@ -165,6 +166,7 @@ class ClusterArgs:
         :param pulumi.Input['ClusterFleetArgs'] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input['ClusterGatewayApiConfigArgs'] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input['ClusterIdentityServiceConfigArgs'] identity_service_config: . Structure is documented below.
+        :param pulumi.Input[builtins.str] in_transit_encryption_config: Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
         :param pulumi.Input[builtins.int] initial_node_count: The number of nodes to create in this
                cluster's default node pool. In regional or multi-zonal clusters, this is the
                number of nodes per zone. Must be set if `node_pool` is not set. If you're using
@@ -381,6 +383,8 @@ class ClusterArgs:
             pulumi.set(__self__, "gateway_api_config", gateway_api_config)
         if identity_service_config is not None:
             pulumi.set(__self__, "identity_service_config", identity_service_config)
+        if in_transit_encryption_config is not None:
+            pulumi.set(__self__, "in_transit_encryption_config", in_transit_encryption_config)
         if initial_node_count is not None:
             pulumi.set(__self__, "initial_node_count", initial_node_count)
         if ip_allocation_policy is not None:
@@ -893,6 +897,18 @@ class ClusterArgs:
     def identity_service_config(self, value: Optional[pulumi.Input['ClusterIdentityServiceConfigArgs']]):
         pulumi.set(self, "identity_service_config", value)
 
+    @property
+    @pulumi.getter(name="inTransitEncryptionConfig")
+    def in_transit_encryption_config(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
+        """
+        return pulumi.get(self, "in_transit_encryption_config")
+
+    @in_transit_encryption_config.setter
+    def in_transit_encryption_config(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "in_transit_encryption_config", value)
+
     @property
     @pulumi.getter(name="initialNodeCount")
     def initial_node_count(self) -> Optional[pulumi.Input[builtins.int]]:
@@ -1543,6 +1559,7 @@ class _ClusterState:
                  fleet: Optional[pulumi.Input['ClusterFleetArgs']] = None,
                  gateway_api_config: Optional[pulumi.Input['ClusterGatewayApiConfigArgs']] = None,
                  identity_service_config: Optional[pulumi.Input['ClusterIdentityServiceConfigArgs']] = None,
+                 in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
                  initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
                  ip_allocation_policy: Optional[pulumi.Input['ClusterIpAllocationPolicyArgs']] = None,
                  label_fingerprint: Optional[pulumi.Input[builtins.str]] = None,
@@ -1662,6 +1679,7 @@ class _ClusterState:
         :param pulumi.Input['ClusterFleetArgs'] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input['ClusterGatewayApiConfigArgs'] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input['ClusterIdentityServiceConfigArgs'] identity_service_config: . Structure is documented below.
+        :param pulumi.Input[builtins.str] in_transit_encryption_config: Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
         :param pulumi.Input[builtins.int] initial_node_count: The number of nodes to create in this
                cluster's default node pool. In regional or multi-zonal clusters, this is the
                number of nodes per zone. Must be set if `node_pool` is not set. If you're using
@@ -1895,6 +1913,8 @@ class _ClusterState:
             pulumi.set(__self__, "gateway_api_config", gateway_api_config)
         if identity_service_config is not None:
             pulumi.set(__self__, "identity_service_config", identity_service_config)
+        if in_transit_encryption_config is not None:
+            pulumi.set(__self__, "in_transit_encryption_config", in_transit_encryption_config)
         if initial_node_count is not None:
             pulumi.set(__self__, "initial_node_count", initial_node_count)
         if ip_allocation_policy is not None:
@@ -2445,6 +2465,18 @@ class _ClusterState:
     def identity_service_config(self, value: Optional[pulumi.Input['ClusterIdentityServiceConfigArgs']]):
         pulumi.set(self, "identity_service_config", value)
 
+    @property
+    @pulumi.getter(name="inTransitEncryptionConfig")
+    def in_transit_encryption_config(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
+        """
+        return pulumi.get(self, "in_transit_encryption_config")
+
+    @in_transit_encryption_config.setter
+    def in_transit_encryption_config(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "in_transit_encryption_config", value)
+
     @property
     @pulumi.getter(name="initialNodeCount")
     def initial_node_count(self) -> Optional[pulumi.Input[builtins.int]]:
@@ -3184,6 +3216,7 @@ class Cluster(pulumi.CustomResource):
                  fleet: Optional[pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']]] = None,
                  gateway_api_config: Optional[pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']]] = None,
                  identity_service_config: Optional[pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']]] = None,
+                 in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
                  initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
                  ip_allocation_policy: Optional[pulumi.Input[Union['ClusterIpAllocationPolicyArgs', 'ClusterIpAllocationPolicyArgsDict']]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
@@ -3416,6 +3449,7 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']] identity_service_config: . Structure is documented below.
+        :param pulumi.Input[builtins.str] in_transit_encryption_config: Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
         :param pulumi.Input[builtins.int] initial_node_count: The number of nodes to create in this
                cluster's default node pool. In regional or multi-zonal clusters, this is the
                number of nodes per zone. Must be set if `node_pool` is not set. If you're using
@@ -3741,6 +3775,7 @@ class Cluster(pulumi.CustomResource):
                  fleet: Optional[pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']]] = None,
                  gateway_api_config: Optional[pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']]] = None,
                  identity_service_config: Optional[pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']]] = None,
+                 in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
                  initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
                  ip_allocation_policy: Optional[pulumi.Input[Union['ClusterIpAllocationPolicyArgs', 'ClusterIpAllocationPolicyArgsDict']]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
@@ -3825,6 +3860,7 @@ class Cluster(pulumi.CustomResource):
             __props__.__dict__["fleet"] = fleet
             __props__.__dict__["gateway_api_config"] = gateway_api_config
             __props__.__dict__["identity_service_config"] = identity_service_config
+            __props__.__dict__["in_transit_encryption_config"] = in_transit_encryption_config
             __props__.__dict__["initial_node_count"] = initial_node_count
             __props__.__dict__["ip_allocation_policy"] = ip_allocation_policy
             __props__.__dict__["location"] = location
@@ -3923,6 +3959,7 @@ class Cluster(pulumi.CustomResource):
             fleet: Optional[pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']]] = None,
             gateway_api_config: Optional[pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']]] = None,
             identity_service_config: Optional[pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']]] = None,
+            in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
             initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
             ip_allocation_policy: Optional[pulumi.Input[Union['ClusterIpAllocationPolicyArgs', 'ClusterIpAllocationPolicyArgsDict']]] = None,
             label_fingerprint: Optional[pulumi.Input[builtins.str]] = None,
@@ -4047,6 +4084,7 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']] identity_service_config: . Structure is documented below.
+        :param pulumi.Input[builtins.str] in_transit_encryption_config: Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
         :param pulumi.Input[builtins.int] initial_node_count: The number of nodes to create in this
                cluster's default node pool. In regional or multi-zonal clusters, this is the
                number of nodes per zone. Must be set if `node_pool` is not set. If you're using
@@ -4249,6 +4287,7 @@ class Cluster(pulumi.CustomResource):
         __props__.__dict__["fleet"] = fleet
         __props__.__dict__["gateway_api_config"] = gateway_api_config
         __props__.__dict__["identity_service_config"] = identity_service_config
+        __props__.__dict__["in_transit_encryption_config"] = in_transit_encryption_config
         __props__.__dict__["initial_node_count"] = initial_node_count
         __props__.__dict__["ip_allocation_policy"] = ip_allocation_policy
         __props__.__dict__["label_fingerprint"] = label_fingerprint
@@ -4611,6 +4650,14 @@ class Cluster(pulumi.CustomResource):
         """
         return pulumi.get(self, "identity_service_config")
 
+    @property
+    @pulumi.getter(name="inTransitEncryptionConfig")
+    def in_transit_encryption_config(self) -> pulumi.Output[Optional[builtins.str]]:
+        """
+        Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
+        """
+        return pulumi.get(self, "in_transit_encryption_config")
+
     @property
     @pulumi.getter(name="initialNodeCount")
     def initial_node_count(self) -> pulumi.Output[Optional[builtins.int]]:

pulumi_gcp/container/get_cluster.py

@@ -28,7 +28,7 @@ class GetClusterResult:
     """
     A collection of values returned by getCluster.
     """
-    def __init__(__self__, addons_configs=None, allow_net_admin=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, control_plane_endpoints_configs=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, disable_l4_lb_firewall_reconciliation=None, dns_configs=None, effective_labels=None, enable_autopilot=None, enable_cilium_clusterwide_network_policy=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, enterprise_configs=None, fleets=None, gateway_api_configs=None, id=None, identity_service_configs=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_autoscalings=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, pulumi_labels=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, secret_manager_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, user_managed_keys_configs=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
+    def __init__(__self__, addons_configs=None, allow_net_admin=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, control_plane_endpoints_configs=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, disable_l4_lb_firewall_reconciliation=None, dns_configs=None, effective_labels=None, enable_autopilot=None, enable_cilium_clusterwide_network_policy=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, enterprise_configs=None, fleets=None, gateway_api_configs=None, id=None, identity_service_configs=None, in_transit_encryption_config=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_autoscalings=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, pulumi_labels=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, secret_manager_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, user_managed_keys_configs=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
         if addons_configs and not isinstance(addons_configs, list):
             raise TypeError("Expected argument 'addons_configs' to be a list")
         pulumi.set(__self__, "addons_configs", addons_configs)
@@ -137,6 +137,9 @@ class GetClusterResult:
         if identity_service_configs and not isinstance(identity_service_configs, list):
             raise TypeError("Expected argument 'identity_service_configs' to be a list")
         pulumi.set(__self__, "identity_service_configs", identity_service_configs)
+        if in_transit_encryption_config and not isinstance(in_transit_encryption_config, str):
+            raise TypeError("Expected argument 'in_transit_encryption_config' to be a str")
+        pulumi.set(__self__, "in_transit_encryption_config", in_transit_encryption_config)
         if initial_node_count and not isinstance(initial_node_count, int):
             raise TypeError("Expected argument 'initial_node_count' to be a int")
         pulumi.set(__self__, "initial_node_count", initial_node_count)
@@ -468,6 +471,11 @@ class GetClusterResult:
     def identity_service_configs(self) -> Sequence['outputs.GetClusterIdentityServiceConfigResult']:
         return pulumi.get(self, "identity_service_configs")
 
+    @property
+    @pulumi.getter(name="inTransitEncryptionConfig")
+    def in_transit_encryption_config(self) -> builtins.str:
+        return pulumi.get(self, "in_transit_encryption_config")
+
     @property
     @pulumi.getter(name="initialNodeCount")
     def initial_node_count(self) -> builtins.int:
@@ -756,6 +764,7 @@ class AwaitableGetClusterResult(GetClusterResult):
             gateway_api_configs=self.gateway_api_configs,
             id=self.id,
             identity_service_configs=self.identity_service_configs,
+            in_transit_encryption_config=self.in_transit_encryption_config,
             initial_node_count=self.initial_node_count,
             ip_allocation_policies=self.ip_allocation_policies,
             label_fingerprint=self.label_fingerprint,
@@ -880,6 +889,7 @@ def get_cluster(location: Optional[builtins.str] = None,
         gateway_api_configs=pulumi.get(__ret__, 'gateway_api_configs'),
         id=pulumi.get(__ret__, 'id'),
         identity_service_configs=pulumi.get(__ret__, 'identity_service_configs'),
+        in_transit_encryption_config=pulumi.get(__ret__, 'in_transit_encryption_config'),
         initial_node_count=pulumi.get(__ret__, 'initial_node_count'),
         ip_allocation_policies=pulumi.get(__ret__, 'ip_allocation_policies'),
         label_fingerprint=pulumi.get(__ret__, 'label_fingerprint'),
@@ -1001,6 +1011,7 @@ def get_cluster_output(location: Optional[pulumi.Input[Optional[builtins.str]]]
         gateway_api_configs=pulumi.get(__response__, 'gateway_api_configs'),
         id=pulumi.get(__response__, 'id'),
         identity_service_configs=pulumi.get(__response__, 'identity_service_configs'),
+        in_transit_encryption_config=pulumi.get(__response__, 'in_transit_encryption_config'),
         initial_node_count=pulumi.get(__response__, 'initial_node_count'),
         ip_allocation_policies=pulumi.get(__response__, 'ip_allocation_policies'),
         label_fingerprint=pulumi.get(__response__, 'label_fingerprint'),

pulumi_gcp/container/outputs.py

@@ -7210,7 +7210,7 @@ class ClusterNodeConfig(dict):
                Kubernetes (eg. through `kubectl`), and it's recommended that you do not use
                this field to manage taints. If you do, `lifecycle.ignore_changes` is
                recommended. Structure is documented below.
-        :param 'ClusterNodeConfigWindowsNodeConfigArgs' windows_node_config: Windows node configuration, currently supporting OSVersion [attribute](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/NodeConfig#osversion). The value must be one of [OS_VERSION_UNSPECIFIED, OS_VERSION_LTSC2019, OS_VERSION_LTSC2019]. For example:
+        :param 'ClusterNodeConfigWindowsNodeConfigArgs' windows_node_config: Windows node configuration, currently supporting OSVersion [attribute](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/NodeConfig#osversion). The value must be one of [OS_VERSION_UNSPECIFIED, OS_VERSION_LTSC2019, OS_VERSION_LTSC2022]. For example:
         :param 'ClusterNodeConfigWorkloadMetadataConfigArgs' workload_metadata_config: Metadata configuration to expose to workloads on the node pool.
                Structure is documented below.
         """
@@ -7713,7 +7713,7 @@ class ClusterNodeConfig(dict):
     @pulumi.getter(name="windowsNodeConfig")
     def windows_node_config(self) -> Optional['outputs.ClusterNodeConfigWindowsNodeConfig']:
         """
-        Windows node configuration, currently supporting OSVersion [attribute](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/NodeConfig#osversion). The value must be one of [OS_VERSION_UNSPECIFIED, OS_VERSION_LTSC2019, OS_VERSION_LTSC2019]. For example:
+        Windows node configuration, currently supporting OSVersion [attribute](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/NodeConfig#osversion). The value must be one of [OS_VERSION_UNSPECIFIED, OS_VERSION_LTSC2019, OS_VERSION_LTSC2022]. For example:
         """
         return pulumi.get(self, "windows_node_config")
 
@@ -10551,7 +10551,7 @@ class ClusterNodePoolNodeConfig(dict):
                Kubernetes (eg. through `kubectl`), and it's recommended that you do not use
                this field to manage taints. If you do, `lifecycle.ignore_changes` is
                recommended. Structure is documented below.
-        :param 'ClusterNodePoolNodeConfigWindowsNodeConfigArgs' windows_node_config: Windows node configuration, currently supporting OSVersion [attribute](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/NodeConfig#osversion). The value must be one of [OS_VERSION_UNSPECIFIED, OS_VERSION_LTSC2019, OS_VERSION_LTSC2019]. For example:
+        :param 'ClusterNodePoolNodeConfigWindowsNodeConfigArgs' windows_node_config: Windows node configuration, currently supporting OSVersion [attribute](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/NodeConfig#osversion). The value must be one of [OS_VERSION_UNSPECIFIED, OS_VERSION_LTSC2019, OS_VERSION_LTSC2022]. For example:
         :param 'ClusterNodePoolNodeConfigWorkloadMetadataConfigArgs' workload_metadata_config: Metadata configuration to expose to workloads on the node pool.
                Structure is documented below.
         """
@@ -11054,7 +11054,7 @@ class ClusterNodePoolNodeConfig(dict):
     @pulumi.getter(name="windowsNodeConfig")
     def windows_node_config(self) -> Optional['outputs.ClusterNodePoolNodeConfigWindowsNodeConfig']:
         """
-        Windows node configuration, currently supporting OSVersion [attribute](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/NodeConfig#osversion). The value must be one of [OS_VERSION_UNSPECIFIED, OS_VERSION_LTSC2019, OS_VERSION_LTSC2019]. For example:
+        Windows node configuration, currently supporting OSVersion [attribute](https://cloud.google.com/kubernetes-engine/docs/reference/rest/v1/NodeConfig#osversion). The value must be one of [OS_VERSION_UNSPECIFIED, OS_VERSION_LTSC2019, OS_VERSION_LTSC2022]. For example:
         """
         return pulumi.get(self, "windows_node_config")
 

pulumi_gcp/datacatalog/entry_group_iam_binding.py

@@ -47,6 +47,10 @@ class EntryGroupIamBindingArgs:
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         """
         pulumi.set(__self__, "entry_group", entry_group)
         pulumi.set(__self__, "members", members)
@@ -131,6 +135,12 @@ class EntryGroupIamBindingArgs:
     @property
     @pulumi.getter
     def region(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @region.setter
@@ -165,6 +175,10 @@ class _EntryGroupIamBindingState:
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         :param pulumi.Input[builtins.str] role: The role that should be applied. Only one
                `datacatalog.EntryGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -255,6 +269,12 @@ class _EntryGroupIamBindingState:
     @property
     @pulumi.getter
     def region(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @region.setter
@@ -455,6 +475,10 @@ class EntryGroupIamBinding(pulumi.CustomResource):
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         :param pulumi.Input[builtins.str] role: The role that should be applied. Only one
                `datacatalog.EntryGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -697,6 +721,10 @@ class EntryGroupIamBinding(pulumi.CustomResource):
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         :param pulumi.Input[builtins.str] role: The role that should be applied. Only one
                `datacatalog.EntryGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -765,6 +793,12 @@ class EntryGroupIamBinding(pulumi.CustomResource):
     @property
     @pulumi.getter
     def region(self) -> pulumi.Output[builtins.str]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @property

pulumi_gcp/datacatalog/entry_group_iam_member.py

@@ -47,6 +47,10 @@ class EntryGroupIamMemberArgs:
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         """
         pulumi.set(__self__, "entry_group", entry_group)
         pulumi.set(__self__, "member", member)
@@ -131,6 +135,12 @@ class EntryGroupIamMemberArgs:
     @property
     @pulumi.getter
     def region(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @region.setter
@@ -165,6 +175,10 @@ class _EntryGroupIamMemberState:
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         :param pulumi.Input[builtins.str] role: The role that should be applied. Only one
                `datacatalog.EntryGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -255,6 +269,12 @@ class _EntryGroupIamMemberState:
     @property
     @pulumi.getter
     def region(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @region.setter
@@ -455,6 +475,10 @@ class EntryGroupIamMember(pulumi.CustomResource):
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         :param pulumi.Input[builtins.str] role: The role that should be applied. Only one
                `datacatalog.EntryGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -697,6 +721,10 @@ class EntryGroupIamMember(pulumi.CustomResource):
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         :param pulumi.Input[builtins.str] role: The role that should be applied. Only one
                `datacatalog.EntryGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -765,6 +793,12 @@ class EntryGroupIamMember(pulumi.CustomResource):
     @property
     @pulumi.getter
     def region(self) -> pulumi.Output[builtins.str]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @property

pulumi_gcp/datacatalog/entry_group_iam_policy.py

@@ -31,6 +31,10 @@ class EntryGroupIamPolicyArgs:
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         """
         pulumi.set(__self__, "entry_group", entry_group)
         pulumi.set(__self__, "policy_data", policy_data)
@@ -80,6 +84,12 @@ class EntryGroupIamPolicyArgs:
     @property
     @pulumi.getter
     def region(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @region.setter
@@ -103,6 +113,10 @@ class _EntryGroupIamPolicyState:
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         """
         if entry_group is not None:
             pulumi.set(__self__, "entry_group", entry_group)
@@ -168,6 +182,12 @@ class _EntryGroupIamPolicyState:
     @property
     @pulumi.getter
     def region(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @region.setter
@@ -343,6 +363,10 @@ class EntryGroupIamPolicy(pulumi.CustomResource):
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         """
         ...
     @overload
@@ -565,6 +589,10 @@ class EntryGroupIamPolicy(pulumi.CustomResource):
                a `organizations_get_iam_policy` data source.
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -614,5 +642,11 @@ class EntryGroupIamPolicy(pulumi.CustomResource):
     @property
     @pulumi.getter
     def region(self) -> pulumi.Output[builtins.str]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 

pulumi_gcp/datacatalog/get_entry_group_iam_policy.py

@@ -122,6 +122,10 @@ def get_entry_group_iam_policy(entry_group: Optional[builtins.str] = None,
     :param builtins.str entry_group: Used to find the parent resource to bind the IAM policy to
     :param builtins.str project: The ID of the project in which the resource belongs.
            If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    :param builtins.str region: EntryGroup location region.
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+           region is specified, it is taken from the provider configuration.
     """
     __args__ = dict()
     __args__['entryGroup'] = entry_group
@@ -157,6 +161,10 @@ def get_entry_group_iam_policy_output(entry_group: Optional[pulumi.Input[builtin
     :param builtins.str entry_group: Used to find the parent resource to bind the IAM policy to
     :param builtins.str project: The ID of the project in which the resource belongs.
            If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    :param builtins.str region: EntryGroup location region.
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+           region is specified, it is taken from the provider configuration.
     """
     __args__ = dict()
     __args__['entryGroup'] = entry_group

pulumi_gcp/datacatalog/get_tag_template_iam_policy.py

@@ -121,6 +121,10 @@ def get_tag_template_iam_policy(project: Optional[builtins.str] = None,
 
     :param builtins.str project: The ID of the project in which the resource belongs.
            If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    :param builtins.str region: Template location region.
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+           region is specified, it is taken from the provider configuration.
     :param builtins.str tag_template: Used to find the parent resource to bind the IAM policy to
     """
     __args__ = dict()
@@ -156,6 +160,10 @@ def get_tag_template_iam_policy_output(project: Optional[pulumi.Input[Optional[b
 
     :param builtins.str project: The ID of the project in which the resource belongs.
            If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    :param builtins.str region: Template location region.
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+           region is specified, it is taken from the provider configuration.
     :param builtins.str tag_template: Used to find the parent resource to bind the IAM policy to
     """
     __args__ = dict()

pulumi_gcp/datacatalog/get_taxonomy_iam_policy.py

@@ -121,6 +121,10 @@ def get_taxonomy_iam_policy(project: Optional[builtins.str] = None,
 
     :param builtins.str project: The ID of the project in which the resource belongs.
            If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    :param builtins.str region: Taxonomy location region.
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+           region is specified, it is taken from the provider configuration.
     :param builtins.str taxonomy: Used to find the parent resource to bind the IAM policy to
     """
     __args__ = dict()
@@ -156,6 +160,10 @@ def get_taxonomy_iam_policy_output(project: Optional[pulumi.Input[Optional[built
 
     :param builtins.str project: The ID of the project in which the resource belongs.
            If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    :param builtins.str region: Taxonomy location region.
+           Used to find the parent resource to bind the IAM policy to. If not specified,
+           the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+           region is specified, it is taken from the provider configuration.
     :param builtins.str taxonomy: Used to find the parent resource to bind the IAM policy to
     """
     __args__ = dict()