pulumi-gcp 8.32.0a1747377897__py3-none-any.whl → 8.32.0a1747834582__py3-none-any.whl

pulumi_gcp/compute/region_backend_service.py

@@ -64,7 +64,7 @@ class RegionBackendServiceArgs:
                Structure is documented below.
         :param pulumi.Input['RegionBackendServiceCircuitBreakersArgs'] circuit_breakers: Settings controlling the volume of connections to a backend service. This field
                is applicable only when the `load_balancing_scheme` is set to INTERNAL_MANAGED
-               and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+               and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
                Structure is documented below.
         :param pulumi.Input[builtins.int] connection_draining_timeout_sec: Time for which instance will be drained (not accept new
                connections, but still work to finish started).
@@ -141,7 +141,7 @@ class RegionBackendServiceArgs:
                to use for computing the weights are specified via the
                backends[].customMetrics fields.
                locality_lb_policy is applicable to either:
-               * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
+               * A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C,
                and loadBalancingScheme set to INTERNAL_MANAGED.
                * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
                * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
@@ -170,7 +170,7 @@ class RegionBackendServiceArgs:
                This field can only be specified when the load balancing scheme is set to INTERNAL.
         :param pulumi.Input['RegionBackendServiceOutlierDetectionArgs'] outlier_detection: Settings controlling eviction of unhealthy hosts from the load balancing pool.
                This field is applicable only when the `load_balancing_scheme` is set
-               to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+               to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
                Structure is documented below.
         :param pulumi.Input[builtins.str] port_name: A named port on a backend instance group representing the port for
                communication to the backend VMs in that group. Required when the
@@ -181,10 +181,11 @@ class RegionBackendServiceArgs:
                Must be omitted when the loadBalancingScheme is INTERNAL (Internal TCP/UDP Load Balancing).
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[builtins.str] protocol: The protocol this RegionBackendService uses to communicate with backends.
-               The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
-               types and may result in errors if used with the GA API.
-               Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `SSL`, `TCP`, `UDP`, `GRPC`, `UNSPECIFIED`.
+        :param pulumi.Input[builtins.str] protocol: The protocol this BackendService uses to communicate with backends.
+               The default is HTTP. Possible values are HTTP, HTTPS, HTTP2, H2C, TCP, SSL, UDP
+               or GRPC. Refer to the documentation for the load balancers or for Traffic Director
+               for more information.
+               Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `TCP`, `SSL`, `UDP`, `GRPC`, `UNSPECIFIED`, `H2C`.
         :param pulumi.Input[builtins.str] region: The Region in which the created backend service should reside.
                If it is not provided, the provider region is used.
         :param pulumi.Input[builtins.str] security_policy: The security policy associated with this backend service.
@@ -307,7 +308,7 @@ class RegionBackendServiceArgs:
         """
         Settings controlling the volume of connections to a backend service. This field
         is applicable only when the `load_balancing_scheme` is set to INTERNAL_MANAGED
-        and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+        and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
         Structure is documented below.
         """
         return pulumi.get(self, "circuit_breakers")
@@ -516,7 +517,7 @@ class RegionBackendServiceArgs:
         to use for computing the weights are specified via the
         backends[].customMetrics fields.
         locality_lb_policy is applicable to either:
-        * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
+        * A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C,
         and loadBalancingScheme set to INTERNAL_MANAGED.
         * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
         * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
@@ -589,7 +590,7 @@ class RegionBackendServiceArgs:
         """
         Settings controlling eviction of unhealthy hosts from the load balancing pool.
         This field is applicable only when the `load_balancing_scheme` is set
-        to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+        to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
         Structure is documented below.
         """
         return pulumi.get(self, "outlier_detection")
@@ -633,10 +634,11 @@ class RegionBackendServiceArgs:
     @pulumi.getter
     def protocol(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The protocol this RegionBackendService uses to communicate with backends.
-        The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
-        types and may result in errors if used with the GA API.
-        Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `SSL`, `TCP`, `UDP`, `GRPC`, `UNSPECIFIED`.
+        The protocol this BackendService uses to communicate with backends.
+        The default is HTTP. Possible values are HTTP, HTTPS, HTTP2, H2C, TCP, SSL, UDP
+        or GRPC. Refer to the documentation for the load balancers or for Traffic Director
+        for more information.
+        Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `TCP`, `SSL`, `UDP`, `GRPC`, `UNSPECIFIED`, `H2C`.
         """
         return pulumi.get(self, "protocol")
 
@@ -774,7 +776,7 @@ class _RegionBackendServiceState:
                Structure is documented below.
         :param pulumi.Input['RegionBackendServiceCircuitBreakersArgs'] circuit_breakers: Settings controlling the volume of connections to a backend service. This field
                is applicable only when the `load_balancing_scheme` is set to INTERNAL_MANAGED
-               and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+               and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
                Structure is documented below.
         :param pulumi.Input[builtins.int] connection_draining_timeout_sec: Time for which instance will be drained (not accept new
                connections, but still work to finish started).
@@ -855,7 +857,7 @@ class _RegionBackendServiceState:
                to use for computing the weights are specified via the
                backends[].customMetrics fields.
                locality_lb_policy is applicable to either:
-               * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
+               * A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C,
                and loadBalancingScheme set to INTERNAL_MANAGED.
                * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
                * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
@@ -884,7 +886,7 @@ class _RegionBackendServiceState:
                This field can only be specified when the load balancing scheme is set to INTERNAL.
         :param pulumi.Input['RegionBackendServiceOutlierDetectionArgs'] outlier_detection: Settings controlling eviction of unhealthy hosts from the load balancing pool.
                This field is applicable only when the `load_balancing_scheme` is set
-               to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+               to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
                Structure is documented below.
         :param pulumi.Input[builtins.str] port_name: A named port on a backend instance group representing the port for
                communication to the backend VMs in that group. Required when the
@@ -895,10 +897,11 @@ class _RegionBackendServiceState:
                Must be omitted when the loadBalancingScheme is INTERNAL (Internal TCP/UDP Load Balancing).
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[builtins.str] protocol: The protocol this RegionBackendService uses to communicate with backends.
-               The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
-               types and may result in errors if used with the GA API.
-               Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `SSL`, `TCP`, `UDP`, `GRPC`, `UNSPECIFIED`.
+        :param pulumi.Input[builtins.str] protocol: The protocol this BackendService uses to communicate with backends.
+               The default is HTTP. Possible values are HTTP, HTTPS, HTTP2, H2C, TCP, SSL, UDP
+               or GRPC. Refer to the documentation for the load balancers or for Traffic Director
+               for more information.
+               Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `TCP`, `SSL`, `UDP`, `GRPC`, `UNSPECIFIED`, `H2C`.
         :param pulumi.Input[builtins.str] region: The Region in which the created backend service should reside.
                If it is not provided, the provider region is used.
         :param pulumi.Input[builtins.str] security_policy: The security policy associated with this backend service.
@@ -1030,7 +1033,7 @@ class _RegionBackendServiceState:
         """
         Settings controlling the volume of connections to a backend service. This field
         is applicable only when the `load_balancing_scheme` is set to INTERNAL_MANAGED
-        and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+        and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
         Structure is documented below.
         """
         return pulumi.get(self, "circuit_breakers")
@@ -1276,7 +1279,7 @@ class _RegionBackendServiceState:
         to use for computing the weights are specified via the
         backends[].customMetrics fields.
         locality_lb_policy is applicable to either:
-        * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
+        * A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C,
         and loadBalancingScheme set to INTERNAL_MANAGED.
         * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
         * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
@@ -1349,7 +1352,7 @@ class _RegionBackendServiceState:
         """
         Settings controlling eviction of unhealthy hosts from the load balancing pool.
         This field is applicable only when the `load_balancing_scheme` is set
-        to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+        to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
         Structure is documented below.
         """
         return pulumi.get(self, "outlier_detection")
@@ -1393,10 +1396,11 @@ class _RegionBackendServiceState:
     @pulumi.getter
     def protocol(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The protocol this RegionBackendService uses to communicate with backends.
-        The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
-        types and may result in errors if used with the GA API.
-        Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `SSL`, `TCP`, `UDP`, `GRPC`, `UNSPECIFIED`.
+        The protocol this BackendService uses to communicate with backends.
+        The default is HTTP. Possible values are HTTP, HTTPS, HTTP2, H2C, TCP, SSL, UDP
+        or GRPC. Refer to the documentation for the load balancers or for Traffic Director
+        for more information.
+        Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `TCP`, `SSL`, `UDP`, `GRPC`, `UNSPECIFIED`, `H2C`.
         """
         return pulumi.get(self, "protocol")
 
@@ -1790,7 +1794,7 @@ class RegionBackendService(pulumi.CustomResource):
             }],
             region="us-central1",
             name="region-service",
-            protocol="HTTP",
+            protocol="H2C",
             timeout_sec=10,
             health_checks=default_region_health_check.id)
         ```
@@ -1929,7 +1933,7 @@ class RegionBackendService(pulumi.CustomResource):
                Structure is documented below.
         :param pulumi.Input[Union['RegionBackendServiceCircuitBreakersArgs', 'RegionBackendServiceCircuitBreakersArgsDict']] circuit_breakers: Settings controlling the volume of connections to a backend service. This field
                is applicable only when the `load_balancing_scheme` is set to INTERNAL_MANAGED
-               and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+               and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
                Structure is documented below.
         :param pulumi.Input[builtins.int] connection_draining_timeout_sec: Time for which instance will be drained (not accept new
                connections, but still work to finish started).
@@ -2006,7 +2010,7 @@ class RegionBackendService(pulumi.CustomResource):
                to use for computing the weights are specified via the
                backends[].customMetrics fields.
                locality_lb_policy is applicable to either:
-               * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
+               * A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C,
                and loadBalancingScheme set to INTERNAL_MANAGED.
                * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
                * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
@@ -2035,7 +2039,7 @@ class RegionBackendService(pulumi.CustomResource):
                This field can only be specified when the load balancing scheme is set to INTERNAL.
         :param pulumi.Input[Union['RegionBackendServiceOutlierDetectionArgs', 'RegionBackendServiceOutlierDetectionArgsDict']] outlier_detection: Settings controlling eviction of unhealthy hosts from the load balancing pool.
                This field is applicable only when the `load_balancing_scheme` is set
-               to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+               to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
                Structure is documented below.
         :param pulumi.Input[builtins.str] port_name: A named port on a backend instance group representing the port for
                communication to the backend VMs in that group. Required when the
@@ -2046,10 +2050,11 @@ class RegionBackendService(pulumi.CustomResource):
                Must be omitted when the loadBalancingScheme is INTERNAL (Internal TCP/UDP Load Balancing).
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[builtins.str] protocol: The protocol this RegionBackendService uses to communicate with backends.
-               The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
-               types and may result in errors if used with the GA API.
-               Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `SSL`, `TCP`, `UDP`, `GRPC`, `UNSPECIFIED`.
+        :param pulumi.Input[builtins.str] protocol: The protocol this BackendService uses to communicate with backends.
+               The default is HTTP. Possible values are HTTP, HTTPS, HTTP2, H2C, TCP, SSL, UDP
+               or GRPC. Refer to the documentation for the load balancers or for Traffic Director
+               for more information.
+               Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `TCP`, `SSL`, `UDP`, `GRPC`, `UNSPECIFIED`, `H2C`.
         :param pulumi.Input[builtins.str] region: The Region in which the created backend service should reside.
                If it is not provided, the provider region is used.
         :param pulumi.Input[builtins.str] security_policy: The security policy associated with this backend service.
@@ -2328,7 +2333,7 @@ class RegionBackendService(pulumi.CustomResource):
             }],
             region="us-central1",
             name="region-service",
-            protocol="HTTP",
+            protocol="H2C",
             timeout_sec=10,
             health_checks=default_region_health_check.id)
         ```
@@ -2601,7 +2606,7 @@ class RegionBackendService(pulumi.CustomResource):
                Structure is documented below.
         :param pulumi.Input[Union['RegionBackendServiceCircuitBreakersArgs', 'RegionBackendServiceCircuitBreakersArgsDict']] circuit_breakers: Settings controlling the volume of connections to a backend service. This field
                is applicable only when the `load_balancing_scheme` is set to INTERNAL_MANAGED
-               and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+               and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
                Structure is documented below.
         :param pulumi.Input[builtins.int] connection_draining_timeout_sec: Time for which instance will be drained (not accept new
                connections, but still work to finish started).
@@ -2682,7 +2687,7 @@ class RegionBackendService(pulumi.CustomResource):
                to use for computing the weights are specified via the
                backends[].customMetrics fields.
                locality_lb_policy is applicable to either:
-               * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
+               * A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C,
                and loadBalancingScheme set to INTERNAL_MANAGED.
                * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
                * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
@@ -2711,7 +2716,7 @@ class RegionBackendService(pulumi.CustomResource):
                This field can only be specified when the load balancing scheme is set to INTERNAL.
         :param pulumi.Input[Union['RegionBackendServiceOutlierDetectionArgs', 'RegionBackendServiceOutlierDetectionArgsDict']] outlier_detection: Settings controlling eviction of unhealthy hosts from the load balancing pool.
                This field is applicable only when the `load_balancing_scheme` is set
-               to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+               to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
                Structure is documented below.
         :param pulumi.Input[builtins.str] port_name: A named port on a backend instance group representing the port for
                communication to the backend VMs in that group. Required when the
@@ -2722,10 +2727,11 @@ class RegionBackendService(pulumi.CustomResource):
                Must be omitted when the loadBalancingScheme is INTERNAL (Internal TCP/UDP Load Balancing).
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
-        :param pulumi.Input[builtins.str] protocol: The protocol this RegionBackendService uses to communicate with backends.
-               The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
-               types and may result in errors if used with the GA API.
-               Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `SSL`, `TCP`, `UDP`, `GRPC`, `UNSPECIFIED`.
+        :param pulumi.Input[builtins.str] protocol: The protocol this BackendService uses to communicate with backends.
+               The default is HTTP. Possible values are HTTP, HTTPS, HTTP2, H2C, TCP, SSL, UDP
+               or GRPC. Refer to the documentation for the load balancers or for Traffic Director
+               for more information.
+               Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `TCP`, `SSL`, `UDP`, `GRPC`, `UNSPECIFIED`, `H2C`.
         :param pulumi.Input[builtins.str] region: The Region in which the created backend service should reside.
                If it is not provided, the provider region is used.
         :param pulumi.Input[builtins.str] security_policy: The security policy associated with this backend service.
@@ -2817,7 +2823,7 @@ class RegionBackendService(pulumi.CustomResource):
         """
         Settings controlling the volume of connections to a backend service. This field
         is applicable only when the `load_balancing_scheme` is set to INTERNAL_MANAGED
-        and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+        and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
         Structure is documented below.
         """
         return pulumi.get(self, "circuit_breakers")
@@ -3003,7 +3009,7 @@ class RegionBackendService(pulumi.CustomResource):
         to use for computing the weights are specified via the
         backends[].customMetrics fields.
         locality_lb_policy is applicable to either:
-        * A regional backend service with the service_protocol set to HTTP, HTTPS, or HTTP2,
+        * A regional backend service with the service_protocol set to HTTP, HTTPS, HTTP2 or H2C,
         and loadBalancingScheme set to INTERNAL_MANAGED.
         * A global backend service with the load_balancing_scheme set to INTERNAL_SELF_MANAGED.
         * A regional backend service with loadBalancingScheme set to EXTERNAL (External Network
@@ -3060,7 +3066,7 @@ class RegionBackendService(pulumi.CustomResource):
         """
         Settings controlling eviction of unhealthy hosts from the load balancing pool.
         This field is applicable only when the `load_balancing_scheme` is set
-        to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, or HTTP2.
+        to INTERNAL_MANAGED and the `protocol` is set to HTTP, HTTPS, HTTP2 or H2C.
         Structure is documented below.
         """
         return pulumi.get(self, "outlier_detection")
@@ -3092,10 +3098,11 @@ class RegionBackendService(pulumi.CustomResource):
     @pulumi.getter
     def protocol(self) -> pulumi.Output[builtins.str]:
         """
-        The protocol this RegionBackendService uses to communicate with backends.
-        The default is HTTP. **NOTE**: HTTP2 is only valid for beta HTTP/2 load balancer
-        types and may result in errors if used with the GA API.
-        Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `SSL`, `TCP`, `UDP`, `GRPC`, `UNSPECIFIED`.
+        The protocol this BackendService uses to communicate with backends.
+        The default is HTTP. Possible values are HTTP, HTTPS, HTTP2, H2C, TCP, SSL, UDP
+        or GRPC. Refer to the documentation for the load balancers or for Traffic Director
+        for more information.
+        Possible values are: `HTTP`, `HTTPS`, `HTTP2`, `TCP`, `SSL`, `UDP`, `GRPC`, `UNSPECIFIED`, `H2C`.
         """
         return pulumi.get(self, "protocol")
 

pulumi_gcp/container/cluster.py

@@ -55,6 +55,7 @@ class ClusterArgs:
                  fleet: Optional[pulumi.Input['ClusterFleetArgs']] = None,
                  gateway_api_config: Optional[pulumi.Input['ClusterGatewayApiConfigArgs']] = None,
                  identity_service_config: Optional[pulumi.Input['ClusterIdentityServiceConfigArgs']] = None,
+                 in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
                  initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
                  ip_allocation_policy: Optional[pulumi.Input['ClusterIpAllocationPolicyArgs']] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
@@ -165,6 +166,7 @@ class ClusterArgs:
         :param pulumi.Input['ClusterFleetArgs'] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input['ClusterGatewayApiConfigArgs'] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input['ClusterIdentityServiceConfigArgs'] identity_service_config: . Structure is documented below.
+        :param pulumi.Input[builtins.str] in_transit_encryption_config: Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
         :param pulumi.Input[builtins.int] initial_node_count: The number of nodes to create in this
                cluster's default node pool. In regional or multi-zonal clusters, this is the
                number of nodes per zone. Must be set if `node_pool` is not set. If you're using
@@ -381,6 +383,8 @@ class ClusterArgs:
             pulumi.set(__self__, "gateway_api_config", gateway_api_config)
         if identity_service_config is not None:
             pulumi.set(__self__, "identity_service_config", identity_service_config)
+        if in_transit_encryption_config is not None:
+            pulumi.set(__self__, "in_transit_encryption_config", in_transit_encryption_config)
         if initial_node_count is not None:
             pulumi.set(__self__, "initial_node_count", initial_node_count)
         if ip_allocation_policy is not None:
@@ -893,6 +897,18 @@ class ClusterArgs:
     def identity_service_config(self, value: Optional[pulumi.Input['ClusterIdentityServiceConfigArgs']]):
         pulumi.set(self, "identity_service_config", value)
 
+    @property
+    @pulumi.getter(name="inTransitEncryptionConfig")
+    def in_transit_encryption_config(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
+        """
+        return pulumi.get(self, "in_transit_encryption_config")
+
+    @in_transit_encryption_config.setter
+    def in_transit_encryption_config(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "in_transit_encryption_config", value)
+
     @property
     @pulumi.getter(name="initialNodeCount")
     def initial_node_count(self) -> Optional[pulumi.Input[builtins.int]]:
@@ -1543,6 +1559,7 @@ class _ClusterState:
                  fleet: Optional[pulumi.Input['ClusterFleetArgs']] = None,
                  gateway_api_config: Optional[pulumi.Input['ClusterGatewayApiConfigArgs']] = None,
                  identity_service_config: Optional[pulumi.Input['ClusterIdentityServiceConfigArgs']] = None,
+                 in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
                  initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
                  ip_allocation_policy: Optional[pulumi.Input['ClusterIpAllocationPolicyArgs']] = None,
                  label_fingerprint: Optional[pulumi.Input[builtins.str]] = None,
@@ -1662,6 +1679,7 @@ class _ClusterState:
         :param pulumi.Input['ClusterFleetArgs'] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input['ClusterGatewayApiConfigArgs'] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input['ClusterIdentityServiceConfigArgs'] identity_service_config: . Structure is documented below.
+        :param pulumi.Input[builtins.str] in_transit_encryption_config: Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
         :param pulumi.Input[builtins.int] initial_node_count: The number of nodes to create in this
                cluster's default node pool. In regional or multi-zonal clusters, this is the
                number of nodes per zone. Must be set if `node_pool` is not set. If you're using
@@ -1895,6 +1913,8 @@ class _ClusterState:
             pulumi.set(__self__, "gateway_api_config", gateway_api_config)
         if identity_service_config is not None:
             pulumi.set(__self__, "identity_service_config", identity_service_config)
+        if in_transit_encryption_config is not None:
+            pulumi.set(__self__, "in_transit_encryption_config", in_transit_encryption_config)
         if initial_node_count is not None:
             pulumi.set(__self__, "initial_node_count", initial_node_count)
         if ip_allocation_policy is not None:
@@ -2445,6 +2465,18 @@ class _ClusterState:
     def identity_service_config(self, value: Optional[pulumi.Input['ClusterIdentityServiceConfigArgs']]):
         pulumi.set(self, "identity_service_config", value)
 
+    @property
+    @pulumi.getter(name="inTransitEncryptionConfig")
+    def in_transit_encryption_config(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
+        """
+        return pulumi.get(self, "in_transit_encryption_config")
+
+    @in_transit_encryption_config.setter
+    def in_transit_encryption_config(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "in_transit_encryption_config", value)
+
     @property
     @pulumi.getter(name="initialNodeCount")
     def initial_node_count(self) -> Optional[pulumi.Input[builtins.int]]:
@@ -3184,6 +3216,7 @@ class Cluster(pulumi.CustomResource):
                  fleet: Optional[pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']]] = None,
                  gateway_api_config: Optional[pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']]] = None,
                  identity_service_config: Optional[pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']]] = None,
+                 in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
                  initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
                  ip_allocation_policy: Optional[pulumi.Input[Union['ClusterIpAllocationPolicyArgs', 'ClusterIpAllocationPolicyArgsDict']]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
@@ -3416,6 +3449,7 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']] identity_service_config: . Structure is documented below.
+        :param pulumi.Input[builtins.str] in_transit_encryption_config: Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
         :param pulumi.Input[builtins.int] initial_node_count: The number of nodes to create in this
                cluster's default node pool. In regional or multi-zonal clusters, this is the
                number of nodes per zone. Must be set if `node_pool` is not set. If you're using
@@ -3741,6 +3775,7 @@ class Cluster(pulumi.CustomResource):
                  fleet: Optional[pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']]] = None,
                  gateway_api_config: Optional[pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']]] = None,
                  identity_service_config: Optional[pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']]] = None,
+                 in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
                  initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
                  ip_allocation_policy: Optional[pulumi.Input[Union['ClusterIpAllocationPolicyArgs', 'ClusterIpAllocationPolicyArgsDict']]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
@@ -3825,6 +3860,7 @@ class Cluster(pulumi.CustomResource):
             __props__.__dict__["fleet"] = fleet
             __props__.__dict__["gateway_api_config"] = gateway_api_config
             __props__.__dict__["identity_service_config"] = identity_service_config
+            __props__.__dict__["in_transit_encryption_config"] = in_transit_encryption_config
             __props__.__dict__["initial_node_count"] = initial_node_count
             __props__.__dict__["ip_allocation_policy"] = ip_allocation_policy
             __props__.__dict__["location"] = location
@@ -3923,6 +3959,7 @@ class Cluster(pulumi.CustomResource):
             fleet: Optional[pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']]] = None,
             gateway_api_config: Optional[pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']]] = None,
             identity_service_config: Optional[pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']]] = None,
+            in_transit_encryption_config: Optional[pulumi.Input[builtins.str]] = None,
             initial_node_count: Optional[pulumi.Input[builtins.int]] = None,
             ip_allocation_policy: Optional[pulumi.Input[Union['ClusterIpAllocationPolicyArgs', 'ClusterIpAllocationPolicyArgsDict']]] = None,
             label_fingerprint: Optional[pulumi.Input[builtins.str]] = None,
@@ -4047,6 +4084,7 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input[Union['ClusterIdentityServiceConfigArgs', 'ClusterIdentityServiceConfigArgsDict']] identity_service_config: . Structure is documented below.
+        :param pulumi.Input[builtins.str] in_transit_encryption_config: Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
         :param pulumi.Input[builtins.int] initial_node_count: The number of nodes to create in this
                cluster's default node pool. In regional or multi-zonal clusters, this is the
                number of nodes per zone. Must be set if `node_pool` is not set. If you're using
@@ -4249,6 +4287,7 @@ class Cluster(pulumi.CustomResource):
         __props__.__dict__["fleet"] = fleet
         __props__.__dict__["gateway_api_config"] = gateway_api_config
         __props__.__dict__["identity_service_config"] = identity_service_config
+        __props__.__dict__["in_transit_encryption_config"] = in_transit_encryption_config
         __props__.__dict__["initial_node_count"] = initial_node_count
         __props__.__dict__["ip_allocation_policy"] = ip_allocation_policy
         __props__.__dict__["label_fingerprint"] = label_fingerprint
@@ -4611,6 +4650,14 @@ class Cluster(pulumi.CustomResource):
         """
         return pulumi.get(self, "identity_service_config")
 
+    @property
+    @pulumi.getter(name="inTransitEncryptionConfig")
+    def in_transit_encryption_config(self) -> pulumi.Output[Optional[builtins.str]]:
+        """
+        Defines the config of in-transit encryption. Valid values are `IN_TRANSIT_ENCRYPTION_DISABLED` and `IN_TRANSIT_ENCRYPTION_INTER_NODE_TRANSPARENT`.
+        """
+        return pulumi.get(self, "in_transit_encryption_config")
+
     @property
     @pulumi.getter(name="initialNodeCount")
     def initial_node_count(self) -> pulumi.Output[Optional[builtins.int]]:

pulumi_gcp/container/get_cluster.py

@@ -28,7 +28,7 @@ class GetClusterResult:
     """
     A collection of values returned by getCluster.
     """
-    def __init__(__self__, addons_configs=None, allow_net_admin=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, control_plane_endpoints_configs=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, disable_l4_lb_firewall_reconciliation=None, dns_configs=None, effective_labels=None, enable_autopilot=None, enable_cilium_clusterwide_network_policy=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, enterprise_configs=None, fleets=None, gateway_api_configs=None, id=None, identity_service_configs=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_autoscalings=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, pulumi_labels=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, secret_manager_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, user_managed_keys_configs=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
+    def __init__(__self__, addons_configs=None, allow_net_admin=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, control_plane_endpoints_configs=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, disable_l4_lb_firewall_reconciliation=None, dns_configs=None, effective_labels=None, enable_autopilot=None, enable_cilium_clusterwide_network_policy=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, enterprise_configs=None, fleets=None, gateway_api_configs=None, id=None, identity_service_configs=None, in_transit_encryption_config=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_autoscalings=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, pulumi_labels=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, secret_manager_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, user_managed_keys_configs=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
         if addons_configs and not isinstance(addons_configs, list):
             raise TypeError("Expected argument 'addons_configs' to be a list")
         pulumi.set(__self__, "addons_configs", addons_configs)
@@ -137,6 +137,9 @@ class GetClusterResult:
         if identity_service_configs and not isinstance(identity_service_configs, list):
             raise TypeError("Expected argument 'identity_service_configs' to be a list")
         pulumi.set(__self__, "identity_service_configs", identity_service_configs)
+        if in_transit_encryption_config and not isinstance(in_transit_encryption_config, str):
+            raise TypeError("Expected argument 'in_transit_encryption_config' to be a str")
+        pulumi.set(__self__, "in_transit_encryption_config", in_transit_encryption_config)
         if initial_node_count and not isinstance(initial_node_count, int):
             raise TypeError("Expected argument 'initial_node_count' to be a int")
         pulumi.set(__self__, "initial_node_count", initial_node_count)
@@ -468,6 +471,11 @@ class GetClusterResult:
     def identity_service_configs(self) -> Sequence['outputs.GetClusterIdentityServiceConfigResult']:
         return pulumi.get(self, "identity_service_configs")
 
+    @property
+    @pulumi.getter(name="inTransitEncryptionConfig")
+    def in_transit_encryption_config(self) -> builtins.str:
+        return pulumi.get(self, "in_transit_encryption_config")
+
     @property
     @pulumi.getter(name="initialNodeCount")
     def initial_node_count(self) -> builtins.int:
@@ -756,6 +764,7 @@ class AwaitableGetClusterResult(GetClusterResult):
             gateway_api_configs=self.gateway_api_configs,
             id=self.id,
             identity_service_configs=self.identity_service_configs,
+            in_transit_encryption_config=self.in_transit_encryption_config,
             initial_node_count=self.initial_node_count,
             ip_allocation_policies=self.ip_allocation_policies,
             label_fingerprint=self.label_fingerprint,
@@ -880,6 +889,7 @@ def get_cluster(location: Optional[builtins.str] = None,
         gateway_api_configs=pulumi.get(__ret__, 'gateway_api_configs'),
         id=pulumi.get(__ret__, 'id'),
         identity_service_configs=pulumi.get(__ret__, 'identity_service_configs'),
+        in_transit_encryption_config=pulumi.get(__ret__, 'in_transit_encryption_config'),
         initial_node_count=pulumi.get(__ret__, 'initial_node_count'),
         ip_allocation_policies=pulumi.get(__ret__, 'ip_allocation_policies'),
         label_fingerprint=pulumi.get(__ret__, 'label_fingerprint'),
@@ -1001,6 +1011,7 @@ def get_cluster_output(location: Optional[pulumi.Input[Optional[builtins.str]]]
         gateway_api_configs=pulumi.get(__response__, 'gateway_api_configs'),
         id=pulumi.get(__response__, 'id'),
         identity_service_configs=pulumi.get(__response__, 'identity_service_configs'),
+        in_transit_encryption_config=pulumi.get(__response__, 'in_transit_encryption_config'),
         initial_node_count=pulumi.get(__response__, 'initial_node_count'),
         ip_allocation_policies=pulumi.get(__response__, 'ip_allocation_policies'),
         label_fingerprint=pulumi.get(__response__, 'label_fingerprint'),

pulumi_gcp/datacatalog/entry_group_iam_binding.py

@@ -47,6 +47,10 @@ class EntryGroupIamBindingArgs:
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         """
         pulumi.set(__self__, "entry_group", entry_group)
         pulumi.set(__self__, "members", members)
@@ -131,6 +135,12 @@ class EntryGroupIamBindingArgs:
     @property
     @pulumi.getter
     def region(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @region.setter
@@ -165,6 +175,10 @@ class _EntryGroupIamBindingState:
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         :param pulumi.Input[builtins.str] role: The role that should be applied. Only one
                `datacatalog.EntryGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -255,6 +269,12 @@ class _EntryGroupIamBindingState:
     @property
     @pulumi.getter
     def region(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @region.setter
@@ -455,6 +475,10 @@ class EntryGroupIamBinding(pulumi.CustomResource):
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         :param pulumi.Input[builtins.str] role: The role that should be applied. Only one
                `datacatalog.EntryGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -697,6 +721,10 @@ class EntryGroupIamBinding(pulumi.CustomResource):
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
         :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+        :param pulumi.Input[builtins.str] region: EntryGroup location region.
+               Used to find the parent resource to bind the IAM policy to. If not specified,
+               the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+               region is specified, it is taken from the provider configuration.
         :param pulumi.Input[builtins.str] role: The role that should be applied. Only one
                `datacatalog.EntryGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -765,6 +793,12 @@ class EntryGroupIamBinding(pulumi.CustomResource):
     @property
     @pulumi.getter
     def region(self) -> pulumi.Output[builtins.str]:
+        """
+        EntryGroup location region.
+        Used to find the parent resource to bind the IAM policy to. If not specified,
+        the value will be parsed from the identifier of the parent resource. If no region is provided in the parent identifier and no
+        region is specified, it is taken from the provider configuration.
+        """
         return pulumi.get(self, "region")
 
     @property