pulumi-gcp 8.32.0a1747377897__py3-none-any.whl → 8.32.0a1747834582__py3-none-any.whl

pulumi_gcp/iam/get_workload_identity_pool_iam_policy.py

@@ -0,0 +1,156 @@
+# coding=utf-8
+# *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins
+import copy
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+
+__all__ = [
+    'GetWorkloadIdentityPoolIamPolicyResult',
+    'AwaitableGetWorkloadIdentityPoolIamPolicyResult',
+    'get_workload_identity_pool_iam_policy',
+    'get_workload_identity_pool_iam_policy_output',
+]
+
+@pulumi.output_type
+class GetWorkloadIdentityPoolIamPolicyResult:
+    """
+    A collection of values returned by getWorkloadIdentityPoolIamPolicy.
+    """
+    def __init__(__self__, etag=None, id=None, policy_data=None, project=None, workload_identity_pool_id=None):
+        if etag and not isinstance(etag, str):
+            raise TypeError("Expected argument 'etag' to be a str")
+        pulumi.set(__self__, "etag", etag)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if policy_data and not isinstance(policy_data, str):
+            raise TypeError("Expected argument 'policy_data' to be a str")
+        pulumi.set(__self__, "policy_data", policy_data)
+        if project and not isinstance(project, str):
+            raise TypeError("Expected argument 'project' to be a str")
+        pulumi.set(__self__, "project", project)
+        if workload_identity_pool_id and not isinstance(workload_identity_pool_id, str):
+            raise TypeError("Expected argument 'workload_identity_pool_id' to be a str")
+        pulumi.set(__self__, "workload_identity_pool_id", workload_identity_pool_id)
+
+    @property
+    @pulumi.getter
+    def etag(self) -> builtins.str:
+        """
+        (Computed) The etag of the IAM policy.
+        """
+        return pulumi.get(self, "etag")
+
+    @property
+    @pulumi.getter
+    def id(self) -> builtins.str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @property
+    @pulumi.getter(name="policyData")
+    def policy_data(self) -> builtins.str:
+        """
+        (Required only by `iam.WorkloadIdentityPoolIamPolicy`) The policy data generated by
+        a `organizations_get_iam_policy` data source.
+        """
+        return pulumi.get(self, "policy_data")
+
+    @property
+    @pulumi.getter
+    def project(self) -> builtins.str:
+        return pulumi.get(self, "project")
+
+    @property
+    @pulumi.getter(name="workloadIdentityPoolId")
+    def workload_identity_pool_id(self) -> builtins.str:
+        return pulumi.get(self, "workload_identity_pool_id")
+
+
+class AwaitableGetWorkloadIdentityPoolIamPolicyResult(GetWorkloadIdentityPoolIamPolicyResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetWorkloadIdentityPoolIamPolicyResult(
+            etag=self.etag,
+            id=self.id,
+            policy_data=self.policy_data,
+            project=self.project,
+            workload_identity_pool_id=self.workload_identity_pool_id)
+
+
+def get_workload_identity_pool_iam_policy(project: Optional[builtins.str] = None,
+                                          workload_identity_pool_id: Optional[builtins.str] = None,
+                                          opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetWorkloadIdentityPoolIamPolicyResult:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    policy = gcp.iam.get_workload_identity_pool_iam_policy(project=example["project"],
+        workload_identity_pool_id=example["workloadIdentityPoolId"])
+    ```
+
+
+    :param builtins.str project: The ID of the project in which the resource belongs.
+           If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    :param builtins.str workload_identity_pool_id: Used to find the parent resource to bind the IAM policy to
+    """
+    __args__ = dict()
+    __args__['project'] = project
+    __args__['workloadIdentityPoolId'] = workload_identity_pool_id
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('gcp:iam/getWorkloadIdentityPoolIamPolicy:getWorkloadIdentityPoolIamPolicy', __args__, opts=opts, typ=GetWorkloadIdentityPoolIamPolicyResult).value
+
+    return AwaitableGetWorkloadIdentityPoolIamPolicyResult(
+        etag=pulumi.get(__ret__, 'etag'),
+        id=pulumi.get(__ret__, 'id'),
+        policy_data=pulumi.get(__ret__, 'policy_data'),
+        project=pulumi.get(__ret__, 'project'),
+        workload_identity_pool_id=pulumi.get(__ret__, 'workload_identity_pool_id'))
+def get_workload_identity_pool_iam_policy_output(project: Optional[pulumi.Input[Optional[builtins.str]]] = None,
+                                                 workload_identity_pool_id: Optional[pulumi.Input[builtins.str]] = None,
+                                                 opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetWorkloadIdentityPoolIamPolicyResult]:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    policy = gcp.iam.get_workload_identity_pool_iam_policy(project=example["project"],
+        workload_identity_pool_id=example["workloadIdentityPoolId"])
+    ```
+
+
+    :param builtins.str project: The ID of the project in which the resource belongs.
+           If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
+    :param builtins.str workload_identity_pool_id: Used to find the parent resource to bind the IAM policy to
+    """
+    __args__ = dict()
+    __args__['project'] = project
+    __args__['workloadIdentityPoolId'] = workload_identity_pool_id
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('gcp:iam/getWorkloadIdentityPoolIamPolicy:getWorkloadIdentityPoolIamPolicy', __args__, opts=opts, typ=GetWorkloadIdentityPoolIamPolicyResult)
+    return __ret__.apply(lambda __response__: GetWorkloadIdentityPoolIamPolicyResult(
+        etag=pulumi.get(__response__, 'etag'),
+        id=pulumi.get(__response__, 'id'),
+        policy_data=pulumi.get(__response__, 'policy_data'),
+        project=pulumi.get(__response__, 'project'),
+        workload_identity_pool_id=pulumi.get(__response__, 'workload_identity_pool_id')))

pulumi_gcp/iam/oauth_client_credential.py

@@ -154,6 +154,7 @@ class _OauthClientCredentialState:
                leaked, you must delete and re-create the client credential. To learn
                more, see [OAuth client and credential security risks and
                mitigations](https://cloud.google.com/iam/docs/workforce-oauth-app#security)
+               **Note**: This property is sensitive and will not be displayed in the plan.
         :param pulumi.Input[builtins.bool] disabled: Whether the OauthClientCredential is disabled. You cannot use a
                disabled OauthClientCredential.
         :param pulumi.Input[builtins.str] display_name: A user-specified display name of the OauthClientCredential.
@@ -199,6 +200,7 @@ class _OauthClientCredentialState:
         leaked, you must delete and re-create the client credential. To learn
         more, see [OAuth client and credential security risks and
         mitigations](https://cloud.google.com/iam/docs/workforce-oauth-app#security)
+        **Note**: This property is sensitive and will not be displayed in the plan.
         """
         return pulumi.get(self, "client_secret")
 
@@ -499,6 +501,8 @@ class OauthClientCredential(pulumi.CustomResource):
             __props__.__dict__["project"] = project
             __props__.__dict__["client_secret"] = None
             __props__.__dict__["name"] = None
+        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["clientSecret"])
+        opts = pulumi.ResourceOptions.merge(opts, secret_opts)
         super(OauthClientCredential, __self__).__init__(
             'gcp:iam/oauthClientCredential:OauthClientCredential',
             resource_name,
@@ -529,6 +533,7 @@ class OauthClientCredential(pulumi.CustomResource):
                leaked, you must delete and re-create the client credential. To learn
                more, see [OAuth client and credential security risks and
                mitigations](https://cloud.google.com/iam/docs/workforce-oauth-app#security)
+               **Note**: This property is sensitive and will not be displayed in the plan.
         :param pulumi.Input[builtins.bool] disabled: Whether the OauthClientCredential is disabled. You cannot use a
                disabled OauthClientCredential.
         :param pulumi.Input[builtins.str] display_name: A user-specified display name of the OauthClientCredential.
@@ -571,6 +576,7 @@ class OauthClientCredential(pulumi.CustomResource):
         leaked, you must delete and re-create the client credential. To learn
         more, see [OAuth client and credential security risks and
         mitigations](https://cloud.google.com/iam/docs/workforce-oauth-app#security)
+        **Note**: This property is sensitive and will not be displayed in the plan.
         """
         return pulumi.get(self, "client_secret")