pulumi-gcp 8.36.0a1750484065__py3-none-any.whl → 8.37.0__py3-none-any.whl

pulumi_gcp/compute/disk.py

@@ -55,11 +55,12 @@ class DiskArgs:
                  zone: Optional[pulumi.Input[builtins.str]] = None):
         """
         The set of arguments for constructing a Disk resource.
-        :param pulumi.Input[builtins.str] access_mode: The accessMode of the disk.
+        :param pulumi.Input[builtins.str] access_mode: The access mode of the disk.
                For example:
-               * READ_WRITE_SINGLE
-               * READ_WRITE_MANY
-               * READ_ONLY_SINGLE
+               * READ_WRITE_SINGLE: The default AccessMode, means the disk can be attached to single instance in RW mode.
+               * READ_WRITE_MANY: The AccessMode means the disk can be attached to multiple instances in RW mode.
+               * READ_ONLY_SINGLE: The AccessMode means the disk can be attached to multiple instances in RO mode.
+               The AccessMode is only valid for Hyperdisk disk types.
         :param pulumi.Input[builtins.str] architecture: The architecture of the disk. Values include `X86_64`, `ARM64`.
         :param pulumi.Input['DiskAsyncPrimaryDiskArgs'] async_primary_disk: A nested object resource.
                Structure is documented below.
@@ -256,11 +257,12 @@ class DiskArgs:
     @pulumi.getter(name="accessMode")
     def access_mode(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The accessMode of the disk.
+        The access mode of the disk.
         For example:
-        * READ_WRITE_SINGLE
-        * READ_WRITE_MANY
-        * READ_ONLY_SINGLE
+        * READ_WRITE_SINGLE: The default AccessMode, means the disk can be attached to single instance in RW mode.
+        * READ_WRITE_MANY: The AccessMode means the disk can be attached to multiple instances in RW mode.
+        * READ_ONLY_SINGLE: The AccessMode means the disk can be attached to multiple instances in RO mode.
+        The AccessMode is only valid for Hyperdisk disk types.
         """
         return pulumi.get(self, "access_mode")
 
@@ -774,11 +776,12 @@ class _DiskState:
                  zone: Optional[pulumi.Input[builtins.str]] = None):
         """
         Input properties used for looking up and filtering Disk resources.
-        :param pulumi.Input[builtins.str] access_mode: The accessMode of the disk.
+        :param pulumi.Input[builtins.str] access_mode: The access mode of the disk.
                For example:
-               * READ_WRITE_SINGLE
-               * READ_WRITE_MANY
-               * READ_ONLY_SINGLE
+               * READ_WRITE_SINGLE: The default AccessMode, means the disk can be attached to single instance in RW mode.
+               * READ_WRITE_MANY: The AccessMode means the disk can be attached to multiple instances in RW mode.
+               * READ_ONLY_SINGLE: The AccessMode means the disk can be attached to multiple instances in RO mode.
+               The AccessMode is only valid for Hyperdisk disk types.
         :param pulumi.Input[builtins.str] architecture: The architecture of the disk. Values include `X86_64`, `ARM64`.
         :param pulumi.Input['DiskAsyncPrimaryDiskArgs'] async_primary_disk: A nested object resource.
                Structure is documented below.
@@ -1032,11 +1035,12 @@ class _DiskState:
     @pulumi.getter(name="accessMode")
     def access_mode(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        The accessMode of the disk.
+        The access mode of the disk.
         For example:
-        * READ_WRITE_SINGLE
-        * READ_WRITE_MANY
-        * READ_ONLY_SINGLE
+        * READ_WRITE_SINGLE: The default AccessMode, means the disk can be attached to single instance in RW mode.
+        * READ_WRITE_MANY: The AccessMode means the disk can be attached to multiple instances in RW mode.
+        * READ_ONLY_SINGLE: The AccessMode means the disk can be attached to multiple instances in RO mode.
+        The AccessMode is only valid for Hyperdisk disk types.
         """
         return pulumi.get(self, "access_mode")
 
@@ -1834,11 +1838,12 @@ class Disk(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[builtins.str] access_mode: The accessMode of the disk.
+        :param pulumi.Input[builtins.str] access_mode: The access mode of the disk.
                For example:
-               * READ_WRITE_SINGLE
-               * READ_WRITE_MANY
-               * READ_ONLY_SINGLE
+               * READ_WRITE_SINGLE: The default AccessMode, means the disk can be attached to single instance in RW mode.
+               * READ_WRITE_MANY: The AccessMode means the disk can be attached to multiple instances in RW mode.
+               * READ_ONLY_SINGLE: The AccessMode means the disk can be attached to multiple instances in RO mode.
+               The AccessMode is only valid for Hyperdisk disk types.
         :param pulumi.Input[builtins.str] architecture: The architecture of the disk. Values include `X86_64`, `ARM64`.
         :param pulumi.Input[Union['DiskAsyncPrimaryDiskArgs', 'DiskAsyncPrimaryDiskArgsDict']] async_primary_disk: A nested object resource.
                Structure is documented below.
@@ -2252,11 +2257,12 @@ class Disk(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[builtins.str] access_mode: The accessMode of the disk.
+        :param pulumi.Input[builtins.str] access_mode: The access mode of the disk.
                For example:
-               * READ_WRITE_SINGLE
-               * READ_WRITE_MANY
-               * READ_ONLY_SINGLE
+               * READ_WRITE_SINGLE: The default AccessMode, means the disk can be attached to single instance in RW mode.
+               * READ_WRITE_MANY: The AccessMode means the disk can be attached to multiple instances in RW mode.
+               * READ_ONLY_SINGLE: The AccessMode means the disk can be attached to multiple instances in RO mode.
+               The AccessMode is only valid for Hyperdisk disk types.
         :param pulumi.Input[builtins.str] architecture: The architecture of the disk. Values include `X86_64`, `ARM64`.
         :param pulumi.Input[Union['DiskAsyncPrimaryDiskArgs', 'DiskAsyncPrimaryDiskArgsDict']] async_primary_disk: A nested object resource.
                Structure is documented below.
@@ -2468,11 +2474,12 @@ class Disk(pulumi.CustomResource):
     @pulumi.getter(name="accessMode")
     def access_mode(self) -> pulumi.Output[builtins.str]:
         """
-        The accessMode of the disk.
+        The access mode of the disk.
         For example:
-        * READ_WRITE_SINGLE
-        * READ_WRITE_MANY
-        * READ_ONLY_SINGLE
+        * READ_WRITE_SINGLE: The default AccessMode, means the disk can be attached to single instance in RW mode.
+        * READ_WRITE_MANY: The AccessMode means the disk can be attached to multiple instances in RW mode.
+        * READ_ONLY_SINGLE: The AccessMode means the disk can be attached to multiple instances in RO mode.
+        The AccessMode is only valid for Hyperdisk disk types.
         """
         return pulumi.get(self, "access_mode")
 

pulumi_gcp/compute/firewall_policy_rule.py

@@ -32,6 +32,7 @@ class FirewallPolicyRuleArgs:
                  enable_logging: Optional[pulumi.Input[builtins.bool]] = None,
                  security_profile_group: Optional[pulumi.Input[builtins.str]] = None,
                  target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['FirewallPolicyRuleTargetSecureTagArgs']]]] = None,
                  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
                  tls_inspect: Optional[pulumi.Input[builtins.bool]] = None):
         """
@@ -56,6 +57,11 @@ class FirewallPolicyRuleArgs:
                Must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
                this rule. If this field is left blank, all VMs within the organization will receive the rule.
+        :param pulumi.Input[Sequence[pulumi.Input['FirewallPolicyRuleTargetSecureTagArgs']]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If targetSecureTag are specified, then
+               the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure tags, if all the
+               targetSecureTag are in INEFFECTIVE state, then this rule will be ignored. targetSecureTag may not be set at the same
+               time as targetServiceAccounts. If neither targetServiceAccounts nor targetSecureTag are specified, the firewall rule
+               applies to all instances on the specified network. Maximum number of target secure tags allowed is 256.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
         :param pulumi.Input[builtins.bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. Can be set only if action =
                'apply_security_profile_group' and cannot be set for other actions.
@@ -75,6 +81,8 @@ class FirewallPolicyRuleArgs:
             pulumi.set(__self__, "security_profile_group", security_profile_group)
         if target_resources is not None:
             pulumi.set(__self__, "target_resources", target_resources)
+        if target_secure_tags is not None:
+            pulumi.set(__self__, "target_secure_tags", target_secure_tags)
         if target_service_accounts is not None:
             pulumi.set(__self__, "target_service_accounts", target_service_accounts)
         if tls_inspect is not None:
@@ -210,6 +218,22 @@ class FirewallPolicyRuleArgs:
     def target_resources(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "target_resources", value)
 
+    @property
+    @pulumi.getter(name="targetSecureTags")
+    def target_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['FirewallPolicyRuleTargetSecureTagArgs']]]]:
+        """
+        A list of secure tags that controls which instances the firewall rule applies to. If targetSecureTag are specified, then
+        the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure tags, if all the
+        targetSecureTag are in INEFFECTIVE state, then this rule will be ignored. targetSecureTag may not be set at the same
+        time as targetServiceAccounts. If neither targetServiceAccounts nor targetSecureTag are specified, the firewall rule
+        applies to all instances on the specified network. Maximum number of target secure tags allowed is 256.
+        """
+        return pulumi.get(self, "target_secure_tags")
+
+    @target_secure_tags.setter
+    def target_secure_tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['FirewallPolicyRuleTargetSecureTagArgs']]]]):
+        pulumi.set(self, "target_secure_tags", value)
+
     @property
     @pulumi.getter(name="targetServiceAccounts")
     def target_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
@@ -252,6 +276,7 @@ class _FirewallPolicyRuleState:
                  rule_tuple_count: Optional[pulumi.Input[builtins.int]] = None,
                  security_profile_group: Optional[pulumi.Input[builtins.str]] = None,
                  target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input['FirewallPolicyRuleTargetSecureTagArgs']]]] = None,
                  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
                  tls_inspect: Optional[pulumi.Input[builtins.bool]] = None):
         """
@@ -279,6 +304,11 @@ class _FirewallPolicyRuleState:
                Must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
                this rule. If this field is left blank, all VMs within the organization will receive the rule.
+        :param pulumi.Input[Sequence[pulumi.Input['FirewallPolicyRuleTargetSecureTagArgs']]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If targetSecureTag are specified, then
+               the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure tags, if all the
+               targetSecureTag are in INEFFECTIVE state, then this rule will be ignored. targetSecureTag may not be set at the same
+               time as targetServiceAccounts. If neither targetServiceAccounts nor targetSecureTag are specified, the firewall rule
+               applies to all instances on the specified network. Maximum number of target secure tags allowed is 256.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
         :param pulumi.Input[builtins.bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. Can be set only if action =
                'apply_security_profile_group' and cannot be set for other actions.
@@ -309,6 +339,8 @@ class _FirewallPolicyRuleState:
             pulumi.set(__self__, "security_profile_group", security_profile_group)
         if target_resources is not None:
             pulumi.set(__self__, "target_resources", target_resources)
+        if target_secure_tags is not None:
+            pulumi.set(__self__, "target_secure_tags", target_secure_tags)
         if target_service_accounts is not None:
             pulumi.set(__self__, "target_service_accounts", target_service_accounts)
         if tls_inspect is not None:
@@ -480,6 +512,22 @@ class _FirewallPolicyRuleState:
     def target_resources(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]):
         pulumi.set(self, "target_resources", value)
 
+    @property
+    @pulumi.getter(name="targetSecureTags")
+    def target_secure_tags(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['FirewallPolicyRuleTargetSecureTagArgs']]]]:
+        """
+        A list of secure tags that controls which instances the firewall rule applies to. If targetSecureTag are specified, then
+        the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure tags, if all the
+        targetSecureTag are in INEFFECTIVE state, then this rule will be ignored. targetSecureTag may not be set at the same
+        time as targetServiceAccounts. If neither targetServiceAccounts nor targetSecureTag are specified, the firewall rule
+        applies to all instances on the specified network. Maximum number of target secure tags allowed is 256.
+        """
+        return pulumi.get(self, "target_secure_tags")
+
+    @target_secure_tags.setter
+    def target_secure_tags(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['FirewallPolicyRuleTargetSecureTagArgs']]]]):
+        pulumi.set(self, "target_secure_tags", value)
+
     @property
     @pulumi.getter(name="targetServiceAccounts")
     def target_service_accounts(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]]:
@@ -522,6 +570,7 @@ class FirewallPolicyRule(pulumi.CustomResource):
                  priority: Optional[pulumi.Input[builtins.int]] = None,
                  security_profile_group: Optional[pulumi.Input[builtins.str]] = None,
                  target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input[Union['FirewallPolicyRuleTargetSecureTagArgs', 'FirewallPolicyRuleTargetSecureTagArgsDict']]]]] = None,
                  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
                  tls_inspect: Optional[pulumi.Input[builtins.bool]] = None,
                  __props__=None):
@@ -583,6 +632,18 @@ class FirewallPolicyRule(pulumi.CustomResource):
                     },
                 ],
             })
+        basic_key = gcp.tags.TagKey("basic_key",
+            description="For keyname resources.",
+            parent="organizations/123456789",
+            purpose="GCE_FIREWALL",
+            short_name="tag-key",
+            purpose_data={
+                "organization": "auto",
+            })
+        basic_value = gcp.tags.TagValue("basic_value",
+            description="For valuename resources.",
+            parent=basic_key.id,
+            short_name="tag-value")
         ```
         ### Firewall Policy Rule Network Scope
 
@@ -624,6 +685,60 @@ class FirewallPolicyRule(pulumi.CustomResource):
                 ],
             })
         ```
+        ### Firewall Policy Rule Secure Tags
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        folder = gcp.organizations.Folder("folder",
+            display_name="folder",
+            parent="organizations/123456789",
+            deletion_protection=False)
+        default = gcp.compute.FirewallPolicy("default",
+            parent=folder.id,
+            short_name="fw-policy",
+            description="Resource created for Terraform acceptance testing")
+        basic_key = gcp.tags.TagKey("basic_key",
+            description="For keyname resources.",
+            parent="organizations/123456789",
+            purpose="GCE_FIREWALL",
+            short_name="tag-key",
+            purpose_data={
+                "organization": "auto",
+            })
+        basic_value = gcp.tags.TagValue("basic_value",
+            description="For valuename resources.",
+            parent=basic_key.id,
+            short_name="tag-value")
+        primary = gcp.compute.FirewallPolicyRule("primary",
+            firewall_policy=default.name,
+            description="Resource created for Terraform acceptance testing",
+            priority=9000,
+            enable_logging=True,
+            action="allow",
+            direction="INGRESS",
+            disabled=False,
+            target_secure_tags=[{
+                "name": basic_value.id,
+            }],
+            match={
+                "src_ip_ranges": ["11.100.0.1/32"],
+                "src_secure_tags": [{
+                    "name": basic_value.id,
+                }],
+                "layer4_configs": [
+                    {
+                        "ip_protocol": "tcp",
+                        "ports": ["8080"],
+                    },
+                    {
+                        "ip_protocol": "udp",
+                        "ports": ["22"],
+                    },
+                ],
+            })
+        ```
 
         ## Import
 
@@ -665,6 +780,11 @@ class FirewallPolicyRule(pulumi.CustomResource):
                Must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
                this rule. If this field is left blank, all VMs within the organization will receive the rule.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['FirewallPolicyRuleTargetSecureTagArgs', 'FirewallPolicyRuleTargetSecureTagArgsDict']]]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If targetSecureTag are specified, then
+               the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure tags, if all the
+               targetSecureTag are in INEFFECTIVE state, then this rule will be ignored. targetSecureTag may not be set at the same
+               time as targetServiceAccounts. If neither targetServiceAccounts nor targetSecureTag are specified, the firewall rule
+               applies to all instances on the specified network. Maximum number of target secure tags allowed is 256.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
         :param pulumi.Input[builtins.bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. Can be set only if action =
                'apply_security_profile_group' and cannot be set for other actions.
@@ -733,6 +853,18 @@ class FirewallPolicyRule(pulumi.CustomResource):
                     },
                 ],
             })
+        basic_key = gcp.tags.TagKey("basic_key",
+            description="For keyname resources.",
+            parent="organizations/123456789",
+            purpose="GCE_FIREWALL",
+            short_name="tag-key",
+            purpose_data={
+                "organization": "auto",
+            })
+        basic_value = gcp.tags.TagValue("basic_value",
+            description="For valuename resources.",
+            parent=basic_key.id,
+            short_name="tag-value")
         ```
         ### Firewall Policy Rule Network Scope
 
@@ -774,6 +906,60 @@ class FirewallPolicyRule(pulumi.CustomResource):
                 ],
             })
         ```
+        ### Firewall Policy Rule Secure Tags
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        folder = gcp.organizations.Folder("folder",
+            display_name="folder",
+            parent="organizations/123456789",
+            deletion_protection=False)
+        default = gcp.compute.FirewallPolicy("default",
+            parent=folder.id,
+            short_name="fw-policy",
+            description="Resource created for Terraform acceptance testing")
+        basic_key = gcp.tags.TagKey("basic_key",
+            description="For keyname resources.",
+            parent="organizations/123456789",
+            purpose="GCE_FIREWALL",
+            short_name="tag-key",
+            purpose_data={
+                "organization": "auto",
+            })
+        basic_value = gcp.tags.TagValue("basic_value",
+            description="For valuename resources.",
+            parent=basic_key.id,
+            short_name="tag-value")
+        primary = gcp.compute.FirewallPolicyRule("primary",
+            firewall_policy=default.name,
+            description="Resource created for Terraform acceptance testing",
+            priority=9000,
+            enable_logging=True,
+            action="allow",
+            direction="INGRESS",
+            disabled=False,
+            target_secure_tags=[{
+                "name": basic_value.id,
+            }],
+            match={
+                "src_ip_ranges": ["11.100.0.1/32"],
+                "src_secure_tags": [{
+                    "name": basic_value.id,
+                }],
+                "layer4_configs": [
+                    {
+                        "ip_protocol": "tcp",
+                        "ports": ["8080"],
+                    },
+                    {
+                        "ip_protocol": "udp",
+                        "ports": ["22"],
+                    },
+                ],
+            })
+        ```
 
         ## Import
 
@@ -818,6 +1004,7 @@ class FirewallPolicyRule(pulumi.CustomResource):
                  priority: Optional[pulumi.Input[builtins.int]] = None,
                  security_profile_group: Optional[pulumi.Input[builtins.str]] = None,
                  target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+                 target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input[Union['FirewallPolicyRuleTargetSecureTagArgs', 'FirewallPolicyRuleTargetSecureTagArgsDict']]]]] = None,
                  target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
                  tls_inspect: Optional[pulumi.Input[builtins.bool]] = None,
                  __props__=None):
@@ -849,6 +1036,7 @@ class FirewallPolicyRule(pulumi.CustomResource):
             __props__.__dict__["priority"] = priority
             __props__.__dict__["security_profile_group"] = security_profile_group
             __props__.__dict__["target_resources"] = target_resources
+            __props__.__dict__["target_secure_tags"] = target_secure_tags
             __props__.__dict__["target_service_accounts"] = target_service_accounts
             __props__.__dict__["tls_inspect"] = tls_inspect
             __props__.__dict__["creation_timestamp"] = None
@@ -877,6 +1065,7 @@ class FirewallPolicyRule(pulumi.CustomResource):
             rule_tuple_count: Optional[pulumi.Input[builtins.int]] = None,
             security_profile_group: Optional[pulumi.Input[builtins.str]] = None,
             target_resources: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
+            target_secure_tags: Optional[pulumi.Input[Sequence[pulumi.Input[Union['FirewallPolicyRuleTargetSecureTagArgs', 'FirewallPolicyRuleTargetSecureTagArgsDict']]]]] = None,
             target_service_accounts: Optional[pulumi.Input[Sequence[pulumi.Input[builtins.str]]]] = None,
             tls_inspect: Optional[pulumi.Input[builtins.bool]] = None) -> 'FirewallPolicyRule':
         """
@@ -909,6 +1098,11 @@ class FirewallPolicyRule(pulumi.CustomResource):
                Must be specified if action = 'apply_security_profile_group' and cannot be specified for other actions.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] target_resources: A list of network resource URLs to which this rule applies. This field allows you to control which network's VMs get
                this rule. If this field is left blank, all VMs within the organization will receive the rule.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['FirewallPolicyRuleTargetSecureTagArgs', 'FirewallPolicyRuleTargetSecureTagArgsDict']]]] target_secure_tags: A list of secure tags that controls which instances the firewall rule applies to. If targetSecureTag are specified, then
+               the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure tags, if all the
+               targetSecureTag are in INEFFECTIVE state, then this rule will be ignored. targetSecureTag may not be set at the same
+               time as targetServiceAccounts. If neither targetServiceAccounts nor targetSecureTag are specified, the firewall rule
+               applies to all instances on the specified network. Maximum number of target secure tags allowed is 256.
         :param pulumi.Input[Sequence[pulumi.Input[builtins.str]]] target_service_accounts: A list of service accounts indicating the sets of instances that are applied with this rule.
         :param pulumi.Input[builtins.bool] tls_inspect: Boolean flag indicating if the traffic should be TLS decrypted. Can be set only if action =
                'apply_security_profile_group' and cannot be set for other actions.
@@ -930,6 +1124,7 @@ class FirewallPolicyRule(pulumi.CustomResource):
         __props__.__dict__["rule_tuple_count"] = rule_tuple_count
         __props__.__dict__["security_profile_group"] = security_profile_group
         __props__.__dict__["target_resources"] = target_resources
+        __props__.__dict__["target_secure_tags"] = target_secure_tags
         __props__.__dict__["target_service_accounts"] = target_service_accounts
         __props__.__dict__["tls_inspect"] = tls_inspect
         return FirewallPolicyRule(resource_name, opts=opts, __props__=__props__)
@@ -1048,6 +1243,18 @@ class FirewallPolicyRule(pulumi.CustomResource):
         """
         return pulumi.get(self, "target_resources")
 
+    @property
+    @pulumi.getter(name="targetSecureTags")
+    def target_secure_tags(self) -> pulumi.Output[Optional[Sequence['outputs.FirewallPolicyRuleTargetSecureTag']]]:
+        """
+        A list of secure tags that controls which instances the firewall rule applies to. If targetSecureTag are specified, then
+        the firewall rule applies only to instances in the VPC network that have one of those EFFECTIVE secure tags, if all the
+        targetSecureTag are in INEFFECTIVE state, then this rule will be ignored. targetSecureTag may not be set at the same
+        time as targetServiceAccounts. If neither targetServiceAccounts nor targetSecureTag are specified, the firewall rule
+        applies to all instances on the specified network. Maximum number of target secure tags allowed is 256.
+        """
+        return pulumi.get(self, "target_secure_tags")
+
     @property
     @pulumi.getter(name="targetServiceAccounts")
     def target_service_accounts(self) -> pulumi.Output[Optional[Sequence[builtins.str]]]:

pulumi_gcp/compute/get_instance_group_manager.py

@@ -28,7 +28,7 @@ class GetInstanceGroupManagerResult:
     """
     A collection of values returned by getInstanceGroupManager.
     """
-    def __init__(__self__, all_instances_configs=None, auto_healing_policies=None, base_instance_name=None, creation_timestamp=None, description=None, fingerprint=None, id=None, instance_group=None, instance_group_manager_id=None, instance_lifecycle_policies=None, list_managed_instances_results=None, name=None, named_ports=None, operation=None, params=None, project=None, self_link=None, standby_policies=None, stateful_disks=None, stateful_external_ips=None, stateful_internal_ips=None, statuses=None, target_pools=None, target_size=None, target_stopped_size=None, target_suspended_size=None, update_policies=None, versions=None, wait_for_instances=None, wait_for_instances_status=None, zone=None):
+    def __init__(__self__, all_instances_configs=None, auto_healing_policies=None, base_instance_name=None, creation_timestamp=None, description=None, fingerprint=None, id=None, instance_group=None, instance_group_manager_id=None, instance_lifecycle_policies=None, list_managed_instances_results=None, name=None, named_ports=None, operation=None, params=None, project=None, resource_policies=None, self_link=None, standby_policies=None, stateful_disks=None, stateful_external_ips=None, stateful_internal_ips=None, statuses=None, target_pools=None, target_size=None, target_stopped_size=None, target_suspended_size=None, update_policies=None, versions=None, wait_for_instances=None, wait_for_instances_status=None, zone=None):
         if all_instances_configs and not isinstance(all_instances_configs, list):
             raise TypeError("Expected argument 'all_instances_configs' to be a list")
         pulumi.set(__self__, "all_instances_configs", all_instances_configs)
@@ -77,6 +77,9 @@ class GetInstanceGroupManagerResult:
         if project and not isinstance(project, str):
             raise TypeError("Expected argument 'project' to be a str")
         pulumi.set(__self__, "project", project)
+        if resource_policies and not isinstance(resource_policies, list):
+            raise TypeError("Expected argument 'resource_policies' to be a list")
+        pulumi.set(__self__, "resource_policies", resource_policies)
         if self_link and not isinstance(self_link, str):
             raise TypeError("Expected argument 'self_link' to be a str")
         pulumi.set(__self__, "self_link", self_link)
@@ -206,6 +209,11 @@ class GetInstanceGroupManagerResult:
     def project(self) -> Optional[builtins.str]:
         return pulumi.get(self, "project")
 
+    @property
+    @pulumi.getter(name="resourcePolicies")
+    def resource_policies(self) -> Sequence['outputs.GetInstanceGroupManagerResourcePolicyResult']:
+        return pulumi.get(self, "resource_policies")
+
     @property
     @pulumi.getter(name="selfLink")
     def self_link(self) -> Optional[builtins.str]:
@@ -304,6 +312,7 @@ class AwaitableGetInstanceGroupManagerResult(GetInstanceGroupManagerResult):
             operation=self.operation,
             params=self.params,
             project=self.project,
+            resource_policies=self.resource_policies,
             self_link=self.self_link,
             standby_policies=self.standby_policies,
             stateful_disks=self.stateful_disks,
@@ -373,6 +382,7 @@ def get_instance_group_manager(name: Optional[builtins.str] = None,
         operation=pulumi.get(__ret__, 'operation'),
         params=pulumi.get(__ret__, 'params'),
         project=pulumi.get(__ret__, 'project'),
+        resource_policies=pulumi.get(__ret__, 'resource_policies'),
         self_link=pulumi.get(__ret__, 'self_link'),
         standby_policies=pulumi.get(__ret__, 'standby_policies'),
         stateful_disks=pulumi.get(__ret__, 'stateful_disks'),
@@ -439,6 +449,7 @@ def get_instance_group_manager_output(name: Optional[pulumi.Input[Optional[built
         operation=pulumi.get(__response__, 'operation'),
         params=pulumi.get(__response__, 'params'),
         project=pulumi.get(__response__, 'project'),
+        resource_policies=pulumi.get(__response__, 'resource_policies'),
         self_link=pulumi.get(__response__, 'self_link'),
         standby_policies=pulumi.get(__response__, 'standby_policies'),
         stateful_disks=pulumi.get(__response__, 'stateful_disks'),

pulumi_gcp/compute/get_region_disk.py

@@ -28,7 +28,10 @@ class GetRegionDiskResult:
     """
     A collection of values returned by getRegionDisk.
     """
-    def __init__(__self__, async_primary_disks=None, create_snapshot_before_destroy=None, create_snapshot_before_destroy_prefix=None, creation_timestamp=None, description=None, disk_encryption_keys=None, disk_id=None, effective_labels=None, guest_os_features=None, id=None, interface=None, label_fingerprint=None, labels=None, last_attach_timestamp=None, last_detach_timestamp=None, licenses=None, name=None, physical_block_size_bytes=None, project=None, pulumi_labels=None, region=None, replica_zones=None, self_link=None, size=None, snapshot=None, source_disk=None, source_disk_id=None, source_snapshot_encryption_keys=None, source_snapshot_id=None, type=None, users=None):
+    def __init__(__self__, access_mode=None, async_primary_disks=None, create_snapshot_before_destroy=None, create_snapshot_before_destroy_prefix=None, creation_timestamp=None, description=None, disk_encryption_keys=None, disk_id=None, effective_labels=None, guest_os_features=None, id=None, interface=None, label_fingerprint=None, labels=None, last_attach_timestamp=None, last_detach_timestamp=None, licenses=None, name=None, physical_block_size_bytes=None, project=None, pulumi_labels=None, region=None, replica_zones=None, self_link=None, size=None, snapshot=None, source_disk=None, source_disk_id=None, source_snapshot_encryption_keys=None, source_snapshot_id=None, type=None, users=None):
+        if access_mode and not isinstance(access_mode, str):
+            raise TypeError("Expected argument 'access_mode' to be a str")
+        pulumi.set(__self__, "access_mode", access_mode)
         if async_primary_disks and not isinstance(async_primary_disks, list):
             raise TypeError("Expected argument 'async_primary_disks' to be a list")
         pulumi.set(__self__, "async_primary_disks", async_primary_disks)
@@ -123,6 +126,11 @@ class GetRegionDiskResult:
             raise TypeError("Expected argument 'users' to be a list")
         pulumi.set(__self__, "users", users)
 
+    @property
+    @pulumi.getter(name="accessMode")
+    def access_mode(self) -> builtins.str:
+        return pulumi.get(self, "access_mode")
+
     @property
     @pulumi.getter(name="asyncPrimaryDisks")
     def async_primary_disks(self) -> Sequence['outputs.GetRegionDiskAsyncPrimaryDiskResult']:
@@ -288,6 +296,7 @@ class AwaitableGetRegionDiskResult(GetRegionDiskResult):
         if False:
             yield self
         return GetRegionDiskResult(
+            access_mode=self.access_mode,
             async_primary_disks=self.async_primary_disks,
             create_snapshot_before_destroy=self.create_snapshot_before_destroy,
             create_snapshot_before_destroy_prefix=self.create_snapshot_before_destroy_prefix,
@@ -346,6 +355,7 @@ def get_region_disk(name: Optional[builtins.str] = None,
     __ret__ = pulumi.runtime.invoke('gcp:compute/getRegionDisk:getRegionDisk', __args__, opts=opts, typ=GetRegionDiskResult).value
 
     return AwaitableGetRegionDiskResult(
+        access_mode=pulumi.get(__ret__, 'access_mode'),
         async_primary_disks=pulumi.get(__ret__, 'async_primary_disks'),
         create_snapshot_before_destroy=pulumi.get(__ret__, 'create_snapshot_before_destroy'),
         create_snapshot_before_destroy_prefix=pulumi.get(__ret__, 'create_snapshot_before_destroy_prefix'),
@@ -401,6 +411,7 @@ def get_region_disk_output(name: Optional[pulumi.Input[builtins.str]] = None,
     opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke_output('gcp:compute/getRegionDisk:getRegionDisk', __args__, opts=opts, typ=GetRegionDiskResult)
     return __ret__.apply(lambda __response__: GetRegionDiskResult(
+        access_mode=pulumi.get(__response__, 'access_mode'),
         async_primary_disks=pulumi.get(__response__, 'async_primary_disks'),
         create_snapshot_before_destroy=pulumi.get(__response__, 'create_snapshot_before_destroy'),
         create_snapshot_before_destroy_prefix=pulumi.get(__response__, 'create_snapshot_before_destroy_prefix'),

pulumi_gcp/compute/instance.py

@@ -1606,7 +1606,7 @@ class Instance(pulumi.CustomResource):
             },
             boot_disk={
                 "initialize_params": {
-                    "image": "ubuntu-os-cloud/ubuntu-2004-lts",
+                    "image": "ubuntu-os-cloud/ubuntu-2204-lts",
                     "labels": {
                         "my_label": "value",
                     },
@@ -1822,7 +1822,7 @@ class Instance(pulumi.CustomResource):
             },
             boot_disk={
                 "initialize_params": {
-                    "image": "ubuntu-os-cloud/ubuntu-2004-lts",
+                    "image": "ubuntu-os-cloud/ubuntu-2204-lts",
                     "labels": {
                         "my_label": "value",
                     },