pulumi-gcp 8.36.0a1750484065__py3-none-any.whl → 8.37.0__py3-none-any.whl

pulumi_gcp/gkehub/scope_rbac_role_binding.py

@@ -431,9 +431,9 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_80332")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_76044")
         scope_rbac_role_binding = gcp.gkehub.ScopeRbacRoleBinding("scope_rbac_role_binding",
-            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_13293",
+            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_69391",
             scope_id=scope.scope_id,
             user="test-email@gmail.com",
             role={
@@ -449,7 +449,7 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_40289")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_8270")
         rbacrolebindingactuation = gcp.gkehub.Feature("rbacrolebindingactuation",
             name="rbacrolebindingactuation",
             location="global",
@@ -459,7 +459,7 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
                 },
             })
         scope_rbac_role_binding = gcp.gkehub.ScopeRbacRoleBinding("scope_rbac_role_binding",
-            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_33395",
+            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_41150",
             scope_id=scope.scope_id,
             user="test-email@gmail.com",
             role={
@@ -532,9 +532,9 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_80332")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_76044")
         scope_rbac_role_binding = gcp.gkehub.ScopeRbacRoleBinding("scope_rbac_role_binding",
-            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_13293",
+            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_69391",
             scope_id=scope.scope_id,
             user="test-email@gmail.com",
             role={
@@ -550,7 +550,7 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
-        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_40289")
+        scope = gcp.gkehub.Scope("scope", scope_id="tf-test-scope_8270")
         rbacrolebindingactuation = gcp.gkehub.Feature("rbacrolebindingactuation",
             name="rbacrolebindingactuation",
             location="global",
@@ -560,7 +560,7 @@ class ScopeRbacRoleBinding(pulumi.CustomResource):
                 },
             })
         scope_rbac_role_binding = gcp.gkehub.ScopeRbacRoleBinding("scope_rbac_role_binding",
-            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_33395",
+            scope_rbac_role_binding_id="tf-test-scope-rbac-role-binding_41150",
             scope_id=scope.scope_id,
             user="test-email@gmail.com",
             role={

pulumi_gcp/iam/_inputs.py

@@ -80,6 +80,8 @@ __all__ = [
     'WorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundleArgsDict',
     'WorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundleTrustAnchorArgs',
     'WorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundleTrustAnchorArgsDict',
+    'WorkloadIdentityPoolManagedIdentityAttestationRuleArgs',
+    'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict',
     'WorkloadIdentityPoolNamespaceOwnerServiceArgs',
     'WorkloadIdentityPoolNamespaceOwnerServiceArgsDict',
     'WorkloadIdentityPoolProviderAwsArgs',
@@ -2594,6 +2596,40 @@ class WorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundleTrustAnchorArgs:
         pulumi.set(self, "pem_certificate", value)
 
 
+if not MYPY:
+    class WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict(TypedDict):
+        google_cloud_resource: pulumi.Input[builtins.str]
+        """
+        A single workload operating on Google Cloud. For example:
+        `//compute.googleapis.com/projects/123/uid/zones/us-central1-a/instances/12345678`.
+        """
+elif False:
+    WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class WorkloadIdentityPoolManagedIdentityAttestationRuleArgs:
+    def __init__(__self__, *,
+                 google_cloud_resource: pulumi.Input[builtins.str]):
+        """
+        :param pulumi.Input[builtins.str] google_cloud_resource: A single workload operating on Google Cloud. For example:
+               `//compute.googleapis.com/projects/123/uid/zones/us-central1-a/instances/12345678`.
+        """
+        pulumi.set(__self__, "google_cloud_resource", google_cloud_resource)
+
+    @property
+    @pulumi.getter(name="googleCloudResource")
+    def google_cloud_resource(self) -> pulumi.Input[builtins.str]:
+        """
+        A single workload operating on Google Cloud. For example:
+        `//compute.googleapis.com/projects/123/uid/zones/us-central1-a/instances/12345678`.
+        """
+        return pulumi.get(self, "google_cloud_resource")
+
+    @google_cloud_resource.setter
+    def google_cloud_resource(self, value: pulumi.Input[builtins.str]):
+        pulumi.set(self, "google_cloud_resource", value)
+
+
 if not MYPY:
     class WorkloadIdentityPoolNamespaceOwnerServiceArgsDict(TypedDict):
         principal_subject: NotRequired[pulumi.Input[builtins.str]]

pulumi_gcp/iam/outputs.py

@@ -49,6 +49,7 @@ __all__ = [
     'WorkloadIdentityPoolInlineTrustConfig',
     'WorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundle',
     'WorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundleTrustAnchor',
+    'WorkloadIdentityPoolManagedIdentityAttestationRule',
     'WorkloadIdentityPoolNamespaceOwnerService',
     'WorkloadIdentityPoolProviderAws',
     'WorkloadIdentityPoolProviderOidc',
@@ -1968,6 +1969,43 @@ class WorkloadIdentityPoolInlineTrustConfigAdditionalTrustBundleTrustAnchor(dict
         return pulumi.get(self, "pem_certificate")
 
 
+@pulumi.output_type
+class WorkloadIdentityPoolManagedIdentityAttestationRule(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "googleCloudResource":
+            suggest = "google_cloud_resource"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in WorkloadIdentityPoolManagedIdentityAttestationRule. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        WorkloadIdentityPoolManagedIdentityAttestationRule.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        WorkloadIdentityPoolManagedIdentityAttestationRule.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 google_cloud_resource: builtins.str):
+        """
+        :param builtins.str google_cloud_resource: A single workload operating on Google Cloud. For example:
+               `//compute.googleapis.com/projects/123/uid/zones/us-central1-a/instances/12345678`.
+        """
+        pulumi.set(__self__, "google_cloud_resource", google_cloud_resource)
+
+    @property
+    @pulumi.getter(name="googleCloudResource")
+    def google_cloud_resource(self) -> builtins.str:
+        """
+        A single workload operating on Google Cloud. For example:
+        `//compute.googleapis.com/projects/123/uid/zones/us-central1-a/instances/12345678`.
+        """
+        return pulumi.get(self, "google_cloud_resource")
+
+
 @pulumi.output_type
 class WorkloadIdentityPoolNamespaceOwnerService(dict):
     @staticmethod

pulumi_gcp/iam/workload_identity_pool_managed_identity.py

@@ -14,6 +14,8 @@ if sys.version_info >= (3, 11):
 else:
     from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
+from . import outputs
+from ._inputs import *
 
 __all__ = ['WorkloadIdentityPoolManagedIdentityArgs', 'WorkloadIdentityPoolManagedIdentity']
 
@@ -23,6 +25,7 @@ class WorkloadIdentityPoolManagedIdentityArgs:
                  workload_identity_pool_id: pulumi.Input[builtins.str],
                  workload_identity_pool_managed_identity_id: pulumi.Input[builtins.str],
                  workload_identity_pool_namespace_id: pulumi.Input[builtins.str],
+                 attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  disabled: Optional[pulumi.Input[builtins.bool]] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None):
@@ -48,6 +51,10 @@ class WorkloadIdentityPoolManagedIdentityArgs:
                * end with an alphanumeric character
                
                The prefix `gcp-` will be reserved for future uses.
+        :param pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]] attestation_rules: Defines which workloads can receive an identity within a pool. When an AttestationRule is
+               defined under a managed identity, matching workloads may receive that identity. A maximum of
+               50 AttestationRules can be set.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] description: A description of the managed identity. Cannot exceed 256 characters.
         :param pulumi.Input[builtins.bool] disabled: Whether the managed identity is disabled. If disabled, credentials may no longer be issued for
                the identity, however existing credentials will still be accepted until they expire.
@@ -57,6 +64,8 @@ class WorkloadIdentityPoolManagedIdentityArgs:
         pulumi.set(__self__, "workload_identity_pool_id", workload_identity_pool_id)
         pulumi.set(__self__, "workload_identity_pool_managed_identity_id", workload_identity_pool_managed_identity_id)
         pulumi.set(__self__, "workload_identity_pool_namespace_id", workload_identity_pool_namespace_id)
+        if attestation_rules is not None:
+            pulumi.set(__self__, "attestation_rules", attestation_rules)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if disabled is not None:
@@ -117,6 +126,21 @@ class WorkloadIdentityPoolManagedIdentityArgs:
     def workload_identity_pool_namespace_id(self, value: pulumi.Input[builtins.str]):
         pulumi.set(self, "workload_identity_pool_namespace_id", value)
 
+    @property
+    @pulumi.getter(name="attestationRules")
+    def attestation_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]]:
+        """
+        Defines which workloads can receive an identity within a pool. When an AttestationRule is
+        defined under a managed identity, matching workloads may receive that identity. A maximum of
+        50 AttestationRules can be set.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "attestation_rules")
+
+    @attestation_rules.setter
+    def attestation_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]]):
+        pulumi.set(self, "attestation_rules", value)
+
     @property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -159,6 +183,7 @@ class WorkloadIdentityPoolManagedIdentityArgs:
 @pulumi.input_type
 class _WorkloadIdentityPoolManagedIdentityState:
     def __init__(__self__, *,
+                 attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  disabled: Optional[pulumi.Input[builtins.bool]] = None,
                  name: Optional[pulumi.Input[builtins.str]] = None,
@@ -169,6 +194,10 @@ class _WorkloadIdentityPoolManagedIdentityState:
                  workload_identity_pool_namespace_id: Optional[pulumi.Input[builtins.str]] = None):
         """
         Input properties used for looking up and filtering WorkloadIdentityPoolManagedIdentity resources.
+        :param pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]] attestation_rules: Defines which workloads can receive an identity within a pool. When an AttestationRule is
+               defined under a managed identity, matching workloads may receive that identity. A maximum of
+               50 AttestationRules can be set.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] description: A description of the managed identity. Cannot exceed 256 characters.
         :param pulumi.Input[builtins.bool] disabled: Whether the managed identity is disabled. If disabled, credentials may no longer be issued for
                the identity, however existing credentials will still be accepted until they expire.
@@ -203,6 +232,8 @@ class _WorkloadIdentityPoolManagedIdentityState:
                
                The prefix `gcp-` will be reserved for future uses.
         """
+        if attestation_rules is not None:
+            pulumi.set(__self__, "attestation_rules", attestation_rules)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if disabled is not None:
@@ -220,6 +251,21 @@ class _WorkloadIdentityPoolManagedIdentityState:
         if workload_identity_pool_namespace_id is not None:
             pulumi.set(__self__, "workload_identity_pool_namespace_id", workload_identity_pool_namespace_id)
 
+    @property
+    @pulumi.getter(name="attestationRules")
+    def attestation_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]]:
+        """
+        Defines which workloads can receive an identity within a pool. When an AttestationRule is
+        defined under a managed identity, matching workloads may receive that identity. A maximum of
+        50 AttestationRules can be set.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "attestation_rules")
+
+    @attestation_rules.setter
+    def attestation_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]]):
+        pulumi.set(self, "attestation_rules", value)
+
     @property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -348,6 +394,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  disabled: Optional[pulumi.Input[builtins.bool]] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None,
@@ -392,7 +439,15 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
             workload_identity_pool_namespace_id=ns.workload_identity_pool_namespace_id,
             workload_identity_pool_managed_identity_id="example-managed-identity",
             description="Example Managed Identity in a Workload Identity Pool Namespace",
-            disabled=True)
+            disabled=True,
+            attestation_rules=[
+                {
+                    "google_cloud_resource": "//compute.googleapis.com/projects/1111111111111/uid/zones/us-central1-a/instances/12345678",
+                },
+                {
+                    "google_cloud_resource": "//run.googleapis.com/projects/1111111111111/name/locations/us-east1/services/my-service",
+                },
+            ])
         ```
 
         ## Import
@@ -421,6 +476,10 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]] attestation_rules: Defines which workloads can receive an identity within a pool. When an AttestationRule is
+               defined under a managed identity, matching workloads may receive that identity. A maximum of
+               50 AttestationRules can be set.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] description: A description of the managed identity. Cannot exceed 256 characters.
         :param pulumi.Input[builtins.bool] disabled: Whether the managed identity is disabled. If disabled, credentials may no longer be issued for
                the identity, however existing credentials will still be accepted until they expire.
@@ -490,7 +549,15 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
             workload_identity_pool_namespace_id=ns.workload_identity_pool_namespace_id,
             workload_identity_pool_managed_identity_id="example-managed-identity",
             description="Example Managed Identity in a Workload Identity Pool Namespace",
-            disabled=True)
+            disabled=True,
+            attestation_rules=[
+                {
+                    "google_cloud_resource": "//compute.googleapis.com/projects/1111111111111/uid/zones/us-central1-a/instances/12345678",
+                },
+                {
+                    "google_cloud_resource": "//run.googleapis.com/projects/1111111111111/name/locations/us-east1/services/my-service",
+                },
+            ])
         ```
 
         ## Import
@@ -532,6 +599,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  disabled: Optional[pulumi.Input[builtins.bool]] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None,
@@ -547,6 +615,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = WorkloadIdentityPoolManagedIdentityArgs.__new__(WorkloadIdentityPoolManagedIdentityArgs)
 
+            __props__.__dict__["attestation_rules"] = attestation_rules
             __props__.__dict__["description"] = description
             __props__.__dict__["disabled"] = disabled
             __props__.__dict__["project"] = project
@@ -571,6 +640,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]]] = None,
             description: Optional[pulumi.Input[builtins.str]] = None,
             disabled: Optional[pulumi.Input[builtins.bool]] = None,
             name: Optional[pulumi.Input[builtins.str]] = None,
@@ -586,6 +656,10 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]] attestation_rules: Defines which workloads can receive an identity within a pool. When an AttestationRule is
+               defined under a managed identity, matching workloads may receive that identity. A maximum of
+               50 AttestationRules can be set.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] description: A description of the managed identity. Cannot exceed 256 characters.
         :param pulumi.Input[builtins.bool] disabled: Whether the managed identity is disabled. If disabled, credentials may no longer be issued for
                the identity, however existing credentials will still be accepted until they expire.
@@ -624,6 +698,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
 
         __props__ = _WorkloadIdentityPoolManagedIdentityState.__new__(_WorkloadIdentityPoolManagedIdentityState)
 
+        __props__.__dict__["attestation_rules"] = attestation_rules
         __props__.__dict__["description"] = description
         __props__.__dict__["disabled"] = disabled
         __props__.__dict__["name"] = name
@@ -634,6 +709,17 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
         __props__.__dict__["workload_identity_pool_namespace_id"] = workload_identity_pool_namespace_id
         return WorkloadIdentityPoolManagedIdentity(resource_name, opts=opts, __props__=__props__)
 
+    @property
+    @pulumi.getter(name="attestationRules")
+    def attestation_rules(self) -> pulumi.Output[Optional[Sequence['outputs.WorkloadIdentityPoolManagedIdentityAttestationRule']]]:
+        """
+        Defines which workloads can receive an identity within a pool. When an AttestationRule is
+        defined under a managed identity, matching workloads may receive that identity. A maximum of
+        50 AttestationRules can be set.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "attestation_rules")
+
     @property
     @pulumi.getter
     def description(self) -> pulumi.Output[Optional[builtins.str]]:

pulumi_gcp/iap/tunnel_dest_group.py

@@ -255,7 +255,7 @@ class TunnelDestGroup(pulumi.CustomResource):
 
         dest_group = gcp.iap.TunnelDestGroup("dest_group",
             region="us-central1",
-            group_name="testgroup_76044",
+            group_name="testgroup_89313",
             cidrs=[
                 "10.1.0.0/16",
                 "192.168.10.0/24",
@@ -341,7 +341,7 @@ class TunnelDestGroup(pulumi.CustomResource):
 
         dest_group = gcp.iap.TunnelDestGroup("dest_group",
             region="us-central1",
-            group_name="testgroup_76044",
+            group_name="testgroup_89313",
             cidrs=[
                 "10.1.0.0/16",
                 "192.168.10.0/24",

pulumi_gcp/integrationconnectors/managed_zone.py

@@ -380,8 +380,8 @@ class ManagedZone(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         target_project = gcp.organizations.Project("target_project",
-            project_id="tf-test_69391",
-            name="tf-test_8270",
+            project_id="tf-test_60646",
+            name="tf-test_9394",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -402,8 +402,8 @@ class ManagedZone(pulumi.CustomResource):
             auto_create_subnetworks=False,
             opts = pulumi.ResourceOptions(depends_on=[compute]))
         zone = gcp.dns.ManagedZone("zone",
-            name="tf-test-dns_41150",
-            dns_name="private_89313.example.com.",
+            name="tf-test-dns_11380",
+            dns_name="private_35305.example.com.",
             visibility="private",
             private_visibility_config={
                 "networks": [{
@@ -491,8 +491,8 @@ class ManagedZone(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         target_project = gcp.organizations.Project("target_project",
-            project_id="tf-test_69391",
-            name="tf-test_8270",
+            project_id="tf-test_60646",
+            name="tf-test_9394",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -513,8 +513,8 @@ class ManagedZone(pulumi.CustomResource):
             auto_create_subnetworks=False,
             opts = pulumi.ResourceOptions(depends_on=[compute]))
         zone = gcp.dns.ManagedZone("zone",
-            name="tf-test-dns_41150",
-            dns_name="private_89313.example.com.",
+            name="tf-test-dns_11380",
+            dns_name="private_35305.example.com.",
             visibility="private",
             private_visibility_config={
                 "networks": [{

pulumi_gcp/kms/autokey_config.py

@@ -69,10 +69,12 @@ class AutokeyConfigArgs:
 @pulumi.input_type
 class _AutokeyConfigState:
     def __init__(__self__, *,
+                 etag: Optional[pulumi.Input[builtins.str]] = None,
                  folder: Optional[pulumi.Input[builtins.str]] = None,
                  key_project: Optional[pulumi.Input[builtins.str]] = None):
         """
         Input properties used for looking up and filtering AutokeyConfig resources.
+        :param pulumi.Input[builtins.str] etag: The etag of the AutokeyConfig for optimistic concurrency control.
         :param pulumi.Input[builtins.str] folder: The folder for which to retrieve config.
                
                
@@ -81,11 +83,25 @@ class _AutokeyConfigState:
                CryptoKey for any new KeyHandle the Developer creates. Should have the form
                `projects/<project_id_or_number>`.
         """
+        if etag is not None:
+            pulumi.set(__self__, "etag", etag)
         if folder is not None:
             pulumi.set(__self__, "folder", folder)
         if key_project is not None:
             pulumi.set(__self__, "key_project", key_project)
 
+    @property
+    @pulumi.getter
+    def etag(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The etag of the AutokeyConfig for optimistic concurrency control.
+        """
+        return pulumi.get(self, "etag")
+
+    @etag.setter
+    def etag(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "etag", value)
+
     @property
     @pulumi.getter
     def folder(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -327,6 +343,7 @@ class AutokeyConfig(pulumi.CustomResource):
                 raise TypeError("Missing required property 'folder'")
             __props__.__dict__["folder"] = folder
             __props__.__dict__["key_project"] = key_project
+            __props__.__dict__["etag"] = None
         super(AutokeyConfig, __self__).__init__(
             'gcp:kms/autokeyConfig:AutokeyConfig',
             resource_name,
@@ -337,6 +354,7 @@ class AutokeyConfig(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            etag: Optional[pulumi.Input[builtins.str]] = None,
             folder: Optional[pulumi.Input[builtins.str]] = None,
             key_project: Optional[pulumi.Input[builtins.str]] = None) -> 'AutokeyConfig':
         """
@@ -346,6 +364,7 @@ class AutokeyConfig(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[builtins.str] etag: The etag of the AutokeyConfig for optimistic concurrency control.
         :param pulumi.Input[builtins.str] folder: The folder for which to retrieve config.
                
                
@@ -358,10 +377,19 @@ class AutokeyConfig(pulumi.CustomResource):
 
         __props__ = _AutokeyConfigState.__new__(_AutokeyConfigState)
 
+        __props__.__dict__["etag"] = etag
         __props__.__dict__["folder"] = folder
         __props__.__dict__["key_project"] = key_project
         return AutokeyConfig(resource_name, opts=opts, __props__=__props__)
 
+    @property
+    @pulumi.getter
+    def etag(self) -> pulumi.Output[builtins.str]:
+        """
+        The etag of the AutokeyConfig for optimistic concurrency control.
+        """
+        return pulumi.get(self, "etag")
+
     @property
     @pulumi.getter
     def folder(self) -> pulumi.Output[builtins.str]:

pulumi_gcp/kms/get_autokey_config.py

@@ -27,7 +27,10 @@ class GetAutokeyConfigResult:
     """
     A collection of values returned by getAutokeyConfig.
     """
-    def __init__(__self__, folder=None, id=None, key_project=None):
+    def __init__(__self__, etag=None, folder=None, id=None, key_project=None):
+        if etag and not isinstance(etag, str):
+            raise TypeError("Expected argument 'etag' to be a str")
+        pulumi.set(__self__, "etag", etag)
         if folder and not isinstance(folder, str):
             raise TypeError("Expected argument 'folder' to be a str")
         pulumi.set(__self__, "folder", folder)
@@ -38,6 +41,11 @@ class GetAutokeyConfigResult:
             raise TypeError("Expected argument 'key_project' to be a str")
         pulumi.set(__self__, "key_project", key_project)
 
+    @property
+    @pulumi.getter
+    def etag(self) -> builtins.str:
+        return pulumi.get(self, "etag")
+
     @property
     @pulumi.getter
     def folder(self) -> builtins.str:
@@ -66,6 +74,7 @@ class AwaitableGetAutokeyConfigResult(GetAutokeyConfigResult):
         if False:
             yield self
         return GetAutokeyConfigResult(
+            etag=self.etag,
             folder=self.folder,
             id=self.id,
             key_project=self.key_project)
@@ -93,6 +102,7 @@ def get_autokey_config(folder: Optional[builtins.str] = None,
     __ret__ = pulumi.runtime.invoke('gcp:kms/getAutokeyConfig:getAutokeyConfig', __args__, opts=opts, typ=GetAutokeyConfigResult).value
 
     return AwaitableGetAutokeyConfigResult(
+        etag=pulumi.get(__ret__, 'etag'),
         folder=pulumi.get(__ret__, 'folder'),
         id=pulumi.get(__ret__, 'id'),
         key_project=pulumi.get(__ret__, 'key_project'))
@@ -117,6 +127,7 @@ def get_autokey_config_output(folder: Optional[pulumi.Input[builtins.str]] = Non
     opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke_output('gcp:kms/getAutokeyConfig:getAutokeyConfig', __args__, opts=opts, typ=GetAutokeyConfigResult)
     return __ret__.apply(lambda __response__: GetAutokeyConfigResult(
+        etag=pulumi.get(__response__, 'etag'),
         folder=pulumi.get(__response__, 'folder'),
         id=pulumi.get(__response__, 'id'),
         key_project=pulumi.get(__response__, 'key_project')))

pulumi_gcp/lustre/get_instance.py

@@ -27,7 +27,7 @@ class GetInstanceResult:
     """
     A collection of values returned by getInstance.
     """
-    def __init__(__self__, capacity_gib=None, create_time=None, description=None, effective_labels=None, filesystem=None, gke_support_enabled=None, id=None, instance_id=None, labels=None, location=None, mount_point=None, name=None, network=None, project=None, pulumi_labels=None, state=None, update_time=None, zone=None):
+    def __init__(__self__, capacity_gib=None, create_time=None, description=None, effective_labels=None, filesystem=None, gke_support_enabled=None, id=None, instance_id=None, labels=None, location=None, mount_point=None, name=None, network=None, per_unit_storage_throughput=None, project=None, pulumi_labels=None, state=None, update_time=None, zone=None):
         if capacity_gib and not isinstance(capacity_gib, str):
             raise TypeError("Expected argument 'capacity_gib' to be a str")
         pulumi.set(__self__, "capacity_gib", capacity_gib)
@@ -67,6 +67,9 @@ class GetInstanceResult:
         if network and not isinstance(network, str):
             raise TypeError("Expected argument 'network' to be a str")
         pulumi.set(__self__, "network", network)
+        if per_unit_storage_throughput and not isinstance(per_unit_storage_throughput, str):
+            raise TypeError("Expected argument 'per_unit_storage_throughput' to be a str")
+        pulumi.set(__self__, "per_unit_storage_throughput", per_unit_storage_throughput)
         if project and not isinstance(project, str):
             raise TypeError("Expected argument 'project' to be a str")
         pulumi.set(__self__, "project", project)
@@ -151,6 +154,11 @@ class GetInstanceResult:
     def network(self) -> builtins.str:
         return pulumi.get(self, "network")
 
+    @property
+    @pulumi.getter(name="perUnitStorageThroughput")
+    def per_unit_storage_throughput(self) -> builtins.str:
+        return pulumi.get(self, "per_unit_storage_throughput")
+
     @property
     @pulumi.getter
     def project(self) -> Optional[builtins.str]:
@@ -196,6 +204,7 @@ class AwaitableGetInstanceResult(GetInstanceResult):
             mount_point=self.mount_point,
             name=self.name,
             network=self.network,
+            per_unit_storage_throughput=self.per_unit_storage_throughput,
             project=self.project,
             pulumi_labels=self.pulumi_labels,
             state=self.state,
@@ -236,6 +245,7 @@ def get_instance(instance_id: Optional[builtins.str] = None,
         mount_point=pulumi.get(__ret__, 'mount_point'),
         name=pulumi.get(__ret__, 'name'),
         network=pulumi.get(__ret__, 'network'),
+        per_unit_storage_throughput=pulumi.get(__ret__, 'per_unit_storage_throughput'),
         project=pulumi.get(__ret__, 'project'),
         pulumi_labels=pulumi.get(__ret__, 'pulumi_labels'),
         state=pulumi.get(__ret__, 'state'),
@@ -273,6 +283,7 @@ def get_instance_output(instance_id: Optional[pulumi.Input[builtins.str]] = None
         mount_point=pulumi.get(__response__, 'mount_point'),
         name=pulumi.get(__response__, 'name'),
         network=pulumi.get(__response__, 'network'),
+        per_unit_storage_throughput=pulumi.get(__response__, 'per_unit_storage_throughput'),
         project=pulumi.get(__response__, 'project'),
         pulumi_labels=pulumi.get(__response__, 'pulumi_labels'),
         state=pulumi.get(__response__, 'state'),