pulumi-gcp 8.36.0a1751060819__py3-none-any.whl → 8.37.0a1751903932__py3-none-any.whl

pulumi_gcp/iam/workload_identity_pool_managed_identity.py

@@ -14,6 +14,8 @@ if sys.version_info >= (3, 11):
 else:
     from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
+from . import outputs
+from ._inputs import *
 
 __all__ = ['WorkloadIdentityPoolManagedIdentityArgs', 'WorkloadIdentityPoolManagedIdentity']
 
@@ -23,6 +25,7 @@ class WorkloadIdentityPoolManagedIdentityArgs:
                  workload_identity_pool_id: pulumi.Input[builtins.str],
                  workload_identity_pool_managed_identity_id: pulumi.Input[builtins.str],
                  workload_identity_pool_namespace_id: pulumi.Input[builtins.str],
+                 attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  disabled: Optional[pulumi.Input[builtins.bool]] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None):
@@ -48,6 +51,10 @@ class WorkloadIdentityPoolManagedIdentityArgs:
                * end with an alphanumeric character
                
                The prefix `gcp-` will be reserved for future uses.
+        :param pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]] attestation_rules: Defines which workloads can receive an identity within a pool. When an AttestationRule is
+               defined under a managed identity, matching workloads may receive that identity. A maximum of
+               50 AttestationRules can be set.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] description: A description of the managed identity. Cannot exceed 256 characters.
         :param pulumi.Input[builtins.bool] disabled: Whether the managed identity is disabled. If disabled, credentials may no longer be issued for
                the identity, however existing credentials will still be accepted until they expire.
@@ -57,6 +64,8 @@ class WorkloadIdentityPoolManagedIdentityArgs:
         pulumi.set(__self__, "workload_identity_pool_id", workload_identity_pool_id)
         pulumi.set(__self__, "workload_identity_pool_managed_identity_id", workload_identity_pool_managed_identity_id)
         pulumi.set(__self__, "workload_identity_pool_namespace_id", workload_identity_pool_namespace_id)
+        if attestation_rules is not None:
+            pulumi.set(__self__, "attestation_rules", attestation_rules)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if disabled is not None:
@@ -117,6 +126,21 @@ class WorkloadIdentityPoolManagedIdentityArgs:
     def workload_identity_pool_namespace_id(self, value: pulumi.Input[builtins.str]):
         pulumi.set(self, "workload_identity_pool_namespace_id", value)
 
+    @property
+    @pulumi.getter(name="attestationRules")
+    def attestation_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]]:
+        """
+        Defines which workloads can receive an identity within a pool. When an AttestationRule is
+        defined under a managed identity, matching workloads may receive that identity. A maximum of
+        50 AttestationRules can be set.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "attestation_rules")
+
+    @attestation_rules.setter
+    def attestation_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]]):
+        pulumi.set(self, "attestation_rules", value)
+
     @property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -159,6 +183,7 @@ class WorkloadIdentityPoolManagedIdentityArgs:
 @pulumi.input_type
 class _WorkloadIdentityPoolManagedIdentityState:
     def __init__(__self__, *,
+                 attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  disabled: Optional[pulumi.Input[builtins.bool]] = None,
                  name: Optional[pulumi.Input[builtins.str]] = None,
@@ -169,6 +194,10 @@ class _WorkloadIdentityPoolManagedIdentityState:
                  workload_identity_pool_namespace_id: Optional[pulumi.Input[builtins.str]] = None):
         """
         Input properties used for looking up and filtering WorkloadIdentityPoolManagedIdentity resources.
+        :param pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]] attestation_rules: Defines which workloads can receive an identity within a pool. When an AttestationRule is
+               defined under a managed identity, matching workloads may receive that identity. A maximum of
+               50 AttestationRules can be set.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] description: A description of the managed identity. Cannot exceed 256 characters.
         :param pulumi.Input[builtins.bool] disabled: Whether the managed identity is disabled. If disabled, credentials may no longer be issued for
                the identity, however existing credentials will still be accepted until they expire.
@@ -203,6 +232,8 @@ class _WorkloadIdentityPoolManagedIdentityState:
                
                The prefix `gcp-` will be reserved for future uses.
         """
+        if attestation_rules is not None:
+            pulumi.set(__self__, "attestation_rules", attestation_rules)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if disabled is not None:
@@ -220,6 +251,21 @@ class _WorkloadIdentityPoolManagedIdentityState:
         if workload_identity_pool_namespace_id is not None:
             pulumi.set(__self__, "workload_identity_pool_namespace_id", workload_identity_pool_namespace_id)
 
+    @property
+    @pulumi.getter(name="attestationRules")
+    def attestation_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]]:
+        """
+        Defines which workloads can receive an identity within a pool. When an AttestationRule is
+        defined under a managed identity, matching workloads may receive that identity. A maximum of
+        50 AttestationRules can be set.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "attestation_rules")
+
+    @attestation_rules.setter
+    def attestation_rules(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs']]]]):
+        pulumi.set(self, "attestation_rules", value)
+
     @property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -348,6 +394,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  disabled: Optional[pulumi.Input[builtins.bool]] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None,
@@ -392,7 +439,15 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
             workload_identity_pool_namespace_id=ns.workload_identity_pool_namespace_id,
             workload_identity_pool_managed_identity_id="example-managed-identity",
             description="Example Managed Identity in a Workload Identity Pool Namespace",
-            disabled=True)
+            disabled=True,
+            attestation_rules=[
+                {
+                    "google_cloud_resource": "//compute.googleapis.com/projects/1111111111111/uid/zones/us-central1-a/instances/12345678",
+                },
+                {
+                    "google_cloud_resource": "//run.googleapis.com/projects/1111111111111/name/locations/us-east1/services/my-service",
+                },
+            ])
         ```
 
         ## Import
@@ -421,6 +476,10 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]] attestation_rules: Defines which workloads can receive an identity within a pool. When an AttestationRule is
+               defined under a managed identity, matching workloads may receive that identity. A maximum of
+               50 AttestationRules can be set.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] description: A description of the managed identity. Cannot exceed 256 characters.
         :param pulumi.Input[builtins.bool] disabled: Whether the managed identity is disabled. If disabled, credentials may no longer be issued for
                the identity, however existing credentials will still be accepted until they expire.
@@ -490,7 +549,15 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
             workload_identity_pool_namespace_id=ns.workload_identity_pool_namespace_id,
             workload_identity_pool_managed_identity_id="example-managed-identity",
             description="Example Managed Identity in a Workload Identity Pool Namespace",
-            disabled=True)
+            disabled=True,
+            attestation_rules=[
+                {
+                    "google_cloud_resource": "//compute.googleapis.com/projects/1111111111111/uid/zones/us-central1-a/instances/12345678",
+                },
+                {
+                    "google_cloud_resource": "//run.googleapis.com/projects/1111111111111/name/locations/us-east1/services/my-service",
+                },
+            ])
         ```
 
         ## Import
@@ -532,6 +599,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
                  disabled: Optional[pulumi.Input[builtins.bool]] = None,
                  project: Optional[pulumi.Input[builtins.str]] = None,
@@ -547,6 +615,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = WorkloadIdentityPoolManagedIdentityArgs.__new__(WorkloadIdentityPoolManagedIdentityArgs)
 
+            __props__.__dict__["attestation_rules"] = attestation_rules
             __props__.__dict__["description"] = description
             __props__.__dict__["disabled"] = disabled
             __props__.__dict__["project"] = project
@@ -571,6 +640,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            attestation_rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]]] = None,
             description: Optional[pulumi.Input[builtins.str]] = None,
             disabled: Optional[pulumi.Input[builtins.bool]] = None,
             name: Optional[pulumi.Input[builtins.str]] = None,
@@ -586,6 +656,10 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['WorkloadIdentityPoolManagedIdentityAttestationRuleArgs', 'WorkloadIdentityPoolManagedIdentityAttestationRuleArgsDict']]]] attestation_rules: Defines which workloads can receive an identity within a pool. When an AttestationRule is
+               defined under a managed identity, matching workloads may receive that identity. A maximum of
+               50 AttestationRules can be set.
+               Structure is documented below.
         :param pulumi.Input[builtins.str] description: A description of the managed identity. Cannot exceed 256 characters.
         :param pulumi.Input[builtins.bool] disabled: Whether the managed identity is disabled. If disabled, credentials may no longer be issued for
                the identity, however existing credentials will still be accepted until they expire.
@@ -624,6 +698,7 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
 
         __props__ = _WorkloadIdentityPoolManagedIdentityState.__new__(_WorkloadIdentityPoolManagedIdentityState)
 
+        __props__.__dict__["attestation_rules"] = attestation_rules
         __props__.__dict__["description"] = description
         __props__.__dict__["disabled"] = disabled
         __props__.__dict__["name"] = name
@@ -634,6 +709,17 @@ class WorkloadIdentityPoolManagedIdentity(pulumi.CustomResource):
         __props__.__dict__["workload_identity_pool_namespace_id"] = workload_identity_pool_namespace_id
         return WorkloadIdentityPoolManagedIdentity(resource_name, opts=opts, __props__=__props__)
 
+    @property
+    @pulumi.getter(name="attestationRules")
+    def attestation_rules(self) -> pulumi.Output[Optional[Sequence['outputs.WorkloadIdentityPoolManagedIdentityAttestationRule']]]:
+        """
+        Defines which workloads can receive an identity within a pool. When an AttestationRule is
+        defined under a managed identity, matching workloads may receive that identity. A maximum of
+        50 AttestationRules can be set.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "attestation_rules")
+
     @property
     @pulumi.getter
     def description(self) -> pulumi.Output[Optional[builtins.str]]:

pulumi_gcp/kms/autokey_config.py

@@ -69,10 +69,12 @@ class AutokeyConfigArgs:
 @pulumi.input_type
 class _AutokeyConfigState:
     def __init__(__self__, *,
+                 etag: Optional[pulumi.Input[builtins.str]] = None,
                  folder: Optional[pulumi.Input[builtins.str]] = None,
                  key_project: Optional[pulumi.Input[builtins.str]] = None):
         """
         Input properties used for looking up and filtering AutokeyConfig resources.
+        :param pulumi.Input[builtins.str] etag: The etag of the AutokeyConfig for optimistic concurrency control.
         :param pulumi.Input[builtins.str] folder: The folder for which to retrieve config.
                
                
@@ -81,11 +83,25 @@ class _AutokeyConfigState:
                CryptoKey for any new KeyHandle the Developer creates. Should have the form
                `projects/<project_id_or_number>`.
         """
+        if etag is not None:
+            pulumi.set(__self__, "etag", etag)
         if folder is not None:
             pulumi.set(__self__, "folder", folder)
         if key_project is not None:
             pulumi.set(__self__, "key_project", key_project)
 
+    @property
+    @pulumi.getter
+    def etag(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The etag of the AutokeyConfig for optimistic concurrency control.
+        """
+        return pulumi.get(self, "etag")
+
+    @etag.setter
+    def etag(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "etag", value)
+
     @property
     @pulumi.getter
     def folder(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -327,6 +343,7 @@ class AutokeyConfig(pulumi.CustomResource):
                 raise TypeError("Missing required property 'folder'")
             __props__.__dict__["folder"] = folder
             __props__.__dict__["key_project"] = key_project
+            __props__.__dict__["etag"] = None
         super(AutokeyConfig, __self__).__init__(
             'gcp:kms/autokeyConfig:AutokeyConfig',
             resource_name,
@@ -337,6 +354,7 @@ class AutokeyConfig(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            etag: Optional[pulumi.Input[builtins.str]] = None,
             folder: Optional[pulumi.Input[builtins.str]] = None,
             key_project: Optional[pulumi.Input[builtins.str]] = None) -> 'AutokeyConfig':
         """
@@ -346,6 +364,7 @@ class AutokeyConfig(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[builtins.str] etag: The etag of the AutokeyConfig for optimistic concurrency control.
         :param pulumi.Input[builtins.str] folder: The folder for which to retrieve config.
                
                
@@ -358,10 +377,19 @@ class AutokeyConfig(pulumi.CustomResource):
 
         __props__ = _AutokeyConfigState.__new__(_AutokeyConfigState)
 
+        __props__.__dict__["etag"] = etag
         __props__.__dict__["folder"] = folder
         __props__.__dict__["key_project"] = key_project
         return AutokeyConfig(resource_name, opts=opts, __props__=__props__)
 
+    @property
+    @pulumi.getter
+    def etag(self) -> pulumi.Output[builtins.str]:
+        """
+        The etag of the AutokeyConfig for optimistic concurrency control.
+        """
+        return pulumi.get(self, "etag")
+
     @property
     @pulumi.getter
     def folder(self) -> pulumi.Output[builtins.str]:

pulumi_gcp/kms/get_autokey_config.py

@@ -27,7 +27,10 @@ class GetAutokeyConfigResult:
     """
     A collection of values returned by getAutokeyConfig.
     """
-    def __init__(__self__, folder=None, id=None, key_project=None):
+    def __init__(__self__, etag=None, folder=None, id=None, key_project=None):
+        if etag and not isinstance(etag, str):
+            raise TypeError("Expected argument 'etag' to be a str")
+        pulumi.set(__self__, "etag", etag)
         if folder and not isinstance(folder, str):
             raise TypeError("Expected argument 'folder' to be a str")
         pulumi.set(__self__, "folder", folder)
@@ -38,6 +41,11 @@ class GetAutokeyConfigResult:
             raise TypeError("Expected argument 'key_project' to be a str")
         pulumi.set(__self__, "key_project", key_project)
 
+    @property
+    @pulumi.getter
+    def etag(self) -> builtins.str:
+        return pulumi.get(self, "etag")
+
     @property
     @pulumi.getter
     def folder(self) -> builtins.str:
@@ -66,6 +74,7 @@ class AwaitableGetAutokeyConfigResult(GetAutokeyConfigResult):
         if False:
             yield self
         return GetAutokeyConfigResult(
+            etag=self.etag,
             folder=self.folder,
             id=self.id,
             key_project=self.key_project)
@@ -93,6 +102,7 @@ def get_autokey_config(folder: Optional[builtins.str] = None,
     __ret__ = pulumi.runtime.invoke('gcp:kms/getAutokeyConfig:getAutokeyConfig', __args__, opts=opts, typ=GetAutokeyConfigResult).value
 
     return AwaitableGetAutokeyConfigResult(
+        etag=pulumi.get(__ret__, 'etag'),
         folder=pulumi.get(__ret__, 'folder'),
         id=pulumi.get(__ret__, 'id'),
         key_project=pulumi.get(__ret__, 'key_project'))
@@ -117,6 +127,7 @@ def get_autokey_config_output(folder: Optional[pulumi.Input[builtins.str]] = Non
     opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
     __ret__ = pulumi.runtime.invoke_output('gcp:kms/getAutokeyConfig:getAutokeyConfig', __args__, opts=opts, typ=GetAutokeyConfigResult)
     return __ret__.apply(lambda __response__: GetAutokeyConfigResult(
+        etag=pulumi.get(__response__, 'etag'),
         folder=pulumi.get(__response__, 'folder'),
         id=pulumi.get(__response__, 'id'),
         key_project=pulumi.get(__response__, 'key_project')))

pulumi_gcp/memorystore/get_instance.py

@@ -28,7 +28,7 @@ class GetInstanceResult:
     """
     A collection of values returned by getInstance.
     """
-    def __init__(__self__, authorization_mode=None, automated_backup_configs=None, backup_collection=None, create_time=None, cross_instance_replication_configs=None, deletion_protection_enabled=None, desired_auto_created_endpoints=None, desired_psc_auto_connections=None, discovery_endpoints=None, effective_labels=None, endpoints=None, engine_configs=None, engine_version=None, gcs_sources=None, id=None, instance_id=None, labels=None, location=None, maintenance_policies=None, maintenance_schedules=None, managed_backup_sources=None, mode=None, name=None, node_configs=None, node_type=None, persistence_configs=None, project=None, psc_attachment_details=None, psc_auto_connections=None, pulumi_labels=None, replica_count=None, shard_count=None, state=None, state_infos=None, transit_encryption_mode=None, uid=None, update_time=None, zone_distribution_configs=None):
+    def __init__(__self__, authorization_mode=None, automated_backup_configs=None, backup_collection=None, create_time=None, cross_instance_replication_configs=None, deletion_protection_enabled=None, desired_auto_created_endpoints=None, desired_psc_auto_connections=None, discovery_endpoints=None, effective_labels=None, endpoints=None, engine_configs=None, engine_version=None, gcs_sources=None, id=None, instance_id=None, kms_key=None, labels=None, location=None, maintenance_policies=None, maintenance_schedules=None, managed_backup_sources=None, mode=None, name=None, node_configs=None, node_type=None, persistence_configs=None, project=None, psc_attachment_details=None, psc_auto_connections=None, pulumi_labels=None, replica_count=None, shard_count=None, state=None, state_infos=None, transit_encryption_mode=None, uid=None, update_time=None, zone_distribution_configs=None):
         if authorization_mode and not isinstance(authorization_mode, str):
             raise TypeError("Expected argument 'authorization_mode' to be a str")
         pulumi.set(__self__, "authorization_mode", authorization_mode)
@@ -77,6 +77,9 @@ class GetInstanceResult:
         if instance_id and not isinstance(instance_id, str):
             raise TypeError("Expected argument 'instance_id' to be a str")
         pulumi.set(__self__, "instance_id", instance_id)
+        if kms_key and not isinstance(kms_key, str):
+            raise TypeError("Expected argument 'kms_key' to be a str")
+        pulumi.set(__self__, "kms_key", kms_key)
         if labels and not isinstance(labels, dict):
             raise TypeError("Expected argument 'labels' to be a dict")
         pulumi.set(__self__, "labels", labels)
@@ -227,6 +230,11 @@ class GetInstanceResult:
     def instance_id(self) -> builtins.str:
         return pulumi.get(self, "instance_id")
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> builtins.str:
+        return pulumi.get(self, "kms_key")
+
     @property
     @pulumi.getter
     def labels(self) -> Mapping[str, builtins.str]:
@@ -360,6 +368,7 @@ class AwaitableGetInstanceResult(GetInstanceResult):
             gcs_sources=self.gcs_sources,
             id=self.id,
             instance_id=self.instance_id,
+            kms_key=self.kms_key,
             labels=self.labels,
             location=self.location,
             maintenance_policies=self.maintenance_policies,
@@ -432,6 +441,7 @@ def get_instance(instance_id: Optional[builtins.str] = None,
         gcs_sources=pulumi.get(__ret__, 'gcs_sources'),
         id=pulumi.get(__ret__, 'id'),
         instance_id=pulumi.get(__ret__, 'instance_id'),
+        kms_key=pulumi.get(__ret__, 'kms_key'),
         labels=pulumi.get(__ret__, 'labels'),
         location=pulumi.get(__ret__, 'location'),
         maintenance_policies=pulumi.get(__ret__, 'maintenance_policies'),
@@ -501,6 +511,7 @@ def get_instance_output(instance_id: Optional[pulumi.Input[builtins.str]] = None
         gcs_sources=pulumi.get(__response__, 'gcs_sources'),
         id=pulumi.get(__response__, 'id'),
         instance_id=pulumi.get(__response__, 'instance_id'),
+        kms_key=pulumi.get(__response__, 'kms_key'),
         labels=pulumi.get(__response__, 'labels'),
         location=pulumi.get(__response__, 'location'),
         maintenance_policies=pulumi.get(__response__, 'maintenance_policies'),

pulumi_gcp/memorystore/instance.py

@@ -34,6 +34,7 @@ class InstanceArgs:
                  engine_configs: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  engine_version: Optional[pulumi.Input[builtins.str]] = None,
                  gcs_source: Optional[pulumi.Input['InstanceGcsSourceArgs']] = None,
+                 kms_key: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  maintenance_policy: Optional[pulumi.Input['InstanceMaintenancePolicyArgs']] = None,
                  managed_backup_source: Optional[pulumi.Input['InstanceManagedBackupSourceArgs']] = None,
@@ -73,6 +74,7 @@ class InstanceArgs:
         :param pulumi.Input[builtins.str] engine_version: Optional. Engine version of the instance.
         :param pulumi.Input['InstanceGcsSourceArgs'] gcs_source: GCS source for the instance.
                Structure is documented below.
+        :param pulumi.Input[builtins.str] kms_key: The KMS key used to encrypt the at-rest data of the cluster
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Optional. Labels to represent user-provided metadata.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -127,6 +129,8 @@ class InstanceArgs:
             pulumi.set(__self__, "engine_version", engine_version)
         if gcs_source is not None:
             pulumi.set(__self__, "gcs_source", gcs_source)
+        if kms_key is not None:
+            pulumi.set(__self__, "kms_key", kms_key)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if maintenance_policy is not None:
@@ -308,6 +312,18 @@ class InstanceArgs:
     def gcs_source(self, value: Optional[pulumi.Input['InstanceGcsSourceArgs']]):
         pulumi.set(self, "gcs_source", value)
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The KMS key used to encrypt the at-rest data of the cluster
+        """
+        return pulumi.get(self, "kms_key")
+
+    @kms_key.setter
+    def kms_key(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "kms_key", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]]:
@@ -466,6 +482,7 @@ class _InstanceState:
                  engine_version: Optional[pulumi.Input[builtins.str]] = None,
                  gcs_source: Optional[pulumi.Input['InstanceGcsSourceArgs']] = None,
                  instance_id: Optional[pulumi.Input[builtins.str]] = None,
+                 kms_key: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
                  maintenance_policy: Optional[pulumi.Input['InstanceMaintenancePolicyArgs']] = None,
@@ -525,6 +542,7 @@ class _InstanceState:
                
                
                - - -
+        :param pulumi.Input[builtins.str] kms_key: The KMS key used to encrypt the at-rest data of the cluster
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Optional. Labels to represent user-provided metadata.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -616,6 +634,8 @@ class _InstanceState:
             pulumi.set(__self__, "gcs_source", gcs_source)
         if instance_id is not None:
             pulumi.set(__self__, "instance_id", instance_id)
+        if kms_key is not None:
+            pulumi.set(__self__, "kms_key", kms_key)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if location is not None:
@@ -866,6 +886,18 @@ class _InstanceState:
     def instance_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "instance_id", value)
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The KMS key used to encrypt the at-rest data of the cluster
+        """
+        return pulumi.get(self, "kms_key")
+
+    @kms_key.setter
+    def kms_key(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "kms_key", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]]:
@@ -1180,6 +1212,7 @@ class Instance(pulumi.CustomResource):
                  engine_version: Optional[pulumi.Input[builtins.str]] = None,
                  gcs_source: Optional[pulumi.Input[Union['InstanceGcsSourceArgs', 'InstanceGcsSourceArgsDict']]] = None,
                  instance_id: Optional[pulumi.Input[builtins.str]] = None,
+                 kms_key: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
                  maintenance_policy: Optional[pulumi.Input[Union['InstanceMaintenancePolicyArgs', 'InstanceMaintenancePolicyArgsDict']]] = None,
@@ -1286,6 +1319,7 @@ class Instance(pulumi.CustomResource):
             node_type="SHARED_CORE_NANO",
             transit_encryption_mode="TRANSIT_ENCRYPTION_DISABLED",
             authorization_mode="AUTH_DISABLED",
+            kms_key="my-key",
             engine_configs={
                 "maxmemory-policy": "volatile-ttl",
             },
@@ -1524,6 +1558,7 @@ class Instance(pulumi.CustomResource):
                
                
                - - -
+        :param pulumi.Input[builtins.str] kms_key: The KMS key used to encrypt the at-rest data of the cluster
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Optional. Labels to represent user-provided metadata.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -1655,6 +1690,7 @@ class Instance(pulumi.CustomResource):
             node_type="SHARED_CORE_NANO",
             transit_encryption_mode="TRANSIT_ENCRYPTION_DISABLED",
             authorization_mode="AUTH_DISABLED",
+            kms_key="my-key",
             engine_configs={
                 "maxmemory-policy": "volatile-ttl",
             },
@@ -1891,6 +1927,7 @@ class Instance(pulumi.CustomResource):
                  engine_version: Optional[pulumi.Input[builtins.str]] = None,
                  gcs_source: Optional[pulumi.Input[Union['InstanceGcsSourceArgs', 'InstanceGcsSourceArgsDict']]] = None,
                  instance_id: Optional[pulumi.Input[builtins.str]] = None,
+                 kms_key: Optional[pulumi.Input[builtins.str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
                  location: Optional[pulumi.Input[builtins.str]] = None,
                  maintenance_policy: Optional[pulumi.Input[Union['InstanceMaintenancePolicyArgs', 'InstanceMaintenancePolicyArgsDict']]] = None,
@@ -1924,6 +1961,7 @@ class Instance(pulumi.CustomResource):
             if instance_id is None and not opts.urn:
                 raise TypeError("Missing required property 'instance_id'")
             __props__.__dict__["instance_id"] = instance_id
+            __props__.__dict__["kms_key"] = kms_key
             __props__.__dict__["labels"] = labels
             if location is None and not opts.urn:
                 raise TypeError("Missing required property 'location'")
@@ -1982,6 +2020,7 @@ class Instance(pulumi.CustomResource):
             engine_version: Optional[pulumi.Input[builtins.str]] = None,
             gcs_source: Optional[pulumi.Input[Union['InstanceGcsSourceArgs', 'InstanceGcsSourceArgsDict']]] = None,
             instance_id: Optional[pulumi.Input[builtins.str]] = None,
+            kms_key: Optional[pulumi.Input[builtins.str]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]]] = None,
             location: Optional[pulumi.Input[builtins.str]] = None,
             maintenance_policy: Optional[pulumi.Input[Union['InstanceMaintenancePolicyArgs', 'InstanceMaintenancePolicyArgsDict']]] = None,
@@ -2046,6 +2085,7 @@ class Instance(pulumi.CustomResource):
                
                
                - - -
+        :param pulumi.Input[builtins.str] kms_key: The KMS key used to encrypt the at-rest data of the cluster
         :param pulumi.Input[Mapping[str, pulumi.Input[builtins.str]]] labels: Optional. Labels to represent user-provided metadata.
                **Note**: This field is non-authoritative, and will only manage the labels present in your configuration.
                Please refer to the field `effective_labels` for all of the labels present on the resource.
@@ -2120,6 +2160,7 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["engine_version"] = engine_version
         __props__.__dict__["gcs_source"] = gcs_source
         __props__.__dict__["instance_id"] = instance_id
+        __props__.__dict__["kms_key"] = kms_key
         __props__.__dict__["labels"] = labels
         __props__.__dict__["location"] = location
         __props__.__dict__["maintenance_policy"] = maintenance_policy
@@ -2286,6 +2327,14 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "instance_id")
 
+    @property
+    @pulumi.getter(name="kmsKey")
+    def kms_key(self) -> pulumi.Output[Optional[builtins.str]]:
+        """
+        The KMS key used to encrypt the at-rest data of the cluster
+        """
+        return pulumi.get(self, "kms_key")
+
     @property
     @pulumi.getter
     def labels(self) -> pulumi.Output[Optional[Mapping[str, builtins.str]]]: