pulumi-gcp 8.37.0a1751903932__py3-none-any.whl → 8.39.0__py3-none-any.whl

pulumi_gcp/binaryauthorization/attestor.py

@@ -30,8 +30,11 @@ class AttestorArgs:
         The set of arguments for constructing a Attestor resource.
         :param pulumi.Input['AttestorAttestationAuthorityNoteArgs'] attestation_authority_note: A Container Analysis ATTESTATION_AUTHORITY Note, created by the user.
                Structure is documented below.
-        :param pulumi.Input[builtins.str] description: A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
+        :param pulumi.Input[builtins.str] description: A descriptive comment. This field may be updated. The field may be
+               displayed in chooser dialogs.
         :param pulumi.Input[builtins.str] name: The resource name.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         """
         pulumi.set(__self__, "attestation_authority_note", attestation_authority_note)
         if description is not None:
@@ -58,7 +61,8 @@ class AttestorArgs:
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
+        A descriptive comment. This field may be updated. The field may be
+        displayed in chooser dialogs.
         """
         return pulumi.get(self, "description")
 
@@ -81,6 +85,10 @@ class AttestorArgs:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -99,8 +107,11 @@ class _AttestorState:
         Input properties used for looking up and filtering Attestor resources.
         :param pulumi.Input['AttestorAttestationAuthorityNoteArgs'] attestation_authority_note: A Container Analysis ATTESTATION_AUTHORITY Note, created by the user.
                Structure is documented below.
-        :param pulumi.Input[builtins.str] description: A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
+        :param pulumi.Input[builtins.str] description: A descriptive comment. This field may be updated. The field may be
+               displayed in chooser dialogs.
         :param pulumi.Input[builtins.str] name: The resource name.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         """
         if attestation_authority_note is not None:
             pulumi.set(__self__, "attestation_authority_note", attestation_authority_note)
@@ -128,7 +139,8 @@ class _AttestorState:
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
+        A descriptive comment. This field may be updated. The field may be
+        displayed in chooser dialogs.
         """
         return pulumi.get(self, "description")
 
@@ -151,6 +163,10 @@ class _AttestorState:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -283,8 +299,11 @@ class Attestor(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Union['AttestorAttestationAuthorityNoteArgs', 'AttestorAttestationAuthorityNoteArgsDict']] attestation_authority_note: A Container Analysis ATTESTATION_AUTHORITY Note, created by the user.
                Structure is documented below.
-        :param pulumi.Input[builtins.str] description: A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
+        :param pulumi.Input[builtins.str] description: A descriptive comment. This field may be updated. The field may be
+               displayed in chooser dialogs.
         :param pulumi.Input[builtins.str] name: The resource name.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         """
         ...
     @overload
@@ -459,8 +478,11 @@ class Attestor(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Union['AttestorAttestationAuthorityNoteArgs', 'AttestorAttestationAuthorityNoteArgsDict']] attestation_authority_note: A Container Analysis ATTESTATION_AUTHORITY Note, created by the user.
                Structure is documented below.
-        :param pulumi.Input[builtins.str] description: A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
+        :param pulumi.Input[builtins.str] description: A descriptive comment. This field may be updated. The field may be
+               displayed in chooser dialogs.
         :param pulumi.Input[builtins.str] name: The resource name.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -485,7 +507,8 @@ class Attestor(pulumi.CustomResource):
     @pulumi.getter
     def description(self) -> pulumi.Output[Optional[builtins.str]]:
         """
-        A descriptive comment. This field may be updated. The field may be displayed in chooser dialogs.
+        A descriptive comment. This field may be updated. The field may be
+        displayed in chooser dialogs.
         """
         return pulumi.get(self, "description")
 
@@ -500,5 +523,9 @@ class Attestor(pulumi.CustomResource):
     @property
     @pulumi.getter
     def project(self) -> pulumi.Output[builtins.str]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
         return pulumi.get(self, "project")
 

pulumi_gcp/binaryauthorization/outputs.py

@@ -276,8 +276,6 @@ class AttestorAttestationAuthorityNotePublicKeyPkixPublicKey(dict):
                match the structure and any object identifiers encoded in
                publicKeyPem (i.e. this algorithm must match that of the
                public key).
-               
-               - - -
         """
         if public_key_pem is not None:
             pulumi.set(__self__, "public_key_pem", public_key_pem)
@@ -302,8 +300,6 @@ class AttestorAttestationAuthorityNotePublicKeyPkixPublicKey(dict):
         match the structure and any object identifiers encoded in
         publicKeyPem (i.e. this algorithm must match that of the
         public key).
-
-        - - -
         """
         return pulumi.get(self, "signature_algorithm")
 
@@ -524,8 +520,6 @@ class PolicyDefaultAdmissionRule(dict):
         """
         :param builtins.str enforcement_mode: The action when a pod creation is denied by the admission rule.
                Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
-               
-               - - -
         :param builtins.str evaluation_mode: How this admission rule will be evaluated.
                Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
         :param Sequence[builtins.str] require_attestations_bies: The resource names of the attestors that must attest to a
@@ -548,8 +542,6 @@ class PolicyDefaultAdmissionRule(dict):
         """
         The action when a pod creation is denied by the admission rule.
         Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
-
-        - - -
         """
         return pulumi.get(self, "enforcement_mode")
 

pulumi_gcp/binaryauthorization/policy.py

@@ -33,15 +33,27 @@ class PolicyArgs:
         :param pulumi.Input['PolicyDefaultAdmissionRuleArgs'] default_admission_rule: Default admission rule for a cluster without a per-cluster admission
                rule.
                Structure is documented below.
-        :param pulumi.Input[Sequence[pulumi.Input['PolicyAdmissionWhitelistPatternArgs']]] admission_whitelist_patterns: A whitelist of image patterns to exclude from admission rules. If an image's name matches a whitelist pattern, the
-               image's admission requests will always be permitted regardless of your admission rules.
-        :param pulumi.Input[Sequence[pulumi.Input['PolicyClusterAdmissionRuleArgs']]] cluster_admission_rules: Per-cluster admission rules. An admission rule specifies either that all container images used in a pod creation request
-               must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be
-               denied. There can be at most one admission rule per cluster spec. Identifier format: '{{location}}.{{clusterId}}'. A
-               location is either a compute zone (e.g. 'us-central1-a') or a region (e.g. 'us-central1').
+        :param pulumi.Input[Sequence[pulumi.Input['PolicyAdmissionWhitelistPatternArgs']]] admission_whitelist_patterns: A whitelist of image patterns to exclude from admission rules. If an
+               image's name matches a whitelist pattern, the image's admission
+               requests will always be permitted regardless of your admission rules.
+               Structure is documented below.
+        :param pulumi.Input[Sequence[pulumi.Input['PolicyClusterAdmissionRuleArgs']]] cluster_admission_rules: Per-cluster admission rules. An admission rule specifies either that
+               all container images used in a pod creation request must be attested
+               to by one or more attestors, that all pod creations will be allowed,
+               or that all pod creations will be denied. There can be at most one
+               admission rule per cluster spec.
+               
+               Identifier format: `{{location}}.{{clusterId}}`.
+               A location is either a compute zone (e.g. `us-central1-a`) or a region
+               (e.g. `us-central1`).
+               Structure is documented below.
         :param pulumi.Input[builtins.str] description: A descriptive comment.
-        :param pulumi.Input[builtins.str] global_policy_evaluation_mode: Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not
-               covered by the global policy will be subject to the project admission policy. Possible values: ["ENABLE", "DISABLE"]
+        :param pulumi.Input[builtins.str] global_policy_evaluation_mode: Controls the evaluation of a Google-maintained global admission policy
+               for common system-level images. Images not covered by the global
+               policy will be subject to the project admission policy.
+               Possible values are: `ENABLE`, `DISABLE`.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         """
         pulumi.set(__self__, "default_admission_rule", default_admission_rule)
         if admission_whitelist_patterns is not None:
@@ -73,8 +85,10 @@ class PolicyArgs:
     @pulumi.getter(name="admissionWhitelistPatterns")
     def admission_whitelist_patterns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['PolicyAdmissionWhitelistPatternArgs']]]]:
         """
-        A whitelist of image patterns to exclude from admission rules. If an image's name matches a whitelist pattern, the
-        image's admission requests will always be permitted regardless of your admission rules.
+        A whitelist of image patterns to exclude from admission rules. If an
+        image's name matches a whitelist pattern, the image's admission
+        requests will always be permitted regardless of your admission rules.
+        Structure is documented below.
         """
         return pulumi.get(self, "admission_whitelist_patterns")
 
@@ -86,10 +100,16 @@ class PolicyArgs:
     @pulumi.getter(name="clusterAdmissionRules")
     def cluster_admission_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['PolicyClusterAdmissionRuleArgs']]]]:
         """
-        Per-cluster admission rules. An admission rule specifies either that all container images used in a pod creation request
-        must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be
-        denied. There can be at most one admission rule per cluster spec. Identifier format: '{{location}}.{{clusterId}}'. A
-        location is either a compute zone (e.g. 'us-central1-a') or a region (e.g. 'us-central1').
+        Per-cluster admission rules. An admission rule specifies either that
+        all container images used in a pod creation request must be attested
+        to by one or more attestors, that all pod creations will be allowed,
+        or that all pod creations will be denied. There can be at most one
+        admission rule per cluster spec.
+
+        Identifier format: `{{location}}.{{clusterId}}`.
+        A location is either a compute zone (e.g. `us-central1-a`) or a region
+        (e.g. `us-central1`).
+        Structure is documented below.
         """
         return pulumi.get(self, "cluster_admission_rules")
 
@@ -113,8 +133,10 @@ class PolicyArgs:
     @pulumi.getter(name="globalPolicyEvaluationMode")
     def global_policy_evaluation_mode(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not
-        covered by the global policy will be subject to the project admission policy. Possible values: ["ENABLE", "DISABLE"]
+        Controls the evaluation of a Google-maintained global admission policy
+        for common system-level images. Images not covered by the global
+        policy will be subject to the project admission policy.
+        Possible values are: `ENABLE`, `DISABLE`.
         """
         return pulumi.get(self, "global_policy_evaluation_mode")
 
@@ -125,6 +147,10 @@ class PolicyArgs:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -143,18 +169,30 @@ class _PolicyState:
                  project: Optional[pulumi.Input[builtins.str]] = None):
         """
         Input properties used for looking up and filtering Policy resources.
-        :param pulumi.Input[Sequence[pulumi.Input['PolicyAdmissionWhitelistPatternArgs']]] admission_whitelist_patterns: A whitelist of image patterns to exclude from admission rules. If an image's name matches a whitelist pattern, the
-               image's admission requests will always be permitted regardless of your admission rules.
-        :param pulumi.Input[Sequence[pulumi.Input['PolicyClusterAdmissionRuleArgs']]] cluster_admission_rules: Per-cluster admission rules. An admission rule specifies either that all container images used in a pod creation request
-               must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be
-               denied. There can be at most one admission rule per cluster spec. Identifier format: '{{location}}.{{clusterId}}'. A
-               location is either a compute zone (e.g. 'us-central1-a') or a region (e.g. 'us-central1').
+        :param pulumi.Input[Sequence[pulumi.Input['PolicyAdmissionWhitelistPatternArgs']]] admission_whitelist_patterns: A whitelist of image patterns to exclude from admission rules. If an
+               image's name matches a whitelist pattern, the image's admission
+               requests will always be permitted regardless of your admission rules.
+               Structure is documented below.
+        :param pulumi.Input[Sequence[pulumi.Input['PolicyClusterAdmissionRuleArgs']]] cluster_admission_rules: Per-cluster admission rules. An admission rule specifies either that
+               all container images used in a pod creation request must be attested
+               to by one or more attestors, that all pod creations will be allowed,
+               or that all pod creations will be denied. There can be at most one
+               admission rule per cluster spec.
+               
+               Identifier format: `{{location}}.{{clusterId}}`.
+               A location is either a compute zone (e.g. `us-central1-a`) or a region
+               (e.g. `us-central1`).
+               Structure is documented below.
         :param pulumi.Input['PolicyDefaultAdmissionRuleArgs'] default_admission_rule: Default admission rule for a cluster without a per-cluster admission
                rule.
                Structure is documented below.
         :param pulumi.Input[builtins.str] description: A descriptive comment.
-        :param pulumi.Input[builtins.str] global_policy_evaluation_mode: Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not
-               covered by the global policy will be subject to the project admission policy. Possible values: ["ENABLE", "DISABLE"]
+        :param pulumi.Input[builtins.str] global_policy_evaluation_mode: Controls the evaluation of a Google-maintained global admission policy
+               for common system-level images. Images not covered by the global
+               policy will be subject to the project admission policy.
+               Possible values are: `ENABLE`, `DISABLE`.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         """
         if admission_whitelist_patterns is not None:
             pulumi.set(__self__, "admission_whitelist_patterns", admission_whitelist_patterns)
@@ -173,8 +211,10 @@ class _PolicyState:
     @pulumi.getter(name="admissionWhitelistPatterns")
     def admission_whitelist_patterns(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['PolicyAdmissionWhitelistPatternArgs']]]]:
         """
-        A whitelist of image patterns to exclude from admission rules. If an image's name matches a whitelist pattern, the
-        image's admission requests will always be permitted regardless of your admission rules.
+        A whitelist of image patterns to exclude from admission rules. If an
+        image's name matches a whitelist pattern, the image's admission
+        requests will always be permitted regardless of your admission rules.
+        Structure is documented below.
         """
         return pulumi.get(self, "admission_whitelist_patterns")
 
@@ -186,10 +226,16 @@ class _PolicyState:
     @pulumi.getter(name="clusterAdmissionRules")
     def cluster_admission_rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['PolicyClusterAdmissionRuleArgs']]]]:
         """
-        Per-cluster admission rules. An admission rule specifies either that all container images used in a pod creation request
-        must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be
-        denied. There can be at most one admission rule per cluster spec. Identifier format: '{{location}}.{{clusterId}}'. A
-        location is either a compute zone (e.g. 'us-central1-a') or a region (e.g. 'us-central1').
+        Per-cluster admission rules. An admission rule specifies either that
+        all container images used in a pod creation request must be attested
+        to by one or more attestors, that all pod creations will be allowed,
+        or that all pod creations will be denied. There can be at most one
+        admission rule per cluster spec.
+
+        Identifier format: `{{location}}.{{clusterId}}`.
+        A location is either a compute zone (e.g. `us-central1-a`) or a region
+        (e.g. `us-central1`).
+        Structure is documented below.
         """
         return pulumi.get(self, "cluster_admission_rules")
 
@@ -227,8 +273,10 @@ class _PolicyState:
     @pulumi.getter(name="globalPolicyEvaluationMode")
     def global_policy_evaluation_mode(self) -> Optional[pulumi.Input[builtins.str]]:
         """
-        Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not
-        covered by the global policy will be subject to the project admission policy. Possible values: ["ENABLE", "DISABLE"]
+        Controls the evaluation of a Google-maintained global admission policy
+        for common system-level images. Images not covered by the global
+        policy will be subject to the project admission policy.
+        Possible values are: `ENABLE`, `DISABLE`.
         """
         return pulumi.get(self, "global_policy_evaluation_mode")
 
@@ -239,6 +287,10 @@ class _PolicyState:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -350,18 +402,30 @@ class Policy(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['PolicyAdmissionWhitelistPatternArgs', 'PolicyAdmissionWhitelistPatternArgsDict']]]] admission_whitelist_patterns: A whitelist of image patterns to exclude from admission rules. If an image's name matches a whitelist pattern, the
-               image's admission requests will always be permitted regardless of your admission rules.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['PolicyClusterAdmissionRuleArgs', 'PolicyClusterAdmissionRuleArgsDict']]]] cluster_admission_rules: Per-cluster admission rules. An admission rule specifies either that all container images used in a pod creation request
-               must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be
-               denied. There can be at most one admission rule per cluster spec. Identifier format: '{{location}}.{{clusterId}}'. A
-               location is either a compute zone (e.g. 'us-central1-a') or a region (e.g. 'us-central1').
+        :param pulumi.Input[Sequence[pulumi.Input[Union['PolicyAdmissionWhitelistPatternArgs', 'PolicyAdmissionWhitelistPatternArgsDict']]]] admission_whitelist_patterns: A whitelist of image patterns to exclude from admission rules. If an
+               image's name matches a whitelist pattern, the image's admission
+               requests will always be permitted regardless of your admission rules.
+               Structure is documented below.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['PolicyClusterAdmissionRuleArgs', 'PolicyClusterAdmissionRuleArgsDict']]]] cluster_admission_rules: Per-cluster admission rules. An admission rule specifies either that
+               all container images used in a pod creation request must be attested
+               to by one or more attestors, that all pod creations will be allowed,
+               or that all pod creations will be denied. There can be at most one
+               admission rule per cluster spec.
+               
+               Identifier format: `{{location}}.{{clusterId}}`.
+               A location is either a compute zone (e.g. `us-central1-a`) or a region
+               (e.g. `us-central1`).
+               Structure is documented below.
         :param pulumi.Input[Union['PolicyDefaultAdmissionRuleArgs', 'PolicyDefaultAdmissionRuleArgsDict']] default_admission_rule: Default admission rule for a cluster without a per-cluster admission
                rule.
                Structure is documented below.
         :param pulumi.Input[builtins.str] description: A descriptive comment.
-        :param pulumi.Input[builtins.str] global_policy_evaluation_mode: Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not
-               covered by the global policy will be subject to the project admission policy. Possible values: ["ENABLE", "DISABLE"]
+        :param pulumi.Input[builtins.str] global_policy_evaluation_mode: Controls the evaluation of a Google-maintained global admission policy
+               for common system-level images. Images not covered by the global
+               policy will be subject to the project admission policy.
+               Possible values are: `ENABLE`, `DISABLE`.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         """
         ...
     @overload
@@ -519,18 +583,30 @@ class Policy(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['PolicyAdmissionWhitelistPatternArgs', 'PolicyAdmissionWhitelistPatternArgsDict']]]] admission_whitelist_patterns: A whitelist of image patterns to exclude from admission rules. If an image's name matches a whitelist pattern, the
-               image's admission requests will always be permitted regardless of your admission rules.
-        :param pulumi.Input[Sequence[pulumi.Input[Union['PolicyClusterAdmissionRuleArgs', 'PolicyClusterAdmissionRuleArgsDict']]]] cluster_admission_rules: Per-cluster admission rules. An admission rule specifies either that all container images used in a pod creation request
-               must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be
-               denied. There can be at most one admission rule per cluster spec. Identifier format: '{{location}}.{{clusterId}}'. A
-               location is either a compute zone (e.g. 'us-central1-a') or a region (e.g. 'us-central1').
+        :param pulumi.Input[Sequence[pulumi.Input[Union['PolicyAdmissionWhitelistPatternArgs', 'PolicyAdmissionWhitelistPatternArgsDict']]]] admission_whitelist_patterns: A whitelist of image patterns to exclude from admission rules. If an
+               image's name matches a whitelist pattern, the image's admission
+               requests will always be permitted regardless of your admission rules.
+               Structure is documented below.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['PolicyClusterAdmissionRuleArgs', 'PolicyClusterAdmissionRuleArgsDict']]]] cluster_admission_rules: Per-cluster admission rules. An admission rule specifies either that
+               all container images used in a pod creation request must be attested
+               to by one or more attestors, that all pod creations will be allowed,
+               or that all pod creations will be denied. There can be at most one
+               admission rule per cluster spec.
+               
+               Identifier format: `{{location}}.{{clusterId}}`.
+               A location is either a compute zone (e.g. `us-central1-a`) or a region
+               (e.g. `us-central1`).
+               Structure is documented below.
         :param pulumi.Input[Union['PolicyDefaultAdmissionRuleArgs', 'PolicyDefaultAdmissionRuleArgsDict']] default_admission_rule: Default admission rule for a cluster without a per-cluster admission
                rule.
                Structure is documented below.
         :param pulumi.Input[builtins.str] description: A descriptive comment.
-        :param pulumi.Input[builtins.str] global_policy_evaluation_mode: Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not
-               covered by the global policy will be subject to the project admission policy. Possible values: ["ENABLE", "DISABLE"]
+        :param pulumi.Input[builtins.str] global_policy_evaluation_mode: Controls the evaluation of a Google-maintained global admission policy
+               for common system-level images. Images not covered by the global
+               policy will be subject to the project admission policy.
+               Possible values are: `ENABLE`, `DISABLE`.
+        :param pulumi.Input[builtins.str] project: The ID of the project in which the resource belongs.
+               If it is not provided, the provider project is used.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -548,8 +624,10 @@ class Policy(pulumi.CustomResource):
     @pulumi.getter(name="admissionWhitelistPatterns")
     def admission_whitelist_patterns(self) -> pulumi.Output[Optional[Sequence['outputs.PolicyAdmissionWhitelistPattern']]]:
         """
-        A whitelist of image patterns to exclude from admission rules. If an image's name matches a whitelist pattern, the
-        image's admission requests will always be permitted regardless of your admission rules.
+        A whitelist of image patterns to exclude from admission rules. If an
+        image's name matches a whitelist pattern, the image's admission
+        requests will always be permitted regardless of your admission rules.
+        Structure is documented below.
         """
         return pulumi.get(self, "admission_whitelist_patterns")
 
@@ -557,10 +635,16 @@ class Policy(pulumi.CustomResource):
     @pulumi.getter(name="clusterAdmissionRules")
     def cluster_admission_rules(self) -> pulumi.Output[Optional[Sequence['outputs.PolicyClusterAdmissionRule']]]:
         """
-        Per-cluster admission rules. An admission rule specifies either that all container images used in a pod creation request
-        must be attested to by one or more attestors, that all pod creations will be allowed, or that all pod creations will be
-        denied. There can be at most one admission rule per cluster spec. Identifier format: '{{location}}.{{clusterId}}'. A
-        location is either a compute zone (e.g. 'us-central1-a') or a region (e.g. 'us-central1').
+        Per-cluster admission rules. An admission rule specifies either that
+        all container images used in a pod creation request must be attested
+        to by one or more attestors, that all pod creations will be allowed,
+        or that all pod creations will be denied. There can be at most one
+        admission rule per cluster spec.
+
+        Identifier format: `{{location}}.{{clusterId}}`.
+        A location is either a compute zone (e.g. `us-central1-a`) or a region
+        (e.g. `us-central1`).
+        Structure is documented below.
         """
         return pulumi.get(self, "cluster_admission_rules")
 
@@ -586,13 +670,19 @@ class Policy(pulumi.CustomResource):
     @pulumi.getter(name="globalPolicyEvaluationMode")
     def global_policy_evaluation_mode(self) -> pulumi.Output[builtins.str]:
         """
-        Controls the evaluation of a Google-maintained global admission policy for common system-level images. Images not
-        covered by the global policy will be subject to the project admission policy. Possible values: ["ENABLE", "DISABLE"]
+        Controls the evaluation of a Google-maintained global admission policy
+        for common system-level images. Images not covered by the global
+        policy will be subject to the project admission policy.
+        Possible values are: `ENABLE`, `DISABLE`.
         """
         return pulumi.get(self, "global_policy_evaluation_mode")
 
     @property
     @pulumi.getter
     def project(self) -> pulumi.Output[builtins.str]:
+        """
+        The ID of the project in which the resource belongs.
+        If it is not provided, the provider project is used.
+        """
         return pulumi.get(self, "project")
 

pulumi_gcp/blockchainnodeengine/blockchain_nodes.py

@@ -31,9 +31,6 @@ class BlockchainNodesArgs:
         """
         The set of arguments for constructing a BlockchainNodes resource.
         :param pulumi.Input[builtins.str] blockchain_node_id: ID of the requesting object.
-               
-               
-               - - -
         :param pulumi.Input[builtins.str] location: Location of Blockchain Node being created.
         :param pulumi.Input[builtins.str] blockchain_type: User-provided key-value pairs
                Possible values are: `ETHEREUM`.
@@ -62,9 +59,6 @@ class BlockchainNodesArgs:
     def blockchain_node_id(self) -> pulumi.Input[builtins.str]:
         """
         ID of the requesting object.
-
-
-        - - -
         """
         return pulumi.get(self, "blockchain_node_id")
 
@@ -157,9 +151,6 @@ class _BlockchainNodesState:
         """
         Input properties used for looking up and filtering BlockchainNodes resources.
         :param pulumi.Input[builtins.str] blockchain_node_id: ID of the requesting object.
-               
-               
-               - - -
         :param pulumi.Input[builtins.str] blockchain_type: User-provided key-value pairs
                Possible values are: `ETHEREUM`.
         :param pulumi.Input[Sequence[pulumi.Input['BlockchainNodesConnectionInfoArgs']]] connection_infos: The connection information through which to interact with a blockchain node.
@@ -210,9 +201,6 @@ class _BlockchainNodesState:
     def blockchain_node_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         ID of the requesting object.
-
-
-        - - -
         """
         return pulumi.get(self, "blockchain_node_id")
 
@@ -472,9 +460,6 @@ class BlockchainNodes(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[builtins.str] blockchain_node_id: ID of the requesting object.
-               
-               
-               - - -
         :param pulumi.Input[builtins.str] blockchain_type: User-provided key-value pairs
                Possible values are: `ETHEREUM`.
         :param pulumi.Input[Union['BlockchainNodesEthereumDetailsArgs', 'BlockchainNodesEthereumDetailsArgsDict']] ethereum_details: User-provided key-value pairs
@@ -666,9 +651,6 @@ class BlockchainNodes(pulumi.CustomResource):
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[builtins.str] blockchain_node_id: ID of the requesting object.
-               
-               
-               - - -
         :param pulumi.Input[builtins.str] blockchain_type: User-provided key-value pairs
                Possible values are: `ETHEREUM`.
         :param pulumi.Input[Sequence[pulumi.Input[Union['BlockchainNodesConnectionInfoArgs', 'BlockchainNodesConnectionInfoArgsDict']]]] connection_infos: The connection information through which to interact with a blockchain node.
@@ -712,9 +694,6 @@ class BlockchainNodes(pulumi.CustomResource):
     def blockchain_node_id(self) -> pulumi.Output[builtins.str]:
         """
         ID of the requesting object.
-
-
-        - - -
         """
         return pulumi.get(self, "blockchain_node_id")
 

pulumi_gcp/certificateauthority/_inputs.py

@@ -1787,8 +1787,6 @@ if not MYPY:
         The algorithm to use for creating a managed Cloud KMS key for a for a simplified
         experience. All managed keys will be have their ProtectionLevel as HSM.
         Possible values are: `SIGN_HASH_ALGORITHM_UNSPECIFIED`, `RSA_PSS_2048_SHA256`, `RSA_PSS_3072_SHA256`, `RSA_PSS_4096_SHA256`, `RSA_PKCS1_2048_SHA256`, `RSA_PKCS1_3072_SHA256`, `RSA_PKCS1_4096_SHA256`, `EC_P256_SHA256`, `EC_P384_SHA384`.
-
-        - - -
         """
         cloud_kms_key_version: NotRequired[pulumi.Input[builtins.str]]
         """
@@ -1807,8 +1805,6 @@ class AuthorityKeySpecArgs:
         :param pulumi.Input[builtins.str] algorithm: The algorithm to use for creating a managed Cloud KMS key for a for a simplified
                experience. All managed keys will be have their ProtectionLevel as HSM.
                Possible values are: `SIGN_HASH_ALGORITHM_UNSPECIFIED`, `RSA_PSS_2048_SHA256`, `RSA_PSS_3072_SHA256`, `RSA_PSS_4096_SHA256`, `RSA_PKCS1_2048_SHA256`, `RSA_PKCS1_3072_SHA256`, `RSA_PKCS1_4096_SHA256`, `EC_P256_SHA256`, `EC_P384_SHA384`.
-               
-               - - -
         :param pulumi.Input[builtins.str] cloud_kms_key_version: The resource name for an existing Cloud KMS CryptoKeyVersion in the format
                `projects/*/locations/*/keyRings/*/cryptoKeys/*/cryptoKeyVersions/*`.
         """
@@ -1824,8 +1820,6 @@ class AuthorityKeySpecArgs:
         The algorithm to use for creating a managed Cloud KMS key for a for a simplified
         experience. All managed keys will be have their ProtectionLevel as HSM.
         Possible values are: `SIGN_HASH_ALGORITHM_UNSPECIFIED`, `RSA_PSS_2048_SHA256`, `RSA_PSS_3072_SHA256`, `RSA_PSS_4096_SHA256`, `RSA_PKCS1_2048_SHA256`, `RSA_PKCS1_3072_SHA256`, `RSA_PKCS1_4096_SHA256`, `EC_P256_SHA256`, `EC_P384_SHA384`.
-
-        - - -
         """
         return pulumi.get(self, "algorithm")