pulumi-gcp 8.37.0a1751903932__py3-none-any.whl → 8.39.0a1752699425__py3-none-any.whl

pulumi_gcp/container/cluster.py

@@ -24,6 +24,7 @@ class ClusterArgs:
     def __init__(__self__, *,
                  addons_config: Optional[pulumi.Input['ClusterAddonsConfigArgs']] = None,
                  allow_net_admin: Optional[pulumi.Input[builtins.bool]] = None,
+                 anonymous_authentication_config: Optional[pulumi.Input['ClusterAnonymousAuthenticationConfigArgs']] = None,
                  authenticator_groups_config: Optional[pulumi.Input['ClusterAuthenticatorGroupsConfigArgs']] = None,
                  binary_authorization: Optional[pulumi.Input['ClusterBinaryAuthorizationArgs']] = None,
                  cluster_autoscaling: Optional[pulumi.Input['ClusterClusterAutoscalingArgs']] = None,
@@ -107,6 +108,10 @@ class ClusterArgs:
         :param pulumi.Input[builtins.bool] allow_net_admin: Enable NET_ADMIN for the cluster. Defaults to
                `false`. This field should only be enabled for Autopilot clusters (`enable_autopilot`
                set to `true`).
+        :param pulumi.Input['ClusterAnonymousAuthenticationConfigArgs'] anonymous_authentication_config: Configuration for [anonymous authentication restrictions](https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#restrict-anon-access). Structure is documented below.
+               
+               
+               <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         :param pulumi.Input['ClusterAuthenticatorGroupsConfigArgs'] authenticator_groups_config: Configuration for the
                [Google Groups for GKE](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control#groups-setup-gsuite) feature.
                Structure is documented below.
@@ -162,9 +167,6 @@ class ClusterArgs:
         :param pulumi.Input[builtins.bool] enable_tpu: Whether to enable Cloud TPU resources in this cluster.
                See the [official documentation](https://cloud.google.com/tpu/docs/kubernetes-engine-setup).
         :param pulumi.Input['ClusterEnterpriseConfigArgs'] enterprise_config: Configuration for [Enterprise edition].(https://cloud.google.com/kubernetes-engine/enterprise/docs/concepts/gke-editions). Structure is documented below.
-               
-               
-               <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         :param pulumi.Input['ClusterFleetArgs'] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input['ClusterGatewayApiConfigArgs'] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input['ClusterGkeAutoUpgradeConfigArgs'] gke_auto_upgrade_config: Configuration options for the auto-upgrade patch type feature, which provide more control over the speed of automatic upgrades of your GKE clusters.
@@ -326,6 +328,8 @@ class ClusterArgs:
             pulumi.set(__self__, "addons_config", addons_config)
         if allow_net_admin is not None:
             pulumi.set(__self__, "allow_net_admin", allow_net_admin)
+        if anonymous_authentication_config is not None:
+            pulumi.set(__self__, "anonymous_authentication_config", anonymous_authentication_config)
         if authenticator_groups_config is not None:
             pulumi.set(__self__, "authenticator_groups_config", authenticator_groups_config)
         if binary_authorization is not None:
@@ -506,6 +510,21 @@ class ClusterArgs:
     def allow_net_admin(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "allow_net_admin", value)
 
+    @property
+    @pulumi.getter(name="anonymousAuthenticationConfig")
+    def anonymous_authentication_config(self) -> Optional[pulumi.Input['ClusterAnonymousAuthenticationConfigArgs']]:
+        """
+        Configuration for [anonymous authentication restrictions](https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#restrict-anon-access). Structure is documented below.
+
+
+        <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
+        """
+        return pulumi.get(self, "anonymous_authentication_config")
+
+    @anonymous_authentication_config.setter
+    def anonymous_authentication_config(self, value: Optional[pulumi.Input['ClusterAnonymousAuthenticationConfigArgs']]):
+        pulumi.set(self, "anonymous_authentication_config", value)
+
     @property
     @pulumi.getter(name="authenticatorGroupsConfig")
     def authenticator_groups_config(self) -> Optional[pulumi.Input['ClusterAuthenticatorGroupsConfigArgs']]:
@@ -860,9 +879,6 @@ class ClusterArgs:
     def enterprise_config(self) -> Optional[pulumi.Input['ClusterEnterpriseConfigArgs']]:
         """
         Configuration for [Enterprise edition].(https://cloud.google.com/kubernetes-engine/enterprise/docs/concepts/gke-editions). Structure is documented below.
-
-
-        <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         """
         return pulumi.get(self, "enterprise_config")
 
@@ -1560,6 +1576,7 @@ class _ClusterState:
     def __init__(__self__, *,
                  addons_config: Optional[pulumi.Input['ClusterAddonsConfigArgs']] = None,
                  allow_net_admin: Optional[pulumi.Input[builtins.bool]] = None,
+                 anonymous_authentication_config: Optional[pulumi.Input['ClusterAnonymousAuthenticationConfigArgs']] = None,
                  authenticator_groups_config: Optional[pulumi.Input['ClusterAuthenticatorGroupsConfigArgs']] = None,
                  binary_authorization: Optional[pulumi.Input['ClusterBinaryAuthorizationArgs']] = None,
                  cluster_autoscaling: Optional[pulumi.Input['ClusterClusterAutoscalingArgs']] = None,
@@ -1652,6 +1669,10 @@ class _ClusterState:
         :param pulumi.Input[builtins.bool] allow_net_admin: Enable NET_ADMIN for the cluster. Defaults to
                `false`. This field should only be enabled for Autopilot clusters (`enable_autopilot`
                set to `true`).
+        :param pulumi.Input['ClusterAnonymousAuthenticationConfigArgs'] anonymous_authentication_config: Configuration for [anonymous authentication restrictions](https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#restrict-anon-access). Structure is documented below.
+               
+               
+               <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         :param pulumi.Input['ClusterAuthenticatorGroupsConfigArgs'] authenticator_groups_config: Configuration for the
                [Google Groups for GKE](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control#groups-setup-gsuite) feature.
                Structure is documented below.
@@ -1709,9 +1730,6 @@ class _ClusterState:
                See the [official documentation](https://cloud.google.com/tpu/docs/kubernetes-engine-setup).
         :param pulumi.Input[builtins.str] endpoint: The IP address of this cluster's Kubernetes master.
         :param pulumi.Input['ClusterEnterpriseConfigArgs'] enterprise_config: Configuration for [Enterprise edition].(https://cloud.google.com/kubernetes-engine/enterprise/docs/concepts/gke-editions). Structure is documented below.
-               
-               
-               <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         :param pulumi.Input['ClusterFleetArgs'] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input['ClusterGatewayApiConfigArgs'] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input['ClusterGkeAutoUpgradeConfigArgs'] gke_auto_upgrade_config: Configuration options for the auto-upgrade patch type feature, which provide more control over the speed of automatic upgrades of your GKE clusters.
@@ -1886,6 +1904,8 @@ class _ClusterState:
             pulumi.set(__self__, "addons_config", addons_config)
         if allow_net_admin is not None:
             pulumi.set(__self__, "allow_net_admin", allow_net_admin)
+        if anonymous_authentication_config is not None:
+            pulumi.set(__self__, "anonymous_authentication_config", anonymous_authentication_config)
         if authenticator_groups_config is not None:
             pulumi.set(__self__, "authenticator_groups_config", authenticator_groups_config)
         if binary_authorization is not None:
@@ -2084,6 +2104,21 @@ class _ClusterState:
     def allow_net_admin(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "allow_net_admin", value)
 
+    @property
+    @pulumi.getter(name="anonymousAuthenticationConfig")
+    def anonymous_authentication_config(self) -> Optional[pulumi.Input['ClusterAnonymousAuthenticationConfigArgs']]:
+        """
+        Configuration for [anonymous authentication restrictions](https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#restrict-anon-access). Structure is documented below.
+
+
+        <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
+        """
+        return pulumi.get(self, "anonymous_authentication_config")
+
+    @anonymous_authentication_config.setter
+    def anonymous_authentication_config(self, value: Optional[pulumi.Input['ClusterAnonymousAuthenticationConfigArgs']]):
+        pulumi.set(self, "anonymous_authentication_config", value)
+
     @property
     @pulumi.getter(name="authenticatorGroupsConfig")
     def authenticator_groups_config(self) -> Optional[pulumi.Input['ClusterAuthenticatorGroupsConfigArgs']]:
@@ -2462,9 +2497,6 @@ class _ClusterState:
     def enterprise_config(self) -> Optional[pulumi.Input['ClusterEnterpriseConfigArgs']]:
         """
         Configuration for [Enterprise edition].(https://cloud.google.com/kubernetes-engine/enterprise/docs/concepts/gke-editions). Structure is documented below.
-
-
-        <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         """
         return pulumi.get(self, "enterprise_config")
 
@@ -3253,6 +3285,7 @@ class Cluster(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  addons_config: Optional[pulumi.Input[Union['ClusterAddonsConfigArgs', 'ClusterAddonsConfigArgsDict']]] = None,
                  allow_net_admin: Optional[pulumi.Input[builtins.bool]] = None,
+                 anonymous_authentication_config: Optional[pulumi.Input[Union['ClusterAnonymousAuthenticationConfigArgs', 'ClusterAnonymousAuthenticationConfigArgsDict']]] = None,
                  authenticator_groups_config: Optional[pulumi.Input[Union['ClusterAuthenticatorGroupsConfigArgs', 'ClusterAuthenticatorGroupsConfigArgsDict']]] = None,
                  binary_authorization: Optional[pulumi.Input[Union['ClusterBinaryAuthorizationArgs', 'ClusterBinaryAuthorizationArgsDict']]] = None,
                  cluster_autoscaling: Optional[pulumi.Input[Union['ClusterClusterAutoscalingArgs', 'ClusterClusterAutoscalingArgsDict']]] = None,
@@ -3458,6 +3491,10 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[builtins.bool] allow_net_admin: Enable NET_ADMIN for the cluster. Defaults to
                `false`. This field should only be enabled for Autopilot clusters (`enable_autopilot`
                set to `true`).
+        :param pulumi.Input[Union['ClusterAnonymousAuthenticationConfigArgs', 'ClusterAnonymousAuthenticationConfigArgsDict']] anonymous_authentication_config: Configuration for [anonymous authentication restrictions](https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#restrict-anon-access). Structure is documented below.
+               
+               
+               <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         :param pulumi.Input[Union['ClusterAuthenticatorGroupsConfigArgs', 'ClusterAuthenticatorGroupsConfigArgsDict']] authenticator_groups_config: Configuration for the
                [Google Groups for GKE](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control#groups-setup-gsuite) feature.
                Structure is documented below.
@@ -3513,9 +3550,6 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[builtins.bool] enable_tpu: Whether to enable Cloud TPU resources in this cluster.
                See the [official documentation](https://cloud.google.com/tpu/docs/kubernetes-engine-setup).
         :param pulumi.Input[Union['ClusterEnterpriseConfigArgs', 'ClusterEnterpriseConfigArgsDict']] enterprise_config: Configuration for [Enterprise edition].(https://cloud.google.com/kubernetes-engine/enterprise/docs/concepts/gke-editions). Structure is documented below.
-               
-               
-               <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         :param pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input[Union['ClusterGkeAutoUpgradeConfigArgs', 'ClusterGkeAutoUpgradeConfigArgsDict']] gke_auto_upgrade_config: Configuration options for the auto-upgrade patch type feature, which provide more control over the speed of automatic upgrades of your GKE clusters.
@@ -3817,6 +3851,7 @@ class Cluster(pulumi.CustomResource):
                  opts: Optional[pulumi.ResourceOptions] = None,
                  addons_config: Optional[pulumi.Input[Union['ClusterAddonsConfigArgs', 'ClusterAddonsConfigArgsDict']]] = None,
                  allow_net_admin: Optional[pulumi.Input[builtins.bool]] = None,
+                 anonymous_authentication_config: Optional[pulumi.Input[Union['ClusterAnonymousAuthenticationConfigArgs', 'ClusterAnonymousAuthenticationConfigArgsDict']]] = None,
                  authenticator_groups_config: Optional[pulumi.Input[Union['ClusterAuthenticatorGroupsConfigArgs', 'ClusterAuthenticatorGroupsConfigArgsDict']]] = None,
                  binary_authorization: Optional[pulumi.Input[Union['ClusterBinaryAuthorizationArgs', 'ClusterBinaryAuthorizationArgsDict']]] = None,
                  cluster_autoscaling: Optional[pulumi.Input[Union['ClusterClusterAutoscalingArgs', 'ClusterClusterAutoscalingArgsDict']]] = None,
@@ -3904,6 +3939,7 @@ class Cluster(pulumi.CustomResource):
 
             __props__.__dict__["addons_config"] = addons_config
             __props__.__dict__["allow_net_admin"] = allow_net_admin
+            __props__.__dict__["anonymous_authentication_config"] = anonymous_authentication_config
             __props__.__dict__["authenticator_groups_config"] = authenticator_groups_config
             __props__.__dict__["binary_authorization"] = binary_authorization
             __props__.__dict__["cluster_autoscaling"] = cluster_autoscaling
@@ -4003,6 +4039,7 @@ class Cluster(pulumi.CustomResource):
             opts: Optional[pulumi.ResourceOptions] = None,
             addons_config: Optional[pulumi.Input[Union['ClusterAddonsConfigArgs', 'ClusterAddonsConfigArgsDict']]] = None,
             allow_net_admin: Optional[pulumi.Input[builtins.bool]] = None,
+            anonymous_authentication_config: Optional[pulumi.Input[Union['ClusterAnonymousAuthenticationConfigArgs', 'ClusterAnonymousAuthenticationConfigArgsDict']]] = None,
             authenticator_groups_config: Optional[pulumi.Input[Union['ClusterAuthenticatorGroupsConfigArgs', 'ClusterAuthenticatorGroupsConfigArgsDict']]] = None,
             binary_authorization: Optional[pulumi.Input[Union['ClusterBinaryAuthorizationArgs', 'ClusterBinaryAuthorizationArgsDict']]] = None,
             cluster_autoscaling: Optional[pulumi.Input[Union['ClusterClusterAutoscalingArgs', 'ClusterClusterAutoscalingArgsDict']]] = None,
@@ -4100,6 +4137,10 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[builtins.bool] allow_net_admin: Enable NET_ADMIN for the cluster. Defaults to
                `false`. This field should only be enabled for Autopilot clusters (`enable_autopilot`
                set to `true`).
+        :param pulumi.Input[Union['ClusterAnonymousAuthenticationConfigArgs', 'ClusterAnonymousAuthenticationConfigArgsDict']] anonymous_authentication_config: Configuration for [anonymous authentication restrictions](https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#restrict-anon-access). Structure is documented below.
+               
+               
+               <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         :param pulumi.Input[Union['ClusterAuthenticatorGroupsConfigArgs', 'ClusterAuthenticatorGroupsConfigArgsDict']] authenticator_groups_config: Configuration for the
                [Google Groups for GKE](https://cloud.google.com/kubernetes-engine/docs/how-to/role-based-access-control#groups-setup-gsuite) feature.
                Structure is documented below.
@@ -4157,9 +4198,6 @@ class Cluster(pulumi.CustomResource):
                See the [official documentation](https://cloud.google.com/tpu/docs/kubernetes-engine-setup).
         :param pulumi.Input[builtins.str] endpoint: The IP address of this cluster's Kubernetes master.
         :param pulumi.Input[Union['ClusterEnterpriseConfigArgs', 'ClusterEnterpriseConfigArgsDict']] enterprise_config: Configuration for [Enterprise edition].(https://cloud.google.com/kubernetes-engine/enterprise/docs/concepts/gke-editions). Structure is documented below.
-               
-               
-               <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         :param pulumi.Input[Union['ClusterFleetArgs', 'ClusterFleetArgsDict']] fleet: Fleet configuration for the cluster. Structure is documented below.
         :param pulumi.Input[Union['ClusterGatewayApiConfigArgs', 'ClusterGatewayApiConfigArgsDict']] gateway_api_config: Configuration for [GKE Gateway API controller](https://cloud.google.com/kubernetes-engine/docs/concepts/gateway-api). Structure is documented below.
         :param pulumi.Input[Union['ClusterGkeAutoUpgradeConfigArgs', 'ClusterGkeAutoUpgradeConfigArgsDict']] gke_auto_upgrade_config: Configuration options for the auto-upgrade patch type feature, which provide more control over the speed of automatic upgrades of your GKE clusters.
@@ -4336,6 +4374,7 @@ class Cluster(pulumi.CustomResource):
 
         __props__.__dict__["addons_config"] = addons_config
         __props__.__dict__["allow_net_admin"] = allow_net_admin
+        __props__.__dict__["anonymous_authentication_config"] = anonymous_authentication_config
         __props__.__dict__["authenticator_groups_config"] = authenticator_groups_config
         __props__.__dict__["binary_authorization"] = binary_authorization
         __props__.__dict__["cluster_autoscaling"] = cluster_autoscaling
@@ -4442,6 +4481,17 @@ class Cluster(pulumi.CustomResource):
         """
         return pulumi.get(self, "allow_net_admin")
 
+    @property
+    @pulumi.getter(name="anonymousAuthenticationConfig")
+    def anonymous_authentication_config(self) -> pulumi.Output['outputs.ClusterAnonymousAuthenticationConfig']:
+        """
+        Configuration for [anonymous authentication restrictions](https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#restrict-anon-access). Structure is documented below.
+
+
+        <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
+        """
+        return pulumi.get(self, "anonymous_authentication_config")
+
     @property
     @pulumi.getter(name="authenticatorGroupsConfig")
     def authenticator_groups_config(self) -> pulumi.Output['outputs.ClusterAuthenticatorGroupsConfig']:
@@ -4704,9 +4754,6 @@ class Cluster(pulumi.CustomResource):
     def enterprise_config(self) -> pulumi.Output['outputs.ClusterEnterpriseConfig']:
         """
         Configuration for [Enterprise edition].(https://cloud.google.com/kubernetes-engine/enterprise/docs/concepts/gke-editions). Structure is documented below.
-
-
-        <a name="nested_default_snat_status"></a>The `default_snat_status` block supports
         """
         return pulumi.get(self, "enterprise_config")
 

pulumi_gcp/container/get_cluster.py

@@ -28,13 +28,16 @@ class GetClusterResult:
     """
     A collection of values returned by getCluster.
     """
-    def __init__(__self__, addons_configs=None, allow_net_admin=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, control_plane_endpoints_configs=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, disable_l4_lb_firewall_reconciliation=None, dns_configs=None, effective_labels=None, enable_autopilot=None, enable_cilium_clusterwide_network_policy=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, enterprise_configs=None, fleets=None, gateway_api_configs=None, gke_auto_upgrade_configs=None, id=None, identity_service_configs=None, in_transit_encryption_config=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_performance_configs=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_autoscalings=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, pulumi_labels=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, secret_manager_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, user_managed_keys_configs=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
+    def __init__(__self__, addons_configs=None, allow_net_admin=None, anonymous_authentication_configs=None, authenticator_groups_configs=None, binary_authorizations=None, cluster_autoscalings=None, cluster_ipv4_cidr=None, cluster_telemetries=None, confidential_nodes=None, control_plane_endpoints_configs=None, cost_management_configs=None, database_encryptions=None, datapath_provider=None, default_max_pods_per_node=None, default_snat_statuses=None, deletion_protection=None, description=None, disable_l4_lb_firewall_reconciliation=None, dns_configs=None, effective_labels=None, enable_autopilot=None, enable_cilium_clusterwide_network_policy=None, enable_fqdn_network_policy=None, enable_intranode_visibility=None, enable_k8s_beta_apis=None, enable_kubernetes_alpha=None, enable_l4_ilb_subsetting=None, enable_legacy_abac=None, enable_multi_networking=None, enable_shielded_nodes=None, enable_tpu=None, endpoint=None, enterprise_configs=None, fleets=None, gateway_api_configs=None, gke_auto_upgrade_configs=None, id=None, identity_service_configs=None, in_transit_encryption_config=None, initial_node_count=None, ip_allocation_policies=None, label_fingerprint=None, location=None, logging_configs=None, logging_service=None, maintenance_policies=None, master_authorized_networks_configs=None, master_auths=None, master_version=None, mesh_certificates=None, min_master_version=None, monitoring_configs=None, monitoring_service=None, name=None, network=None, network_performance_configs=None, network_policies=None, networking_mode=None, node_configs=None, node_locations=None, node_pool_auto_configs=None, node_pool_defaults=None, node_pools=None, node_version=None, notification_configs=None, operation=None, pod_autoscalings=None, pod_security_policy_configs=None, private_cluster_configs=None, private_ipv6_google_access=None, project=None, protect_configs=None, pulumi_labels=None, release_channels=None, remove_default_node_pool=None, resource_labels=None, resource_usage_export_configs=None, secret_manager_configs=None, security_posture_configs=None, self_link=None, service_external_ips_configs=None, services_ipv4_cidr=None, subnetwork=None, tpu_configs=None, tpu_ipv4_cidr_block=None, user_managed_keys_configs=None, vertical_pod_autoscalings=None, workload_alts_configs=None, workload_identity_configs=None):
         if addons_configs and not isinstance(addons_configs, list):
             raise TypeError("Expected argument 'addons_configs' to be a list")
         pulumi.set(__self__, "addons_configs", addons_configs)
         if allow_net_admin and not isinstance(allow_net_admin, bool):
             raise TypeError("Expected argument 'allow_net_admin' to be a bool")
         pulumi.set(__self__, "allow_net_admin", allow_net_admin)
+        if anonymous_authentication_configs and not isinstance(anonymous_authentication_configs, list):
+            raise TypeError("Expected argument 'anonymous_authentication_configs' to be a list")
+        pulumi.set(__self__, "anonymous_authentication_configs", anonymous_authentication_configs)
         if authenticator_groups_configs and not isinstance(authenticator_groups_configs, list):
             raise TypeError("Expected argument 'authenticator_groups_configs' to be a list")
         pulumi.set(__self__, "authenticator_groups_configs", authenticator_groups_configs)
@@ -304,6 +307,11 @@ class GetClusterResult:
     def allow_net_admin(self) -> builtins.bool:
         return pulumi.get(self, "allow_net_admin")
 
+    @property
+    @pulumi.getter(name="anonymousAuthenticationConfigs")
+    def anonymous_authentication_configs(self) -> Sequence['outputs.GetClusterAnonymousAuthenticationConfigResult']:
+        return pulumi.get(self, "anonymous_authentication_configs")
+
     @property
     @pulumi.getter(name="authenticatorGroupsConfigs")
     def authenticator_groups_configs(self) -> Sequence['outputs.GetClusterAuthenticatorGroupsConfigResult']:
@@ -746,6 +754,7 @@ class AwaitableGetClusterResult(GetClusterResult):
         return GetClusterResult(
             addons_configs=self.addons_configs,
             allow_net_admin=self.allow_net_admin,
+            anonymous_authentication_configs=self.anonymous_authentication_configs,
             authenticator_groups_configs=self.authenticator_groups_configs,
             binary_authorizations=self.binary_authorizations,
             cluster_autoscalings=self.cluster_autoscalings,
@@ -873,6 +882,7 @@ def get_cluster(location: Optional[builtins.str] = None,
     return AwaitableGetClusterResult(
         addons_configs=pulumi.get(__ret__, 'addons_configs'),
         allow_net_admin=pulumi.get(__ret__, 'allow_net_admin'),
+        anonymous_authentication_configs=pulumi.get(__ret__, 'anonymous_authentication_configs'),
         authenticator_groups_configs=pulumi.get(__ret__, 'authenticator_groups_configs'),
         binary_authorizations=pulumi.get(__ret__, 'binary_authorizations'),
         cluster_autoscalings=pulumi.get(__ret__, 'cluster_autoscalings'),
@@ -997,6 +1007,7 @@ def get_cluster_output(location: Optional[pulumi.Input[Optional[builtins.str]]]
     return __ret__.apply(lambda __response__: GetClusterResult(
         addons_configs=pulumi.get(__response__, 'addons_configs'),
         allow_net_admin=pulumi.get(__response__, 'allow_net_admin'),
+        anonymous_authentication_configs=pulumi.get(__response__, 'anonymous_authentication_configs'),
         authenticator_groups_configs=pulumi.get(__response__, 'authenticator_groups_configs'),
         binary_authorizations=pulumi.get(__response__, 'binary_authorizations'),
         cluster_autoscalings=pulumi.get(__response__, 'cluster_autoscalings'),

pulumi_gcp/container/outputs.py

@@ -104,6 +104,7 @@ __all__ = [
     'ClusterAddonsConfigRayOperatorConfigRayClusterLoggingConfig',
     'ClusterAddonsConfigRayOperatorConfigRayClusterMonitoringConfig',
     'ClusterAddonsConfigStatefulHaConfig',
+    'ClusterAnonymousAuthenticationConfig',
     'ClusterAuthenticatorGroupsConfig',
     'ClusterBinaryAuthorization',
     'ClusterClusterAutoscaling',
@@ -247,6 +248,7 @@ __all__ = [
     'ClusterResourceUsageExportConfig',
     'ClusterResourceUsageExportConfigBigqueryDestination',
     'ClusterSecretManagerConfig',
+    'ClusterSecretManagerConfigRotationConfig',
     'ClusterSecurityPostureConfig',
     'ClusterServiceExternalIpsConfig',
     'ClusterTpuConfig',
@@ -314,6 +316,7 @@ __all__ = [
     'GetClusterAddonsConfigRayOperatorConfigRayClusterLoggingConfigResult',
     'GetClusterAddonsConfigRayOperatorConfigRayClusterMonitoringConfigResult',
     'GetClusterAddonsConfigStatefulHaConfigResult',
+    'GetClusterAnonymousAuthenticationConfigResult',
     'GetClusterAuthenticatorGroupsConfigResult',
     'GetClusterBinaryAuthorizationResult',
     'GetClusterClusterAutoscalingResult',
@@ -457,6 +460,7 @@ __all__ = [
     'GetClusterResourceUsageExportConfigResult',
     'GetClusterResourceUsageExportConfigBigqueryDestinationResult',
     'GetClusterSecretManagerConfigResult',
+    'GetClusterSecretManagerConfigRotationConfigResult',
     'GetClusterSecurityPostureConfigResult',
     'GetClusterServiceExternalIpsConfigResult',
     'GetClusterTpuConfigResult',
@@ -595,8 +599,7 @@ class AttachedClusterFleet(dict):
                  project: builtins.str,
                  membership: Optional[builtins.str] = None):
         """
-        :param builtins.str project: The ID of the project in which the resource belongs.
-               If it is not provided, the provider project is used.
+        :param builtins.str project: The number of the Fleet host project where this cluster will be registered.
         :param builtins.str membership: (Output)
                The name of the managed Hub Membership resource associated to this
                cluster. Membership names are formatted as
@@ -610,8 +613,7 @@ class AttachedClusterFleet(dict):
     @pulumi.getter
     def project(self) -> builtins.str:
         """
-        The ID of the project in which the resource belongs.
-        If it is not provided, the provider project is used.
+        The number of the Fleet host project where this cluster will be registered.
         """
         return pulumi.get(self, "project")
 
@@ -4555,6 +4557,24 @@ class ClusterAddonsConfigStatefulHaConfig(dict):
         return pulumi.get(self, "enabled")
 
 
+@pulumi.output_type
+class ClusterAnonymousAuthenticationConfig(dict):
+    def __init__(__self__, *,
+                 mode: builtins.str):
+        """
+        :param builtins.str mode: Sets or removes authentication restrictions. Available options include `LIMITED` and `ENABLED`.
+        """
+        pulumi.set(__self__, "mode", mode)
+
+    @property
+    @pulumi.getter
+    def mode(self) -> builtins.str:
+        """
+        Sets or removes authentication restrictions. Available options include `LIMITED` and `ENABLED`.
+        """
+        return pulumi.get(self, "mode")
+
+
 @pulumi.output_type
 class ClusterAuthenticatorGroupsConfig(dict):
     @staticmethod
@@ -13502,12 +13522,33 @@ class ClusterResourceUsageExportConfigBigqueryDestination(dict):
 
 @pulumi.output_type
 class ClusterSecretManagerConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "rotationConfig":
+            suggest = "rotation_config"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ClusterSecretManagerConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ClusterSecretManagerConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ClusterSecretManagerConfig.__key_warning(key)
+        return super().get(key, default)
+
     def __init__(__self__, *,
-                 enabled: builtins.bool):
+                 enabled: builtins.bool,
+                 rotation_config: Optional['outputs.ClusterSecretManagerConfigRotationConfig'] = None):
         """
         :param builtins.bool enabled: Enable the Secret Manager add-on for this cluster.
+        :param 'ClusterSecretManagerConfigRotationConfigArgs' rotation_config: config for secret manager auto rotation. Structure is docuemented below
         """
         pulumi.set(__self__, "enabled", enabled)
+        if rotation_config is not None:
+            pulumi.set(__self__, "rotation_config", rotation_config)
 
     @property
     @pulumi.getter
@@ -13517,6 +13558,61 @@ class ClusterSecretManagerConfig(dict):
         """
         return pulumi.get(self, "enabled")
 
+    @property
+    @pulumi.getter(name="rotationConfig")
+    def rotation_config(self) -> Optional['outputs.ClusterSecretManagerConfigRotationConfig']:
+        """
+        config for secret manager auto rotation. Structure is docuemented below
+        """
+        return pulumi.get(self, "rotation_config")
+
+
+@pulumi.output_type
+class ClusterSecretManagerConfigRotationConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "rotationInterval":
+            suggest = "rotation_interval"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ClusterSecretManagerConfigRotationConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ClusterSecretManagerConfigRotationConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ClusterSecretManagerConfigRotationConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 enabled: builtins.bool,
+                 rotation_interval: Optional[builtins.str] = None):
+        """
+        :param builtins.bool enabled: Enable the roation in Secret Manager add-on for this cluster.
+        :param builtins.str rotation_interval: The interval between two consecutive rotations. Default rotation interval is 2 minutes.
+        """
+        pulumi.set(__self__, "enabled", enabled)
+        if rotation_interval is not None:
+            pulumi.set(__self__, "rotation_interval", rotation_interval)
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> builtins.bool:
+        """
+        Enable the roation in Secret Manager add-on for this cluster.
+        """
+        return pulumi.get(self, "enabled")
+
+    @property
+    @pulumi.getter(name="rotationInterval")
+    def rotation_interval(self) -> Optional[builtins.str]:
+        """
+        The interval between two consecutive rotations. Default rotation interval is 2 minutes.
+        """
+        return pulumi.get(self, "rotation_interval")
+
 
 @pulumi.output_type
 class ClusterSecurityPostureConfig(dict):
@@ -17019,6 +17115,30 @@ class GetClusterAddonsConfigStatefulHaConfigResult(dict):
         return pulumi.get(self, "enabled")
 
 
+@pulumi.output_type
+class GetClusterAnonymousAuthenticationConfigResult(dict):
+    def __init__(__self__, *,
+                 mode: builtins.str):
+        """
+        :param builtins.str mode: Setting this to LIMITED will restrict authentication of anonymous users to health check endpoints only.
+                Accepted values are:
+               * ENABLED: Authentication of anonymous users is enabled for all endpoints.
+               * LIMITED: Anonymous access is only allowed for health check endpoints.
+        """
+        pulumi.set(__self__, "mode", mode)
+
+    @property
+    @pulumi.getter
+    def mode(self) -> builtins.str:
+        """
+        Setting this to LIMITED will restrict authentication of anonymous users to health check endpoints only.
+         Accepted values are:
+        * ENABLED: Authentication of anonymous users is enabled for all endpoints.
+        * LIMITED: Anonymous access is only allowed for health check endpoints.
+        """
+        return pulumi.get(self, "mode")
+
+
 @pulumi.output_type
 class GetClusterAuthenticatorGroupsConfigResult(dict):
     def __init__(__self__, *,
@@ -22623,11 +22743,14 @@ class GetClusterResourceUsageExportConfigBigqueryDestinationResult(dict):
 @pulumi.output_type
 class GetClusterSecretManagerConfigResult(dict):
     def __init__(__self__, *,
-                 enabled: builtins.bool):
+                 enabled: builtins.bool,
+                 rotation_configs: Sequence['outputs.GetClusterSecretManagerConfigRotationConfigResult']):
         """
         :param builtins.bool enabled: Enable the Secret manager csi component.
+        :param Sequence['GetClusterSecretManagerConfigRotationConfigArgs'] rotation_configs: Configuration for Secret Manager auto rotation.
         """
         pulumi.set(__self__, "enabled", enabled)
+        pulumi.set(__self__, "rotation_configs", rotation_configs)
 
     @property
     @pulumi.getter
@@ -22637,6 +22760,43 @@ class GetClusterSecretManagerConfigResult(dict):
         """
         return pulumi.get(self, "enabled")
 
+    @property
+    @pulumi.getter(name="rotationConfigs")
+    def rotation_configs(self) -> Sequence['outputs.GetClusterSecretManagerConfigRotationConfigResult']:
+        """
+        Configuration for Secret Manager auto rotation.
+        """
+        return pulumi.get(self, "rotation_configs")
+
+
+@pulumi.output_type
+class GetClusterSecretManagerConfigRotationConfigResult(dict):
+    def __init__(__self__, *,
+                 enabled: builtins.bool,
+                 rotation_interval: builtins.str):
+        """
+        :param builtins.bool enabled: Enable the Secret manager auto rotation.
+        :param builtins.str rotation_interval: The interval between two consecutive rotations. Default rotation interval is 2 minutes
+        """
+        pulumi.set(__self__, "enabled", enabled)
+        pulumi.set(__self__, "rotation_interval", rotation_interval)
+
+    @property
+    @pulumi.getter
+    def enabled(self) -> builtins.bool:
+        """
+        Enable the Secret manager auto rotation.
+        """
+        return pulumi.get(self, "enabled")
+
+    @property
+    @pulumi.getter(name="rotationInterval")
+    def rotation_interval(self) -> builtins.str:
+        """
+        The interval between two consecutive rotations. Default rotation interval is 2 minutes
+        """
+        return pulumi.get(self, "rotation_interval")
+
 
 @pulumi.output_type
 class GetClusterSecurityPostureConfigResult(dict):

pulumi_gcp/containeranalysis/_inputs.py

@@ -95,8 +95,6 @@ if not MYPY:
         """
         The human readable name of this Attestation Authority, for
         example "qa".
-
-        - - -
         """
 elif False:
     NoteAttestationAuthorityHintArgsDict: TypeAlias = Mapping[str, Any]
@@ -108,8 +106,6 @@ class NoteAttestationAuthorityHintArgs:
         """
         :param pulumi.Input[builtins.str] human_readable_name: The human readable name of this Attestation Authority, for
                example "qa".
-               
-               - - -
         """
         pulumi.set(__self__, "human_readable_name", human_readable_name)
 
@@ -119,8 +115,6 @@ class NoteAttestationAuthorityHintArgs:
         """
         The human readable name of this Attestation Authority, for
         example "qa".
-
-        - - -
         """
         return pulumi.get(self, "human_readable_name")
 
@@ -356,8 +350,6 @@ if not MYPY:
         * `openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA`
         * RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization):
         * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU"
-
-        - - -
         """
         signature: NotRequired[pulumi.Input[builtins.str]]
         """
@@ -388,8 +380,6 @@ class OccurenceAttestationSignatureArgs:
                * `openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA`
                * RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization):
                * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU"
-               
-               - - -
         :param pulumi.Input[builtins.str] signature: The content of the signature, an opaque bytestring.
                The payload that this signature verifies MUST be
                unambiguously provided with the Signature during
@@ -416,8 +406,6 @@ class OccurenceAttestationSignatureArgs:
         * `openpgp4fpr:74FAF3B861BDA0870C7B6DEF607E48D2A663AEEA`
         * RFC6920 digest-named SubjectPublicKeyInfo (digest of the DER serialization):
         * "ni:///sha-256;cD9o9Cq6LG3jD0iKXqEi_vdjJGecm_iXkbqVoScViaU"
-
-        - - -
         """
         return pulumi.get(self, "public_key_id")