pulumi-gcp 8.40.0a1754636117__py3-none-any.whl → 8.40.0a1754951145__py3-none-any.whl

pulumi_gcp/looker/instance.py

@@ -77,8 +77,11 @@ class InstanceArgs:
                - LOOKER_CORE_NONPROD_STANDARD_ANNUAL: nonprod subscription standard instance
                - LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL: nonprod subscription enterprise instance
                - LOOKER_CORE_NONPROD_EMBED_ANNUAL: nonprod subscription embed instance
+               - LOOKER_CORE_TRIAL_STANDARD: A standard trial edition of Looker (Google Cloud core) product.
+               - LOOKER_CORE_TRIAL_ENTERPRISE: An enterprise trial edition of Looker (Google Cloud core) product.
+               - LOOKER_CORE_TRIAL_EMBED: An embed trial edition of Looker (Google Cloud core) product.
                Default value is `LOOKER_CORE_TRIAL`.
-               Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`.
+               Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`, `LOOKER_CORE_TRIAL_STANDARD`, `LOOKER_CORE_TRIAL_ENTERPRISE`, `LOOKER_CORE_TRIAL_EMBED`.
         :param pulumi.Input[_builtins.bool] private_ip_enabled: Whether private IP is enabled on the Looker instance.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
@@ -285,8 +288,11 @@ class InstanceArgs:
         - LOOKER_CORE_NONPROD_STANDARD_ANNUAL: nonprod subscription standard instance
         - LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL: nonprod subscription enterprise instance
         - LOOKER_CORE_NONPROD_EMBED_ANNUAL: nonprod subscription embed instance
+        - LOOKER_CORE_TRIAL_STANDARD: A standard trial edition of Looker (Google Cloud core) product.
+        - LOOKER_CORE_TRIAL_ENTERPRISE: An enterprise trial edition of Looker (Google Cloud core) product.
+        - LOOKER_CORE_TRIAL_EMBED: An embed trial edition of Looker (Google Cloud core) product.
         Default value is `LOOKER_CORE_TRIAL`.
-        Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`.
+        Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`, `LOOKER_CORE_TRIAL_STANDARD`, `LOOKER_CORE_TRIAL_ENTERPRISE`, `LOOKER_CORE_TRIAL_EMBED`.
         """
         return pulumi.get(self, "platform_edition")
 
@@ -474,8 +480,11 @@ class _InstanceState:
                - LOOKER_CORE_NONPROD_STANDARD_ANNUAL: nonprod subscription standard instance
                - LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL: nonprod subscription enterprise instance
                - LOOKER_CORE_NONPROD_EMBED_ANNUAL: nonprod subscription embed instance
+               - LOOKER_CORE_TRIAL_STANDARD: A standard trial edition of Looker (Google Cloud core) product.
+               - LOOKER_CORE_TRIAL_ENTERPRISE: An enterprise trial edition of Looker (Google Cloud core) product.
+               - LOOKER_CORE_TRIAL_EMBED: An embed trial edition of Looker (Google Cloud core) product.
                Default value is `LOOKER_CORE_TRIAL`.
-               Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`.
+               Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`, `LOOKER_CORE_TRIAL_STANDARD`, `LOOKER_CORE_TRIAL_ENTERPRISE`, `LOOKER_CORE_TRIAL_EMBED`.
         :param pulumi.Input[_builtins.bool] private_ip_enabled: Whether private IP is enabled on the Looker instance.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
@@ -772,8 +781,11 @@ class _InstanceState:
         - LOOKER_CORE_NONPROD_STANDARD_ANNUAL: nonprod subscription standard instance
         - LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL: nonprod subscription enterprise instance
         - LOOKER_CORE_NONPROD_EMBED_ANNUAL: nonprod subscription embed instance
+        - LOOKER_CORE_TRIAL_STANDARD: A standard trial edition of Looker (Google Cloud core) product.
+        - LOOKER_CORE_TRIAL_ENTERPRISE: An enterprise trial edition of Looker (Google Cloud core) product.
+        - LOOKER_CORE_TRIAL_EMBED: An embed trial edition of Looker (Google Cloud core) product.
         Default value is `LOOKER_CORE_TRIAL`.
-        Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`.
+        Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`, `LOOKER_CORE_TRIAL_STANDARD`, `LOOKER_CORE_TRIAL_ENTERPRISE`, `LOOKER_CORE_TRIAL_EMBED`.
         """
         return pulumi.get(self, "platform_edition")
 
@@ -1210,8 +1222,11 @@ class Instance(pulumi.CustomResource):
                - LOOKER_CORE_NONPROD_STANDARD_ANNUAL: nonprod subscription standard instance
                - LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL: nonprod subscription enterprise instance
                - LOOKER_CORE_NONPROD_EMBED_ANNUAL: nonprod subscription embed instance
+               - LOOKER_CORE_TRIAL_STANDARD: A standard trial edition of Looker (Google Cloud core) product.
+               - LOOKER_CORE_TRIAL_ENTERPRISE: An enterprise trial edition of Looker (Google Cloud core) product.
+               - LOOKER_CORE_TRIAL_EMBED: An embed trial edition of Looker (Google Cloud core) product.
                Default value is `LOOKER_CORE_TRIAL`.
-               Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`.
+               Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`, `LOOKER_CORE_TRIAL_STANDARD`, `LOOKER_CORE_TRIAL_ENTERPRISE`, `LOOKER_CORE_TRIAL_EMBED`.
         :param pulumi.Input[_builtins.bool] private_ip_enabled: Whether private IP is enabled on the Looker instance.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
@@ -1639,8 +1654,11 @@ class Instance(pulumi.CustomResource):
                - LOOKER_CORE_NONPROD_STANDARD_ANNUAL: nonprod subscription standard instance
                - LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL: nonprod subscription enterprise instance
                - LOOKER_CORE_NONPROD_EMBED_ANNUAL: nonprod subscription embed instance
+               - LOOKER_CORE_TRIAL_STANDARD: A standard trial edition of Looker (Google Cloud core) product.
+               - LOOKER_CORE_TRIAL_ENTERPRISE: An enterprise trial edition of Looker (Google Cloud core) product.
+               - LOOKER_CORE_TRIAL_EMBED: An embed trial edition of Looker (Google Cloud core) product.
                Default value is `LOOKER_CORE_TRIAL`.
-               Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`.
+               Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`, `LOOKER_CORE_TRIAL_STANDARD`, `LOOKER_CORE_TRIAL_ENTERPRISE`, `LOOKER_CORE_TRIAL_EMBED`.
         :param pulumi.Input[_builtins.bool] private_ip_enabled: Whether private IP is enabled on the Looker instance.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
@@ -1852,8 +1870,11 @@ class Instance(pulumi.CustomResource):
         - LOOKER_CORE_NONPROD_STANDARD_ANNUAL: nonprod subscription standard instance
         - LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL: nonprod subscription enterprise instance
         - LOOKER_CORE_NONPROD_EMBED_ANNUAL: nonprod subscription embed instance
+        - LOOKER_CORE_TRIAL_STANDARD: A standard trial edition of Looker (Google Cloud core) product.
+        - LOOKER_CORE_TRIAL_ENTERPRISE: An enterprise trial edition of Looker (Google Cloud core) product.
+        - LOOKER_CORE_TRIAL_EMBED: An embed trial edition of Looker (Google Cloud core) product.
         Default value is `LOOKER_CORE_TRIAL`.
-        Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`.
+        Possible values are: `LOOKER_CORE_TRIAL`, `LOOKER_CORE_STANDARD`, `LOOKER_CORE_STANDARD_ANNUAL`, `LOOKER_CORE_ENTERPRISE_ANNUAL`, `LOOKER_CORE_EMBED_ANNUAL`, `LOOKER_CORE_NONPROD_STANDARD_ANNUAL`, `LOOKER_CORE_NONPROD_ENTERPRISE_ANNUAL`, `LOOKER_CORE_NONPROD_EMBED_ANNUAL`, `LOOKER_CORE_TRIAL_STANDARD`, `LOOKER_CORE_TRIAL_ENTERPRISE`, `LOOKER_CORE_TRIAL_EMBED`.
         """
         return pulumi.get(self, "platform_edition")
 

pulumi_gcp/managedkafka/_inputs.py

@@ -27,6 +27,12 @@ __all__ = [
     'ClusterGcpConfigAccessConfigNetworkConfigArgsDict',
     'ClusterRebalanceConfigArgs',
     'ClusterRebalanceConfigArgsDict',
+    'ClusterTlsConfigArgs',
+    'ClusterTlsConfigArgsDict',
+    'ClusterTlsConfigTrustConfigArgs',
+    'ClusterTlsConfigTrustConfigArgsDict',
+    'ClusterTlsConfigTrustConfigCasConfigArgs',
+    'ClusterTlsConfigTrustConfigCasConfigArgsDict',
     'ConnectClusterCapacityConfigArgs',
     'ConnectClusterCapacityConfigArgsDict',
     'ConnectClusterGcpConfigArgs',
@@ -341,6 +347,127 @@ class ClusterRebalanceConfigArgs:
         pulumi.set(self, "mode", value)
 
 
+if not MYPY:
+    class ClusterTlsConfigArgsDict(TypedDict):
+        ssl_principal_mapping_rules: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The rules for mapping mTLS certificate Distinguished Names (DNs) to shortened principal names for Kafka ACLs. This field corresponds exactly to the ssl.principal.mapping.rules broker config and matches the format and syntax defined in the Apache Kafka documentation. Setting or modifying this field will trigger a rolling restart of the Kafka brokers to apply the change. An empty string means that the default Kafka behavior is used. Example: `RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT`
+        """
+        trust_config: NotRequired[pulumi.Input['ClusterTlsConfigTrustConfigArgsDict']]
+        """
+        The configuration of the broker truststore. If specified, clients can use mTLS for authentication.
+        Structure is documented below.
+        """
+elif False:
+    ClusterTlsConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ClusterTlsConfigArgs:
+    def __init__(__self__, *,
+                 ssl_principal_mapping_rules: Optional[pulumi.Input[_builtins.str]] = None,
+                 trust_config: Optional[pulumi.Input['ClusterTlsConfigTrustConfigArgs']] = None):
+        """
+        :param pulumi.Input[_builtins.str] ssl_principal_mapping_rules: The rules for mapping mTLS certificate Distinguished Names (DNs) to shortened principal names for Kafka ACLs. This field corresponds exactly to the ssl.principal.mapping.rules broker config and matches the format and syntax defined in the Apache Kafka documentation. Setting or modifying this field will trigger a rolling restart of the Kafka brokers to apply the change. An empty string means that the default Kafka behavior is used. Example: `RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT`
+        :param pulumi.Input['ClusterTlsConfigTrustConfigArgs'] trust_config: The configuration of the broker truststore. If specified, clients can use mTLS for authentication.
+               Structure is documented below.
+        """
+        if ssl_principal_mapping_rules is not None:
+            pulumi.set(__self__, "ssl_principal_mapping_rules", ssl_principal_mapping_rules)
+        if trust_config is not None:
+            pulumi.set(__self__, "trust_config", trust_config)
+
+    @_builtins.property
+    @pulumi.getter(name="sslPrincipalMappingRules")
+    def ssl_principal_mapping_rules(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The rules for mapping mTLS certificate Distinguished Names (DNs) to shortened principal names for Kafka ACLs. This field corresponds exactly to the ssl.principal.mapping.rules broker config and matches the format and syntax defined in the Apache Kafka documentation. Setting or modifying this field will trigger a rolling restart of the Kafka brokers to apply the change. An empty string means that the default Kafka behavior is used. Example: `RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT`
+        """
+        return pulumi.get(self, "ssl_principal_mapping_rules")
+
+    @ssl_principal_mapping_rules.setter
+    def ssl_principal_mapping_rules(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "ssl_principal_mapping_rules", value)
+
+    @_builtins.property
+    @pulumi.getter(name="trustConfig")
+    def trust_config(self) -> Optional[pulumi.Input['ClusterTlsConfigTrustConfigArgs']]:
+        """
+        The configuration of the broker truststore. If specified, clients can use mTLS for authentication.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "trust_config")
+
+    @trust_config.setter
+    def trust_config(self, value: Optional[pulumi.Input['ClusterTlsConfigTrustConfigArgs']]):
+        pulumi.set(self, "trust_config", value)
+
+
+if not MYPY:
+    class ClusterTlsConfigTrustConfigArgsDict(TypedDict):
+        cas_configs: NotRequired[pulumi.Input[Sequence[pulumi.Input['ClusterTlsConfigTrustConfigCasConfigArgsDict']]]]
+        """
+        Configuration for the Google Certificate Authority Service. To support mTLS, you must specify at least one `cas_configs` block. A maximum of 10 CA pools can be specified. Additional CA pools may be specified with additional `cas_configs` blocks.
+        Structure is documented below.
+        """
+elif False:
+    ClusterTlsConfigTrustConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ClusterTlsConfigTrustConfigArgs:
+    def __init__(__self__, *,
+                 cas_configs: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterTlsConfigTrustConfigCasConfigArgs']]]] = None):
+        """
+        :param pulumi.Input[Sequence[pulumi.Input['ClusterTlsConfigTrustConfigCasConfigArgs']]] cas_configs: Configuration for the Google Certificate Authority Service. To support mTLS, you must specify at least one `cas_configs` block. A maximum of 10 CA pools can be specified. Additional CA pools may be specified with additional `cas_configs` blocks.
+               Structure is documented below.
+        """
+        if cas_configs is not None:
+            pulumi.set(__self__, "cas_configs", cas_configs)
+
+    @_builtins.property
+    @pulumi.getter(name="casConfigs")
+    def cas_configs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ClusterTlsConfigTrustConfigCasConfigArgs']]]]:
+        """
+        Configuration for the Google Certificate Authority Service. To support mTLS, you must specify at least one `cas_configs` block. A maximum of 10 CA pools can be specified. Additional CA pools may be specified with additional `cas_configs` blocks.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "cas_configs")
+
+    @cas_configs.setter
+    def cas_configs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterTlsConfigTrustConfigCasConfigArgs']]]]):
+        pulumi.set(self, "cas_configs", value)
+
+
+if not MYPY:
+    class ClusterTlsConfigTrustConfigCasConfigArgsDict(TypedDict):
+        ca_pool: pulumi.Input[_builtins.str]
+        """
+        The name of the CA pool to pull CA certificates from. The CA pool does not need to be in the same project or location as the Kafka cluster. Must be in the format `projects/PROJECT_ID/locations/LOCATION/caPools/CA_POOL_ID.
+        """
+elif False:
+    ClusterTlsConfigTrustConfigCasConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ClusterTlsConfigTrustConfigCasConfigArgs:
+    def __init__(__self__, *,
+                 ca_pool: pulumi.Input[_builtins.str]):
+        """
+        :param pulumi.Input[_builtins.str] ca_pool: The name of the CA pool to pull CA certificates from. The CA pool does not need to be in the same project or location as the Kafka cluster. Must be in the format `projects/PROJECT_ID/locations/LOCATION/caPools/CA_POOL_ID.
+        """
+        pulumi.set(__self__, "ca_pool", ca_pool)
+
+    @_builtins.property
+    @pulumi.getter(name="caPool")
+    def ca_pool(self) -> pulumi.Input[_builtins.str]:
+        """
+        The name of the CA pool to pull CA certificates from. The CA pool does not need to be in the same project or location as the Kafka cluster. Must be in the format `projects/PROJECT_ID/locations/LOCATION/caPools/CA_POOL_ID.
+        """
+        return pulumi.get(self, "ca_pool")
+
+    @ca_pool.setter
+    def ca_pool(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "ca_pool", value)
+
+
 if not MYPY:
     class ConnectClusterCapacityConfigArgsDict(TypedDict):
         memory_bytes: pulumi.Input[_builtins.str]

pulumi_gcp/managedkafka/cluster.py

@@ -27,7 +27,8 @@ class ClusterArgs:
                  location: pulumi.Input[_builtins.str],
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
-                 rebalance_config: Optional[pulumi.Input['ClusterRebalanceConfigArgs']] = None):
+                 rebalance_config: Optional[pulumi.Input['ClusterRebalanceConfigArgs']] = None,
+                 tls_config: Optional[pulumi.Input['ClusterTlsConfigArgs']] = None):
         """
         The set of arguments for constructing a Cluster resource.
         :param pulumi.Input['ClusterCapacityConfigArgs'] capacity_config: A capacity configuration of a Kafka cluster.
@@ -43,6 +44,8 @@ class ClusterArgs:
                If it is not provided, the provider project is used.
         :param pulumi.Input['ClusterRebalanceConfigArgs'] rebalance_config: Defines rebalancing behavior of a Kafka cluster.
                Structure is documented below.
+        :param pulumi.Input['ClusterTlsConfigArgs'] tls_config: TLS configuration for the Kafka cluster. This is used to configure mTLS authentication. To clear our a TLS configuration that has been previously set, please explicitly add an empty `tls_config` block.
+               Structure is documented below.
         """
         pulumi.set(__self__, "capacity_config", capacity_config)
         pulumi.set(__self__, "cluster_id", cluster_id)
@@ -54,6 +57,8 @@ class ClusterArgs:
             pulumi.set(__self__, "project", project)
         if rebalance_config is not None:
             pulumi.set(__self__, "rebalance_config", rebalance_config)
+        if tls_config is not None:
+            pulumi.set(__self__, "tls_config", tls_config)
 
     @_builtins.property
     @pulumi.getter(name="capacityConfig")
@@ -145,6 +150,19 @@ class ClusterArgs:
     def rebalance_config(self, value: Optional[pulumi.Input['ClusterRebalanceConfigArgs']]):
         pulumi.set(self, "rebalance_config", value)
 
+    @_builtins.property
+    @pulumi.getter(name="tlsConfig")
+    def tls_config(self) -> Optional[pulumi.Input['ClusterTlsConfigArgs']]:
+        """
+        TLS configuration for the Kafka cluster. This is used to configure mTLS authentication. To clear our a TLS configuration that has been previously set, please explicitly add an empty `tls_config` block.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tls_config")
+
+    @tls_config.setter
+    def tls_config(self, value: Optional[pulumi.Input['ClusterTlsConfigArgs']]):
+        pulumi.set(self, "tls_config", value)
+
 
 @pulumi.input_type
 class _ClusterState:
@@ -161,6 +179,7 @@ class _ClusterState:
                  pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  rebalance_config: Optional[pulumi.Input['ClusterRebalanceConfigArgs']] = None,
                  state: Optional[pulumi.Input[_builtins.str]] = None,
+                 tls_config: Optional[pulumi.Input['ClusterTlsConfigArgs']] = None,
                  update_time: Optional[pulumi.Input[_builtins.str]] = None):
         """
         Input properties used for looking up and filtering Cluster resources.
@@ -183,6 +202,8 @@ class _ClusterState:
         :param pulumi.Input['ClusterRebalanceConfigArgs'] rebalance_config: Defines rebalancing behavior of a Kafka cluster.
                Structure is documented below.
         :param pulumi.Input[_builtins.str] state: The current state of the cluster. Possible values: `STATE_UNSPECIFIED`, `CREATING`, `ACTIVE`, `DELETING`.
+        :param pulumi.Input['ClusterTlsConfigArgs'] tls_config: TLS configuration for the Kafka cluster. This is used to configure mTLS authentication. To clear our a TLS configuration that has been previously set, please explicitly add an empty `tls_config` block.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] update_time: The time when the cluster was last updated.
         """
         if capacity_config is not None:
@@ -209,6 +230,8 @@ class _ClusterState:
             pulumi.set(__self__, "rebalance_config", rebalance_config)
         if state is not None:
             pulumi.set(__self__, "state", state)
+        if tls_config is not None:
+            pulumi.set(__self__, "tls_config", tls_config)
         if update_time is not None:
             pulumi.set(__self__, "update_time", update_time)
 
@@ -363,6 +386,19 @@ class _ClusterState:
     def state(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "state", value)
 
+    @_builtins.property
+    @pulumi.getter(name="tlsConfig")
+    def tls_config(self) -> Optional[pulumi.Input['ClusterTlsConfigArgs']]:
+        """
+        TLS configuration for the Kafka cluster. This is used to configure mTLS authentication. To clear our a TLS configuration that has been previously set, please explicitly add an empty `tls_config` block.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tls_config")
+
+    @tls_config.setter
+    def tls_config(self, value: Optional[pulumi.Input['ClusterTlsConfigArgs']]):
+        pulumi.set(self, "tls_config", value)
+
     @_builtins.property
     @pulumi.getter(name="updateTime")
     def update_time(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -389,6 +425,7 @@ class Cluster(pulumi.CustomResource):
                  location: Optional[pulumi.Input[_builtins.str]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  rebalance_config: Optional[pulumi.Input[Union['ClusterRebalanceConfigArgs', 'ClusterRebalanceConfigArgsDict']]] = None,
+                 tls_config: Optional[pulumi.Input[Union['ClusterTlsConfigArgs', 'ClusterTlsConfigArgsDict']]] = None,
                  __props__=None):
         """
         A Managed Service for Apache Kafka cluster. Apache Kafka is a trademark owned by the Apache Software Foundation.
@@ -423,6 +460,44 @@ class Cluster(pulumi.CustomResource):
                 "key": "value",
             })
         ```
+        ### Managedkafka Cluster Mtls
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        ca_pool = gcp.certificateauthority.CaPool("ca_pool",
+            name="my-ca-pool",
+            location="us-central1",
+            tier="ENTERPRISE",
+            publishing_options={
+                "publish_ca_cert": True,
+                "publish_crl": True,
+            })
+        project = gcp.organizations.get_project()
+        example = gcp.managedkafka.Cluster("example",
+            cluster_id="my-cluster",
+            location="us-central1",
+            capacity_config={
+                "vcpu_count": "3",
+                "memory_bytes": "3221225472",
+            },
+            gcp_config={
+                "access_config": {
+                    "network_configs": [{
+                        "subnet": f"projects/{project.number}/regions/us-central1/subnetworks/default",
+                    }],
+                },
+            },
+            tls_config={
+                "trust_config": {
+                    "cas_configs": [{
+                        "ca_pool": ca_pool.id,
+                    }],
+                },
+                "ssl_principal_mapping_rules": "RULE:pattern/replacement/L,DEFAULT",
+            })
+        ```
         ### Managedkafka Cluster Cmek
 
         ```python
@@ -499,6 +574,8 @@ class Cluster(pulumi.CustomResource):
                If it is not provided, the provider project is used.
         :param pulumi.Input[Union['ClusterRebalanceConfigArgs', 'ClusterRebalanceConfigArgsDict']] rebalance_config: Defines rebalancing behavior of a Kafka cluster.
                Structure is documented below.
+        :param pulumi.Input[Union['ClusterTlsConfigArgs', 'ClusterTlsConfigArgsDict']] tls_config: TLS configuration for the Kafka cluster. This is used to configure mTLS authentication. To clear our a TLS configuration that has been previously set, please explicitly add an empty `tls_config` block.
+               Structure is documented below.
         """
         ...
     @overload
@@ -539,6 +616,44 @@ class Cluster(pulumi.CustomResource):
                 "key": "value",
             })
         ```
+        ### Managedkafka Cluster Mtls
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        ca_pool = gcp.certificateauthority.CaPool("ca_pool",
+            name="my-ca-pool",
+            location="us-central1",
+            tier="ENTERPRISE",
+            publishing_options={
+                "publish_ca_cert": True,
+                "publish_crl": True,
+            })
+        project = gcp.organizations.get_project()
+        example = gcp.managedkafka.Cluster("example",
+            cluster_id="my-cluster",
+            location="us-central1",
+            capacity_config={
+                "vcpu_count": "3",
+                "memory_bytes": "3221225472",
+            },
+            gcp_config={
+                "access_config": {
+                    "network_configs": [{
+                        "subnet": f"projects/{project.number}/regions/us-central1/subnetworks/default",
+                    }],
+                },
+            },
+            tls_config={
+                "trust_config": {
+                    "cas_configs": [{
+                        "ca_pool": ca_pool.id,
+                    }],
+                },
+                "ssl_principal_mapping_rules": "RULE:pattern/replacement/L,DEFAULT",
+            })
+        ```
         ### Managedkafka Cluster Cmek
 
         ```python
@@ -622,6 +737,7 @@ class Cluster(pulumi.CustomResource):
                  location: Optional[pulumi.Input[_builtins.str]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  rebalance_config: Optional[pulumi.Input[Union['ClusterRebalanceConfigArgs', 'ClusterRebalanceConfigArgsDict']]] = None,
+                 tls_config: Optional[pulumi.Input[Union['ClusterTlsConfigArgs', 'ClusterTlsConfigArgsDict']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -646,6 +762,7 @@ class Cluster(pulumi.CustomResource):
             __props__.__dict__["location"] = location
             __props__.__dict__["project"] = project
             __props__.__dict__["rebalance_config"] = rebalance_config
+            __props__.__dict__["tls_config"] = tls_config
             __props__.__dict__["create_time"] = None
             __props__.__dict__["effective_labels"] = None
             __props__.__dict__["name"] = None
@@ -676,6 +793,7 @@ class Cluster(pulumi.CustomResource):
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
             rebalance_config: Optional[pulumi.Input[Union['ClusterRebalanceConfigArgs', 'ClusterRebalanceConfigArgsDict']]] = None,
             state: Optional[pulumi.Input[_builtins.str]] = None,
+            tls_config: Optional[pulumi.Input[Union['ClusterTlsConfigArgs', 'ClusterTlsConfigArgsDict']]] = None,
             update_time: Optional[pulumi.Input[_builtins.str]] = None) -> 'Cluster':
         """
         Get an existing Cluster resource's state with the given name, id, and optional extra
@@ -703,6 +821,8 @@ class Cluster(pulumi.CustomResource):
         :param pulumi.Input[Union['ClusterRebalanceConfigArgs', 'ClusterRebalanceConfigArgsDict']] rebalance_config: Defines rebalancing behavior of a Kafka cluster.
                Structure is documented below.
         :param pulumi.Input[_builtins.str] state: The current state of the cluster. Possible values: `STATE_UNSPECIFIED`, `CREATING`, `ACTIVE`, `DELETING`.
+        :param pulumi.Input[Union['ClusterTlsConfigArgs', 'ClusterTlsConfigArgsDict']] tls_config: TLS configuration for the Kafka cluster. This is used to configure mTLS authentication. To clear our a TLS configuration that has been previously set, please explicitly add an empty `tls_config` block.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] update_time: The time when the cluster was last updated.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -721,6 +841,7 @@ class Cluster(pulumi.CustomResource):
         __props__.__dict__["pulumi_labels"] = pulumi_labels
         __props__.__dict__["rebalance_config"] = rebalance_config
         __props__.__dict__["state"] = state
+        __props__.__dict__["tls_config"] = tls_config
         __props__.__dict__["update_time"] = update_time
         return Cluster(resource_name, opts=opts, __props__=__props__)
 
@@ -827,6 +948,15 @@ class Cluster(pulumi.CustomResource):
         """
         return pulumi.get(self, "state")
 
+    @_builtins.property
+    @pulumi.getter(name="tlsConfig")
+    def tls_config(self) -> pulumi.Output['outputs.ClusterTlsConfig']:
+        """
+        TLS configuration for the Kafka cluster. This is used to configure mTLS authentication. To clear our a TLS configuration that has been previously set, please explicitly add an empty `tls_config` block.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tls_config")
+
     @_builtins.property
     @pulumi.getter(name="updateTime")
     def update_time(self) -> pulumi.Output[_builtins.str]:

pulumi_gcp/managedkafka/connect_cluster.py

@@ -396,8 +396,8 @@ class ConnectCluster(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_62793",
-            name="tf-test_55438",
+            project_id="tf-test_32706",
+            name="tf-test_49082",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -524,8 +524,8 @@ class ConnectCluster(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_62793",
-            name="tf-test_55438",
+            project_id="tf-test_32706",
+            name="tf-test_49082",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")

pulumi_gcp/managedkafka/connector.py

@@ -287,8 +287,8 @@ class Connector(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_32706",
-            name="tf-test_49082",
+            project_id="tf-test_60365",
+            name="tf-test_80215",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -443,8 +443,8 @@ class Connector(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_32706",
-            name="tf-test_49082",
+            project_id="tf-test_60365",
+            name="tf-test_80215",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")