pulumi-gcp 8.40.0a1754721948__py3-none-any.whl → 8.40.0a1754951145__py3-none-any.whl

pulumi_gcp/managedkafka/outputs.py

@@ -22,6 +22,9 @@ __all__ = [
     'ClusterGcpConfigAccessConfig',
     'ClusterGcpConfigAccessConfigNetworkConfig',
     'ClusterRebalanceConfig',
+    'ClusterTlsConfig',
+    'ClusterTlsConfigTrustConfig',
+    'ClusterTlsConfigTrustConfigCasConfig',
     'ConnectClusterCapacityConfig',
     'ConnectClusterGcpConfig',
     'ConnectClusterGcpConfigAccessConfig',
@@ -278,6 +281,131 @@ class ClusterRebalanceConfig(dict):
         return pulumi.get(self, "mode")
 
 
+@pulumi.output_type
+class ClusterTlsConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "sslPrincipalMappingRules":
+            suggest = "ssl_principal_mapping_rules"
+        elif key == "trustConfig":
+            suggest = "trust_config"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ClusterTlsConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ClusterTlsConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ClusterTlsConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 ssl_principal_mapping_rules: Optional[_builtins.str] = None,
+                 trust_config: Optional['outputs.ClusterTlsConfigTrustConfig'] = None):
+        """
+        :param _builtins.str ssl_principal_mapping_rules: The rules for mapping mTLS certificate Distinguished Names (DNs) to shortened principal names for Kafka ACLs. This field corresponds exactly to the ssl.principal.mapping.rules broker config and matches the format and syntax defined in the Apache Kafka documentation. Setting or modifying this field will trigger a rolling restart of the Kafka brokers to apply the change. An empty string means that the default Kafka behavior is used. Example: `RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT`
+        :param 'ClusterTlsConfigTrustConfigArgs' trust_config: The configuration of the broker truststore. If specified, clients can use mTLS for authentication.
+               Structure is documented below.
+        """
+        if ssl_principal_mapping_rules is not None:
+            pulumi.set(__self__, "ssl_principal_mapping_rules", ssl_principal_mapping_rules)
+        if trust_config is not None:
+            pulumi.set(__self__, "trust_config", trust_config)
+
+    @_builtins.property
+    @pulumi.getter(name="sslPrincipalMappingRules")
+    def ssl_principal_mapping_rules(self) -> Optional[_builtins.str]:
+        """
+        The rules for mapping mTLS certificate Distinguished Names (DNs) to shortened principal names for Kafka ACLs. This field corresponds exactly to the ssl.principal.mapping.rules broker config and matches the format and syntax defined in the Apache Kafka documentation. Setting or modifying this field will trigger a rolling restart of the Kafka brokers to apply the change. An empty string means that the default Kafka behavior is used. Example: `RULE:^CN=(.?),OU=ServiceUsers.$/$1@example.com/,DEFAULT`
+        """
+        return pulumi.get(self, "ssl_principal_mapping_rules")
+
+    @_builtins.property
+    @pulumi.getter(name="trustConfig")
+    def trust_config(self) -> Optional['outputs.ClusterTlsConfigTrustConfig']:
+        """
+        The configuration of the broker truststore. If specified, clients can use mTLS for authentication.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "trust_config")
+
+
+@pulumi.output_type
+class ClusterTlsConfigTrustConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "casConfigs":
+            suggest = "cas_configs"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ClusterTlsConfigTrustConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ClusterTlsConfigTrustConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ClusterTlsConfigTrustConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 cas_configs: Optional[Sequence['outputs.ClusterTlsConfigTrustConfigCasConfig']] = None):
+        """
+        :param Sequence['ClusterTlsConfigTrustConfigCasConfigArgs'] cas_configs: Configuration for the Google Certificate Authority Service. To support mTLS, you must specify at least one `cas_configs` block. A maximum of 10 CA pools can be specified. Additional CA pools may be specified with additional `cas_configs` blocks.
+               Structure is documented below.
+        """
+        if cas_configs is not None:
+            pulumi.set(__self__, "cas_configs", cas_configs)
+
+    @_builtins.property
+    @pulumi.getter(name="casConfigs")
+    def cas_configs(self) -> Optional[Sequence['outputs.ClusterTlsConfigTrustConfigCasConfig']]:
+        """
+        Configuration for the Google Certificate Authority Service. To support mTLS, you must specify at least one `cas_configs` block. A maximum of 10 CA pools can be specified. Additional CA pools may be specified with additional `cas_configs` blocks.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "cas_configs")
+
+
+@pulumi.output_type
+class ClusterTlsConfigTrustConfigCasConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "caPool":
+            suggest = "ca_pool"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ClusterTlsConfigTrustConfigCasConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ClusterTlsConfigTrustConfigCasConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ClusterTlsConfigTrustConfigCasConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 ca_pool: _builtins.str):
+        """
+        :param _builtins.str ca_pool: The name of the CA pool to pull CA certificates from. The CA pool does not need to be in the same project or location as the Kafka cluster. Must be in the format `projects/PROJECT_ID/locations/LOCATION/caPools/CA_POOL_ID.
+        """
+        pulumi.set(__self__, "ca_pool", ca_pool)
+
+    @_builtins.property
+    @pulumi.getter(name="caPool")
+    def ca_pool(self) -> _builtins.str:
+        """
+        The name of the CA pool to pull CA certificates from. The CA pool does not need to be in the same project or location as the Kafka cluster. Must be in the format `projects/PROJECT_ID/locations/LOCATION/caPools/CA_POOL_ID.
+        """
+        return pulumi.get(self, "ca_pool")
+
+
 @pulumi.output_type
 class ConnectClusterCapacityConfig(dict):
     @staticmethod

pulumi_gcp/memorystore/instance.py

@@ -515,8 +515,7 @@ class _InstanceState:
         :param pulumi.Input[Sequence[pulumi.Input['InstanceDesiredAutoCreatedEndpointArgs']]] desired_auto_created_endpoints: Immutable. User inputs for the auto-created endpoints connections.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceDesiredPscAutoConnectionArgs']]] desired_psc_auto_connections: `desired_psc_auto_connections` is deprecated  Use `desired_auto_created_endpoints` instead.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceDiscoveryEndpointArgs']]] discovery_endpoints: (Deprecated)
-               Output only. Endpoints clients can connect to the instance through. Currently only one
-               discovery endpoint is supported.
+               Deprecated. Output only. Endpoints clients can connect to the instance through.
                Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceEndpointArgs']]] endpoints: Endpoints for the instance.
@@ -611,8 +610,8 @@ class _InstanceState:
         if desired_psc_auto_connections is not None:
             pulumi.set(__self__, "desired_psc_auto_connections", desired_psc_auto_connections)
         if discovery_endpoints is not None:
-            warnings.warn("""`discovery_endpoints` is deprecated  Use `endpoints` instead.""", DeprecationWarning)
-            pulumi.log.warn("""discovery_endpoints is deprecated: `discovery_endpoints` is deprecated  Use `endpoints` instead.""")
+            warnings.warn("""This field is deprecated. As a result it will not be populated if the connections are created using `desired_auto_created_endpoints` parameter or `memorystore.InstanceDesiredUserCreatedEndpoints` resource. Instead of this parameter, for discovery, use `endpoints.connections.pscConnection` and `endpoints.connections.pscAutoConnection` with `connectionType` CONNECTION_TYPE_DISCOVERY.""", DeprecationWarning)
+            pulumi.log.warn("""discovery_endpoints is deprecated: This field is deprecated. As a result it will not be populated if the connections are created using `desired_auto_created_endpoints` parameter or `memorystore.InstanceDesiredUserCreatedEndpoints` resource. Instead of this parameter, for discovery, use `endpoints.connections.pscConnection` and `endpoints.connections.pscAutoConnection` with `connectionType` CONNECTION_TYPE_DISCOVERY.""")
         if discovery_endpoints is not None:
             pulumi.set(__self__, "discovery_endpoints", discovery_endpoints)
         if effective_labels is not None:
@@ -783,12 +782,11 @@ class _InstanceState:
 
     @_builtins.property
     @pulumi.getter(name="discoveryEndpoints")
-    @_utilities.deprecated("""`discovery_endpoints` is deprecated  Use `endpoints` instead.""")
+    @_utilities.deprecated("""This field is deprecated. As a result it will not be populated if the connections are created using `desired_auto_created_endpoints` parameter or `memorystore.InstanceDesiredUserCreatedEndpoints` resource. Instead of this parameter, for discovery, use `endpoints.connections.pscConnection` and `endpoints.connections.pscAutoConnection` with `connectionType` CONNECTION_TYPE_DISCOVERY.""")
     def discovery_endpoints(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['InstanceDiscoveryEndpointArgs']]]]:
         """
         (Deprecated)
-        Output only. Endpoints clients can connect to the instance through. Currently only one
-        discovery endpoint is supported.
+        Deprecated. Output only. Endpoints clients can connect to the instance through.
         Structure is documented below.
         """
         return pulumi.get(self, "discovery_endpoints")
@@ -2068,8 +2066,7 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceDesiredAutoCreatedEndpointArgs', 'InstanceDesiredAutoCreatedEndpointArgsDict']]]] desired_auto_created_endpoints: Immutable. User inputs for the auto-created endpoints connections.
         :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceDesiredPscAutoConnectionArgs', 'InstanceDesiredPscAutoConnectionArgsDict']]]] desired_psc_auto_connections: `desired_psc_auto_connections` is deprecated  Use `desired_auto_created_endpoints` instead.
         :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceDiscoveryEndpointArgs', 'InstanceDiscoveryEndpointArgsDict']]]] discovery_endpoints: (Deprecated)
-               Output only. Endpoints clients can connect to the instance through. Currently only one
-               discovery endpoint is supported.
+               Deprecated. Output only. Endpoints clients can connect to the instance through.
                Structure is documented below.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] effective_labels: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
         :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceEndpointArgs', 'InstanceEndpointArgsDict']]]] endpoints: Endpoints for the instance.
@@ -2261,12 +2258,11 @@ class Instance(pulumi.CustomResource):
 
     @_builtins.property
     @pulumi.getter(name="discoveryEndpoints")
-    @_utilities.deprecated("""`discovery_endpoints` is deprecated  Use `endpoints` instead.""")
+    @_utilities.deprecated("""This field is deprecated. As a result it will not be populated if the connections are created using `desired_auto_created_endpoints` parameter or `memorystore.InstanceDesiredUserCreatedEndpoints` resource. Instead of this parameter, for discovery, use `endpoints.connections.pscConnection` and `endpoints.connections.pscAutoConnection` with `connectionType` CONNECTION_TYPE_DISCOVERY.""")
     def discovery_endpoints(self) -> pulumi.Output[Sequence['outputs.InstanceDiscoveryEndpoint']]:
         """
         (Deprecated)
-        Output only. Endpoints clients can connect to the instance through. Currently only one
-        discovery endpoint is supported.
+        Deprecated. Output only. Endpoints clients can connect to the instance through.
         Structure is documented below.
         """
         return pulumi.get(self, "discovery_endpoints")

pulumi_gcp/modelarmor/__init__.py

@@ -6,6 +6,7 @@ import builtins as _builtins
 from .. import _utilities
 import typing
 # Export this package's modules as members:
+from .floorsetting import *
 from .template import *
 from ._inputs import *
 from . import outputs