pulumi-gcp 8.40.0a1754721948__py3-none-any.whl → 8.41.0__py3-none-any.whl

pulumi_gcp/clouddeploy/outputs.py

@@ -2260,7 +2260,7 @@ class DeployPolicyRule(dict):
     def __init__(__self__, *,
                  rollout_restriction: Optional['outputs.DeployPolicyRuleRolloutRestriction'] = None):
         """
-        :param 'DeployPolicyRuleRolloutRestrictionArgs' rollout_restriction: Optional. Rollout restrictions.
+        :param 'DeployPolicyRuleRolloutRestrictionArgs' rollout_restriction: Rollout restrictions.
                Structure is documented below.
         """
         if rollout_restriction is not None:
@@ -2270,7 +2270,7 @@ class DeployPolicyRule(dict):
     @pulumi.getter(name="rolloutRestriction")
     def rollout_restriction(self) -> Optional['outputs.DeployPolicyRuleRolloutRestriction']:
         """
-        Optional. Rollout restrictions.
+        Rollout restrictions.
         Structure is documented below.
         """
         return pulumi.get(self, "rollout_restriction")
@@ -2301,12 +2301,12 @@ class DeployPolicyRuleRolloutRestriction(dict):
                  invokers: Optional[Sequence[_builtins.str]] = None,
                  time_windows: Optional['outputs.DeployPolicyRuleRolloutRestrictionTimeWindows'] = None):
         """
-        :param _builtins.str id: Required. ID of the rule. This id must be unique in the `DeployPolicy` resource to which this rule belongs. The format is `a-z{0,62}`.
-        :param Sequence[_builtins.str] actions: Optional. Rollout actions to be restricted as part of the policy. If left empty, all actions will be restricted.
+        :param _builtins.str id: ID of the rule. This id must be unique in the `DeployPolicy` resource to which this rule belongs. The format is `a-z{0,62}`.
+        :param Sequence[_builtins.str] actions: Rollout actions to be restricted as part of the policy. If left empty, all actions will be restricted.
                Each value may be one of: `ADVANCE`, `APPROVE`, `CANCEL`, `CREATE`, `IGNORE_JOB`, `RETRY_JOB`, `ROLLBACK`, `TERMINATE_JOBRUN`.
-        :param Sequence[_builtins.str] invokers: Optional. What invoked the action. If left empty, all invoker types will be restricted.
+        :param Sequence[_builtins.str] invokers: What invoked the action. If left empty, all invoker types will be restricted.
                Each value may be one of: `USER`, `DEPLOY_AUTOMATION`.
-        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsArgs' time_windows: Required. Time window within which actions are restricted.
+        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsArgs' time_windows: Time window within which actions are restricted.
                Structure is documented below.
         """
         pulumi.set(__self__, "id", id)
@@ -2321,7 +2321,7 @@ class DeployPolicyRuleRolloutRestriction(dict):
     @pulumi.getter
     def id(self) -> _builtins.str:
         """
-        Required. ID of the rule. This id must be unique in the `DeployPolicy` resource to which this rule belongs. The format is `a-z{0,62}`.
+        ID of the rule. This id must be unique in the `DeployPolicy` resource to which this rule belongs. The format is `a-z{0,62}`.
         """
         return pulumi.get(self, "id")
 
@@ -2329,7 +2329,7 @@ class DeployPolicyRuleRolloutRestriction(dict):
     @pulumi.getter
     def actions(self) -> Optional[Sequence[_builtins.str]]:
         """
-        Optional. Rollout actions to be restricted as part of the policy. If left empty, all actions will be restricted.
+        Rollout actions to be restricted as part of the policy. If left empty, all actions will be restricted.
         Each value may be one of: `ADVANCE`, `APPROVE`, `CANCEL`, `CREATE`, `IGNORE_JOB`, `RETRY_JOB`, `ROLLBACK`, `TERMINATE_JOBRUN`.
         """
         return pulumi.get(self, "actions")
@@ -2338,7 +2338,7 @@ class DeployPolicyRuleRolloutRestriction(dict):
     @pulumi.getter
     def invokers(self) -> Optional[Sequence[_builtins.str]]:
         """
-        Optional. What invoked the action. If left empty, all invoker types will be restricted.
+        What invoked the action. If left empty, all invoker types will be restricted.
         Each value may be one of: `USER`, `DEPLOY_AUTOMATION`.
         """
         return pulumi.get(self, "invokers")
@@ -2347,7 +2347,7 @@ class DeployPolicyRuleRolloutRestriction(dict):
     @pulumi.getter(name="timeWindows")
     def time_windows(self) -> Optional['outputs.DeployPolicyRuleRolloutRestrictionTimeWindows']:
         """
-        Required. Time window within which actions are restricted.
+        Time window within which actions are restricted.
         Structure is documented below.
         """
         return pulumi.get(self, "time_windows")
@@ -2381,10 +2381,10 @@ class DeployPolicyRuleRolloutRestrictionTimeWindows(dict):
                  one_time_windows: Optional[Sequence['outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindow']] = None,
                  weekly_windows: Optional[Sequence['outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindow']] = None):
         """
-        :param _builtins.str time_zone: Required. The time zone in IANA format IANA Time Zone Database (e.g. America/New_York).
-        :param Sequence['DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowArgs'] one_time_windows: Optional. One-time windows within which actions are restricted.
+        :param _builtins.str time_zone: The time zone in IANA format IANA Time Zone Database (e.g. America/New_York).
+        :param Sequence['DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowArgs'] one_time_windows: One-time windows within which actions are restricted.
                Structure is documented below.
-        :param Sequence['DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowArgs'] weekly_windows: Optional. Recurring weekly windows within which actions are restricted.
+        :param Sequence['DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowArgs'] weekly_windows: Recurring weekly windows within which actions are restricted.
                Structure is documented below.
         """
         pulumi.set(__self__, "time_zone", time_zone)
@@ -2397,7 +2397,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindows(dict):
     @pulumi.getter(name="timeZone")
     def time_zone(self) -> _builtins.str:
         """
-        Required. The time zone in IANA format IANA Time Zone Database (e.g. America/New_York).
+        The time zone in IANA format IANA Time Zone Database (e.g. America/New_York).
         """
         return pulumi.get(self, "time_zone")
 
@@ -2405,7 +2405,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindows(dict):
     @pulumi.getter(name="oneTimeWindows")
     def one_time_windows(self) -> Optional[Sequence['outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindow']]:
         """
-        Optional. One-time windows within which actions are restricted.
+        One-time windows within which actions are restricted.
         Structure is documented below.
         """
         return pulumi.get(self, "one_time_windows")
@@ -2414,7 +2414,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindows(dict):
     @pulumi.getter(name="weeklyWindows")
     def weekly_windows(self) -> Optional[Sequence['outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindow']]:
         """
-        Optional. Recurring weekly windows within which actions are restricted.
+        Recurring weekly windows within which actions are restricted.
         Structure is documented below.
         """
         return pulumi.get(self, "weekly_windows")
@@ -2451,13 +2451,13 @@ class DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindow(dict):
                  start_date: 'outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowStartDate',
                  start_time: 'outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowStartTime'):
         """
-        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowEndDateArgs' end_date: Required. End date.
+        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowEndDateArgs' end_date: End date.
                Structure is documented below.
-        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowEndTimeArgs' end_time: Required. End time (exclusive). You may use 24:00 for the end of the day.
+        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowEndTimeArgs' end_time: End time (exclusive). You may use 24:00 for the end of the day.
                Structure is documented below.
-        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowStartDateArgs' start_date: Required. Start date.
+        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowStartDateArgs' start_date: Start date.
                Structure is documented below.
-        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowStartTimeArgs' start_time: Required. Start time (inclusive). Use 00:00 for the beginning of the day.
+        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowStartTimeArgs' start_time: Start time (inclusive). Use 00:00 for the beginning of the day.
                Structure is documented below.
         """
         pulumi.set(__self__, "end_date", end_date)
@@ -2469,7 +2469,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindow(dict):
     @pulumi.getter(name="endDate")
     def end_date(self) -> 'outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowEndDate':
         """
-        Required. End date.
+        End date.
         Structure is documented below.
         """
         return pulumi.get(self, "end_date")
@@ -2478,7 +2478,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindow(dict):
     @pulumi.getter(name="endTime")
     def end_time(self) -> 'outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowEndTime':
         """
-        Required. End time (exclusive). You may use 24:00 for the end of the day.
+        End time (exclusive). You may use 24:00 for the end of the day.
         Structure is documented below.
         """
         return pulumi.get(self, "end_time")
@@ -2487,7 +2487,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindow(dict):
     @pulumi.getter(name="startDate")
     def start_date(self) -> 'outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowStartDate':
         """
-        Required. Start date.
+        Start date.
         Structure is documented below.
         """
         return pulumi.get(self, "start_date")
@@ -2496,7 +2496,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindow(dict):
     @pulumi.getter(name="startTime")
     def start_time(self) -> 'outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsOneTimeWindowStartTime':
         """
-        Required. Start time (inclusive). Use 00:00 for the beginning of the day.
+        Start time (inclusive). Use 00:00 for the beginning of the day.
         Structure is documented below.
         """
         return pulumi.get(self, "start_time")
@@ -2726,11 +2726,11 @@ class DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindow(dict):
                  end_time: Optional['outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowEndTime'] = None,
                  start_time: Optional['outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowStartTime'] = None):
         """
-        :param Sequence[_builtins.str] days_of_weeks: Optional. Days of week. If left empty, all days of the week will be included.
+        :param Sequence[_builtins.str] days_of_weeks: Days of week. If left empty, all days of the week will be included.
                Each value may be one of: `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`, `SUNDAY`.
-        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowEndTimeArgs' end_time: Optional. End time (exclusive). Use 24:00 to indicate midnight. If you specify endTime you must also specify startTime. If left empty, this will block for the entire day for the days specified in daysOfWeek.
+        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowEndTimeArgs' end_time: End time (exclusive). Use 24:00 to indicate midnight. If you specify endTime you must also specify startTime. If left empty, this will block for the entire day for the days specified in daysOfWeek.
                Structure is documented below.
-        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowStartTimeArgs' start_time: Optional. Start time (inclusive). Use 00:00 for the beginning of the day. If you specify startTime you must also specify endTime. If left empty, this will block for the entire day for the days specified in daysOfWeek.
+        :param 'DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowStartTimeArgs' start_time: Start time (inclusive). Use 00:00 for the beginning of the day. If you specify startTime you must also specify endTime. If left empty, this will block for the entire day for the days specified in daysOfWeek.
                Structure is documented below.
         """
         if days_of_weeks is not None:
@@ -2744,7 +2744,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindow(dict):
     @pulumi.getter(name="daysOfWeeks")
     def days_of_weeks(self) -> Optional[Sequence[_builtins.str]]:
         """
-        Optional. Days of week. If left empty, all days of the week will be included.
+        Days of week. If left empty, all days of the week will be included.
         Each value may be one of: `MONDAY`, `TUESDAY`, `WEDNESDAY`, `THURSDAY`, `FRIDAY`, `SATURDAY`, `SUNDAY`.
         """
         return pulumi.get(self, "days_of_weeks")
@@ -2753,7 +2753,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindow(dict):
     @pulumi.getter(name="endTime")
     def end_time(self) -> Optional['outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowEndTime']:
         """
-        Optional. End time (exclusive). Use 24:00 to indicate midnight. If you specify endTime you must also specify startTime. If left empty, this will block for the entire day for the days specified in daysOfWeek.
+        End time (exclusive). Use 24:00 to indicate midnight. If you specify endTime you must also specify startTime. If left empty, this will block for the entire day for the days specified in daysOfWeek.
         Structure is documented below.
         """
         return pulumi.get(self, "end_time")
@@ -2762,7 +2762,7 @@ class DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindow(dict):
     @pulumi.getter(name="startTime")
     def start_time(self) -> Optional['outputs.DeployPolicyRuleRolloutRestrictionTimeWindowsWeeklyWindowStartTime']:
         """
-        Optional. Start time (inclusive). Use 00:00 for the beginning of the day. If you specify startTime you must also specify endTime. If left empty, this will block for the entire day for the days specified in daysOfWeek.
+        Start time (inclusive). Use 00:00 for the beginning of the day. If you specify startTime you must also specify endTime. If left empty, this will block for the entire day for the days specified in daysOfWeek.
         Structure is documented below.
         """
         return pulumi.get(self, "start_time")
@@ -2936,7 +2936,7 @@ class DeployPolicySelectorDeliveryPipeline(dict):
                  id: Optional[_builtins.str] = None,
                  labels: Optional[Mapping[str, _builtins.str]] = None):
         """
-        :param _builtins.str id: Optional. ID of the DeliveryPipeline. The value of this field could be one of the following:
+        :param _builtins.str id: ID of the DeliveryPipeline. The value of this field could be one of the following:
                - The last segment of a pipeline name
                - "*", all delivery pipelines in a location
         :param Mapping[str, _builtins.str] labels: DeliveryPipeline labels.
@@ -2950,7 +2950,7 @@ class DeployPolicySelectorDeliveryPipeline(dict):
     @pulumi.getter
     def id(self) -> Optional[_builtins.str]:
         """
-        Optional. ID of the DeliveryPipeline. The value of this field could be one of the following:
+        ID of the DeliveryPipeline. The value of this field could be one of the following:
         - The last segment of a pipeline name
         - "*", all delivery pipelines in a location
         """

pulumi_gcp/cloudfunctions/_inputs.py

@@ -15,6 +15,8 @@ else:
 from .. import _utilities
 
 __all__ = [
+    'FunctionAutomaticUpdatePolicyArgs',
+    'FunctionAutomaticUpdatePolicyArgsDict',
     'FunctionEventTriggerArgs',
     'FunctionEventTriggerArgsDict',
     'FunctionEventTriggerFailurePolicyArgs',
@@ -23,6 +25,8 @@ __all__ = [
     'FunctionIamBindingConditionArgsDict',
     'FunctionIamMemberConditionArgs',
     'FunctionIamMemberConditionArgsDict',
+    'FunctionOnDeployUpdatePolicyArgs',
+    'FunctionOnDeployUpdatePolicyArgsDict',
     'FunctionSecretEnvironmentVariableArgs',
     'FunctionSecretEnvironmentVariableArgsDict',
     'FunctionSecretVolumeArgs',
@@ -35,6 +39,18 @@ __all__ = [
 
 MYPY = False
 
+if not MYPY:
+    class FunctionAutomaticUpdatePolicyArgsDict(TypedDict):
+        pass
+elif False:
+    FunctionAutomaticUpdatePolicyArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class FunctionAutomaticUpdatePolicyArgs:
+    def __init__(__self__):
+        pass
+
+
 if not MYPY:
     class FunctionEventTriggerArgsDict(TypedDict):
         event_type: pulumi.Input[_builtins.str]
@@ -239,6 +255,38 @@ class FunctionIamMemberConditionArgs:
         pulumi.set(self, "description", value)
 
 
+if not MYPY:
+    class FunctionOnDeployUpdatePolicyArgsDict(TypedDict):
+        runtime_version: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The runtime version which was used during latest function deployment.
+        """
+elif False:
+    FunctionOnDeployUpdatePolicyArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class FunctionOnDeployUpdatePolicyArgs:
+    def __init__(__self__, *,
+                 runtime_version: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] runtime_version: The runtime version which was used during latest function deployment.
+        """
+        if runtime_version is not None:
+            pulumi.set(__self__, "runtime_version", runtime_version)
+
+    @_builtins.property
+    @pulumi.getter(name="runtimeVersion")
+    def runtime_version(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The runtime version which was used during latest function deployment.
+        """
+        return pulumi.get(self, "runtime_version")
+
+    @runtime_version.setter
+    def runtime_version(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "runtime_version", value)
+
+
 if not MYPY:
     class FunctionSecretEnvironmentVariableArgsDict(TypedDict):
         key: pulumi.Input[_builtins.str]

pulumi_gcp/cloudfunctions/function.py

@@ -22,6 +22,7 @@ __all__ = ['FunctionArgs', 'Function']
 class FunctionArgs:
     def __init__(__self__, *,
                  runtime: pulumi.Input[_builtins.str],
+                 automatic_update_policy: Optional[pulumi.Input['FunctionAutomaticUpdatePolicyArgs']] = None,
                  available_memory_mb: Optional[pulumi.Input[_builtins.int]] = None,
                  build_environment_variables: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  build_service_account: Optional[pulumi.Input[_builtins.str]] = None,
@@ -40,6 +41,7 @@ class FunctionArgs:
                  max_instances: Optional[pulumi.Input[_builtins.int]] = None,
                  min_instances: Optional[pulumi.Input[_builtins.int]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 on_deploy_update_policy: Optional[pulumi.Input['FunctionOnDeployUpdatePolicyArgs']] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  secret_environment_variables: Optional[pulumi.Input[Sequence[pulumi.Input['FunctionSecretEnvironmentVariableArgs']]]] = None,
@@ -58,6 +60,7 @@ class FunctionArgs:
                Eg. `"nodejs20"`, `"python39"`, `"dotnet3"`, `"go116"`, `"java11"`, `"ruby30"`, `"php74"`, etc. Check the [official doc](https://cloud.google.com/functions/docs/concepts/exec#runtimes) for the up-to-date list.
                
                - - -
+        :param pulumi.Input['FunctionAutomaticUpdatePolicyArgs'] automatic_update_policy: Security patches are applied automatically to the runtime without requiring the function to be redeployed. This should be specified as an empty block and cannot be set alongside `on_deploy_update_policy`.
         :param pulumi.Input[_builtins.int] available_memory_mb: Memory (in MB), available to the function. Default value is `256`. Possible values include `128`, `256`, `512`, `1024`, etc.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] build_environment_variables: A set of key/value environment variable pairs available during build time.
         :param pulumi.Input[_builtins.str] build_service_account: If provided, the self-provided service account to use to build the function. The format of this field is `projects/{project}/serviceAccounts/{serviceAccountEmail}`
@@ -83,6 +86,7 @@ class FunctionArgs:
         :param pulumi.Input[_builtins.int] max_instances: The limit on the maximum number of function instances that may coexist at a given time.
         :param pulumi.Input[_builtins.int] min_instances: The limit on the minimum number of function instances that may coexist at a given time.
         :param pulumi.Input[_builtins.str] name: A user-defined name of the function. Function names must be unique globally.
+        :param pulumi.Input['FunctionOnDeployUpdatePolicyArgs'] on_deploy_update_policy: Security patches are only applied when a function is redeployed. This should be specified as an empty block and cannot be set alongside `automatic_update_policy`. Structure is documented below.
         :param pulumi.Input[_builtins.str] project: Project of the function. If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] region: Region of function. If it is not provided, the provider region is used.
         :param pulumi.Input[Sequence[pulumi.Input['FunctionSecretEnvironmentVariableArgs']]] secret_environment_variables: Secret environment variables configuration. Structure is documented below.
@@ -98,6 +102,8 @@ class FunctionArgs:
         :param pulumi.Input[_builtins.str] vpc_connector_egress_settings: The egress settings for the connector, controlling what traffic is diverted through it. Allowed values are `ALL_TRAFFIC` and `PRIVATE_RANGES_ONLY`. Defaults to `PRIVATE_RANGES_ONLY`. If unset, this field preserves the previously set value.
         """
         pulumi.set(__self__, "runtime", runtime)
+        if automatic_update_policy is not None:
+            pulumi.set(__self__, "automatic_update_policy", automatic_update_policy)
         if available_memory_mb is not None:
             pulumi.set(__self__, "available_memory_mb", available_memory_mb)
         if build_environment_variables is not None:
@@ -134,6 +140,8 @@ class FunctionArgs:
             pulumi.set(__self__, "min_instances", min_instances)
         if name is not None:
             pulumi.set(__self__, "name", name)
+        if on_deploy_update_policy is not None:
+            pulumi.set(__self__, "on_deploy_update_policy", on_deploy_update_policy)
         if project is not None:
             pulumi.set(__self__, "project", project)
         if region is not None:
@@ -174,6 +182,18 @@ class FunctionArgs:
     def runtime(self, value: pulumi.Input[_builtins.str]):
         pulumi.set(self, "runtime", value)
 
+    @_builtins.property
+    @pulumi.getter(name="automaticUpdatePolicy")
+    def automatic_update_policy(self) -> Optional[pulumi.Input['FunctionAutomaticUpdatePolicyArgs']]:
+        """
+        Security patches are applied automatically to the runtime without requiring the function to be redeployed. This should be specified as an empty block and cannot be set alongside `on_deploy_update_policy`.
+        """
+        return pulumi.get(self, "automatic_update_policy")
+
+    @automatic_update_policy.setter
+    def automatic_update_policy(self, value: Optional[pulumi.Input['FunctionAutomaticUpdatePolicyArgs']]):
+        pulumi.set(self, "automatic_update_policy", value)
+
     @_builtins.property
     @pulumi.getter(name="availableMemoryMb")
     def available_memory_mb(self) -> Optional[pulumi.Input[_builtins.int]]:
@@ -397,6 +417,18 @@ class FunctionArgs:
     def name(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "name", value)
 
+    @_builtins.property
+    @pulumi.getter(name="onDeployUpdatePolicy")
+    def on_deploy_update_policy(self) -> Optional[pulumi.Input['FunctionOnDeployUpdatePolicyArgs']]:
+        """
+        Security patches are only applied when a function is redeployed. This should be specified as an empty block and cannot be set alongside `automatic_update_policy`. Structure is documented below.
+        """
+        return pulumi.get(self, "on_deploy_update_policy")
+
+    @on_deploy_update_policy.setter
+    def on_deploy_update_policy(self, value: Optional[pulumi.Input['FunctionOnDeployUpdatePolicyArgs']]):
+        pulumi.set(self, "on_deploy_update_policy", value)
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -546,6 +578,7 @@ class FunctionArgs:
 @pulumi.input_type
 class _FunctionState:
     def __init__(__self__, *,
+                 automatic_update_policy: Optional[pulumi.Input['FunctionAutomaticUpdatePolicyArgs']] = None,
                  available_memory_mb: Optional[pulumi.Input[_builtins.int]] = None,
                  build_environment_variables: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  build_service_account: Optional[pulumi.Input[_builtins.str]] = None,
@@ -565,6 +598,7 @@ class _FunctionState:
                  max_instances: Optional[pulumi.Input[_builtins.int]] = None,
                  min_instances: Optional[pulumi.Input[_builtins.int]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 on_deploy_update_policy: Optional[pulumi.Input['FunctionOnDeployUpdatePolicyArgs']] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
@@ -583,6 +617,7 @@ class _FunctionState:
                  vpc_connector_egress_settings: Optional[pulumi.Input[_builtins.str]] = None):
         """
         Input properties used for looking up and filtering Function resources.
+        :param pulumi.Input['FunctionAutomaticUpdatePolicyArgs'] automatic_update_policy: Security patches are applied automatically to the runtime without requiring the function to be redeployed. This should be specified as an empty block and cannot be set alongside `on_deploy_update_policy`.
         :param pulumi.Input[_builtins.int] available_memory_mb: Memory (in MB), available to the function. Default value is `256`. Possible values include `128`, `256`, `512`, `1024`, etc.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] build_environment_variables: A set of key/value environment variable pairs available during build time.
         :param pulumi.Input[_builtins.str] build_service_account: If provided, the self-provided service account to use to build the function. The format of this field is `projects/{project}/serviceAccounts/{serviceAccountEmail}`
@@ -609,6 +644,7 @@ class _FunctionState:
         :param pulumi.Input[_builtins.int] max_instances: The limit on the maximum number of function instances that may coexist at a given time.
         :param pulumi.Input[_builtins.int] min_instances: The limit on the minimum number of function instances that may coexist at a given time.
         :param pulumi.Input[_builtins.str] name: A user-defined name of the function. Function names must be unique globally.
+        :param pulumi.Input['FunctionOnDeployUpdatePolicyArgs'] on_deploy_update_policy: Security patches are only applied when a function is redeployed. This should be specified as an empty block and cannot be set alongside `automatic_update_policy`. Structure is documented below.
         :param pulumi.Input[_builtins.str] project: Project of the function. If it is not provided, the provider project is used.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
         :param pulumi.Input[_builtins.str] region: Region of function. If it is not provided, the provider region is used.
@@ -631,6 +667,8 @@ class _FunctionState:
         :param pulumi.Input[_builtins.str] vpc_connector: The VPC Network Connector that this cloud function can connect to. It should be set up as fully-qualified URI. The format of this field is `projects/*/locations/*/connectors/*`.
         :param pulumi.Input[_builtins.str] vpc_connector_egress_settings: The egress settings for the connector, controlling what traffic is diverted through it. Allowed values are `ALL_TRAFFIC` and `PRIVATE_RANGES_ONLY`. Defaults to `PRIVATE_RANGES_ONLY`. If unset, this field preserves the previously set value.
         """
+        if automatic_update_policy is not None:
+            pulumi.set(__self__, "automatic_update_policy", automatic_update_policy)
         if available_memory_mb is not None:
             pulumi.set(__self__, "available_memory_mb", available_memory_mb)
         if build_environment_variables is not None:
@@ -669,6 +707,8 @@ class _FunctionState:
             pulumi.set(__self__, "min_instances", min_instances)
         if name is not None:
             pulumi.set(__self__, "name", name)
+        if on_deploy_update_policy is not None:
+            pulumi.set(__self__, "on_deploy_update_policy", on_deploy_update_policy)
         if project is not None:
             pulumi.set(__self__, "project", project)
         if pulumi_labels is not None:
@@ -702,6 +742,18 @@ class _FunctionState:
         if vpc_connector_egress_settings is not None:
             pulumi.set(__self__, "vpc_connector_egress_settings", vpc_connector_egress_settings)
 
+    @_builtins.property
+    @pulumi.getter(name="automaticUpdatePolicy")
+    def automatic_update_policy(self) -> Optional[pulumi.Input['FunctionAutomaticUpdatePolicyArgs']]:
+        """
+        Security patches are applied automatically to the runtime without requiring the function to be redeployed. This should be specified as an empty block and cannot be set alongside `on_deploy_update_policy`.
+        """
+        return pulumi.get(self, "automatic_update_policy")
+
+    @automatic_update_policy.setter
+    def automatic_update_policy(self, value: Optional[pulumi.Input['FunctionAutomaticUpdatePolicyArgs']]):
+        pulumi.set(self, "automatic_update_policy", value)
+
     @_builtins.property
     @pulumi.getter(name="availableMemoryMb")
     def available_memory_mb(self) -> Optional[pulumi.Input[_builtins.int]]:
@@ -937,6 +989,18 @@ class _FunctionState:
     def name(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "name", value)
 
+    @_builtins.property
+    @pulumi.getter(name="onDeployUpdatePolicy")
+    def on_deploy_update_policy(self) -> Optional[pulumi.Input['FunctionOnDeployUpdatePolicyArgs']]:
+        """
+        Security patches are only applied when a function is redeployed. This should be specified as an empty block and cannot be set alongside `automatic_update_policy`. Structure is documented below.
+        """
+        return pulumi.get(self, "on_deploy_update_policy")
+
+    @on_deploy_update_policy.setter
+    def on_deploy_update_policy(self, value: Optional[pulumi.Input['FunctionOnDeployUpdatePolicyArgs']]):
+        pulumi.set(self, "on_deploy_update_policy", value)
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -1141,6 +1205,7 @@ class Function(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 automatic_update_policy: Optional[pulumi.Input[Union['FunctionAutomaticUpdatePolicyArgs', 'FunctionAutomaticUpdatePolicyArgsDict']]] = None,
                  available_memory_mb: Optional[pulumi.Input[_builtins.int]] = None,
                  build_environment_variables: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  build_service_account: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1159,6 +1224,7 @@ class Function(pulumi.CustomResource):
                  max_instances: Optional[pulumi.Input[_builtins.int]] = None,
                  min_instances: Optional[pulumi.Input[_builtins.int]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 on_deploy_update_policy: Optional[pulumi.Input[Union['FunctionOnDeployUpdatePolicyArgs', 'FunctionOnDeployUpdatePolicyArgsDict']]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  runtime: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1278,6 +1344,7 @@ class Function(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Union['FunctionAutomaticUpdatePolicyArgs', 'FunctionAutomaticUpdatePolicyArgsDict']] automatic_update_policy: Security patches are applied automatically to the runtime without requiring the function to be redeployed. This should be specified as an empty block and cannot be set alongside `on_deploy_update_policy`.
         :param pulumi.Input[_builtins.int] available_memory_mb: Memory (in MB), available to the function. Default value is `256`. Possible values include `128`, `256`, `512`, `1024`, etc.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] build_environment_variables: A set of key/value environment variable pairs available during build time.
         :param pulumi.Input[_builtins.str] build_service_account: If provided, the self-provided service account to use to build the function. The format of this field is `projects/{project}/serviceAccounts/{serviceAccountEmail}`
@@ -1303,6 +1370,7 @@ class Function(pulumi.CustomResource):
         :param pulumi.Input[_builtins.int] max_instances: The limit on the maximum number of function instances that may coexist at a given time.
         :param pulumi.Input[_builtins.int] min_instances: The limit on the minimum number of function instances that may coexist at a given time.
         :param pulumi.Input[_builtins.str] name: A user-defined name of the function. Function names must be unique globally.
+        :param pulumi.Input[Union['FunctionOnDeployUpdatePolicyArgs', 'FunctionOnDeployUpdatePolicyArgsDict']] on_deploy_update_policy: Security patches are only applied when a function is redeployed. This should be specified as an empty block and cannot be set alongside `automatic_update_policy`. Structure is documented below.
         :param pulumi.Input[_builtins.str] project: Project of the function. If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] region: Region of function. If it is not provided, the provider region is used.
         :param pulumi.Input[_builtins.str] runtime: The runtime in which the function is going to run.
@@ -1445,6 +1513,7 @@ class Function(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 automatic_update_policy: Optional[pulumi.Input[Union['FunctionAutomaticUpdatePolicyArgs', 'FunctionAutomaticUpdatePolicyArgsDict']]] = None,
                  available_memory_mb: Optional[pulumi.Input[_builtins.int]] = None,
                  build_environment_variables: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
                  build_service_account: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1463,6 +1532,7 @@ class Function(pulumi.CustomResource):
                  max_instances: Optional[pulumi.Input[_builtins.int]] = None,
                  min_instances: Optional[pulumi.Input[_builtins.int]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 on_deploy_update_policy: Optional[pulumi.Input[Union['FunctionOnDeployUpdatePolicyArgs', 'FunctionOnDeployUpdatePolicyArgsDict']]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  runtime: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1485,6 +1555,7 @@ class Function(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = FunctionArgs.__new__(FunctionArgs)
 
+            __props__.__dict__["automatic_update_policy"] = automatic_update_policy
             __props__.__dict__["available_memory_mb"] = available_memory_mb
             __props__.__dict__["build_environment_variables"] = build_environment_variables
             __props__.__dict__["build_service_account"] = build_service_account
@@ -1503,6 +1574,7 @@ class Function(pulumi.CustomResource):
             __props__.__dict__["max_instances"] = max_instances
             __props__.__dict__["min_instances"] = min_instances
             __props__.__dict__["name"] = name
+            __props__.__dict__["on_deploy_update_policy"] = on_deploy_update_policy
             __props__.__dict__["project"] = project
             __props__.__dict__["region"] = region
             if runtime is None and not opts.urn:
@@ -1534,6 +1606,7 @@ class Function(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            automatic_update_policy: Optional[pulumi.Input[Union['FunctionAutomaticUpdatePolicyArgs', 'FunctionAutomaticUpdatePolicyArgsDict']]] = None,
             available_memory_mb: Optional[pulumi.Input[_builtins.int]] = None,
             build_environment_variables: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
             build_service_account: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1553,6 +1626,7 @@ class Function(pulumi.CustomResource):
             max_instances: Optional[pulumi.Input[_builtins.int]] = None,
             min_instances: Optional[pulumi.Input[_builtins.int]] = None,
             name: Optional[pulumi.Input[_builtins.str]] = None,
+            on_deploy_update_policy: Optional[pulumi.Input[Union['FunctionOnDeployUpdatePolicyArgs', 'FunctionOnDeployUpdatePolicyArgsDict']]] = None,
             project: Optional[pulumi.Input[_builtins.str]] = None,
             pulumi_labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
             region: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1576,6 +1650,7 @@ class Function(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Union['FunctionAutomaticUpdatePolicyArgs', 'FunctionAutomaticUpdatePolicyArgsDict']] automatic_update_policy: Security patches are applied automatically to the runtime without requiring the function to be redeployed. This should be specified as an empty block and cannot be set alongside `on_deploy_update_policy`.
         :param pulumi.Input[_builtins.int] available_memory_mb: Memory (in MB), available to the function. Default value is `256`. Possible values include `128`, `256`, `512`, `1024`, etc.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] build_environment_variables: A set of key/value environment variable pairs available during build time.
         :param pulumi.Input[_builtins.str] build_service_account: If provided, the self-provided service account to use to build the function. The format of this field is `projects/{project}/serviceAccounts/{serviceAccountEmail}`
@@ -1602,6 +1677,7 @@ class Function(pulumi.CustomResource):
         :param pulumi.Input[_builtins.int] max_instances: The limit on the maximum number of function instances that may coexist at a given time.
         :param pulumi.Input[_builtins.int] min_instances: The limit on the minimum number of function instances that may coexist at a given time.
         :param pulumi.Input[_builtins.str] name: A user-defined name of the function. Function names must be unique globally.
+        :param pulumi.Input[Union['FunctionOnDeployUpdatePolicyArgs', 'FunctionOnDeployUpdatePolicyArgsDict']] on_deploy_update_policy: Security patches are only applied when a function is redeployed. This should be specified as an empty block and cannot be set alongside `automatic_update_policy`. Structure is documented below.
         :param pulumi.Input[_builtins.str] project: Project of the function. If it is not provided, the provider project is used.
         :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
         :param pulumi.Input[_builtins.str] region: Region of function. If it is not provided, the provider region is used.
@@ -1628,6 +1704,7 @@ class Function(pulumi.CustomResource):
 
         __props__ = _FunctionState.__new__(_FunctionState)
 
+        __props__.__dict__["automatic_update_policy"] = automatic_update_policy
         __props__.__dict__["available_memory_mb"] = available_memory_mb
         __props__.__dict__["build_environment_variables"] = build_environment_variables
         __props__.__dict__["build_service_account"] = build_service_account
@@ -1647,6 +1724,7 @@ class Function(pulumi.CustomResource):
         __props__.__dict__["max_instances"] = max_instances
         __props__.__dict__["min_instances"] = min_instances
         __props__.__dict__["name"] = name
+        __props__.__dict__["on_deploy_update_policy"] = on_deploy_update_policy
         __props__.__dict__["project"] = project
         __props__.__dict__["pulumi_labels"] = pulumi_labels
         __props__.__dict__["region"] = region
@@ -1665,6 +1743,14 @@ class Function(pulumi.CustomResource):
         __props__.__dict__["vpc_connector_egress_settings"] = vpc_connector_egress_settings
         return Function(resource_name, opts=opts, __props__=__props__)
 
+    @_builtins.property
+    @pulumi.getter(name="automaticUpdatePolicy")
+    def automatic_update_policy(self) -> pulumi.Output['outputs.FunctionAutomaticUpdatePolicy']:
+        """
+        Security patches are applied automatically to the runtime without requiring the function to be redeployed. This should be specified as an empty block and cannot be set alongside `on_deploy_update_policy`.
+        """
+        return pulumi.get(self, "automatic_update_policy")
+
     @_builtins.property
     @pulumi.getter(name="availableMemoryMb")
     def available_memory_mb(self) -> pulumi.Output[Optional[_builtins.int]]:
@@ -1824,6 +1910,14 @@ class Function(pulumi.CustomResource):
         """
         return pulumi.get(self, "name")
 
+    @_builtins.property
+    @pulumi.getter(name="onDeployUpdatePolicy")
+    def on_deploy_update_policy(self) -> pulumi.Output[Optional['outputs.FunctionOnDeployUpdatePolicy']]:
+        """
+        Security patches are only applied when a function is redeployed. This should be specified as an empty block and cannot be set alongside `automatic_update_policy`. Structure is documented below.
+        """
+        return pulumi.get(self, "on_deploy_update_policy")
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> pulumi.Output[_builtins.str]:

pulumi_gcp/cloudfunctions/function_iam_binding.py

@@ -369,6 +369,7 @@ class FunctionIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Cloud Functions CloudFunction
+
         Three different resources help you manage your IAM policy for Cloud Functions CloudFunction. Each of these resources serves a different use case:
 
         * `cloudfunctions.FunctionIamPolicy`: Authoritative. Sets the IAM policy for the cloudfunction and replaces any existing policy already attached.
@@ -560,6 +561,7 @@ class FunctionIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Cloud Functions CloudFunction
+
         Three different resources help you manage your IAM policy for Cloud Functions CloudFunction. Each of these resources serves a different use case:
 
         * `cloudfunctions.FunctionIamPolicy`: Authoritative. Sets the IAM policy for the cloudfunction and replaces any existing policy already attached.

pulumi_gcp/cloudfunctions/function_iam_member.py

@@ -369,6 +369,7 @@ class FunctionIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Cloud Functions CloudFunction
+
         Three different resources help you manage your IAM policy for Cloud Functions CloudFunction. Each of these resources serves a different use case:
 
         * `cloudfunctions.FunctionIamPolicy`: Authoritative. Sets the IAM policy for the cloudfunction and replaces any existing policy already attached.
@@ -560,6 +561,7 @@ class FunctionIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Cloud Functions CloudFunction
+
         Three different resources help you manage your IAM policy for Cloud Functions CloudFunction. Each of these resources serves a different use case:
 
         * `cloudfunctions.FunctionIamPolicy`: Authoritative. Sets the IAM policy for the cloudfunction and replaces any existing policy already attached.