pulumi-gcp 8.40.0a1754721948__py3-none-any.whl → 8.41.0__py3-none-any.whl

pulumi_gcp/dataplex/lake_iam_policy.py

@@ -266,6 +266,7 @@ class LakeIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Lake
+
         Three different resources help you manage your IAM policy for Dataplex Lake. Each of these resources serves a different use case:
 
         * `dataplex.LakeIamPolicy`: Authoritative. Sets the IAM policy for the lake and replaces any existing policy already attached.
@@ -445,6 +446,7 @@ class LakeIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Lake
+
         Three different resources help you manage your IAM policy for Dataplex Lake. Each of these resources serves a different use case:
 
         * `dataplex.LakeIamPolicy`: Authoritative. Sets the IAM policy for the lake and replaces any existing policy already attached.

pulumi_gcp/dataplex/task_iam_binding.py

@@ -412,6 +412,7 @@ class TaskIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Task
+
         Three different resources help you manage your IAM policy for Dataplex Task. Each of these resources serves a different use case:
 
         * `dataplex.TaskIamPolicy`: Authoritative. Sets the IAM policy for the task and replaces any existing policy already attached.
@@ -612,6 +613,7 @@ class TaskIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Task
+
         Three different resources help you manage your IAM policy for Dataplex Task. Each of these resources serves a different use case:
 
         * `dataplex.TaskIamPolicy`: Authoritative. Sets the IAM policy for the task and replaces any existing policy already attached.

pulumi_gcp/dataplex/task_iam_member.py

@@ -412,6 +412,7 @@ class TaskIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Task
+
         Three different resources help you manage your IAM policy for Dataplex Task. Each of these resources serves a different use case:
 
         * `dataplex.TaskIamPolicy`: Authoritative. Sets the IAM policy for the task and replaces any existing policy already attached.
@@ -612,6 +613,7 @@ class TaskIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Task
+
         Three different resources help you manage your IAM policy for Dataplex Task. Each of these resources serves a different use case:
 
         * `dataplex.TaskIamPolicy`: Authoritative. Sets the IAM policy for the task and replaces any existing policy already attached.

pulumi_gcp/dataplex/task_iam_policy.py

@@ -309,6 +309,7 @@ class TaskIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Task
+
         Three different resources help you manage your IAM policy for Dataplex Task. Each of these resources serves a different use case:
 
         * `dataplex.TaskIamPolicy`: Authoritative. Sets the IAM policy for the task and replaces any existing policy already attached.
@@ -497,6 +498,7 @@ class TaskIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Task
+
         Three different resources help you manage your IAM policy for Dataplex Task. Each of these resources serves a different use case:
 
         * `dataplex.TaskIamPolicy`: Authoritative. Sets the IAM policy for the task and replaces any existing policy already attached.

pulumi_gcp/dataplex/zone_iam_binding.py

@@ -404,6 +404,7 @@ class ZoneIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Zone
+
         Three different resources help you manage your IAM policy for Dataplex Zone. Each of these resources serves a different use case:
 
         * `dataplex.ZoneIamPolicy`: Authoritative. Sets the IAM policy for the zone and replaces any existing policy already attached.
@@ -602,6 +603,7 @@ class ZoneIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Zone
+
         Three different resources help you manage your IAM policy for Dataplex Zone. Each of these resources serves a different use case:
 
         * `dataplex.ZoneIamPolicy`: Authoritative. Sets the IAM policy for the zone and replaces any existing policy already attached.

pulumi_gcp/dataplex/zone_iam_member.py

@@ -404,6 +404,7 @@ class ZoneIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Zone
+
         Three different resources help you manage your IAM policy for Dataplex Zone. Each of these resources serves a different use case:
 
         * `dataplex.ZoneIamPolicy`: Authoritative. Sets the IAM policy for the zone and replaces any existing policy already attached.
@@ -602,6 +603,7 @@ class ZoneIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Zone
+
         Three different resources help you manage your IAM policy for Dataplex Zone. Each of these resources serves a different use case:
 
         * `dataplex.ZoneIamPolicy`: Authoritative. Sets the IAM policy for the zone and replaces any existing policy already attached.

pulumi_gcp/dataplex/zone_iam_policy.py

@@ -301,6 +301,7 @@ class ZoneIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Zone
+
         Three different resources help you manage your IAM policy for Dataplex Zone. Each of these resources serves a different use case:
 
         * `dataplex.ZoneIamPolicy`: Authoritative. Sets the IAM policy for the zone and replaces any existing policy already attached.
@@ -487,6 +488,7 @@ class ZoneIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataplex Zone
+
         Three different resources help you manage your IAM policy for Dataplex Zone. Each of these resources serves a different use case:
 
         * `dataplex.ZoneIamPolicy`: Authoritative. Sets the IAM policy for the zone and replaces any existing policy already attached.

pulumi_gcp/dataproc/_inputs.py

@@ -31,6 +31,8 @@ __all__ = [
     'BatchEnvironmentConfigArgsDict',
     'BatchEnvironmentConfigExecutionConfigArgs',
     'BatchEnvironmentConfigExecutionConfigArgsDict',
+    'BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgs',
+    'BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgsDict',
     'BatchEnvironmentConfigPeripheralsConfigArgs',
     'BatchEnvironmentConfigPeripheralsConfigArgsDict',
     'BatchEnvironmentConfigPeripheralsConfigSparkHistoryServerConfigArgs',
@@ -113,6 +115,8 @@ __all__ = [
     'ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyProvisioningModelMixArgsDict',
     'ClusterClusterConfigSecurityConfigArgs',
     'ClusterClusterConfigSecurityConfigArgsDict',
+    'ClusterClusterConfigSecurityConfigIdentityConfigArgs',
+    'ClusterClusterConfigSecurityConfigIdentityConfigArgsDict',
     'ClusterClusterConfigSecurityConfigKerberosConfigArgs',
     'ClusterClusterConfigSecurityConfigKerberosConfigArgsDict',
     'ClusterClusterConfigSoftwareConfigArgs',
@@ -255,6 +259,8 @@ __all__ = [
     'SessionTemplateEnvironmentConfigArgsDict',
     'SessionTemplateEnvironmentConfigExecutionConfigArgs',
     'SessionTemplateEnvironmentConfigExecutionConfigArgsDict',
+    'SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgs',
+    'SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgsDict',
     'SessionTemplateEnvironmentConfigPeripheralsConfigArgs',
     'SessionTemplateEnvironmentConfigPeripheralsConfigArgsDict',
     'SessionTemplateEnvironmentConfigPeripheralsConfigSparkHistoryServerConfigArgs',
@@ -984,6 +990,11 @@ class BatchEnvironmentConfigArgs:
 
 if not MYPY:
     class BatchEnvironmentConfigExecutionConfigArgsDict(TypedDict):
+        authentication_config: NotRequired[pulumi.Input['BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgsDict']]
+        """
+        Authentication configuration for a workload is used to set the default identity for the workload execution.
+        Structure is documented below.
+        """
         kms_key: NotRequired[pulumi.Input[_builtins.str]]
         """
         The Cloud KMS key to use for encryption.
@@ -1029,6 +1040,7 @@ elif False:
 @pulumi.input_type
 class BatchEnvironmentConfigExecutionConfigArgs:
     def __init__(__self__, *,
+                 authentication_config: Optional[pulumi.Input['BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgs']] = None,
                  kms_key: Optional[pulumi.Input[_builtins.str]] = None,
                  network_tags: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  network_uri: Optional[pulumi.Input[_builtins.str]] = None,
@@ -1037,6 +1049,8 @@ class BatchEnvironmentConfigExecutionConfigArgs:
                  subnetwork_uri: Optional[pulumi.Input[_builtins.str]] = None,
                  ttl: Optional[pulumi.Input[_builtins.str]] = None):
         """
+        :param pulumi.Input['BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgs'] authentication_config: Authentication configuration for a workload is used to set the default identity for the workload execution.
+               Structure is documented below.
         :param pulumi.Input[_builtins.str] kms_key: The Cloud KMS key to use for encryption.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] network_tags: Tags used for network traffic control.
         :param pulumi.Input[_builtins.str] network_uri: Network configuration for workload execution.
@@ -1056,6 +1070,8 @@ class BatchEnvironmentConfigExecutionConfigArgs:
                the conditions are treated as OR conditions: the workload will be terminated when it has been idle for idleTtl or
                when ttl has been exceeded, whichever occurs first.
         """
+        if authentication_config is not None:
+            pulumi.set(__self__, "authentication_config", authentication_config)
         if kms_key is not None:
             pulumi.set(__self__, "kms_key", kms_key)
         if network_tags is not None:
@@ -1071,6 +1087,19 @@ class BatchEnvironmentConfigExecutionConfigArgs:
         if ttl is not None:
             pulumi.set(__self__, "ttl", ttl)
 
+    @_builtins.property
+    @pulumi.getter(name="authenticationConfig")
+    def authentication_config(self) -> Optional[pulumi.Input['BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgs']]:
+        """
+        Authentication configuration for a workload is used to set the default identity for the workload execution.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "authentication_config")
+
+    @authentication_config.setter
+    def authentication_config(self, value: Optional[pulumi.Input['BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgs']]):
+        pulumi.set(self, "authentication_config", value)
+
     @_builtins.property
     @pulumi.getter(name="kmsKey")
     def kms_key(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -1167,6 +1196,41 @@ class BatchEnvironmentConfigExecutionConfigArgs:
         pulumi.set(self, "ttl", value)
 
 
+if not MYPY:
+    class BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgsDict(TypedDict):
+        user_workload_authentication_type: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Authentication type for the user workload running in containers.
+        Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+elif False:
+    BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgs:
+    def __init__(__self__, *,
+                 user_workload_authentication_type: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] user_workload_authentication_type: Authentication type for the user workload running in containers.
+               Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+        if user_workload_authentication_type is not None:
+            pulumi.set(__self__, "user_workload_authentication_type", user_workload_authentication_type)
+
+    @_builtins.property
+    @pulumi.getter(name="userWorkloadAuthenticationType")
+    def user_workload_authentication_type(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Authentication type for the user workload running in containers.
+        Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+        return pulumi.get(self, "user_workload_authentication_type")
+
+    @user_workload_authentication_type.setter
+    def user_workload_authentication_type(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "user_workload_authentication_type", value)
+
+
 if not MYPY:
     class BatchEnvironmentConfigPeripheralsConfigArgsDict(TypedDict):
         metastore_service: NotRequired[pulumi.Input[_builtins.str]]
@@ -2390,6 +2454,10 @@ if not MYPY:
         for the cluster. If `staging_bucket` is specified, it will contain this value, otherwise
         it will be the auto generated name.
         """
+        cluster_tier: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The tier of the cluster.
+        """
         dataproc_metric_config: NotRequired[pulumi.Input['ClusterClusterConfigDataprocMetricConfigArgsDict']]
         """
         The Compute Engine accelerator (GPU) configuration for these instances. Can be specified multiple times.
@@ -2478,6 +2546,7 @@ class ClusterClusterConfigArgs:
                  autoscaling_config: Optional[pulumi.Input['ClusterClusterConfigAutoscalingConfigArgs']] = None,
                  auxiliary_node_groups: Optional[pulumi.Input[Sequence[pulumi.Input['ClusterClusterConfigAuxiliaryNodeGroupArgs']]]] = None,
                  bucket: Optional[pulumi.Input[_builtins.str]] = None,
+                 cluster_tier: Optional[pulumi.Input[_builtins.str]] = None,
                  dataproc_metric_config: Optional[pulumi.Input['ClusterClusterConfigDataprocMetricConfigArgs']] = None,
                  encryption_config: Optional[pulumi.Input['ClusterClusterConfigEncryptionConfigArgs']] = None,
                  endpoint_config: Optional[pulumi.Input['ClusterClusterConfigEndpointConfigArgs']] = None,
@@ -2502,6 +2571,7 @@ class ClusterClusterConfigArgs:
         :param pulumi.Input[_builtins.str] bucket: The name of the cloud storage bucket ultimately used to house the staging data
                for the cluster. If `staging_bucket` is specified, it will contain this value, otherwise
                it will be the auto generated name.
+        :param pulumi.Input[_builtins.str] cluster_tier: The tier of the cluster.
         :param pulumi.Input['ClusterClusterConfigDataprocMetricConfigArgs'] dataproc_metric_config: The Compute Engine accelerator (GPU) configuration for these instances. Can be specified multiple times.
                Structure defined below.
         :param pulumi.Input['ClusterClusterConfigEncryptionConfigArgs'] encryption_config: The Customer managed encryption keys settings for the cluster.
@@ -2546,6 +2616,8 @@ class ClusterClusterConfigArgs:
             pulumi.set(__self__, "auxiliary_node_groups", auxiliary_node_groups)
         if bucket is not None:
             pulumi.set(__self__, "bucket", bucket)
+        if cluster_tier is not None:
+            pulumi.set(__self__, "cluster_tier", cluster_tier)
         if dataproc_metric_config is not None:
             pulumi.set(__self__, "dataproc_metric_config", dataproc_metric_config)
         if encryption_config is not None:
@@ -2617,6 +2689,18 @@ class ClusterClusterConfigArgs:
     def bucket(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "bucket", value)
 
+    @_builtins.property
+    @pulumi.getter(name="clusterTier")
+    def cluster_tier(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The tier of the cluster.
+        """
+        return pulumi.get(self, "cluster_tier")
+
+    @cluster_tier.setter
+    def cluster_tier(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "cluster_tier", value)
+
     @_builtins.property
     @pulumi.getter(name="dataprocMetricConfig")
     def dataproc_metric_config(self) -> Optional[pulumi.Input['ClusterClusterConfigDataprocMetricConfigArgs']]:
@@ -5059,9 +5143,15 @@ class ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyProvis
 
 if not MYPY:
     class ClusterClusterConfigSecurityConfigArgsDict(TypedDict):
-        kerberos_config: pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgsDict']
+        identity_config: NotRequired[pulumi.Input['ClusterClusterConfigSecurityConfigIdentityConfigArgsDict']]
         """
-        Kerberos Configuration
+        Identity Configuration. At least one of `identity_config`
+        or `kerberos_config` is required.
+        """
+        kerberos_config: NotRequired[pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgsDict']]
+        """
+        Kerberos Configuration. At least one of `identity_config`
+        or `kerberos_config` is required.
         """
 elif False:
     ClusterClusterConfigSecurityConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -5069,25 +5159,86 @@ elif False:
 @pulumi.input_type
 class ClusterClusterConfigSecurityConfigArgs:
     def __init__(__self__, *,
-                 kerberos_config: pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgs']):
+                 identity_config: Optional[pulumi.Input['ClusterClusterConfigSecurityConfigIdentityConfigArgs']] = None,
+                 kerberos_config: Optional[pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgs']] = None):
+        """
+        :param pulumi.Input['ClusterClusterConfigSecurityConfigIdentityConfigArgs'] identity_config: Identity Configuration. At least one of `identity_config`
+               or `kerberos_config` is required.
+        :param pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgs'] kerberos_config: Kerberos Configuration. At least one of `identity_config`
+               or `kerberos_config` is required.
+        """
+        if identity_config is not None:
+            pulumi.set(__self__, "identity_config", identity_config)
+        if kerberos_config is not None:
+            pulumi.set(__self__, "kerberos_config", kerberos_config)
+
+    @_builtins.property
+    @pulumi.getter(name="identityConfig")
+    def identity_config(self) -> Optional[pulumi.Input['ClusterClusterConfigSecurityConfigIdentityConfigArgs']]:
         """
-        :param pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgs'] kerberos_config: Kerberos Configuration
+        Identity Configuration. At least one of `identity_config`
+        or `kerberos_config` is required.
         """
-        pulumi.set(__self__, "kerberos_config", kerberos_config)
+        return pulumi.get(self, "identity_config")
+
+    @identity_config.setter
+    def identity_config(self, value: Optional[pulumi.Input['ClusterClusterConfigSecurityConfigIdentityConfigArgs']]):
+        pulumi.set(self, "identity_config", value)
 
     @_builtins.property
     @pulumi.getter(name="kerberosConfig")
-    def kerberos_config(self) -> pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgs']:
+    def kerberos_config(self) -> Optional[pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgs']]:
         """
-        Kerberos Configuration
+        Kerberos Configuration. At least one of `identity_config`
+        or `kerberos_config` is required.
         """
         return pulumi.get(self, "kerberos_config")
 
     @kerberos_config.setter
-    def kerberos_config(self, value: pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgs']):
+    def kerberos_config(self, value: Optional[pulumi.Input['ClusterClusterConfigSecurityConfigKerberosConfigArgs']]):
         pulumi.set(self, "kerberos_config", value)
 
 
+if not MYPY:
+    class ClusterClusterConfigSecurityConfigIdentityConfigArgsDict(TypedDict):
+        user_service_account_mapping: pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]
+        """
+        The end user to service account mappings
+        in a service account based multi-tenant cluster
+
+        - - -
+        """
+elif False:
+    ClusterClusterConfigSecurityConfigIdentityConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class ClusterClusterConfigSecurityConfigIdentityConfigArgs:
+    def __init__(__self__, *,
+                 user_service_account_mapping: pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]):
+        """
+        :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] user_service_account_mapping: The end user to service account mappings
+               in a service account based multi-tenant cluster
+               
+               - - -
+        """
+        pulumi.set(__self__, "user_service_account_mapping", user_service_account_mapping)
+
+    @_builtins.property
+    @pulumi.getter(name="userServiceAccountMapping")
+    def user_service_account_mapping(self) -> pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]:
+        """
+        The end user to service account mappings
+        in a service account based multi-tenant cluster
+
+        - - -
+        """
+        return pulumi.get(self, "user_service_account_mapping")
+
+    @user_service_account_mapping.setter
+    def user_service_account_mapping(self, value: pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]):
+        pulumi.set(self, "user_service_account_mapping", value)
+
+
 if not MYPY:
     class ClusterClusterConfigSecurityConfigKerberosConfigArgsDict(TypedDict):
         kms_key_uri: pulumi.Input[_builtins.str]
@@ -5165,8 +5316,6 @@ if not MYPY:
         """
         The Cloud Storage URI of the truststore file used for
         SSL encryption. If not provided, Dataproc will provide a self-signed certificate.
-
-        - - -
         """
 elif False:
     ClusterClusterConfigSecurityConfigKerberosConfigArgsDict: TypeAlias = Mapping[str, Any]
@@ -5221,8 +5370,6 @@ class ClusterClusterConfigSecurityConfigKerberosConfigArgs:
                certificate, this password is generated by Dataproc.
         :param pulumi.Input[_builtins.str] truststore_uri: The Cloud Storage URI of the truststore file used for
                SSL encryption. If not provided, Dataproc will provide a self-signed certificate.
-               
-               - - -
         """
         pulumi.set(__self__, "kms_key_uri", kms_key_uri)
         pulumi.set(__self__, "root_principal_password_uri", root_principal_password_uri)
@@ -5442,8 +5589,6 @@ class ClusterClusterConfigSecurityConfigKerberosConfigArgs:
         """
         The Cloud Storage URI of the truststore file used for
         SSL encryption. If not provided, Dataproc will provide a self-signed certificate.
-
-        - - -
         """
         return pulumi.get(self, "truststore_uri")
 
@@ -10473,6 +10618,19 @@ class SessionTemplateEnvironmentConfigArgs:
 
 if not MYPY:
     class SessionTemplateEnvironmentConfigExecutionConfigArgsDict(TypedDict):
+        authentication_config: NotRequired[pulumi.Input['SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgsDict']]
+        """
+        Authentication configuration for a workload is used to set the default identity for the workload execution.
+        Structure is documented below.
+        """
+        idle_ttl: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The duration to keep the session alive while it's idling.
+        Exceeding this threshold causes the session to terminate. Minimum value is 10 minutes; maximum value is 14 day.
+        Defaults to 1 hour if not set. If both ttl and idleTtl are specified for an interactive session, the conditions
+        are treated as OR conditions: the workload will be terminated when it has been idle for idleTtl or when ttl has
+        been exceeded, whichever occurs first.
+        """
         kms_key: NotRequired[pulumi.Input[_builtins.str]]
         """
         The Cloud KMS key to use for encryption.
@@ -10514,6 +10672,8 @@ elif False:
 @pulumi.input_type
 class SessionTemplateEnvironmentConfigExecutionConfigArgs:
     def __init__(__self__, *,
+                 authentication_config: Optional[pulumi.Input['SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgs']] = None,
+                 idle_ttl: Optional[pulumi.Input[_builtins.str]] = None,
                  kms_key: Optional[pulumi.Input[_builtins.str]] = None,
                  network_tags: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  service_account: Optional[pulumi.Input[_builtins.str]] = None,
@@ -10521,6 +10681,13 @@ class SessionTemplateEnvironmentConfigExecutionConfigArgs:
                  subnetwork_uri: Optional[pulumi.Input[_builtins.str]] = None,
                  ttl: Optional[pulumi.Input[_builtins.str]] = None):
         """
+        :param pulumi.Input['SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgs'] authentication_config: Authentication configuration for a workload is used to set the default identity for the workload execution.
+               Structure is documented below.
+        :param pulumi.Input[_builtins.str] idle_ttl: The duration to keep the session alive while it's idling.
+               Exceeding this threshold causes the session to terminate. Minimum value is 10 minutes; maximum value is 14 day.
+               Defaults to 1 hour if not set. If both ttl and idleTtl are specified for an interactive session, the conditions
+               are treated as OR conditions: the workload will be terminated when it has been idle for idleTtl or when ttl has
+               been exceeded, whichever occurs first.
         :param pulumi.Input[_builtins.str] kms_key: The Cloud KMS key to use for encryption.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] network_tags: Tags used for network traffic control.
         :param pulumi.Input[_builtins.str] service_account: Service account that used to execute workload.
@@ -10539,6 +10706,10 @@ class SessionTemplateEnvironmentConfigExecutionConfigArgs:
                the conditions are treated as OR conditions: the workload will be terminated when it has been idle for idleTtl or
                when ttl has been exceeded, whichever occurs first.
         """
+        if authentication_config is not None:
+            pulumi.set(__self__, "authentication_config", authentication_config)
+        if idle_ttl is not None:
+            pulumi.set(__self__, "idle_ttl", idle_ttl)
         if kms_key is not None:
             pulumi.set(__self__, "kms_key", kms_key)
         if network_tags is not None:
@@ -10552,6 +10723,35 @@ class SessionTemplateEnvironmentConfigExecutionConfigArgs:
         if ttl is not None:
             pulumi.set(__self__, "ttl", ttl)
 
+    @_builtins.property
+    @pulumi.getter(name="authenticationConfig")
+    def authentication_config(self) -> Optional[pulumi.Input['SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgs']]:
+        """
+        Authentication configuration for a workload is used to set the default identity for the workload execution.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "authentication_config")
+
+    @authentication_config.setter
+    def authentication_config(self, value: Optional[pulumi.Input['SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgs']]):
+        pulumi.set(self, "authentication_config", value)
+
+    @_builtins.property
+    @pulumi.getter(name="idleTtl")
+    def idle_ttl(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The duration to keep the session alive while it's idling.
+        Exceeding this threshold causes the session to terminate. Minimum value is 10 minutes; maximum value is 14 day.
+        Defaults to 1 hour if not set. If both ttl and idleTtl are specified for an interactive session, the conditions
+        are treated as OR conditions: the workload will be terminated when it has been idle for idleTtl or when ttl has
+        been exceeded, whichever occurs first.
+        """
+        return pulumi.get(self, "idle_ttl")
+
+    @idle_ttl.setter
+    def idle_ttl(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "idle_ttl", value)
+
     @_builtins.property
     @pulumi.getter(name="kmsKey")
     def kms_key(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -10636,6 +10836,41 @@ class SessionTemplateEnvironmentConfigExecutionConfigArgs:
         pulumi.set(self, "ttl", value)
 
 
+if not MYPY:
+    class SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgsDict(TypedDict):
+        user_workload_authentication_type: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Authentication type for the user workload running in containers.
+        Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+elif False:
+    SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgs:
+    def __init__(__self__, *,
+                 user_workload_authentication_type: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] user_workload_authentication_type: Authentication type for the user workload running in containers.
+               Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+        if user_workload_authentication_type is not None:
+            pulumi.set(__self__, "user_workload_authentication_type", user_workload_authentication_type)
+
+    @_builtins.property
+    @pulumi.getter(name="userWorkloadAuthenticationType")
+    def user_workload_authentication_type(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Authentication type for the user workload running in containers.
+        Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+        return pulumi.get(self, "user_workload_authentication_type")
+
+    @user_workload_authentication_type.setter
+    def user_workload_authentication_type(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "user_workload_authentication_type", value)
+
+
 if not MYPY:
     class SessionTemplateEnvironmentConfigPeripheralsConfigArgsDict(TypedDict):
         metastore_service: NotRequired[pulumi.Input[_builtins.str]]

pulumi_gcp/dataproc/autoscaling_policy_iam_binding.py

@@ -377,6 +377,7 @@ class AutoscalingPolicyIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc AutoscalingPolicy
+
         Three different resources help you manage your IAM policy for Dataproc AutoscalingPolicy. Each of these resources serves a different use case:
 
         * `dataproc.AutoscalingPolicyIamPolicy`: Authoritative. Sets the IAM policy for the autoscalingpolicy and replaces any existing policy already attached.
@@ -570,6 +571,7 @@ class AutoscalingPolicyIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc AutoscalingPolicy
+
         Three different resources help you manage your IAM policy for Dataproc AutoscalingPolicy. Each of these resources serves a different use case:
 
         * `dataproc.AutoscalingPolicyIamPolicy`: Authoritative. Sets the IAM policy for the autoscalingpolicy and replaces any existing policy already attached.

pulumi_gcp/dataproc/autoscaling_policy_iam_member.py

@@ -377,6 +377,7 @@ class AutoscalingPolicyIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc AutoscalingPolicy
+
         Three different resources help you manage your IAM policy for Dataproc AutoscalingPolicy. Each of these resources serves a different use case:
 
         * `dataproc.AutoscalingPolicyIamPolicy`: Authoritative. Sets the IAM policy for the autoscalingpolicy and replaces any existing policy already attached.
@@ -570,6 +571,7 @@ class AutoscalingPolicyIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc AutoscalingPolicy
+
         Three different resources help you manage your IAM policy for Dataproc AutoscalingPolicy. Each of these resources serves a different use case:
 
         * `dataproc.AutoscalingPolicyIamPolicy`: Authoritative. Sets the IAM policy for the autoscalingpolicy and replaces any existing policy already attached.

pulumi_gcp/dataproc/autoscaling_policy_iam_policy.py

@@ -274,6 +274,7 @@ class AutoscalingPolicyIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc AutoscalingPolicy
+
         Three different resources help you manage your IAM policy for Dataproc AutoscalingPolicy. Each of these resources serves a different use case:
 
         * `dataproc.AutoscalingPolicyIamPolicy`: Authoritative. Sets the IAM policy for the autoscalingpolicy and replaces any existing policy already attached.
@@ -455,6 +456,7 @@ class AutoscalingPolicyIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc AutoscalingPolicy
+
         Three different resources help you manage your IAM policy for Dataproc AutoscalingPolicy. Each of these resources serves a different use case:
 
         * `dataproc.AutoscalingPolicyIamPolicy`: Authoritative. Sets the IAM policy for the autoscalingpolicy and replaces any existing policy already attached.

pulumi_gcp/dataproc/batch.py

@@ -734,6 +734,9 @@ class Batch(pulumi.CustomResource):
                     "network_uri": "default",
                     "service_account": f"{project.number}-compute@developer.gserviceaccount.com",
                     "staging_bucket": bucket.name,
+                    "authentication_config": {
+                        "user_workload_authentication_type": "SERVICE_ACCOUNT",
+                    },
                 },
                 "peripherals_config": {
                     "metastore_service": ms.name,
@@ -1050,6 +1053,9 @@ class Batch(pulumi.CustomResource):
                     "network_uri": "default",
                     "service_account": f"{project.number}-compute@developer.gserviceaccount.com",
                     "staging_bucket": bucket.name,
+                    "authentication_config": {
+                        "user_workload_authentication_type": "SERVICE_ACCOUNT",
+                    },
                 },
                 "peripherals_config": {
                     "metastore_service": ms.name,

pulumi_gcp/dataproc/cluster.py

@@ -378,6 +378,7 @@ class Cluster(pulumi.CustomResource):
             },
             cluster_config={
                 "staging_bucket": "dataproc-staging-bucket",
+                "cluster_tier": "CLUSTER_TIER_STANDARD",
                 "master_config": {
                     "num_instances": 1,
                     "machine_type": "e2-medium",
@@ -511,6 +512,7 @@ class Cluster(pulumi.CustomResource):
             },
             cluster_config={
                 "staging_bucket": "dataproc-staging-bucket",
+                "cluster_tier": "CLUSTER_TIER_STANDARD",
                 "master_config": {
                     "num_instances": 1,
                     "machine_type": "e2-medium",