pulumi-gcp 8.40.0a1754721948__py3-none-any.whl → 8.41.0__py3-none-any.whl

pulumi_gcp/dataproc/metastore_database_iam_binding.py

@@ -404,6 +404,7 @@ class MetastoreDatabaseIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Database
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Database. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreDatabaseIamPolicy`: Authoritative. Sets the IAM policy for the database and replaces any existing policy already attached.
@@ -602,6 +603,7 @@ class MetastoreDatabaseIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Database
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Database. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreDatabaseIamPolicy`: Authoritative. Sets the IAM policy for the database and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_database_iam_member.py

@@ -404,6 +404,7 @@ class MetastoreDatabaseIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Database
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Database. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreDatabaseIamPolicy`: Authoritative. Sets the IAM policy for the database and replaces any existing policy already attached.
@@ -602,6 +603,7 @@ class MetastoreDatabaseIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Database
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Database. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreDatabaseIamPolicy`: Authoritative. Sets the IAM policy for the database and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_database_iam_policy.py

@@ -301,6 +301,7 @@ class MetastoreDatabaseIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Database
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Database. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreDatabaseIamPolicy`: Authoritative. Sets the IAM policy for the database and replaces any existing policy already attached.
@@ -487,6 +488,7 @@ class MetastoreDatabaseIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Database
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Database. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreDatabaseIamPolicy`: Authoritative. Sets the IAM policy for the database and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_federation_iam_binding.py

@@ -373,6 +373,7 @@ class MetastoreFederationIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Federation
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Federation. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreFederationIamPolicy`: Authoritative. Sets the IAM policy for the federation and replaces any existing policy already attached.
@@ -565,6 +566,7 @@ class MetastoreFederationIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Federation
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Federation. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreFederationIamPolicy`: Authoritative. Sets the IAM policy for the federation and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_federation_iam_member.py

@@ -373,6 +373,7 @@ class MetastoreFederationIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Federation
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Federation. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreFederationIamPolicy`: Authoritative. Sets the IAM policy for the federation and replaces any existing policy already attached.
@@ -565,6 +566,7 @@ class MetastoreFederationIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Federation
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Federation. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreFederationIamPolicy`: Authoritative. Sets the IAM policy for the federation and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_federation_iam_policy.py

@@ -270,6 +270,7 @@ class MetastoreFederationIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Federation
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Federation. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreFederationIamPolicy`: Authoritative. Sets the IAM policy for the federation and replaces any existing policy already attached.
@@ -450,6 +451,7 @@ class MetastoreFederationIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Federation
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Federation. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreFederationIamPolicy`: Authoritative. Sets the IAM policy for the federation and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_service_iam_binding.py

@@ -377,6 +377,7 @@ class MetastoreServiceIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Service
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Service. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
@@ -570,6 +571,7 @@ class MetastoreServiceIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Service
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Service. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_service_iam_member.py

@@ -377,6 +377,7 @@ class MetastoreServiceIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Service
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Service. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
@@ -570,6 +571,7 @@ class MetastoreServiceIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Service
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Service. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_service_iam_policy.py

@@ -274,6 +274,7 @@ class MetastoreServiceIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Service
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Service. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.
@@ -455,6 +456,7 @@ class MetastoreServiceIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Service
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Service. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreServiceIamPolicy`: Authoritative. Sets the IAM policy for the service and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_table_iam_binding.py

@@ -439,6 +439,7 @@ class MetastoreTableIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Table
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Table. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreTableIamPolicy`: Authoritative. Sets the IAM policy for the table and replaces any existing policy already attached.
@@ -644,6 +645,7 @@ class MetastoreTableIamBinding(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Table
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Table. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreTableIamPolicy`: Authoritative. Sets the IAM policy for the table and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_table_iam_member.py

@@ -439,6 +439,7 @@ class MetastoreTableIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Table
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Table. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreTableIamPolicy`: Authoritative. Sets the IAM policy for the table and replaces any existing policy already attached.
@@ -644,6 +645,7 @@ class MetastoreTableIamMember(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Table
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Table. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreTableIamPolicy`: Authoritative. Sets the IAM policy for the table and replaces any existing policy already attached.

pulumi_gcp/dataproc/metastore_table_iam_policy.py

@@ -336,6 +336,7 @@ class MetastoreTableIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Table
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Table. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreTableIamPolicy`: Authoritative. Sets the IAM policy for the table and replaces any existing policy already attached.
@@ -529,6 +530,7 @@ class MetastoreTableIamPolicy(pulumi.CustomResource):
         - 
 
         # IAM policy for Dataproc Metastore Table
+
         Three different resources help you manage your IAM policy for Dataproc Metastore Table. Each of these resources serves a different use case:
 
         * `dataproc.MetastoreTableIamPolicy`: Authoritative. Sets the IAM policy for the table and replaces any existing policy already attached.

pulumi_gcp/dataproc/outputs.py

@@ -24,6 +24,7 @@ __all__ = [
     'AutoscalingPolicyWorkerConfig',
     'BatchEnvironmentConfig',
     'BatchEnvironmentConfigExecutionConfig',
+    'BatchEnvironmentConfigExecutionConfigAuthenticationConfig',
     'BatchEnvironmentConfigPeripheralsConfig',
     'BatchEnvironmentConfigPeripheralsConfigSparkHistoryServerConfig',
     'BatchPysparkBatch',
@@ -65,6 +66,7 @@ __all__ = [
     'ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyInstanceSelectionResult',
     'ClusterClusterConfigPreemptibleWorkerConfigInstanceFlexibilityPolicyProvisioningModelMix',
     'ClusterClusterConfigSecurityConfig',
+    'ClusterClusterConfigSecurityConfigIdentityConfig',
     'ClusterClusterConfigSecurityConfigKerberosConfig',
     'ClusterClusterConfigSoftwareConfig',
     'ClusterClusterConfigWorkerConfig',
@@ -136,6 +138,7 @@ __all__ = [
     'MetastoreTableIamMemberCondition',
     'SessionTemplateEnvironmentConfig',
     'SessionTemplateEnvironmentConfigExecutionConfig',
+    'SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfig',
     'SessionTemplateEnvironmentConfigPeripheralsConfig',
     'SessionTemplateEnvironmentConfigPeripheralsConfigSparkHistoryServerConfig',
     'SessionTemplateJupyterSession',
@@ -685,7 +688,9 @@ class BatchEnvironmentConfigExecutionConfig(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "kmsKey":
+        if key == "authenticationConfig":
+            suggest = "authentication_config"
+        elif key == "kmsKey":
             suggest = "kms_key"
         elif key == "networkTags":
             suggest = "network_tags"
@@ -710,6 +715,7 @@ class BatchEnvironmentConfigExecutionConfig(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 authentication_config: Optional['outputs.BatchEnvironmentConfigExecutionConfigAuthenticationConfig'] = None,
                  kms_key: Optional[_builtins.str] = None,
                  network_tags: Optional[Sequence[_builtins.str]] = None,
                  network_uri: Optional[_builtins.str] = None,
@@ -718,6 +724,8 @@ class BatchEnvironmentConfigExecutionConfig(dict):
                  subnetwork_uri: Optional[_builtins.str] = None,
                  ttl: Optional[_builtins.str] = None):
         """
+        :param 'BatchEnvironmentConfigExecutionConfigAuthenticationConfigArgs' authentication_config: Authentication configuration for a workload is used to set the default identity for the workload execution.
+               Structure is documented below.
         :param _builtins.str kms_key: The Cloud KMS key to use for encryption.
         :param Sequence[_builtins.str] network_tags: Tags used for network traffic control.
         :param _builtins.str network_uri: Network configuration for workload execution.
@@ -737,6 +745,8 @@ class BatchEnvironmentConfigExecutionConfig(dict):
                the conditions are treated as OR conditions: the workload will be terminated when it has been idle for idleTtl or
                when ttl has been exceeded, whichever occurs first.
         """
+        if authentication_config is not None:
+            pulumi.set(__self__, "authentication_config", authentication_config)
         if kms_key is not None:
             pulumi.set(__self__, "kms_key", kms_key)
         if network_tags is not None:
@@ -752,6 +762,15 @@ class BatchEnvironmentConfigExecutionConfig(dict):
         if ttl is not None:
             pulumi.set(__self__, "ttl", ttl)
 
+    @_builtins.property
+    @pulumi.getter(name="authenticationConfig")
+    def authentication_config(self) -> Optional['outputs.BatchEnvironmentConfigExecutionConfigAuthenticationConfig']:
+        """
+        Authentication configuration for a workload is used to set the default identity for the workload execution.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "authentication_config")
+
     @_builtins.property
     @pulumi.getter(name="kmsKey")
     def kms_key(self) -> Optional[_builtins.str]:
@@ -820,6 +839,44 @@ class BatchEnvironmentConfigExecutionConfig(dict):
         return pulumi.get(self, "ttl")
 
 
+@pulumi.output_type
+class BatchEnvironmentConfigExecutionConfigAuthenticationConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "userWorkloadAuthenticationType":
+            suggest = "user_workload_authentication_type"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in BatchEnvironmentConfigExecutionConfigAuthenticationConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        BatchEnvironmentConfigExecutionConfigAuthenticationConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        BatchEnvironmentConfigExecutionConfigAuthenticationConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 user_workload_authentication_type: Optional[_builtins.str] = None):
+        """
+        :param _builtins.str user_workload_authentication_type: Authentication type for the user workload running in containers.
+               Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+        if user_workload_authentication_type is not None:
+            pulumi.set(__self__, "user_workload_authentication_type", user_workload_authentication_type)
+
+    @_builtins.property
+    @pulumi.getter(name="userWorkloadAuthenticationType")
+    def user_workload_authentication_type(self) -> Optional[_builtins.str]:
+        """
+        Authentication type for the user workload running in containers.
+        Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+        return pulumi.get(self, "user_workload_authentication_type")
+
+
 @pulumi.output_type
 class BatchEnvironmentConfigPeripheralsConfig(dict):
     @staticmethod
@@ -1798,6 +1855,8 @@ class ClusterClusterConfig(dict):
             suggest = "autoscaling_config"
         elif key == "auxiliaryNodeGroups":
             suggest = "auxiliary_node_groups"
+        elif key == "clusterTier":
+            suggest = "cluster_tier"
         elif key == "dataprocMetricConfig":
             suggest = "dataproc_metric_config"
         elif key == "encryptionConfig":
@@ -1842,6 +1901,7 @@ class ClusterClusterConfig(dict):
                  autoscaling_config: Optional['outputs.ClusterClusterConfigAutoscalingConfig'] = None,
                  auxiliary_node_groups: Optional[Sequence['outputs.ClusterClusterConfigAuxiliaryNodeGroup']] = None,
                  bucket: Optional[_builtins.str] = None,
+                 cluster_tier: Optional[_builtins.str] = None,
                  dataproc_metric_config: Optional['outputs.ClusterClusterConfigDataprocMetricConfig'] = None,
                  encryption_config: Optional['outputs.ClusterClusterConfigEncryptionConfig'] = None,
                  endpoint_config: Optional['outputs.ClusterClusterConfigEndpointConfig'] = None,
@@ -1866,6 +1926,7 @@ class ClusterClusterConfig(dict):
         :param _builtins.str bucket: The name of the cloud storage bucket ultimately used to house the staging data
                for the cluster. If `staging_bucket` is specified, it will contain this value, otherwise
                it will be the auto generated name.
+        :param _builtins.str cluster_tier: The tier of the cluster.
         :param 'ClusterClusterConfigDataprocMetricConfigArgs' dataproc_metric_config: The Compute Engine accelerator (GPU) configuration for these instances. Can be specified multiple times.
                Structure defined below.
         :param 'ClusterClusterConfigEncryptionConfigArgs' encryption_config: The Customer managed encryption keys settings for the cluster.
@@ -1910,6 +1971,8 @@ class ClusterClusterConfig(dict):
             pulumi.set(__self__, "auxiliary_node_groups", auxiliary_node_groups)
         if bucket is not None:
             pulumi.set(__self__, "bucket", bucket)
+        if cluster_tier is not None:
+            pulumi.set(__self__, "cluster_tier", cluster_tier)
         if dataproc_metric_config is not None:
             pulumi.set(__self__, "dataproc_metric_config", dataproc_metric_config)
         if encryption_config is not None:
@@ -1969,6 +2032,14 @@ class ClusterClusterConfig(dict):
         """
         return pulumi.get(self, "bucket")
 
+    @_builtins.property
+    @pulumi.getter(name="clusterTier")
+    def cluster_tier(self) -> Optional[_builtins.str]:
+        """
+        The tier of the cluster.
+        """
+        return pulumi.get(self, "cluster_tier")
+
     @_builtins.property
     @pulumi.getter(name="dataprocMetricConfig")
     def dataproc_metric_config(self) -> Optional['outputs.ClusterClusterConfigDataprocMetricConfig']:
@@ -3991,7 +4062,9 @@ class ClusterClusterConfigSecurityConfig(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "kerberosConfig":
+        if key == "identityConfig":
+            suggest = "identity_config"
+        elif key == "kerberosConfig":
             suggest = "kerberos_config"
 
         if suggest:
@@ -4006,21 +4079,79 @@ class ClusterClusterConfigSecurityConfig(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 kerberos_config: 'outputs.ClusterClusterConfigSecurityConfigKerberosConfig'):
+                 identity_config: Optional['outputs.ClusterClusterConfigSecurityConfigIdentityConfig'] = None,
+                 kerberos_config: Optional['outputs.ClusterClusterConfigSecurityConfigKerberosConfig'] = None):
+        """
+        :param 'ClusterClusterConfigSecurityConfigIdentityConfigArgs' identity_config: Identity Configuration. At least one of `identity_config`
+               or `kerberos_config` is required.
+        :param 'ClusterClusterConfigSecurityConfigKerberosConfigArgs' kerberos_config: Kerberos Configuration. At least one of `identity_config`
+               or `kerberos_config` is required.
+        """
+        if identity_config is not None:
+            pulumi.set(__self__, "identity_config", identity_config)
+        if kerberos_config is not None:
+            pulumi.set(__self__, "kerberos_config", kerberos_config)
+
+    @_builtins.property
+    @pulumi.getter(name="identityConfig")
+    def identity_config(self) -> Optional['outputs.ClusterClusterConfigSecurityConfigIdentityConfig']:
         """
-        :param 'ClusterClusterConfigSecurityConfigKerberosConfigArgs' kerberos_config: Kerberos Configuration
+        Identity Configuration. At least one of `identity_config`
+        or `kerberos_config` is required.
         """
-        pulumi.set(__self__, "kerberos_config", kerberos_config)
+        return pulumi.get(self, "identity_config")
 
     @_builtins.property
     @pulumi.getter(name="kerberosConfig")
-    def kerberos_config(self) -> 'outputs.ClusterClusterConfigSecurityConfigKerberosConfig':
+    def kerberos_config(self) -> Optional['outputs.ClusterClusterConfigSecurityConfigKerberosConfig']:
         """
-        Kerberos Configuration
+        Kerberos Configuration. At least one of `identity_config`
+        or `kerberos_config` is required.
         """
         return pulumi.get(self, "kerberos_config")
 
 
+@pulumi.output_type
+class ClusterClusterConfigSecurityConfigIdentityConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "userServiceAccountMapping":
+            suggest = "user_service_account_mapping"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in ClusterClusterConfigSecurityConfigIdentityConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        ClusterClusterConfigSecurityConfigIdentityConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        ClusterClusterConfigSecurityConfigIdentityConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 user_service_account_mapping: Mapping[str, _builtins.str]):
+        """
+        :param Mapping[str, _builtins.str] user_service_account_mapping: The end user to service account mappings
+               in a service account based multi-tenant cluster
+               
+               - - -
+        """
+        pulumi.set(__self__, "user_service_account_mapping", user_service_account_mapping)
+
+    @_builtins.property
+    @pulumi.getter(name="userServiceAccountMapping")
+    def user_service_account_mapping(self) -> Mapping[str, _builtins.str]:
+        """
+        The end user to service account mappings
+        in a service account based multi-tenant cluster
+
+        - - -
+        """
+        return pulumi.get(self, "user_service_account_mapping")
+
+
 @pulumi.output_type
 class ClusterClusterConfigSecurityConfigKerberosConfig(dict):
     @staticmethod
@@ -4114,8 +4245,6 @@ class ClusterClusterConfigSecurityConfigKerberosConfig(dict):
                certificate, this password is generated by Dataproc.
         :param _builtins.str truststore_uri: The Cloud Storage URI of the truststore file used for
                SSL encryption. If not provided, Dataproc will provide a self-signed certificate.
-               
-               - - -
         """
         pulumi.set(__self__, "kms_key_uri", kms_key_uri)
         pulumi.set(__self__, "root_principal_password_uri", root_principal_password_uri)
@@ -4279,8 +4408,6 @@ class ClusterClusterConfigSecurityConfigKerberosConfig(dict):
         """
         The Cloud Storage URI of the truststore file used for
         SSL encryption. If not provided, Dataproc will provide a self-signed certificate.
-
-        - - -
         """
         return pulumi.get(self, "truststore_uri")
 
@@ -8349,7 +8476,11 @@ class SessionTemplateEnvironmentConfigExecutionConfig(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
-        if key == "kmsKey":
+        if key == "authenticationConfig":
+            suggest = "authentication_config"
+        elif key == "idleTtl":
+            suggest = "idle_ttl"
+        elif key == "kmsKey":
             suggest = "kms_key"
         elif key == "networkTags":
             suggest = "network_tags"
@@ -8372,6 +8503,8 @@ class SessionTemplateEnvironmentConfigExecutionConfig(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
+                 authentication_config: Optional['outputs.SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfig'] = None,
+                 idle_ttl: Optional[_builtins.str] = None,
                  kms_key: Optional[_builtins.str] = None,
                  network_tags: Optional[Sequence[_builtins.str]] = None,
                  service_account: Optional[_builtins.str] = None,
@@ -8379,6 +8512,13 @@ class SessionTemplateEnvironmentConfigExecutionConfig(dict):
                  subnetwork_uri: Optional[_builtins.str] = None,
                  ttl: Optional[_builtins.str] = None):
         """
+        :param 'SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfigArgs' authentication_config: Authentication configuration for a workload is used to set the default identity for the workload execution.
+               Structure is documented below.
+        :param _builtins.str idle_ttl: The duration to keep the session alive while it's idling.
+               Exceeding this threshold causes the session to terminate. Minimum value is 10 minutes; maximum value is 14 day.
+               Defaults to 1 hour if not set. If both ttl and idleTtl are specified for an interactive session, the conditions
+               are treated as OR conditions: the workload will be terminated when it has been idle for idleTtl or when ttl has
+               been exceeded, whichever occurs first.
         :param _builtins.str kms_key: The Cloud KMS key to use for encryption.
         :param Sequence[_builtins.str] network_tags: Tags used for network traffic control.
         :param _builtins.str service_account: Service account that used to execute workload.
@@ -8397,6 +8537,10 @@ class SessionTemplateEnvironmentConfigExecutionConfig(dict):
                the conditions are treated as OR conditions: the workload will be terminated when it has been idle for idleTtl or
                when ttl has been exceeded, whichever occurs first.
         """
+        if authentication_config is not None:
+            pulumi.set(__self__, "authentication_config", authentication_config)
+        if idle_ttl is not None:
+            pulumi.set(__self__, "idle_ttl", idle_ttl)
         if kms_key is not None:
             pulumi.set(__self__, "kms_key", kms_key)
         if network_tags is not None:
@@ -8410,6 +8554,27 @@ class SessionTemplateEnvironmentConfigExecutionConfig(dict):
         if ttl is not None:
             pulumi.set(__self__, "ttl", ttl)
 
+    @_builtins.property
+    @pulumi.getter(name="authenticationConfig")
+    def authentication_config(self) -> Optional['outputs.SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfig']:
+        """
+        Authentication configuration for a workload is used to set the default identity for the workload execution.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "authentication_config")
+
+    @_builtins.property
+    @pulumi.getter(name="idleTtl")
+    def idle_ttl(self) -> Optional[_builtins.str]:
+        """
+        The duration to keep the session alive while it's idling.
+        Exceeding this threshold causes the session to terminate. Minimum value is 10 minutes; maximum value is 14 day.
+        Defaults to 1 hour if not set. If both ttl and idleTtl are specified for an interactive session, the conditions
+        are treated as OR conditions: the workload will be terminated when it has been idle for idleTtl or when ttl has
+        been exceeded, whichever occurs first.
+        """
+        return pulumi.get(self, "idle_ttl")
+
     @_builtins.property
     @pulumi.getter(name="kmsKey")
     def kms_key(self) -> Optional[_builtins.str]:
@@ -8470,6 +8635,44 @@ class SessionTemplateEnvironmentConfigExecutionConfig(dict):
         return pulumi.get(self, "ttl")
 
 
+@pulumi.output_type
+class SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfig(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "userWorkloadAuthenticationType":
+            suggest = "user_workload_authentication_type"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfig. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfig.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        SessionTemplateEnvironmentConfigExecutionConfigAuthenticationConfig.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 user_workload_authentication_type: Optional[_builtins.str] = None):
+        """
+        :param _builtins.str user_workload_authentication_type: Authentication type for the user workload running in containers.
+               Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+        if user_workload_authentication_type is not None:
+            pulumi.set(__self__, "user_workload_authentication_type", user_workload_authentication_type)
+
+    @_builtins.property
+    @pulumi.getter(name="userWorkloadAuthenticationType")
+    def user_workload_authentication_type(self) -> Optional[_builtins.str]:
+        """
+        Authentication type for the user workload running in containers.
+        Possible values are: `SERVICE_ACCOUNT`, `END_USER_CREDENTIALS`.
+        """
+        return pulumi.get(self, "user_workload_authentication_type")
+
+
 @pulumi.output_type
 class SessionTemplateEnvironmentConfigPeripheralsConfig(dict):
     @staticmethod

pulumi_gcp/dataproc/session_template.py

@@ -468,8 +468,11 @@ class SessionTemplate(pulumi.CustomResource):
             environment_config={
                 "execution_config": {
                     "subnetwork_uri": "default",
-                    "ttl": "3600s",
+                    "idle_ttl": "3600s",
                     "network_tags": ["tag1"],
+                    "authentication_config": {
+                        "user_workload_authentication_type": "END_USER_CREDENTIALS",
+                    },
                 },
             },
             jupyter_session={
@@ -560,6 +563,9 @@ class SessionTemplate(pulumi.CustomResource):
                     "subnetwork_uri": "default",
                     "service_account": f"{project.number}-compute@developer.gserviceaccount.com",
                     "staging_bucket": bucket.name,
+                    "authentication_config": {
+                        "user_workload_authentication_type": "SERVICE_ACCOUNT",
+                    },
                 },
                 "peripherals_config": {
                     "metastore_service": ms.name,
@@ -671,8 +677,11 @@ class SessionTemplate(pulumi.CustomResource):
             environment_config={
                 "execution_config": {
                     "subnetwork_uri": "default",
-                    "ttl": "3600s",
+                    "idle_ttl": "3600s",
                     "network_tags": ["tag1"],
+                    "authentication_config": {
+                        "user_workload_authentication_type": "END_USER_CREDENTIALS",
+                    },
                 },
             },
             jupyter_session={
@@ -763,6 +772,9 @@ class SessionTemplate(pulumi.CustomResource):
                     "subnetwork_uri": "default",
                     "service_account": f"{project.number}-compute@developer.gserviceaccount.com",
                     "staging_bucket": bucket.name,
+                    "authentication_config": {
+                        "user_workload_authentication_type": "SERVICE_ACCOUNT",
+                    },
                 },
                 "peripherals_config": {
                     "metastore_service": ms.name,

pulumi_gcp/developerconnect/__init__.py

@@ -9,5 +9,6 @@ import typing
 from .account_connector import *
 from .connection import *
 from .git_repository_link import *
+from .insights_config import *
 from ._inputs import *
 from . import outputs