pulumi-gcp 8.41.0a1755408441__py3-none-any.whl → 8.41.0a1755714744__py3-none-any.whl

pulumi_gcp/artifactregistry/outputs.py

@@ -43,6 +43,7 @@ __all__ = [
     'RepositoryVirtualRepositoryConfigUpstreamPolicy',
     'RepositoryVulnerabilityScanningConfig',
     'GetDockerImagesDockerImageResult',
+    'GetRepositoriesRepositoryResult',
     'GetRepositoryCleanupPolicyResult',
     'GetRepositoryCleanupPolicyConditionResult',
     'GetRepositoryCleanupPolicyMostRecentVersionResult',
@@ -67,6 +68,7 @@ __all__ = [
     'GetRepositoryVirtualRepositoryConfigResult',
     'GetRepositoryVirtualRepositoryConfigUpstreamPolicyResult',
     'GetRepositoryVulnerabilityScanningConfigResult',
+    'GetVersionRelatedTagResult',
 ]
 
 @pulumi.output_type
@@ -1483,6 +1485,79 @@ class GetDockerImagesDockerImageResult(dict):
         return pulumi.get(self, "upload_time")
 
 
+@pulumi.output_type
+class GetRepositoriesRepositoryResult(dict):
+    def __init__(__self__, *,
+                 create_time: _builtins.str,
+                 description: _builtins.str,
+                 format: _builtins.str,
+                 id: _builtins.str,
+                 repository_id: _builtins.str,
+                 update_time: _builtins.str):
+        """
+        :param _builtins.str create_time: The time when the repository was created.
+        :param _builtins.str description: The user-provided description of the repository.
+        :param _builtins.str format: The format of packages that are stored in the repository. Supported formats can be found [here](https://cloud.google.com/artifact-registry/docs/supported-formats).
+        :param _builtins.str id: An identifier for the resource with format `projects/{{project}}/locations/{{location}}/repositories/{{repository_id}}`
+        :param _builtins.str repository_id: The last part of the repository name, for example: `"repo1"`
+        :param _builtins.str update_time: The time when the repository was last updated.
+        """
+        pulumi.set(__self__, "create_time", create_time)
+        pulumi.set(__self__, "description", description)
+        pulumi.set(__self__, "format", format)
+        pulumi.set(__self__, "id", id)
+        pulumi.set(__self__, "repository_id", repository_id)
+        pulumi.set(__self__, "update_time", update_time)
+
+    @_builtins.property
+    @pulumi.getter(name="createTime")
+    def create_time(self) -> _builtins.str:
+        """
+        The time when the repository was created.
+        """
+        return pulumi.get(self, "create_time")
+
+    @_builtins.property
+    @pulumi.getter
+    def description(self) -> _builtins.str:
+        """
+        The user-provided description of the repository.
+        """
+        return pulumi.get(self, "description")
+
+    @_builtins.property
+    @pulumi.getter
+    def format(self) -> _builtins.str:
+        """
+        The format of packages that are stored in the repository. Supported formats can be found [here](https://cloud.google.com/artifact-registry/docs/supported-formats).
+        """
+        return pulumi.get(self, "format")
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> _builtins.str:
+        """
+        An identifier for the resource with format `projects/{{project}}/locations/{{location}}/repositories/{{repository_id}}`
+        """
+        return pulumi.get(self, "id")
+
+    @_builtins.property
+    @pulumi.getter(name="repositoryId")
+    def repository_id(self) -> _builtins.str:
+        """
+        The last part of the repository name, for example: `"repo1"`
+        """
+        return pulumi.get(self, "repository_id")
+
+    @_builtins.property
+    @pulumi.getter(name="updateTime")
+    def update_time(self) -> _builtins.str:
+        """
+        The time when the repository was last updated.
+        """
+        return pulumi.get(self, "update_time")
+
+
 @pulumi.output_type
 class GetRepositoryCleanupPolicyResult(dict):
     def __init__(__self__, *,
@@ -2261,3 +2336,28 @@ class GetRepositoryVulnerabilityScanningConfigResult(dict):
         return pulumi.get(self, "enablement_state_reason")
 
 
+@pulumi.output_type
+class GetVersionRelatedTagResult(dict):
+    def __init__(__self__, *,
+                 name: _builtins.str,
+                 version: _builtins.str):
+        """
+        :param _builtins.str name: The name of the version, for example: `projects/p1/locations/us-central1/repositories/repo1/packages/pkg1/versions/version1`. If the package part contains slashes, the slashes are escaped.
+        """
+        pulumi.set(__self__, "name", name)
+        pulumi.set(__self__, "version", version)
+
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> _builtins.str:
+        """
+        The name of the version, for example: `projects/p1/locations/us-central1/repositories/repo1/packages/pkg1/versions/version1`. If the package part contains slashes, the slashes are escaped.
+        """
+        return pulumi.get(self, "name")
+
+    @_builtins.property
+    @pulumi.getter
+    def version(self) -> _builtins.str:
+        return pulumi.get(self, "version")
+
+

pulumi_gcp/backupdisasterrecovery/backup_plan.py

@@ -27,6 +27,7 @@ class BackupPlanArgs:
                  location: pulumi.Input[_builtins.str],
                  resource_type: pulumi.Input[_builtins.str],
                  description: Optional[pulumi.Input[_builtins.str]] = None,
+                 log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None):
         """
         The set of arguments for constructing a BackupPlan resource.
@@ -36,8 +37,9 @@ class BackupPlanArgs:
         :param pulumi.Input[_builtins.str] backup_vault: Backup vault where the backups gets stored using this Backup plan.
         :param pulumi.Input[_builtins.str] location: The location for the backup plan
         :param pulumi.Input[_builtins.str] resource_type: The resource type to which the `BackupPlan` will be applied.
-               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         :param pulumi.Input[_builtins.str] description: The description allows for additional details about `BackupPlan` and its use cases to be provided.
+        :param pulumi.Input[_builtins.int] log_retention_days: This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         """
@@ -48,6 +50,8 @@ class BackupPlanArgs:
         pulumi.set(__self__, "resource_type", resource_type)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if log_retention_days is not None:
+            pulumi.set(__self__, "log_retention_days", log_retention_days)
         if project is not None:
             pulumi.set(__self__, "project", project)
 
@@ -105,7 +109,7 @@ class BackupPlanArgs:
     def resource_type(self) -> pulumi.Input[_builtins.str]:
         """
         The resource type to which the `BackupPlan` will be applied.
-        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         """
         return pulumi.get(self, "resource_type")
 
@@ -125,6 +129,18 @@ class BackupPlanArgs:
     def description(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "description", value)
 
+    @_builtins.property
+    @pulumi.getter(name="logRetentionDays")
+    def log_retention_days(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
+        """
+        return pulumi.get(self, "log_retention_days")
+
+    @log_retention_days.setter
+    def log_retention_days(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "log_retention_days", value)
+
     @_builtins.property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -149,6 +165,7 @@ class _BackupPlanState:
                  create_time: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  location: Optional[pulumi.Input[_builtins.str]] = None,
+                 log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  resource_type: Optional[pulumi.Input[_builtins.str]] = None,
@@ -164,11 +181,12 @@ class _BackupPlanState:
         :param pulumi.Input[_builtins.str] create_time: When the `BackupPlan` was created.
         :param pulumi.Input[_builtins.str] description: The description allows for additional details about `BackupPlan` and its use cases to be provided.
         :param pulumi.Input[_builtins.str] location: The location for the backup plan
+        :param pulumi.Input[_builtins.int] log_retention_days: This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
         :param pulumi.Input[_builtins.str] name: The name of backup plan resource created
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] resource_type: The resource type to which the `BackupPlan` will be applied.
-               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] supported_resource_types: The list of all resource types to which the 'BackupPlan' can be applied.
         :param pulumi.Input[_builtins.str] update_time: When the `BackupPlan` was last updated.
         """
@@ -186,6 +204,8 @@ class _BackupPlanState:
             pulumi.set(__self__, "description", description)
         if location is not None:
             pulumi.set(__self__, "location", location)
+        if log_retention_days is not None:
+            pulumi.set(__self__, "log_retention_days", log_retention_days)
         if name is not None:
             pulumi.set(__self__, "name", name)
         if project is not None:
@@ -282,6 +302,18 @@ class _BackupPlanState:
     def location(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "location", value)
 
+    @_builtins.property
+    @pulumi.getter(name="logRetentionDays")
+    def log_retention_days(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
+        """
+        return pulumi.get(self, "log_retention_days")
+
+    @log_retention_days.setter
+    def log_retention_days(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "log_retention_days", value)
+
     @_builtins.property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -312,7 +344,7 @@ class _BackupPlanState:
     def resource_type(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         The resource type to which the `BackupPlan` will be applied.
-        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         """
         return pulumi.get(self, "resource_type")
 
@@ -356,6 +388,7 @@ class BackupPlan(pulumi.CustomResource):
                  backup_vault: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  location: Optional[pulumi.Input[_builtins.str]] = None,
+                 log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  resource_type: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
@@ -428,6 +461,36 @@ class BackupPlan(pulumi.CustomResource):
                 },
             }])
         ```
+        ### Backup Dr Backup Plan For Csql Resource
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        my_backup_vault = gcp.backupdisasterrecovery.BackupVault("my_backup_vault",
+            location="us-central1",
+            backup_vault_id="backup-vault-csql-test",
+            backup_minimum_enforced_retention_duration="100000s")
+        my_csql_backup_plan_1 = gcp.backupdisasterrecovery.BackupPlan("my-csql-backup-plan-1",
+            location="us-central1",
+            backup_plan_id="backup-plan-csql-test",
+            resource_type="sqladmin.googleapis.com/Instance",
+            backup_vault=my_backup_vault.id,
+            backup_rules=[{
+                "rule_id": "rule-1",
+                "backup_retention_days": 5,
+                "standard_schedule": {
+                    "recurrence_type": "HOURLY",
+                    "hourly_frequency": 6,
+                    "time_zone": "UTC",
+                    "backup_window": {
+                        "start_hour_of_day": 0,
+                        "end_hour_of_day": 6,
+                    },
+                },
+            }],
+            log_retention_days=4)
+        ```
 
         ## Import
 
@@ -461,10 +524,11 @@ class BackupPlan(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] backup_vault: Backup vault where the backups gets stored using this Backup plan.
         :param pulumi.Input[_builtins.str] description: The description allows for additional details about `BackupPlan` and its use cases to be provided.
         :param pulumi.Input[_builtins.str] location: The location for the backup plan
+        :param pulumi.Input[_builtins.int] log_retention_days: This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] resource_type: The resource type to which the `BackupPlan` will be applied.
-               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         """
         ...
     @overload
@@ -541,6 +605,36 @@ class BackupPlan(pulumi.CustomResource):
                 },
             }])
         ```
+        ### Backup Dr Backup Plan For Csql Resource
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        my_backup_vault = gcp.backupdisasterrecovery.BackupVault("my_backup_vault",
+            location="us-central1",
+            backup_vault_id="backup-vault-csql-test",
+            backup_minimum_enforced_retention_duration="100000s")
+        my_csql_backup_plan_1 = gcp.backupdisasterrecovery.BackupPlan("my-csql-backup-plan-1",
+            location="us-central1",
+            backup_plan_id="backup-plan-csql-test",
+            resource_type="sqladmin.googleapis.com/Instance",
+            backup_vault=my_backup_vault.id,
+            backup_rules=[{
+                "rule_id": "rule-1",
+                "backup_retention_days": 5,
+                "standard_schedule": {
+                    "recurrence_type": "HOURLY",
+                    "hourly_frequency": 6,
+                    "time_zone": "UTC",
+                    "backup_window": {
+                        "start_hour_of_day": 0,
+                        "end_hour_of_day": 6,
+                    },
+                },
+            }],
+            log_retention_days=4)
+        ```
 
         ## Import
 
@@ -586,6 +680,7 @@ class BackupPlan(pulumi.CustomResource):
                  backup_vault: Optional[pulumi.Input[_builtins.str]] = None,
                  description: Optional[pulumi.Input[_builtins.str]] = None,
                  location: Optional[pulumi.Input[_builtins.str]] = None,
+                 log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  resource_type: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
@@ -610,6 +705,7 @@ class BackupPlan(pulumi.CustomResource):
             if location is None and not opts.urn:
                 raise TypeError("Missing required property 'location'")
             __props__.__dict__["location"] = location
+            __props__.__dict__["log_retention_days"] = log_retention_days
             __props__.__dict__["project"] = project
             if resource_type is None and not opts.urn:
                 raise TypeError("Missing required property 'resource_type'")
@@ -636,6 +732,7 @@ class BackupPlan(pulumi.CustomResource):
             create_time: Optional[pulumi.Input[_builtins.str]] = None,
             description: Optional[pulumi.Input[_builtins.str]] = None,
             location: Optional[pulumi.Input[_builtins.str]] = None,
+            log_retention_days: Optional[pulumi.Input[_builtins.int]] = None,
             name: Optional[pulumi.Input[_builtins.str]] = None,
             project: Optional[pulumi.Input[_builtins.str]] = None,
             resource_type: Optional[pulumi.Input[_builtins.str]] = None,
@@ -656,11 +753,12 @@ class BackupPlan(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] create_time: When the `BackupPlan` was created.
         :param pulumi.Input[_builtins.str] description: The description allows for additional details about `BackupPlan` and its use cases to be provided.
         :param pulumi.Input[_builtins.str] location: The location for the backup plan
+        :param pulumi.Input[_builtins.int] log_retention_days: This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
         :param pulumi.Input[_builtins.str] name: The name of backup plan resource created
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the provider project is used.
         :param pulumi.Input[_builtins.str] resource_type: The resource type to which the `BackupPlan` will be applied.
-               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+               Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] supported_resource_types: The list of all resource types to which the 'BackupPlan' can be applied.
         :param pulumi.Input[_builtins.str] update_time: When the `BackupPlan` was last updated.
         """
@@ -675,6 +773,7 @@ class BackupPlan(pulumi.CustomResource):
         __props__.__dict__["create_time"] = create_time
         __props__.__dict__["description"] = description
         __props__.__dict__["location"] = location
+        __props__.__dict__["log_retention_days"] = log_retention_days
         __props__.__dict__["name"] = name
         __props__.__dict__["project"] = project
         __props__.__dict__["resource_type"] = resource_type
@@ -739,6 +838,14 @@ class BackupPlan(pulumi.CustomResource):
         """
         return pulumi.get(self, "location")
 
+    @_builtins.property
+    @pulumi.getter(name="logRetentionDays")
+    def log_retention_days(self) -> pulumi.Output[Optional[_builtins.int]]:
+        """
+        This is only applicable for CloudSql resource. Days for which logs will be stored. This value should be greater than or equal to minimum enforced log retention duration of the backup vault.
+        """
+        return pulumi.get(self, "log_retention_days")
+
     @_builtins.property
     @pulumi.getter
     def name(self) -> pulumi.Output[_builtins.str]:
@@ -761,7 +868,7 @@ class BackupPlan(pulumi.CustomResource):
     def resource_type(self) -> pulumi.Output[_builtins.str]:
         """
         The resource type to which the `BackupPlan` will be applied.
-        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", and "storage.googleapis.com/Bucket".
+        Examples include, "compute.googleapis.com/Instance", "compute.googleapis.com/Disk", "sqladmin.googleapis.com/Instance" and "storage.googleapis.com/Bucket".
         """
         return pulumi.get(self, "resource_type")
 

pulumi_gcp/backupdisasterrecovery/get_backup_plan.py

@@ -27,7 +27,7 @@ class GetBackupPlanResult:
     """
     A collection of values returned by getBackupPlan.
     """
-    def __init__(__self__, backup_plan_id=None, backup_rules=None, backup_vault=None, backup_vault_service_account=None, create_time=None, description=None, id=None, location=None, name=None, project=None, resource_type=None, supported_resource_types=None, update_time=None):
+    def __init__(__self__, backup_plan_id=None, backup_rules=None, backup_vault=None, backup_vault_service_account=None, create_time=None, description=None, id=None, location=None, log_retention_days=None, name=None, project=None, resource_type=None, supported_resource_types=None, update_time=None):
         if backup_plan_id and not isinstance(backup_plan_id, str):
             raise TypeError("Expected argument 'backup_plan_id' to be a str")
         pulumi.set(__self__, "backup_plan_id", backup_plan_id)
@@ -52,6 +52,9 @@ class GetBackupPlanResult:
         if location and not isinstance(location, str):
             raise TypeError("Expected argument 'location' to be a str")
         pulumi.set(__self__, "location", location)
+        if log_retention_days and not isinstance(log_retention_days, int):
+            raise TypeError("Expected argument 'log_retention_days' to be a int")
+        pulumi.set(__self__, "log_retention_days", log_retention_days)
         if name and not isinstance(name, str):
             raise TypeError("Expected argument 'name' to be a str")
         pulumi.set(__self__, "name", name)
@@ -111,6 +114,11 @@ class GetBackupPlanResult:
     def location(self) -> _builtins.str:
         return pulumi.get(self, "location")
 
+    @_builtins.property
+    @pulumi.getter(name="logRetentionDays")
+    def log_retention_days(self) -> _builtins.int:
+        return pulumi.get(self, "log_retention_days")
+
     @_builtins.property
     @pulumi.getter
     def name(self) -> _builtins.str:
@@ -151,6 +159,7 @@ class AwaitableGetBackupPlanResult(GetBackupPlanResult):
             description=self.description,
             id=self.id,
             location=self.location,
+            log_retention_days=self.log_retention_days,
             name=self.name,
             project=self.project,
             resource_type=self.resource_type,
@@ -181,6 +190,7 @@ def get_backup_plan(backup_plan_id: Optional[_builtins.str] = None,
         description=pulumi.get(__ret__, 'description'),
         id=pulumi.get(__ret__, 'id'),
         location=pulumi.get(__ret__, 'location'),
+        log_retention_days=pulumi.get(__ret__, 'log_retention_days'),
         name=pulumi.get(__ret__, 'name'),
         project=pulumi.get(__ret__, 'project'),
         resource_type=pulumi.get(__ret__, 'resource_type'),
@@ -208,6 +218,7 @@ def get_backup_plan_output(backup_plan_id: Optional[pulumi.Input[_builtins.str]]
         description=pulumi.get(__response__, 'description'),
         id=pulumi.get(__response__, 'id'),
         location=pulumi.get(__response__, 'location'),
+        log_retention_days=pulumi.get(__response__, 'log_retention_days'),
         name=pulumi.get(__response__, 'name'),
         project=pulumi.get(__response__, 'project'),
         resource_type=pulumi.get(__response__, 'resource_type'),

pulumi_gcp/bigquery/dataset.py

@@ -1005,7 +1005,7 @@ class Dataset(pulumi.CustomResource):
             },
             accesses=[
                 {
-                    "role": "OWNER",
+                    "role": "roles/bigquery.dataOwner",
                     "user_by_email": bqowner.email,
                 },
                 {
@@ -1308,7 +1308,7 @@ class Dataset(pulumi.CustomResource):
             },
             accesses=[
                 {
-                    "role": "OWNER",
+                    "role": "roles/bigquery.dataOwner",
                     "user_by_email": bqowner.email,
                 },
                 {

pulumi_gcp/composer/user_workloads_config_map.py

@@ -227,6 +227,14 @@ class UserWorkloadsConfigMap(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
+        project = gcp.organizations.get_project()
+        test = gcp.serviceaccount.Account("test",
+            account_id="test-sa",
+            display_name="Test Service Account for Composer Environment")
+        composer_worker = gcp.projects.IAMMember("composer-worker",
+            project=project.project_id,
+            role="roles/composer.worker",
+            member=test.email.apply(lambda email: f"serviceAccount:{email}"))
         environment = gcp.composer.Environment("environment",
             name="test-environment",
             region="us-central1",
@@ -234,7 +242,11 @@ class UserWorkloadsConfigMap(pulumi.CustomResource):
                 "software_config": {
                     "image_version": "composer-3-airflow-2",
                 },
-            })
+                "node_config": {
+                    "service_account": test.name,
+                },
+            },
+            opts = pulumi.ResourceOptions(depends_on=[composer_worker]))
         config_map = gcp.composer.UserWorkloadsConfigMap("config_map",
             name="test-config-map",
             region="us-central1",
@@ -306,6 +318,14 @@ class UserWorkloadsConfigMap(pulumi.CustomResource):
         import pulumi
         import pulumi_gcp as gcp
 
+        project = gcp.organizations.get_project()
+        test = gcp.serviceaccount.Account("test",
+            account_id="test-sa",
+            display_name="Test Service Account for Composer Environment")
+        composer_worker = gcp.projects.IAMMember("composer-worker",
+            project=project.project_id,
+            role="roles/composer.worker",
+            member=test.email.apply(lambda email: f"serviceAccount:{email}"))
         environment = gcp.composer.Environment("environment",
             name="test-environment",
             region="us-central1",
@@ -313,7 +333,11 @@ class UserWorkloadsConfigMap(pulumi.CustomResource):
                 "software_config": {
                     "image_version": "composer-3-airflow-2",
                 },
-            })
+                "node_config": {
+                    "service_account": test.name,
+                },
+            },
+            opts = pulumi.ResourceOptions(depends_on=[composer_worker]))
         config_map = gcp.composer.UserWorkloadsConfigMap("config_map",
             name="test-config-map",
             region="us-central1",