pulumi-gcp 8.6.0a1728595713__py3-none-any.whl → 8.7.0__py3-none-any.whl

pulumi_gcp/bigtable/instance_iam_member.py

@@ -42,10 +42,7 @@ class InstanceIamMemberArgs:
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `bigtable.InstanceIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`. Read more about roles [here](https://cloud.google.com/bigtable/docs/access-control#roles).
-               
-               `bigtable.InstanceIamPolicy` only:
-        :param pulumi.Input[str] project: The project in which the instance belongs. If it
-               is not provided, a default will be supplied.
+        :param pulumi.Input['InstanceIamMemberConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
         """
         pulumi.set(__self__, "instance", instance)
         pulumi.set(__self__, "member", member)
@@ -95,8 +92,6 @@ class InstanceIamMemberArgs:
         The role that should be applied. Only one
         `bigtable.InstanceIamBinding` can be used per role. Note that custom roles must be of the format
         `[projects|organizations]/{parent-name}/roles/{role-name}`. Read more about roles [here](https://cloud.google.com/bigtable/docs/access-control#roles).
-
-        `bigtable.InstanceIamPolicy` only:
         """
         return pulumi.get(self, "role")
 
@@ -107,6 +102,9 @@ class InstanceIamMemberArgs:
     @property
     @pulumi.getter
     def condition(self) -> Optional[pulumi.Input['InstanceIamMemberConditionArgs']]:
+        """
+        An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
+        """
         return pulumi.get(self, "condition")
 
     @condition.setter
@@ -116,10 +114,6 @@ class InstanceIamMemberArgs:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[str]]:
-        """
-        The project in which the instance belongs. If it
-        is not provided, a default will be supplied.
-        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -138,6 +132,7 @@ class _InstanceIamMemberState:
                  role: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering InstanceIamMember resources.
+        :param pulumi.Input['InstanceIamMemberConditionArgs'] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
         :param pulumi.Input[str] etag: (Computed) The etag of the instances's IAM policy.
         :param pulumi.Input[str] instance: The name or relative resource id of the instance to manage IAM policies for.
                
@@ -150,13 +145,9 @@ class _InstanceIamMemberState:
                * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
                * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        :param pulumi.Input[str] project: The project in which the instance belongs. If it
-               is not provided, a default will be supplied.
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `bigtable.InstanceIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`. Read more about roles [here](https://cloud.google.com/bigtable/docs/access-control#roles).
-               
-               `bigtable.InstanceIamPolicy` only:
         """
         if condition is not None:
             pulumi.set(__self__, "condition", condition)
@@ -174,6 +165,9 @@ class _InstanceIamMemberState:
     @property
     @pulumi.getter
     def condition(self) -> Optional[pulumi.Input['InstanceIamMemberConditionArgs']]:
+        """
+        An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
+        """
         return pulumi.get(self, "condition")
 
     @condition.setter
@@ -228,10 +222,6 @@ class _InstanceIamMemberState:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[str]]:
-        """
-        The project in which the instance belongs. If it
-        is not provided, a default will be supplied.
-        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -245,8 +235,6 @@ class _InstanceIamMemberState:
         The role that should be applied. Only one
         `bigtable.InstanceIamBinding` can be used per role. Note that custom roles must be of the format
         `[projects|organizations]/{parent-name}/roles/{role-name}`. Read more about roles [here](https://cloud.google.com/bigtable/docs/access-control#roles).
-
-        `bigtable.InstanceIamPolicy` only:
         """
         return pulumi.get(self, "role")
 
@@ -385,6 +373,7 @@ class InstanceIamMember(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Union['InstanceIamMemberConditionArgs', 'InstanceIamMemberConditionArgsDict']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
         :param pulumi.Input[str] instance: The name or relative resource id of the instance to manage IAM policies for.
                
                For `bigtable.InstanceIamMember` or `bigtable.InstanceIamBinding`:
@@ -396,13 +385,9 @@ class InstanceIamMember(pulumi.CustomResource):
                * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
                * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        :param pulumi.Input[str] project: The project in which the instance belongs. If it
-               is not provided, a default will be supplied.
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `bigtable.InstanceIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`. Read more about roles [here](https://cloud.google.com/bigtable/docs/access-control#roles).
-               
-               `bigtable.InstanceIamPolicy` only:
         """
         ...
     @overload
@@ -591,6 +576,7 @@ class InstanceIamMember(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Union['InstanceIamMemberConditionArgs', 'InstanceIamMemberConditionArgsDict']] condition: An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
         :param pulumi.Input[str] etag: (Computed) The etag of the instances's IAM policy.
         :param pulumi.Input[str] instance: The name or relative resource id of the instance to manage IAM policies for.
                
@@ -603,13 +589,9 @@ class InstanceIamMember(pulumi.CustomResource):
                * **serviceAccount:{emailid}**: An email address that represents a service account. For example, my-other-app@appspot.gserviceaccount.com.
                * **group:{emailid}**: An email address that represents a Google group. For example, admins@example.com.
                * **domain:{domain}**: A G Suite domain (primary, instead of alias) name that represents all the users of that domain. For example, google.com or example.com.
-        :param pulumi.Input[str] project: The project in which the instance belongs. If it
-               is not provided, a default will be supplied.
         :param pulumi.Input[str] role: The role that should be applied. Only one
                `bigtable.InstanceIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`. Read more about roles [here](https://cloud.google.com/bigtable/docs/access-control#roles).
-               
-               `bigtable.InstanceIamPolicy` only:
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -626,6 +608,9 @@ class InstanceIamMember(pulumi.CustomResource):
     @property
     @pulumi.getter
     def condition(self) -> pulumi.Output[Optional['outputs.InstanceIamMemberCondition']]:
+        """
+        An [IAM Condition](https://cloud.google.com/iam/docs/conditions-overview) for a given binding. Structure is documented below.
+        """
         return pulumi.get(self, "condition")
 
     @property
@@ -664,10 +649,6 @@ class InstanceIamMember(pulumi.CustomResource):
     @property
     @pulumi.getter
     def project(self) -> pulumi.Output[str]:
-        """
-        The project in which the instance belongs. If it
-        is not provided, a default will be supplied.
-        """
         return pulumi.get(self, "project")
 
     @property
@@ -677,8 +658,6 @@ class InstanceIamMember(pulumi.CustomResource):
         The role that should be applied. Only one
         `bigtable.InstanceIamBinding` can be used per role. Note that custom roles must be of the format
         `[projects|organizations]/{parent-name}/roles/{role-name}`. Read more about roles [here](https://cloud.google.com/bigtable/docs/access-control#roles).
-
-        `bigtable.InstanceIamPolicy` only:
         """
         return pulumi.get(self, "role")
 

pulumi_gcp/bigtable/instance_iam_policy.py

@@ -27,11 +27,6 @@ class InstanceIamPolicyArgs:
         :param pulumi.Input[str] instance: The name or relative resource id of the instance to manage IAM policies for.
                
                For `bigtable.InstanceIamMember` or `bigtable.InstanceIamBinding`:
-        :param pulumi.Input[str] policy_data: The policy data generated by a `organizations_get_iam_policy` data source.
-               
-               - - -
-        :param pulumi.Input[str] project: The project in which the instance belongs. If it
-               is not provided, a default will be supplied.
         """
         pulumi.set(__self__, "instance", instance)
         pulumi.set(__self__, "policy_data", policy_data)
@@ -55,11 +50,6 @@ class InstanceIamPolicyArgs:
     @property
     @pulumi.getter(name="policyData")
     def policy_data(self) -> pulumi.Input[str]:
-        """
-        The policy data generated by a `organizations_get_iam_policy` data source.
-
-        - - -
-        """
         return pulumi.get(self, "policy_data")
 
     @policy_data.setter
@@ -69,10 +59,6 @@ class InstanceIamPolicyArgs:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[str]]:
-        """
-        The project in which the instance belongs. If it
-        is not provided, a default will be supplied.
-        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -93,11 +79,6 @@ class _InstanceIamPolicyState:
         :param pulumi.Input[str] instance: The name or relative resource id of the instance to manage IAM policies for.
                
                For `bigtable.InstanceIamMember` or `bigtable.InstanceIamBinding`:
-        :param pulumi.Input[str] policy_data: The policy data generated by a `organizations_get_iam_policy` data source.
-               
-               - - -
-        :param pulumi.Input[str] project: The project in which the instance belongs. If it
-               is not provided, a default will be supplied.
         """
         if etag is not None:
             pulumi.set(__self__, "etag", etag)
@@ -137,11 +118,6 @@ class _InstanceIamPolicyState:
     @property
     @pulumi.getter(name="policyData")
     def policy_data(self) -> Optional[pulumi.Input[str]]:
-        """
-        The policy data generated by a `organizations_get_iam_policy` data source.
-
-        - - -
-        """
         return pulumi.get(self, "policy_data")
 
     @policy_data.setter
@@ -151,10 +127,6 @@ class _InstanceIamPolicyState:
     @property
     @pulumi.getter
     def project(self) -> Optional[pulumi.Input[str]]:
-        """
-        The project in which the instance belongs. If it
-        is not provided, a default will be supplied.
-        """
         return pulumi.get(self, "project")
 
     @project.setter
@@ -293,11 +265,6 @@ class InstanceIamPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] instance: The name or relative resource id of the instance to manage IAM policies for.
                
                For `bigtable.InstanceIamMember` or `bigtable.InstanceIamBinding`:
-        :param pulumi.Input[str] policy_data: The policy data generated by a `organizations_get_iam_policy` data source.
-               
-               - - -
-        :param pulumi.Input[str] project: The project in which the instance belongs. If it
-               is not provided, a default will be supplied.
         """
         ...
     @overload
@@ -482,11 +449,6 @@ class InstanceIamPolicy(pulumi.CustomResource):
         :param pulumi.Input[str] instance: The name or relative resource id of the instance to manage IAM policies for.
                
                For `bigtable.InstanceIamMember` or `bigtable.InstanceIamBinding`:
-        :param pulumi.Input[str] policy_data: The policy data generated by a `organizations_get_iam_policy` data source.
-               
-               - - -
-        :param pulumi.Input[str] project: The project in which the instance belongs. If it
-               is not provided, a default will be supplied.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -519,19 +481,10 @@ class InstanceIamPolicy(pulumi.CustomResource):
     @property
     @pulumi.getter(name="policyData")
     def policy_data(self) -> pulumi.Output[str]:
-        """
-        The policy data generated by a `organizations_get_iam_policy` data source.
-
-        - - -
-        """
         return pulumi.get(self, "policy_data")
 
     @property
     @pulumi.getter
     def project(self) -> pulumi.Output[str]:
-        """
-        The project in which the instance belongs. If it
-        is not provided, a default will be supplied.
-        """
         return pulumi.get(self, "project")
 

pulumi_gcp/bigtable/outputs.py

@@ -433,6 +433,13 @@ class InstanceIamBindingCondition(dict):
                  expression: str,
                  title: str,
                  description: Optional[str] = None):
+        """
+        :param str expression: Textual representation of an expression in Common Expression Language syntax.
+        :param str title: A title for the expression, i.e. a short string describing its purpose.
+        :param str description: An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+               
+               For `bigtable.InstanceIamPolicy` only:
+        """
         pulumi.set(__self__, "expression", expression)
         pulumi.set(__self__, "title", title)
         if description is not None:
@@ -441,16 +448,27 @@ class InstanceIamBindingCondition(dict):
     @property
     @pulumi.getter
     def expression(self) -> str:
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
         return pulumi.get(self, "expression")
 
     @property
     @pulumi.getter
     def title(self) -> str:
+        """
+        A title for the expression, i.e. a short string describing its purpose.
+        """
         return pulumi.get(self, "title")
 
     @property
     @pulumi.getter
     def description(self) -> Optional[str]:
+        """
+        An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+
+        For `bigtable.InstanceIamPolicy` only:
+        """
         return pulumi.get(self, "description")
 
 
@@ -460,6 +478,13 @@ class InstanceIamMemberCondition(dict):
                  expression: str,
                  title: str,
                  description: Optional[str] = None):
+        """
+        :param str expression: Textual representation of an expression in Common Expression Language syntax.
+        :param str title: A title for the expression, i.e. a short string describing its purpose.
+        :param str description: An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+               
+               For `bigtable.InstanceIamPolicy` only:
+        """
         pulumi.set(__self__, "expression", expression)
         pulumi.set(__self__, "title", title)
         if description is not None:
@@ -468,16 +493,27 @@ class InstanceIamMemberCondition(dict):
     @property
     @pulumi.getter
     def expression(self) -> str:
+        """
+        Textual representation of an expression in Common Expression Language syntax.
+        """
         return pulumi.get(self, "expression")
 
     @property
     @pulumi.getter
     def title(self) -> str:
+        """
+        A title for the expression, i.e. a short string describing its purpose.
+        """
         return pulumi.get(self, "title")
 
     @property
     @pulumi.getter
     def description(self) -> Optional[str]:
+        """
+        An optional description of the expression. This is a longer text which describes the expression, e.g. when hovered over it in a UI.
+
+        For `bigtable.InstanceIamPolicy` only:
+        """
         return pulumi.get(self, "description")
 
 

pulumi_gcp/cloudrunv2/get_service.py

@@ -27,7 +27,7 @@ class GetServiceResult:
     """
     A collection of values returned by getService.
     """
-    def __init__(__self__, annotations=None, binary_authorizations=None, client=None, client_version=None, conditions=None, create_time=None, creator=None, custom_audiences=None, default_uri_disabled=None, delete_time=None, deletion_protection=None, description=None, effective_annotations=None, effective_labels=None, etag=None, expire_time=None, generation=None, id=None, ingress=None, labels=None, last_modifier=None, latest_created_revision=None, latest_ready_revision=None, launch_stage=None, location=None, name=None, observed_generation=None, project=None, pulumi_labels=None, reconciling=None, scalings=None, templates=None, terminal_conditions=None, traffic_statuses=None, traffics=None, uid=None, update_time=None, uri=None):
+    def __init__(__self__, annotations=None, binary_authorizations=None, client=None, client_version=None, conditions=None, create_time=None, creator=None, custom_audiences=None, default_uri_disabled=None, delete_time=None, deletion_protection=None, description=None, effective_annotations=None, effective_labels=None, etag=None, expire_time=None, generation=None, id=None, ingress=None, invoker_iam_disabled=None, labels=None, last_modifier=None, latest_created_revision=None, latest_ready_revision=None, launch_stage=None, location=None, name=None, observed_generation=None, project=None, pulumi_labels=None, reconciling=None, scalings=None, templates=None, terminal_conditions=None, traffic_statuses=None, traffics=None, uid=None, update_time=None, uri=None):
         if annotations and not isinstance(annotations, dict):
             raise TypeError("Expected argument 'annotations' to be a dict")
         pulumi.set(__self__, "annotations", annotations)
@@ -85,6 +85,9 @@ class GetServiceResult:
         if ingress and not isinstance(ingress, str):
             raise TypeError("Expected argument 'ingress' to be a str")
         pulumi.set(__self__, "ingress", ingress)
+        if invoker_iam_disabled and not isinstance(invoker_iam_disabled, bool):
+            raise TypeError("Expected argument 'invoker_iam_disabled' to be a bool")
+        pulumi.set(__self__, "invoker_iam_disabled", invoker_iam_disabled)
         if labels and not isinstance(labels, dict):
             raise TypeError("Expected argument 'labels' to be a dict")
         pulumi.set(__self__, "labels", labels)
@@ -241,6 +244,11 @@ class GetServiceResult:
     def ingress(self) -> str:
         return pulumi.get(self, "ingress")
 
+    @property
+    @pulumi.getter(name="invokerIamDisabled")
+    def invoker_iam_disabled(self) -> bool:
+        return pulumi.get(self, "invoker_iam_disabled")
+
     @property
     @pulumi.getter
     def labels(self) -> Mapping[str, str]:
@@ -362,6 +370,7 @@ class AwaitableGetServiceResult(GetServiceResult):
             generation=self.generation,
             id=self.id,
             ingress=self.ingress,
+            invoker_iam_disabled=self.invoker_iam_disabled,
             labels=self.labels,
             last_modifier=self.last_modifier,
             latest_created_revision=self.latest_created_revision,
@@ -437,6 +446,7 @@ def get_service(location: Optional[str] = None,
         generation=pulumi.get(__ret__, 'generation'),
         id=pulumi.get(__ret__, 'id'),
         ingress=pulumi.get(__ret__, 'ingress'),
+        invoker_iam_disabled=pulumi.get(__ret__, 'invoker_iam_disabled'),
         labels=pulumi.get(__ret__, 'labels'),
         last_modifier=pulumi.get(__ret__, 'last_modifier'),
         latest_created_revision=pulumi.get(__ret__, 'latest_created_revision'),
@@ -509,6 +519,7 @@ def get_service_output(location: Optional[pulumi.Input[Optional[str]]] = None,
         generation=pulumi.get(__response__, 'generation'),
         id=pulumi.get(__response__, 'id'),
         ingress=pulumi.get(__response__, 'ingress'),
+        invoker_iam_disabled=pulumi.get(__response__, 'invoker_iam_disabled'),
         labels=pulumi.get(__response__, 'labels'),
         last_modifier=pulumi.get(__response__, 'last_modifier'),
         latest_created_revision=pulumi.get(__response__, 'latest_created_revision'),

pulumi_gcp/cloudrunv2/service.py

@@ -32,6 +32,7 @@ class ServiceArgs:
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  ingress: Optional[pulumi.Input[str]] = None,
+                 invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  launch_stage: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
@@ -61,6 +62,8 @@ class ServiceArgs:
         :param pulumi.Input[str] ingress: Provides the ingress settings for this Service. On output, returns the currently observed ingress settings, or
                INGRESS_TRAFFIC_UNSPECIFIED if no revision is active. Possible values: ["INGRESS_TRAFFIC_ALL",
                "INGRESS_TRAFFIC_INTERNAL_ONLY", "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"]
+        :param pulumi.Input[bool] invoker_iam_disabled: Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+               only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with
                Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment,
                state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or
@@ -100,6 +103,8 @@ class ServiceArgs:
             pulumi.set(__self__, "description", description)
         if ingress is not None:
             pulumi.set(__self__, "ingress", ingress)
+        if invoker_iam_disabled is not None:
+            pulumi.set(__self__, "invoker_iam_disabled", invoker_iam_disabled)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if launch_stage is not None:
@@ -253,6 +258,19 @@ class ServiceArgs:
     def ingress(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ingress", value)
 
+    @property
+    @pulumi.getter(name="invokerIamDisabled")
+    def invoker_iam_disabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+        only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
+        """
+        return pulumi.get(self, "invoker_iam_disabled")
+
+    @invoker_iam_disabled.setter
+    def invoker_iam_disabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "invoker_iam_disabled", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
@@ -357,6 +375,7 @@ class _ServiceState:
                  expire_time: Optional[pulumi.Input[str]] = None,
                  generation: Optional[pulumi.Input[str]] = None,
                  ingress: Optional[pulumi.Input[str]] = None,
+                 invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  last_modifier: Optional[pulumi.Input[str]] = None,
                  latest_created_revision: Optional[pulumi.Input[str]] = None,
@@ -405,6 +424,8 @@ class _ServiceState:
         :param pulumi.Input[str] ingress: Provides the ingress settings for this Service. On output, returns the currently observed ingress settings, or
                INGRESS_TRAFFIC_UNSPECIFIED if no revision is active. Possible values: ["INGRESS_TRAFFIC_ALL",
                "INGRESS_TRAFFIC_INTERNAL_ONLY", "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"]
+        :param pulumi.Input[bool] invoker_iam_disabled: Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+               only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with
                Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment,
                state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or
@@ -481,6 +502,8 @@ class _ServiceState:
             pulumi.set(__self__, "generation", generation)
         if ingress is not None:
             pulumi.set(__self__, "ingress", ingress)
+        if invoker_iam_disabled is not None:
+            pulumi.set(__self__, "invoker_iam_disabled", invoker_iam_disabled)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if last_modifier is not None:
@@ -741,6 +764,19 @@ class _ServiceState:
     def ingress(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ingress", value)
 
+    @property
+    @pulumi.getter(name="invokerIamDisabled")
+    def invoker_iam_disabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+        only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
+        """
+        return pulumi.get(self, "invoker_iam_disabled")
+
+    @invoker_iam_disabled.setter
+    def invoker_iam_disabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "invoker_iam_disabled", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
@@ -1002,6 +1038,7 @@ class Service(pulumi.CustomResource):
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  ingress: Optional[pulumi.Input[str]] = None,
+                 invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  launch_stage: Optional[pulumi.Input[str]] = None,
                  location: Optional[pulumi.Input[str]] = None,
@@ -1461,6 +1498,25 @@ class Service(pulumi.CustomResource):
             },
             opts = pulumi.ResourceOptions(depends_on=[wait_for_mesh]))
         ```
+        ### Cloudrunv2 Service Invokeriam
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.cloudrunv2.Service("default",
+            name="cloudrun-service",
+            location="us-central1",
+            deletion_protection=False,
+            invoker_iam_disabled=True,
+            description="The serving URL of this service will not perform any IAM check when invoked",
+            ingress="INGRESS_TRAFFIC_ALL",
+            template={
+                "containers": [{
+                    "image": "us-docker.pkg.dev/cloudrun/container/hello",
+                }],
+            })
+        ```
 
         ## Import
 
@@ -1506,6 +1562,8 @@ class Service(pulumi.CustomResource):
         :param pulumi.Input[str] ingress: Provides the ingress settings for this Service. On output, returns the currently observed ingress settings, or
                INGRESS_TRAFFIC_UNSPECIFIED if no revision is active. Possible values: ["INGRESS_TRAFFIC_ALL",
                "INGRESS_TRAFFIC_INTERNAL_ONLY", "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"]
+        :param pulumi.Input[bool] invoker_iam_disabled: Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+               only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with
                Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment,
                state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or
@@ -1984,6 +2042,25 @@ class Service(pulumi.CustomResource):
             },
             opts = pulumi.ResourceOptions(depends_on=[wait_for_mesh]))
         ```
+        ### Cloudrunv2 Service Invokeriam
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.cloudrunv2.Service("default",
+            name="cloudrun-service",
+            location="us-central1",
+            deletion_protection=False,
+            invoker_iam_disabled=True,
+            description="The serving URL of this service will not perform any IAM check when invoked",
+            ingress="INGRESS_TRAFFIC_ALL",
+            template={
+                "containers": [{
+                    "image": "us-docker.pkg.dev/cloudrun/container/hello",
+                }],
+            })
+        ```
 
         ## Import
 
@@ -2033,6 +2110,7 @@ class Service(pulumi.CustomResource):
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  ingress: Optional[pulumi.Input[str]] = None,
+                 invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  launch_stage: Optional[pulumi.Input[str]] = None,
                  location: Optional[pulumi.Input[str]] = None,
@@ -2059,6 +2137,7 @@ class Service(pulumi.CustomResource):
             __props__.__dict__["deletion_protection"] = deletion_protection
             __props__.__dict__["description"] = description
             __props__.__dict__["ingress"] = ingress
+            __props__.__dict__["invoker_iam_disabled"] = invoker_iam_disabled
             __props__.__dict__["labels"] = labels
             __props__.__dict__["launch_stage"] = launch_stage
             if location is None and not opts.urn:
@@ -2121,6 +2200,7 @@ class Service(pulumi.CustomResource):
             expire_time: Optional[pulumi.Input[str]] = None,
             generation: Optional[pulumi.Input[str]] = None,
             ingress: Optional[pulumi.Input[str]] = None,
+            invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             last_modifier: Optional[pulumi.Input[str]] = None,
             latest_created_revision: Optional[pulumi.Input[str]] = None,
@@ -2174,6 +2254,8 @@ class Service(pulumi.CustomResource):
         :param pulumi.Input[str] ingress: Provides the ingress settings for this Service. On output, returns the currently observed ingress settings, or
                INGRESS_TRAFFIC_UNSPECIFIED if no revision is active. Possible values: ["INGRESS_TRAFFIC_ALL",
                "INGRESS_TRAFFIC_INTERNAL_ONLY", "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"]
+        :param pulumi.Input[bool] invoker_iam_disabled: Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+               only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with
                Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment,
                state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or
@@ -2236,6 +2318,7 @@ class Service(pulumi.CustomResource):
         __props__.__dict__["expire_time"] = expire_time
         __props__.__dict__["generation"] = generation
         __props__.__dict__["ingress"] = ingress
+        __props__.__dict__["invoker_iam_disabled"] = invoker_iam_disabled
         __props__.__dict__["labels"] = labels
         __props__.__dict__["last_modifier"] = last_modifier
         __props__.__dict__["latest_created_revision"] = latest_created_revision
@@ -2406,6 +2489,15 @@ class Service(pulumi.CustomResource):
         """
         return pulumi.get(self, "ingress")
 
+    @property
+    @pulumi.getter(name="invokerIamDisabled")
+    def invoker_iam_disabled(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+        only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
+        """
+        return pulumi.get(self, "invoker_iam_disabled")
+
     @property
     @pulumi.getter
     def labels(self) -> pulumi.Output[Optional[Mapping[str, str]]]: