pulumi-gcp 8.7.0__py3-none-any.whl → 8.7.0a1729107581__py3-none-any.whl

pulumi_gcp/networkconnectivity/outputs.py

@@ -16,7 +16,6 @@ from .. import _utilities
 from . import outputs
 
 __all__ = [
-    'GroupAutoAccept',
     'HubRoutingVpc',
     'InternalRangeMigration',
     'PolicyBasedRouteFilter',
@@ -28,48 +27,12 @@ __all__ = [
     'ServiceConnectionPolicyPscConnectionError',
     'ServiceConnectionPolicyPscConnectionErrorInfo',
     'SpokeLinkedInterconnectAttachments',
-    'SpokeLinkedProducerVpcNetwork',
     'SpokeLinkedRouterApplianceInstances',
     'SpokeLinkedRouterApplianceInstancesInstance',
     'SpokeLinkedVpcNetwork',
     'SpokeLinkedVpnTunnels',
 ]
 
-@pulumi.output_type
-class GroupAutoAccept(dict):
-    @staticmethod
-    def __key_warning(key: str):
-        suggest = None
-        if key == "autoAcceptProjects":
-            suggest = "auto_accept_projects"
-
-        if suggest:
-            pulumi.log.warn(f"Key '{key}' not found in GroupAutoAccept. Access the value via the '{suggest}' property getter instead.")
-
-    def __getitem__(self, key: str) -> Any:
-        GroupAutoAccept.__key_warning(key)
-        return super().__getitem__(key)
-
-    def get(self, key: str, default = None) -> Any:
-        GroupAutoAccept.__key_warning(key)
-        return super().get(key, default)
-
-    def __init__(__self__, *,
-                 auto_accept_projects: Sequence[str]):
-        """
-        :param Sequence[str] auto_accept_projects: A list of project ids or project numbers for which you want to enable auto-accept. The auto-accept setting is applied to spokes being created or updated in these projects.
-        """
-        pulumi.set(__self__, "auto_accept_projects", auto_accept_projects)
-
-    @property
-    @pulumi.getter(name="autoAcceptProjects")
-    def auto_accept_projects(self) -> Sequence[str]:
-        """
-        A list of project ids or project numbers for which you want to enable auto-accept. The auto-accept setting is applied to spokes being created or updated in these projects.
-        """
-        return pulumi.get(self, "auto_accept_projects")
-
-
 @pulumi.output_type
 class HubRoutingVpc(dict):
     def __init__(__self__, *,
@@ -649,94 +612,6 @@ class SpokeLinkedInterconnectAttachments(dict):
         return pulumi.get(self, "include_import_ranges")
 
 
-@pulumi.output_type
-class SpokeLinkedProducerVpcNetwork(dict):
-    @staticmethod
-    def __key_warning(key: str):
-        suggest = None
-        if key == "excludeExportRanges":
-            suggest = "exclude_export_ranges"
-        elif key == "includeExportRanges":
-            suggest = "include_export_ranges"
-        elif key == "producerNetwork":
-            suggest = "producer_network"
-
-        if suggest:
-            pulumi.log.warn(f"Key '{key}' not found in SpokeLinkedProducerVpcNetwork. Access the value via the '{suggest}' property getter instead.")
-
-    def __getitem__(self, key: str) -> Any:
-        SpokeLinkedProducerVpcNetwork.__key_warning(key)
-        return super().__getitem__(key)
-
-    def get(self, key: str, default = None) -> Any:
-        SpokeLinkedProducerVpcNetwork.__key_warning(key)
-        return super().get(key, default)
-
-    def __init__(__self__, *,
-                 network: str,
-                 peering: str,
-                 exclude_export_ranges: Optional[Sequence[str]] = None,
-                 include_export_ranges: Optional[Sequence[str]] = None,
-                 producer_network: Optional[str] = None):
-        """
-        :param str network: The URI of the Service Consumer VPC that the Producer VPC is peered with.
-        :param str peering: The name of the VPC peering between the Service Consumer VPC and the Producer VPC (defined in the Tenant project) which is added to the NCC hub. This peering must be in ACTIVE state.
-        :param Sequence[str] exclude_export_ranges: IP ranges encompassing the subnets to be excluded from peering.
-        :param Sequence[str] include_export_ranges: IP ranges allowed to be included from peering.
-        :param str producer_network: (Output)
-               The URI of the Producer VPC.
-        """
-        pulumi.set(__self__, "network", network)
-        pulumi.set(__self__, "peering", peering)
-        if exclude_export_ranges is not None:
-            pulumi.set(__self__, "exclude_export_ranges", exclude_export_ranges)
-        if include_export_ranges is not None:
-            pulumi.set(__self__, "include_export_ranges", include_export_ranges)
-        if producer_network is not None:
-            pulumi.set(__self__, "producer_network", producer_network)
-
-    @property
-    @pulumi.getter
-    def network(self) -> str:
-        """
-        The URI of the Service Consumer VPC that the Producer VPC is peered with.
-        """
-        return pulumi.get(self, "network")
-
-    @property
-    @pulumi.getter
-    def peering(self) -> str:
-        """
-        The name of the VPC peering between the Service Consumer VPC and the Producer VPC (defined in the Tenant project) which is added to the NCC hub. This peering must be in ACTIVE state.
-        """
-        return pulumi.get(self, "peering")
-
-    @property
-    @pulumi.getter(name="excludeExportRanges")
-    def exclude_export_ranges(self) -> Optional[Sequence[str]]:
-        """
-        IP ranges encompassing the subnets to be excluded from peering.
-        """
-        return pulumi.get(self, "exclude_export_ranges")
-
-    @property
-    @pulumi.getter(name="includeExportRanges")
-    def include_export_ranges(self) -> Optional[Sequence[str]]:
-        """
-        IP ranges allowed to be included from peering.
-        """
-        return pulumi.get(self, "include_export_ranges")
-
-    @property
-    @pulumi.getter(name="producerNetwork")
-    def producer_network(self) -> Optional[str]:
-        """
-        (Output)
-        The URI of the Producer VPC.
-        """
-        return pulumi.get(self, "producer_network")
-
-
 @pulumi.output_type
 class SpokeLinkedRouterApplianceInstances(dict):
     @staticmethod

pulumi_gcp/networkconnectivity/spoke.py

@@ -26,7 +26,6 @@ class SpokeArgs:
                  description: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  linked_interconnect_attachments: Optional[pulumi.Input['SpokeLinkedInterconnectAttachmentsArgs']] = None,
-                 linked_producer_vpc_network: Optional[pulumi.Input['SpokeLinkedProducerVpcNetworkArgs']] = None,
                  linked_router_appliance_instances: Optional[pulumi.Input['SpokeLinkedRouterApplianceInstancesArgs']] = None,
                  linked_vpc_network: Optional[pulumi.Input['SpokeLinkedVpcNetworkArgs']] = None,
                  linked_vpn_tunnels: Optional[pulumi.Input['SpokeLinkedVpnTunnelsArgs']] = None,
@@ -45,8 +44,6 @@ class SpokeArgs:
                Please refer to the field `effective_labels` for all of the labels present on the resource.
         :param pulumi.Input['SpokeLinkedInterconnectAttachmentsArgs'] linked_interconnect_attachments: A collection of VLAN attachment resources. These resources should be redundant attachments that all advertise the same prefixes to Google Cloud. Alternatively, in active/passive configurations, all attachments should be capable of advertising the same prefixes.
                Structure is documented below.
-        :param pulumi.Input['SpokeLinkedProducerVpcNetworkArgs'] linked_producer_vpc_network: Producer VPC network that is associated with the spoke.
-               Structure is documented below.
         :param pulumi.Input['SpokeLinkedRouterApplianceInstancesArgs'] linked_router_appliance_instances: The URIs of linked Router appliance resources
                Structure is documented below.
         :param pulumi.Input['SpokeLinkedVpcNetworkArgs'] linked_vpc_network: VPC network that is associated with the spoke.
@@ -65,8 +62,6 @@ class SpokeArgs:
             pulumi.set(__self__, "labels", labels)
         if linked_interconnect_attachments is not None:
             pulumi.set(__self__, "linked_interconnect_attachments", linked_interconnect_attachments)
-        if linked_producer_vpc_network is not None:
-            pulumi.set(__self__, "linked_producer_vpc_network", linked_producer_vpc_network)
         if linked_router_appliance_instances is not None:
             pulumi.set(__self__, "linked_router_appliance_instances", linked_router_appliance_instances)
         if linked_vpc_network is not None:
@@ -144,19 +139,6 @@ class SpokeArgs:
     def linked_interconnect_attachments(self, value: Optional[pulumi.Input['SpokeLinkedInterconnectAttachmentsArgs']]):
         pulumi.set(self, "linked_interconnect_attachments", value)
 
-    @property
-    @pulumi.getter(name="linkedProducerVpcNetwork")
-    def linked_producer_vpc_network(self) -> Optional[pulumi.Input['SpokeLinkedProducerVpcNetworkArgs']]:
-        """
-        Producer VPC network that is associated with the spoke.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "linked_producer_vpc_network")
-
-    @linked_producer_vpc_network.setter
-    def linked_producer_vpc_network(self, value: Optional[pulumi.Input['SpokeLinkedProducerVpcNetworkArgs']]):
-        pulumi.set(self, "linked_producer_vpc_network", value)
-
     @property
     @pulumi.getter(name="linkedRouterApplianceInstances")
     def linked_router_appliance_instances(self) -> Optional[pulumi.Input['SpokeLinkedRouterApplianceInstancesArgs']]:
@@ -231,7 +213,6 @@ class _SpokeState:
                  hub: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  linked_interconnect_attachments: Optional[pulumi.Input['SpokeLinkedInterconnectAttachmentsArgs']] = None,
-                 linked_producer_vpc_network: Optional[pulumi.Input['SpokeLinkedProducerVpcNetworkArgs']] = None,
                  linked_router_appliance_instances: Optional[pulumi.Input['SpokeLinkedRouterApplianceInstancesArgs']] = None,
                  linked_vpc_network: Optional[pulumi.Input['SpokeLinkedVpcNetworkArgs']] = None,
                  linked_vpn_tunnels: Optional[pulumi.Input['SpokeLinkedVpnTunnelsArgs']] = None,
@@ -253,8 +234,6 @@ class _SpokeState:
                Please refer to the field `effective_labels` for all of the labels present on the resource.
         :param pulumi.Input['SpokeLinkedInterconnectAttachmentsArgs'] linked_interconnect_attachments: A collection of VLAN attachment resources. These resources should be redundant attachments that all advertise the same prefixes to Google Cloud. Alternatively, in active/passive configurations, all attachments should be capable of advertising the same prefixes.
                Structure is documented below.
-        :param pulumi.Input['SpokeLinkedProducerVpcNetworkArgs'] linked_producer_vpc_network: Producer VPC network that is associated with the spoke.
-               Structure is documented below.
         :param pulumi.Input['SpokeLinkedRouterApplianceInstancesArgs'] linked_router_appliance_instances: The URIs of linked Router appliance resources
                Structure is documented below.
         :param pulumi.Input['SpokeLinkedVpcNetworkArgs'] linked_vpc_network: VPC network that is associated with the spoke.
@@ -286,8 +265,6 @@ class _SpokeState:
             pulumi.set(__self__, "labels", labels)
         if linked_interconnect_attachments is not None:
             pulumi.set(__self__, "linked_interconnect_attachments", linked_interconnect_attachments)
-        if linked_producer_vpc_network is not None:
-            pulumi.set(__self__, "linked_producer_vpc_network", linked_producer_vpc_network)
         if linked_router_appliance_instances is not None:
             pulumi.set(__self__, "linked_router_appliance_instances", linked_router_appliance_instances)
         if linked_vpc_network is not None:
@@ -384,19 +361,6 @@ class _SpokeState:
     def linked_interconnect_attachments(self, value: Optional[pulumi.Input['SpokeLinkedInterconnectAttachmentsArgs']]):
         pulumi.set(self, "linked_interconnect_attachments", value)
 
-    @property
-    @pulumi.getter(name="linkedProducerVpcNetwork")
-    def linked_producer_vpc_network(self) -> Optional[pulumi.Input['SpokeLinkedProducerVpcNetworkArgs']]:
-        """
-        Producer VPC network that is associated with the spoke.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "linked_producer_vpc_network")
-
-    @linked_producer_vpc_network.setter
-    def linked_producer_vpc_network(self, value: Optional[pulumi.Input['SpokeLinkedProducerVpcNetworkArgs']]):
-        pulumi.set(self, "linked_producer_vpc_network", value)
-
     @property
     @pulumi.getter(name="linkedRouterApplianceInstances")
     def linked_router_appliance_instances(self) -> Optional[pulumi.Input['SpokeLinkedRouterApplianceInstancesArgs']]:
@@ -535,7 +499,6 @@ class Spoke(pulumi.CustomResource):
                  hub: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  linked_interconnect_attachments: Optional[pulumi.Input[Union['SpokeLinkedInterconnectAttachmentsArgs', 'SpokeLinkedInterconnectAttachmentsArgsDict']]] = None,
-                 linked_producer_vpc_network: Optional[pulumi.Input[Union['SpokeLinkedProducerVpcNetworkArgs', 'SpokeLinkedProducerVpcNetworkArgsDict']]] = None,
                  linked_router_appliance_instances: Optional[pulumi.Input[Union['SpokeLinkedRouterApplianceInstancesArgs', 'SpokeLinkedRouterApplianceInstancesArgsDict']]] = None,
                  linked_vpc_network: Optional[pulumi.Input[Union['SpokeLinkedVpcNetworkArgs', 'SpokeLinkedVpcNetworkArgsDict']]] = None,
                  linked_vpn_tunnels: Optional[pulumi.Input[Union['SpokeLinkedVpnTunnelsArgs', 'SpokeLinkedVpnTunnelsArgsDict']]] = None,
@@ -797,51 +760,6 @@ class Spoke(pulumi.CustomResource):
                 "include_import_ranges": ["ALL_IPV4_RANGES"],
             })
         ```
-        ### Network Connectivity Spoke Linked Producer Vpc Network Basic
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        network = gcp.compute.Network("network",
-            name="net-spoke",
-            auto_create_subnetworks=False)
-        address = gcp.compute.GlobalAddress("address",
-            name="test-address",
-            purpose="VPC_PEERING",
-            address_type="INTERNAL",
-            prefix_length=16,
-            network=network.id)
-        peering = gcp.servicenetworking.Connection("peering",
-            network=network.id,
-            service="servicenetworking.googleapis.com",
-            reserved_peering_ranges=[address.name])
-        basic_hub = gcp.networkconnectivity.Hub("basic_hub", name="hub-basic")
-        linked_vpc_spoke = gcp.networkconnectivity.Spoke("linked_vpc_spoke",
-            name="vpc-spoke",
-            location="global",
-            hub=basic_hub.id,
-            linked_vpc_network={
-                "uri": network.self_link,
-            })
-        primary = gcp.networkconnectivity.Spoke("primary",
-            name="producer-spoke",
-            location="global",
-            description="A sample spoke with a linked router appliance instance",
-            labels={
-                "label-one": "value-one",
-            },
-            hub=basic_hub.id,
-            linked_producer_vpc_network={
-                "network": network.name,
-                "peering": peering.peering,
-                "exclude_export_ranges": [
-                    "198.51.100.0/24",
-                    "10.10.0.0/16",
-                ],
-            },
-            opts = pulumi.ResourceOptions(depends_on=[linked_vpc_spoke]))
-        ```
 
         ## Import
 
@@ -876,8 +794,6 @@ class Spoke(pulumi.CustomResource):
                Please refer to the field `effective_labels` for all of the labels present on the resource.
         :param pulumi.Input[Union['SpokeLinkedInterconnectAttachmentsArgs', 'SpokeLinkedInterconnectAttachmentsArgsDict']] linked_interconnect_attachments: A collection of VLAN attachment resources. These resources should be redundant attachments that all advertise the same prefixes to Google Cloud. Alternatively, in active/passive configurations, all attachments should be capable of advertising the same prefixes.
                Structure is documented below.
-        :param pulumi.Input[Union['SpokeLinkedProducerVpcNetworkArgs', 'SpokeLinkedProducerVpcNetworkArgsDict']] linked_producer_vpc_network: Producer VPC network that is associated with the spoke.
-               Structure is documented below.
         :param pulumi.Input[Union['SpokeLinkedRouterApplianceInstancesArgs', 'SpokeLinkedRouterApplianceInstancesArgsDict']] linked_router_appliance_instances: The URIs of linked Router appliance resources
                Structure is documented below.
         :param pulumi.Input[Union['SpokeLinkedVpcNetworkArgs', 'SpokeLinkedVpcNetworkArgsDict']] linked_vpc_network: VPC network that is associated with the spoke.
@@ -1152,51 +1068,6 @@ class Spoke(pulumi.CustomResource):
                 "include_import_ranges": ["ALL_IPV4_RANGES"],
             })
         ```
-        ### Network Connectivity Spoke Linked Producer Vpc Network Basic
-
-        ```python
-        import pulumi
-        import pulumi_gcp as gcp
-
-        network = gcp.compute.Network("network",
-            name="net-spoke",
-            auto_create_subnetworks=False)
-        address = gcp.compute.GlobalAddress("address",
-            name="test-address",
-            purpose="VPC_PEERING",
-            address_type="INTERNAL",
-            prefix_length=16,
-            network=network.id)
-        peering = gcp.servicenetworking.Connection("peering",
-            network=network.id,
-            service="servicenetworking.googleapis.com",
-            reserved_peering_ranges=[address.name])
-        basic_hub = gcp.networkconnectivity.Hub("basic_hub", name="hub-basic")
-        linked_vpc_spoke = gcp.networkconnectivity.Spoke("linked_vpc_spoke",
-            name="vpc-spoke",
-            location="global",
-            hub=basic_hub.id,
-            linked_vpc_network={
-                "uri": network.self_link,
-            })
-        primary = gcp.networkconnectivity.Spoke("primary",
-            name="producer-spoke",
-            location="global",
-            description="A sample spoke with a linked router appliance instance",
-            labels={
-                "label-one": "value-one",
-            },
-            hub=basic_hub.id,
-            linked_producer_vpc_network={
-                "network": network.name,
-                "peering": peering.peering,
-                "exclude_export_ranges": [
-                    "198.51.100.0/24",
-                    "10.10.0.0/16",
-                ],
-            },
-            opts = pulumi.ResourceOptions(depends_on=[linked_vpc_spoke]))
-        ```
 
         ## Import
 
@@ -1241,7 +1112,6 @@ class Spoke(pulumi.CustomResource):
                  hub: Optional[pulumi.Input[str]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  linked_interconnect_attachments: Optional[pulumi.Input[Union['SpokeLinkedInterconnectAttachmentsArgs', 'SpokeLinkedInterconnectAttachmentsArgsDict']]] = None,
-                 linked_producer_vpc_network: Optional[pulumi.Input[Union['SpokeLinkedProducerVpcNetworkArgs', 'SpokeLinkedProducerVpcNetworkArgsDict']]] = None,
                  linked_router_appliance_instances: Optional[pulumi.Input[Union['SpokeLinkedRouterApplianceInstancesArgs', 'SpokeLinkedRouterApplianceInstancesArgsDict']]] = None,
                  linked_vpc_network: Optional[pulumi.Input[Union['SpokeLinkedVpcNetworkArgs', 'SpokeLinkedVpcNetworkArgsDict']]] = None,
                  linked_vpn_tunnels: Optional[pulumi.Input[Union['SpokeLinkedVpnTunnelsArgs', 'SpokeLinkedVpnTunnelsArgsDict']]] = None,
@@ -1263,7 +1133,6 @@ class Spoke(pulumi.CustomResource):
             __props__.__dict__["hub"] = hub
             __props__.__dict__["labels"] = labels
             __props__.__dict__["linked_interconnect_attachments"] = linked_interconnect_attachments
-            __props__.__dict__["linked_producer_vpc_network"] = linked_producer_vpc_network
             __props__.__dict__["linked_router_appliance_instances"] = linked_router_appliance_instances
             __props__.__dict__["linked_vpc_network"] = linked_vpc_network
             __props__.__dict__["linked_vpn_tunnels"] = linked_vpn_tunnels
@@ -1296,7 +1165,6 @@ class Spoke(pulumi.CustomResource):
             hub: Optional[pulumi.Input[str]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             linked_interconnect_attachments: Optional[pulumi.Input[Union['SpokeLinkedInterconnectAttachmentsArgs', 'SpokeLinkedInterconnectAttachmentsArgsDict']]] = None,
-            linked_producer_vpc_network: Optional[pulumi.Input[Union['SpokeLinkedProducerVpcNetworkArgs', 'SpokeLinkedProducerVpcNetworkArgsDict']]] = None,
             linked_router_appliance_instances: Optional[pulumi.Input[Union['SpokeLinkedRouterApplianceInstancesArgs', 'SpokeLinkedRouterApplianceInstancesArgsDict']]] = None,
             linked_vpc_network: Optional[pulumi.Input[Union['SpokeLinkedVpcNetworkArgs', 'SpokeLinkedVpcNetworkArgsDict']]] = None,
             linked_vpn_tunnels: Optional[pulumi.Input[Union['SpokeLinkedVpnTunnelsArgs', 'SpokeLinkedVpnTunnelsArgsDict']]] = None,
@@ -1323,8 +1191,6 @@ class Spoke(pulumi.CustomResource):
                Please refer to the field `effective_labels` for all of the labels present on the resource.
         :param pulumi.Input[Union['SpokeLinkedInterconnectAttachmentsArgs', 'SpokeLinkedInterconnectAttachmentsArgsDict']] linked_interconnect_attachments: A collection of VLAN attachment resources. These resources should be redundant attachments that all advertise the same prefixes to Google Cloud. Alternatively, in active/passive configurations, all attachments should be capable of advertising the same prefixes.
                Structure is documented below.
-        :param pulumi.Input[Union['SpokeLinkedProducerVpcNetworkArgs', 'SpokeLinkedProducerVpcNetworkArgsDict']] linked_producer_vpc_network: Producer VPC network that is associated with the spoke.
-               Structure is documented below.
         :param pulumi.Input[Union['SpokeLinkedRouterApplianceInstancesArgs', 'SpokeLinkedRouterApplianceInstancesArgsDict']] linked_router_appliance_instances: The URIs of linked Router appliance resources
                Structure is documented below.
         :param pulumi.Input[Union['SpokeLinkedVpcNetworkArgs', 'SpokeLinkedVpcNetworkArgsDict']] linked_vpc_network: VPC network that is associated with the spoke.
@@ -1354,7 +1220,6 @@ class Spoke(pulumi.CustomResource):
         __props__.__dict__["hub"] = hub
         __props__.__dict__["labels"] = labels
         __props__.__dict__["linked_interconnect_attachments"] = linked_interconnect_attachments
-        __props__.__dict__["linked_producer_vpc_network"] = linked_producer_vpc_network
         __props__.__dict__["linked_router_appliance_instances"] = linked_router_appliance_instances
         __props__.__dict__["linked_vpc_network"] = linked_vpc_network
         __props__.__dict__["linked_vpn_tunnels"] = linked_vpn_tunnels
@@ -1418,15 +1283,6 @@ class Spoke(pulumi.CustomResource):
         """
         return pulumi.get(self, "linked_interconnect_attachments")
 
-    @property
-    @pulumi.getter(name="linkedProducerVpcNetwork")
-    def linked_producer_vpc_network(self) -> pulumi.Output[Optional['outputs.SpokeLinkedProducerVpcNetwork']]:
-        """
-        Producer VPC network that is associated with the spoke.
-        Structure is documented below.
-        """
-        return pulumi.get(self, "linked_producer_vpc_network")
-
     @property
     @pulumi.getter(name="linkedRouterApplianceInstances")
     def linked_router_appliance_instances(self) -> pulumi.Output[Optional['outputs.SpokeLinkedRouterApplianceInstances']]:

pulumi_gcp/networksecurity/server_tls_policy.py

@@ -419,7 +419,7 @@ class ServerTlsPolicy(pulumi.CustomResource):
                  server_certificate: Optional[pulumi.Input[Union['ServerTlsPolicyServerCertificateArgs', 'ServerTlsPolicyServerCertificateArgsDict']]] = None,
                  __props__=None):
         """
-        ServerTlsPolicy is a resource that specifies how a server should authenticate incoming requests. This resource itself does not affect configuration unless it is attached to a target HTTPS proxy or endpoint config selector resource.
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
 
         To get more information about ServerTlsPolicy, see:
 
@@ -582,7 +582,7 @@ class ServerTlsPolicy(pulumi.CustomResource):
                  args: Optional[ServerTlsPolicyArgs] = None,
                  opts: Optional[pulumi.ResourceOptions] = None):
         """
-        ServerTlsPolicy is a resource that specifies how a server should authenticate incoming requests. This resource itself does not affect configuration unless it is attached to a target HTTPS proxy or endpoint config selector resource.
+        ClientTlsPolicy is a resource that specifies how a client should authenticate connections to backends of a service. This resource itself does not affect configuration unless it is attached to a backend service resource.
 
         To get more information about ServerTlsPolicy, see:
 

pulumi_gcp/organizations/folder.py

@@ -29,7 +29,7 @@ class FolderArgs:
                A folder’s display name must be unique amongst its siblings, e.g. no two folders with the same parent can share the same display name. The display name must start and end with a letter or digit, may contain letters, digits, spaces, hyphens and underscores and can be no longer than 30 characters.
         :param pulumi.Input[str] parent: The resource name of the parent Folder or Organization.
                Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         pulumi.set(__self__, "display_name", display_name)
         pulumi.set(__self__, "parent", parent)
@@ -77,7 +77,7 @@ class FolderArgs:
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
         """
-        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         return pulumi.get(self, "tags")
 
@@ -108,7 +108,7 @@ class _FolderState:
         :param pulumi.Input[str] name: The resource name of the Folder. Its format is folders/{folder_id}.
         :param pulumi.Input[str] parent: The resource name of the parent Folder or Organization.
                Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         if create_time is not None:
             pulumi.set(__self__, "create_time", create_time)
@@ -215,7 +215,7 @@ class _FolderState:
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
         """
-        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         return pulumi.get(self, "tags")
 
@@ -275,7 +275,7 @@ class Folder(pulumi.CustomResource):
                A folder’s display name must be unique amongst its siblings, e.g. no two folders with the same parent can share the same display name. The display name must start and end with a letter or digit, may contain letters, digits, spaces, hyphens and underscores and can be no longer than 30 characters.
         :param pulumi.Input[str] parent: The resource name of the parent Folder or Organization.
                Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         ...
     @overload
@@ -392,7 +392,7 @@ class Folder(pulumi.CustomResource):
         :param pulumi.Input[str] name: The resource name of the Folder. Its format is folders/{folder_id}.
         :param pulumi.Input[str] parent: The resource name of the parent Folder or Organization.
                Must be of the form `folders/{folder_id}` or `organizations/{org_id}`.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -468,7 +468,7 @@ class Folder(pulumi.CustomResource):
     @pulumi.getter
     def tags(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
         """
-        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when  mutated.
         """
         return pulumi.get(self, "tags")
 

pulumi_gcp/organizations/project.py

@@ -54,7 +54,7 @@ class ProjectArgs:
                this forces the project to be migrated to the newly specified
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         if auto_create_network is not None:
             pulumi.set(__self__, "auto_create_network", auto_create_network)
@@ -189,7 +189,7 @@ class ProjectArgs:
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
         """
-        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         return pulumi.get(self, "tags")
 
@@ -242,7 +242,7 @@ class _ProjectState:
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         if auto_create_network is not None:
             pulumi.set(__self__, "auto_create_network", auto_create_network)
@@ -419,7 +419,7 @@ class _ProjectState:
     @pulumi.getter
     def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
         """
-        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         return pulumi.get(self, "tags")
 
@@ -546,7 +546,7 @@ class Project(pulumi.CustomResource):
                this forces the project to be migrated to the newly specified
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         ...
     @overload
@@ -734,7 +734,7 @@ class Project(pulumi.CustomResource):
                organization.
         :param pulumi.Input[str] project_id: The project ID. Changing this forces a new project to be created.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] pulumi_labels: The combination of labels configured directly on the resource and default labels configured on the provider.
-        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -860,7 +860,7 @@ class Project(pulumi.CustomResource):
     @pulumi.getter
     def tags(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
         """
-        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated. This field is only set at create time and modifying this field after creation will trigger recreation. To apply tags to an existing resource, see the `tags.TagValue` resource.
+        A map of resource manager tags. Resource manager tag keys and values have the same definition as resource manager tags. Keys must be in the format tagKeys/{tag_key_id}, and values are in the format tagValues/456. The field is ignored when empty. The field is immutable and causes resource replacement when mutated.
         """
         return pulumi.get(self, "tags")
 

pulumi_gcp/orgpolicy/_inputs.py

@@ -435,7 +435,7 @@ if not MYPY:
         """
         rules: NotRequired[pulumi.Input[Sequence[pulumi.Input['PolicySpecRuleArgsDict']]]]
         """
-        In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
+        Up to 10 PolicyRules are allowed. In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
         Structure is documented below.
         """
         update_time: NotRequired[pulumi.Input[str]]
@@ -459,7 +459,7 @@ class PolicySpecArgs:
                An opaque tag indicating the current version of the `Policy`, used for concurrency control. This field is ignored if used in a `CreatePolicy` request. When the `Policy` is returned from either a `GetPolicy` or a `ListPolicies` request, this `etag` indicates the version of the current `Policy` to use when executing a read-modify-write loop. When the `Policy` is returned from a `GetEffectivePolicy` request, the `etag` will be unset.
         :param pulumi.Input[bool] inherit_from_parent: Determines the inheritance behavior for this `Policy`. If `inherit_from_parent` is true, PolicyRules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this Policy becomes the new root for evaluation. This field can be set only for Policies which configure list constraints.
         :param pulumi.Input[bool] reset: Ignores policies set above this resource and restores the `constraint_default` enforcement behavior of the specific `Constraint` at this resource. This field can be set in policies for either list or boolean constraints. If set, `rules` must be empty and `inherit_from_parent` must be set to false.
-        :param pulumi.Input[Sequence[pulumi.Input['PolicySpecRuleArgs']]] rules: In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
+        :param pulumi.Input[Sequence[pulumi.Input['PolicySpecRuleArgs']]] rules: Up to 10 PolicyRules are allowed. In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
                Structure is documented below.
         :param pulumi.Input[str] update_time: (Output)
                Output only. The time stamp this was previously updated. This represents the last time a call to `CreatePolicy` or `UpdatePolicy` was made for that `Policy`.
@@ -516,7 +516,7 @@ class PolicySpecArgs:
     @pulumi.getter
     def rules(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['PolicySpecRuleArgs']]]]:
         """
-        In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
+        Up to 10 PolicyRules are allowed. In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
         Structure is documented below.
         """
         return pulumi.get(self, "rules")

pulumi_gcp/orgpolicy/outputs.py

@@ -345,7 +345,7 @@ class PolicySpec(dict):
                An opaque tag indicating the current version of the `Policy`, used for concurrency control. This field is ignored if used in a `CreatePolicy` request. When the `Policy` is returned from either a `GetPolicy` or a `ListPolicies` request, this `etag` indicates the version of the current `Policy` to use when executing a read-modify-write loop. When the `Policy` is returned from a `GetEffectivePolicy` request, the `etag` will be unset.
         :param bool inherit_from_parent: Determines the inheritance behavior for this `Policy`. If `inherit_from_parent` is true, PolicyRules set higher up in the hierarchy (up to the closest root) are inherited and present in the effective policy. If it is false, then no rules are inherited, and this Policy becomes the new root for evaluation. This field can be set only for Policies which configure list constraints.
         :param bool reset: Ignores policies set above this resource and restores the `constraint_default` enforcement behavior of the specific `Constraint` at this resource. This field can be set in policies for either list or boolean constraints. If set, `rules` must be empty and `inherit_from_parent` must be set to false.
-        :param Sequence['PolicySpecRuleArgs'] rules: In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
+        :param Sequence['PolicySpecRuleArgs'] rules: Up to 10 PolicyRules are allowed. In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
                Structure is documented below.
         :param str update_time: (Output)
                Output only. The time stamp this was previously updated. This represents the last time a call to `CreatePolicy` or `UpdatePolicy` was made for that `Policy`.
@@ -390,7 +390,7 @@ class PolicySpec(dict):
     @pulumi.getter
     def rules(self) -> Optional[Sequence['outputs.PolicySpecRule']]:
         """
-        In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
+        Up to 10 PolicyRules are allowed. In Policies for boolean constraints, the following requirements apply: - There must be one and only one PolicyRule where condition is unset. - BooleanPolicyRules with conditions must set `enforced` to the opposite of the PolicyRule without a condition. - During policy evaluation, PolicyRules with conditions that are true for a target resource take precedence.
         Structure is documented below.
         """
         return pulumi.get(self, "rules")