pulumi-gcp 8.7.0a1730183903__py3-none-any.whl → 8.7.0a1730196225__py3-none-any.whl

pulumi_gcp/apigee/outputs.py

@@ -22,6 +22,8 @@ __all__ = [
     'AddonsConfigAddonsConfigConnectorsPlatformConfig',
     'AddonsConfigAddonsConfigIntegrationConfig',
     'AddonsConfigAddonsConfigMonetizationConfig',
+    'AppGroupAttribute',
+    'DeveloperAttribute',
     'EnvironmentIamBindingCondition',
     'EnvironmentIamMemberCondition',
     'EnvironmentNodeConfig',
@@ -299,6 +301,68 @@ class AddonsConfigAddonsConfigMonetizationConfig(dict):
         return pulumi.get(self, "enabled")
 
 
+@pulumi.output_type
+class AppGroupAttribute(dict):
+    def __init__(__self__, *,
+                 name: Optional[str] = None,
+                 value: Optional[str] = None):
+        """
+        :param str name: Key of the attribute
+        :param str value: Value of the attribute
+        """
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[str]:
+        """
+        Key of the attribute
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[str]:
+        """
+        Value of the attribute
+        """
+        return pulumi.get(self, "value")
+
+
+@pulumi.output_type
+class DeveloperAttribute(dict):
+    def __init__(__self__, *,
+                 name: Optional[str] = None,
+                 value: Optional[str] = None):
+        """
+        :param str name: Key of the attribute
+        :param str value: Value of the attribute
+        """
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if value is not None:
+            pulumi.set(__self__, "value", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[str]:
+        """
+        Key of the attribute
+        """
+        return pulumi.get(self, "name")
+
+    @property
+    @pulumi.getter
+    def value(self) -> Optional[str]:
+        """
+        Value of the attribute
+        """
+        return pulumi.get(self, "value")
+
+
 @pulumi.output_type
 class EnvironmentIamBindingCondition(dict):
     def __init__(__self__, *,

pulumi_gcp/artifactregistry/get_docker_image.py

@@ -198,6 +198,26 @@ def get_docker_image(image_name: Optional[str] = None,
     > **Note**
     Requires one of the following OAuth scopes: `https://www.googleapis.com/auth/cloud-platform` or `https://www.googleapis.com/auth/cloud-platform.read-only`.
 
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    my_repo = gcp.artifactregistry.Repository("my_repo",
+        location="us-west1",
+        repository_id="my-repository",
+        format="DOCKER")
+    my_image = gcp.artifactregistry.get_docker_image_output(location=my_repo.location,
+        repository_id=my_repo.repository_id,
+        image_name="my-image:my-tag")
+    default = gcp.cloudrunv2.Service("default", template={
+        "containers": [{
+            "image": my_image.self_link,
+        }],
+    })
+    ```
+
 
     :param str image_name: The image name to fetch. If no digest or tag is provided, then the latest modified image will be used.
     :param str location: The location of the artifact registry.
@@ -237,6 +257,26 @@ def get_docker_image_output(image_name: Optional[pulumi.Input[str]] = None,
     > **Note**
     Requires one of the following OAuth scopes: `https://www.googleapis.com/auth/cloud-platform` or `https://www.googleapis.com/auth/cloud-platform.read-only`.
 
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import pulumi_gcp as gcp
+
+    my_repo = gcp.artifactregistry.Repository("my_repo",
+        location="us-west1",
+        repository_id="my-repository",
+        format="DOCKER")
+    my_image = gcp.artifactregistry.get_docker_image_output(location=my_repo.location,
+        repository_id=my_repo.repository_id,
+        image_name="my-image:my-tag")
+    default = gcp.cloudrunv2.Service("default", template={
+        "containers": [{
+            "image": my_image.self_link,
+        }],
+    })
+    ```
+
 
     :param str image_name: The image name to fetch. If no digest or tag is provided, then the latest modified image will be used.
     :param str location: The location of the artifact registry.

pulumi_gcp/bigquery/connection.py

@@ -730,7 +730,7 @@ class Connection(pulumi.CustomResource):
                 },
             })
         ```
-        ### Bigquery Connection Kms
+        ### Bigquery Connection Sql With Cmek
 
         ```python
         import pulumi
@@ -738,8 +738,8 @@ class Connection(pulumi.CustomResource):
 
         instance = gcp.sql.DatabaseInstance("instance",
             name="my-database-instance",
-            database_version="POSTGRES_11",
             region="us-central1",
+            database_version="POSTGRES_11",
             settings={
                 "tier": "db-f1-micro",
             },
@@ -752,9 +752,8 @@ class Connection(pulumi.CustomResource):
             instance=instance.name,
             password="tf-test-my-password_77884")
         bq_sa = gcp.bigquery.get_default_service_account()
-        project = gcp.organizations.get_project()
-        key_sa_user = gcp.projects.IAMMember("key_sa_user",
-            project=project.project_id,
+        key_sa_user = gcp.kms.CryptoKeyIAMMember("key_sa_user",
+            crypto_key_id="projects/project/locations/us-central1/keyRings/us-central1/cryptoKeys/bq-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:{bq_sa.email}")
         bq_connection_cmek = gcp.bigquery.Connection("bq-connection-cmek",
@@ -770,7 +769,8 @@ class Connection(pulumi.CustomResource):
                     "username": user.name,
                     "password": user.password,
                 },
-            })
+            },
+            opts = pulumi.ResourceOptions(depends_on=[key_sa_user]))
         ```
 
         ## Import
@@ -1036,7 +1036,7 @@ class Connection(pulumi.CustomResource):
                 },
             })
         ```
-        ### Bigquery Connection Kms
+        ### Bigquery Connection Sql With Cmek
 
         ```python
         import pulumi
@@ -1044,8 +1044,8 @@ class Connection(pulumi.CustomResource):
 
         instance = gcp.sql.DatabaseInstance("instance",
             name="my-database-instance",
-            database_version="POSTGRES_11",
             region="us-central1",
+            database_version="POSTGRES_11",
             settings={
                 "tier": "db-f1-micro",
             },
@@ -1058,9 +1058,8 @@ class Connection(pulumi.CustomResource):
             instance=instance.name,
             password="tf-test-my-password_77884")
         bq_sa = gcp.bigquery.get_default_service_account()
-        project = gcp.organizations.get_project()
-        key_sa_user = gcp.projects.IAMMember("key_sa_user",
-            project=project.project_id,
+        key_sa_user = gcp.kms.CryptoKeyIAMMember("key_sa_user",
+            crypto_key_id="projects/project/locations/us-central1/keyRings/us-central1/cryptoKeys/bq-key",
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:{bq_sa.email}")
         bq_connection_cmek = gcp.bigquery.Connection("bq-connection-cmek",
@@ -1076,7 +1075,8 @@ class Connection(pulumi.CustomResource):
                     "username": user.name,
                     "password": user.password,
                 },
-            })
+            },
+            opts = pulumi.ResourceOptions(depends_on=[key_sa_user]))
         ```
 
         ## Import

pulumi_gcp/bigquery/job.py

@@ -661,9 +661,9 @@ class Job(pulumi.CustomResource):
         source = []
         for range in [{"value": i} for i in range(0, count)]:
             source.append(gcp.bigquery.Table(f"source-{range['value']}",
-                deletion_protection=False,
                 dataset_id=source_dataset[range["value"]].dataset_id,
                 table_id=f"job_copy_{range['value']}_table",
+                deletion_protection=False,
                 schema=\"\"\"[
           {
             "name": "name",
@@ -694,8 +694,8 @@ class Job(pulumi.CustomResource):
             name="example-key",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project(project_id="my-project-name")
-        encrypt_role = gcp.projects.IAMMember("encrypt_role",
-            project=project.project_id,
+        encrypt_role = gcp.kms.CryptoKeyIAMMember("encrypt_role",
+            crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
         dest = gcp.bigquery.Table("dest",
@@ -1097,9 +1097,9 @@ class Job(pulumi.CustomResource):
         source = []
         for range in [{"value": i} for i in range(0, count)]:
             source.append(gcp.bigquery.Table(f"source-{range['value']}",
-                deletion_protection=False,
                 dataset_id=source_dataset[range["value"]].dataset_id,
                 table_id=f"job_copy_{range['value']}_table",
+                deletion_protection=False,
                 schema=\"\"\"[
           {
             "name": "name",
@@ -1130,8 +1130,8 @@ class Job(pulumi.CustomResource):
             name="example-key",
             key_ring=key_ring.id)
         project = gcp.organizations.get_project(project_id="my-project-name")
-        encrypt_role = gcp.projects.IAMMember("encrypt_role",
-            project=project.project_id,
+        encrypt_role = gcp.kms.CryptoKeyIAMMember("encrypt_role",
+            crypto_key_id=crypto_key.id,
             role="roles/cloudkms.cryptoKeyEncrypterDecrypter",
             member=f"serviceAccount:bq-{project.number}@bigquery-encryption.iam.gserviceaccount.com")
         dest = gcp.bigquery.Table("dest",

pulumi_gcp/cloudrunv2/get_service.py

@@ -27,7 +27,7 @@ class GetServiceResult:
     """
     A collection of values returned by getService.
     """
-    def __init__(__self__, annotations=None, binary_authorizations=None, client=None, client_version=None, conditions=None, create_time=None, creator=None, custom_audiences=None, default_uri_disabled=None, delete_time=None, deletion_protection=None, description=None, effective_annotations=None, effective_labels=None, etag=None, expire_time=None, generation=None, id=None, ingress=None, labels=None, last_modifier=None, latest_created_revision=None, latest_ready_revision=None, launch_stage=None, location=None, name=None, observed_generation=None, project=None, pulumi_labels=None, reconciling=None, scalings=None, templates=None, terminal_conditions=None, traffic_statuses=None, traffics=None, uid=None, update_time=None, uri=None):
+    def __init__(__self__, annotations=None, binary_authorizations=None, client=None, client_version=None, conditions=None, create_time=None, creator=None, custom_audiences=None, default_uri_disabled=None, delete_time=None, deletion_protection=None, description=None, effective_annotations=None, effective_labels=None, etag=None, expire_time=None, generation=None, id=None, ingress=None, invoker_iam_disabled=None, labels=None, last_modifier=None, latest_created_revision=None, latest_ready_revision=None, launch_stage=None, location=None, name=None, observed_generation=None, project=None, pulumi_labels=None, reconciling=None, scalings=None, templates=None, terminal_conditions=None, traffic_statuses=None, traffics=None, uid=None, update_time=None, uri=None):
         if annotations and not isinstance(annotations, dict):
             raise TypeError("Expected argument 'annotations' to be a dict")
         pulumi.set(__self__, "annotations", annotations)
@@ -85,6 +85,9 @@ class GetServiceResult:
         if ingress and not isinstance(ingress, str):
             raise TypeError("Expected argument 'ingress' to be a str")
         pulumi.set(__self__, "ingress", ingress)
+        if invoker_iam_disabled and not isinstance(invoker_iam_disabled, bool):
+            raise TypeError("Expected argument 'invoker_iam_disabled' to be a bool")
+        pulumi.set(__self__, "invoker_iam_disabled", invoker_iam_disabled)
         if labels and not isinstance(labels, dict):
             raise TypeError("Expected argument 'labels' to be a dict")
         pulumi.set(__self__, "labels", labels)
@@ -241,6 +244,11 @@ class GetServiceResult:
     def ingress(self) -> str:
         return pulumi.get(self, "ingress")
 
+    @property
+    @pulumi.getter(name="invokerIamDisabled")
+    def invoker_iam_disabled(self) -> bool:
+        return pulumi.get(self, "invoker_iam_disabled")
+
     @property
     @pulumi.getter
     def labels(self) -> Mapping[str, str]:
@@ -362,6 +370,7 @@ class AwaitableGetServiceResult(GetServiceResult):
             generation=self.generation,
             id=self.id,
             ingress=self.ingress,
+            invoker_iam_disabled=self.invoker_iam_disabled,
             labels=self.labels,
             last_modifier=self.last_modifier,
             latest_created_revision=self.latest_created_revision,
@@ -437,6 +446,7 @@ def get_service(location: Optional[str] = None,
         generation=pulumi.get(__ret__, 'generation'),
         id=pulumi.get(__ret__, 'id'),
         ingress=pulumi.get(__ret__, 'ingress'),
+        invoker_iam_disabled=pulumi.get(__ret__, 'invoker_iam_disabled'),
         labels=pulumi.get(__ret__, 'labels'),
         last_modifier=pulumi.get(__ret__, 'last_modifier'),
         latest_created_revision=pulumi.get(__ret__, 'latest_created_revision'),
@@ -509,6 +519,7 @@ def get_service_output(location: Optional[pulumi.Input[Optional[str]]] = None,
         generation=pulumi.get(__response__, 'generation'),
         id=pulumi.get(__response__, 'id'),
         ingress=pulumi.get(__response__, 'ingress'),
+        invoker_iam_disabled=pulumi.get(__response__, 'invoker_iam_disabled'),
         labels=pulumi.get(__response__, 'labels'),
         last_modifier=pulumi.get(__response__, 'last_modifier'),
         latest_created_revision=pulumi.get(__response__, 'latest_created_revision'),

pulumi_gcp/cloudrunv2/service.py

@@ -32,6 +32,7 @@ class ServiceArgs:
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  ingress: Optional[pulumi.Input[str]] = None,
+                 invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  launch_stage: Optional[pulumi.Input[str]] = None,
                  name: Optional[pulumi.Input[str]] = None,
@@ -61,6 +62,8 @@ class ServiceArgs:
         :param pulumi.Input[str] ingress: Provides the ingress settings for this Service. On output, returns the currently observed ingress settings, or
                INGRESS_TRAFFIC_UNSPECIFIED if no revision is active. Possible values: ["INGRESS_TRAFFIC_ALL",
                "INGRESS_TRAFFIC_INTERNAL_ONLY", "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"]
+        :param pulumi.Input[bool] invoker_iam_disabled: Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+               only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with
                Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment,
                state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or
@@ -100,6 +103,8 @@ class ServiceArgs:
             pulumi.set(__self__, "description", description)
         if ingress is not None:
             pulumi.set(__self__, "ingress", ingress)
+        if invoker_iam_disabled is not None:
+            pulumi.set(__self__, "invoker_iam_disabled", invoker_iam_disabled)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if launch_stage is not None:
@@ -253,6 +258,19 @@ class ServiceArgs:
     def ingress(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ingress", value)
 
+    @property
+    @pulumi.getter(name="invokerIamDisabled")
+    def invoker_iam_disabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+        only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
+        """
+        return pulumi.get(self, "invoker_iam_disabled")
+
+    @invoker_iam_disabled.setter
+    def invoker_iam_disabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "invoker_iam_disabled", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
@@ -357,6 +375,7 @@ class _ServiceState:
                  expire_time: Optional[pulumi.Input[str]] = None,
                  generation: Optional[pulumi.Input[str]] = None,
                  ingress: Optional[pulumi.Input[str]] = None,
+                 invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  last_modifier: Optional[pulumi.Input[str]] = None,
                  latest_created_revision: Optional[pulumi.Input[str]] = None,
@@ -405,6 +424,8 @@ class _ServiceState:
         :param pulumi.Input[str] ingress: Provides the ingress settings for this Service. On output, returns the currently observed ingress settings, or
                INGRESS_TRAFFIC_UNSPECIFIED if no revision is active. Possible values: ["INGRESS_TRAFFIC_ALL",
                "INGRESS_TRAFFIC_INTERNAL_ONLY", "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"]
+        :param pulumi.Input[bool] invoker_iam_disabled: Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+               only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with
                Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment,
                state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or
@@ -481,6 +502,8 @@ class _ServiceState:
             pulumi.set(__self__, "generation", generation)
         if ingress is not None:
             pulumi.set(__self__, "ingress", ingress)
+        if invoker_iam_disabled is not None:
+            pulumi.set(__self__, "invoker_iam_disabled", invoker_iam_disabled)
         if labels is not None:
             pulumi.set(__self__, "labels", labels)
         if last_modifier is not None:
@@ -741,6 +764,19 @@ class _ServiceState:
     def ingress(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "ingress", value)
 
+    @property
+    @pulumi.getter(name="invokerIamDisabled")
+    def invoker_iam_disabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+        only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
+        """
+        return pulumi.get(self, "invoker_iam_disabled")
+
+    @invoker_iam_disabled.setter
+    def invoker_iam_disabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "invoker_iam_disabled", value)
+
     @property
     @pulumi.getter
     def labels(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
@@ -1002,6 +1038,7 @@ class Service(pulumi.CustomResource):
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  ingress: Optional[pulumi.Input[str]] = None,
+                 invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  launch_stage: Optional[pulumi.Input[str]] = None,
                  location: Optional[pulumi.Input[str]] = None,
@@ -1461,6 +1498,25 @@ class Service(pulumi.CustomResource):
             },
             opts = pulumi.ResourceOptions(depends_on=[wait_for_mesh]))
         ```
+        ### Cloudrunv2 Service Invokeriam
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.cloudrunv2.Service("default",
+            name="cloudrun-service",
+            location="us-central1",
+            deletion_protection=False,
+            invoker_iam_disabled=True,
+            description="The serving URL of this service will not perform any IAM check when invoked",
+            ingress="INGRESS_TRAFFIC_ALL",
+            template={
+                "containers": [{
+                    "image": "us-docker.pkg.dev/cloudrun/container/hello",
+                }],
+            })
+        ```
 
         ## Import
 
@@ -1506,6 +1562,8 @@ class Service(pulumi.CustomResource):
         :param pulumi.Input[str] ingress: Provides the ingress settings for this Service. On output, returns the currently observed ingress settings, or
                INGRESS_TRAFFIC_UNSPECIFIED if no revision is active. Possible values: ["INGRESS_TRAFFIC_ALL",
                "INGRESS_TRAFFIC_INTERNAL_ONLY", "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"]
+        :param pulumi.Input[bool] invoker_iam_disabled: Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+               only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with
                Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment,
                state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or
@@ -1984,6 +2042,25 @@ class Service(pulumi.CustomResource):
             },
             opts = pulumi.ResourceOptions(depends_on=[wait_for_mesh]))
         ```
+        ### Cloudrunv2 Service Invokeriam
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        default = gcp.cloudrunv2.Service("default",
+            name="cloudrun-service",
+            location="us-central1",
+            deletion_protection=False,
+            invoker_iam_disabled=True,
+            description="The serving URL of this service will not perform any IAM check when invoked",
+            ingress="INGRESS_TRAFFIC_ALL",
+            template={
+                "containers": [{
+                    "image": "us-docker.pkg.dev/cloudrun/container/hello",
+                }],
+            })
+        ```
 
         ## Import
 
@@ -2033,6 +2110,7 @@ class Service(pulumi.CustomResource):
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  ingress: Optional[pulumi.Input[str]] = None,
+                 invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
                  labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  launch_stage: Optional[pulumi.Input[str]] = None,
                  location: Optional[pulumi.Input[str]] = None,
@@ -2059,6 +2137,7 @@ class Service(pulumi.CustomResource):
             __props__.__dict__["deletion_protection"] = deletion_protection
             __props__.__dict__["description"] = description
             __props__.__dict__["ingress"] = ingress
+            __props__.__dict__["invoker_iam_disabled"] = invoker_iam_disabled
             __props__.__dict__["labels"] = labels
             __props__.__dict__["launch_stage"] = launch_stage
             if location is None and not opts.urn:
@@ -2121,6 +2200,7 @@ class Service(pulumi.CustomResource):
             expire_time: Optional[pulumi.Input[str]] = None,
             generation: Optional[pulumi.Input[str]] = None,
             ingress: Optional[pulumi.Input[str]] = None,
+            invoker_iam_disabled: Optional[pulumi.Input[bool]] = None,
             labels: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             last_modifier: Optional[pulumi.Input[str]] = None,
             latest_created_revision: Optional[pulumi.Input[str]] = None,
@@ -2174,6 +2254,8 @@ class Service(pulumi.CustomResource):
         :param pulumi.Input[str] ingress: Provides the ingress settings for this Service. On output, returns the currently observed ingress settings, or
                INGRESS_TRAFFIC_UNSPECIFIED if no revision is active. Possible values: ["INGRESS_TRAFFIC_ALL",
                "INGRESS_TRAFFIC_INTERNAL_ONLY", "INGRESS_TRAFFIC_INTERNAL_LOAD_BALANCER"]
+        :param pulumi.Input[bool] invoker_iam_disabled: Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+               only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
         :param pulumi.Input[Mapping[str, pulumi.Input[str]]] labels: Unstructured key value map that can be used to organize and categorize objects. User-provided labels are shared with
                Google's billing system, so they can be used to filter, or break down billing charges by team, component, environment,
                state, etc. For more information, visit https://cloud.google.com/resource-manager/docs/creating-managing-labels or
@@ -2236,6 +2318,7 @@ class Service(pulumi.CustomResource):
         __props__.__dict__["expire_time"] = expire_time
         __props__.__dict__["generation"] = generation
         __props__.__dict__["ingress"] = ingress
+        __props__.__dict__["invoker_iam_disabled"] = invoker_iam_disabled
         __props__.__dict__["labels"] = labels
         __props__.__dict__["last_modifier"] = last_modifier
         __props__.__dict__["latest_created_revision"] = latest_created_revision
@@ -2406,6 +2489,15 @@ class Service(pulumi.CustomResource):
         """
         return pulumi.get(self, "ingress")
 
+    @property
+    @pulumi.getter(name="invokerIamDisabled")
+    def invoker_iam_disabled(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Disables IAM permission check for run.routes.invoke for callers of this service. This feature is available by invitation
+        only. For more information, visit https://cloud.google.com/run/docs/securing/managing-access#invoker_check.
+        """
+        return pulumi.get(self, "invoker_iam_disabled")
+
     @property
     @pulumi.getter
     def labels(self) -> pulumi.Output[Optional[Mapping[str, str]]]: