pulumi-gcp 8.7.0a1730183903__py3-none-any.whl → 8.8.0__py3-none-any.whl

pulumi_gcp/gkehub/membership_iam_member.py

@@ -461,7 +461,7 @@ class MembershipIamMember(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/membershipIamMember:MembershipIamMember editor projects/{{project}}/locations/{{location}}/memberships/{{membership_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 
@@ -653,7 +653,7 @@ class MembershipIamMember(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/membershipIamMember:MembershipIamMember editor projects/{{project}}/locations/{{location}}/memberships/{{membership_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 

pulumi_gcp/gkehub/membership_iam_policy.py

@@ -358,7 +358,7 @@ class MembershipIamPolicy(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/membershipIamPolicy:MembershipIamPolicy editor projects/{{project}}/locations/{{location}}/memberships/{{membership_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 
@@ -538,7 +538,7 @@ class MembershipIamPolicy(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/membershipIamPolicy:MembershipIamPolicy editor projects/{{project}}/locations/{{location}}/memberships/{{membership_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 

pulumi_gcp/gkehub/outputs.py

@@ -168,7 +168,7 @@ class FeatureFleetDefaultMemberConfigConfigmanagement(dict):
                Structure is documented below.
         :param str management: Set this field to MANAGEMENT_AUTOMATIC to enable Config Sync auto-upgrades, and set this field to MANAGEMENT_MANUAL or MANAGEMENT_UNSPECIFIED to disable Config Sync auto-upgrades.
                Possible values are: `MANAGEMENT_UNSPECIFIED`, `MANAGEMENT_AUTOMATIC`, `MANAGEMENT_MANUAL`.
-        :param str version: Version of ACM installed
+        :param str version: Version of Config Sync installed
         """
         if config_sync is not None:
             pulumi.set(__self__, "config_sync", config_sync)
@@ -199,7 +199,7 @@ class FeatureFleetDefaultMemberConfigConfigmanagement(dict):
     @pulumi.getter
     def version(self) -> Optional[str]:
         """
-        Version of ACM installed
+        Version of Config Sync installed
         """
         return pulumi.get(self, "version")
 
@@ -468,9 +468,9 @@ class FeatureFleetDefaultMemberConfigConfigmanagementConfigSyncOci(dict):
         :param str sync_repo: The OCI image repository URL for the package to sync from
         :param str sync_wait_secs: Period in seconds between consecutive syncs. Default: 15
         :param str version: (Optional, Deprecated)
-               Version of ACM installed
+               Version of Config Sync installed
                
-               > **Warning:** The `configmanagement.config_sync.oci.version` field is deprecated and will be removed in a future major release. Please use `configmanagement.version` field to specify the version of ACM installed instead.
+               > **Warning:** The `configmanagement.config_sync.oci.version` field is deprecated and will be removed in a future major release. Please use `configmanagement.version` field to specify the version of Config Sync installed instead.
         """
         pulumi.set(__self__, "secret_type", secret_type)
         if gcp_service_account_email is not None:
@@ -526,13 +526,13 @@ class FeatureFleetDefaultMemberConfigConfigmanagementConfigSyncOci(dict):
 
     @property
     @pulumi.getter
-    @_utilities.deprecated("""The `configmanagement.config_sync.oci.version` field is deprecated and will be removed in a future major release. Please use `configmanagement.version` field to specify the version of ACM installed instead.""")
+    @_utilities.deprecated("""The `configmanagement.config_sync.oci.version` field is deprecated and will be removed in a future major release. Please use `configmanagement.version` field to specify the version of Config Sync installed instead.""")
     def version(self) -> Optional[str]:
         """
         (Optional, Deprecated)
-        Version of ACM installed
+        Version of Config Sync installed
 
-        > **Warning:** The `configmanagement.config_sync.oci.version` field is deprecated and will be removed in a future major release. Please use `configmanagement.version` field to specify the version of ACM installed instead.
+        > **Warning:** The `configmanagement.config_sync.oci.version` field is deprecated and will be removed in a future major release. Please use `configmanagement.version` field to specify the version of Config Sync installed instead.
         """
         return pulumi.get(self, "version")
 
@@ -1259,7 +1259,7 @@ class FeatureMembershipConfigmanagement(dict):
         :param 'FeatureMembershipConfigmanagementPolicyControllerArgs' policy_controller: Policy Controller configuration for the cluster. Structure is documented below.
                Configuring Policy Controller through the configmanagement feature is no longer recommended.
                Use the policycontroller feature instead.
-        :param str version: Version of ACM installed.
+        :param str version: Version of Config Sync installed.
         """
         if binauthz is not None:
             pulumi.set(__self__, "binauthz", binauthz)
@@ -1326,7 +1326,7 @@ class FeatureMembershipConfigmanagement(dict):
     @pulumi.getter
     def version(self) -> Optional[str]:
         """
-        Version of ACM installed.
+        Version of Config Sync installed.
         """
         return pulumi.get(self, "version")
 
@@ -1384,10 +1384,10 @@ class FeatureMembershipConfigmanagementConfigSync(dict):
         :param bool enabled: Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
         :param 'FeatureMembershipConfigmanagementConfigSyncGitArgs' git: (Optional) Structure is documented below.
         :param str metrics_gcp_service_account_email: The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring. The GSA should have the Monitoring Metric Writer(roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount `default` in the namespace `config-management-monitoring` should be bound to the GSA.
-        :param 'FeatureMembershipConfigmanagementConfigSyncOciArgs' oci: (Optional) Supported from ACM versions 1.12.0 onwards. Structure is documented below.
+        :param 'FeatureMembershipConfigmanagementConfigSyncOciArgs' oci: (Optional) Supported from Config Sync versions 1.12.0 onwards. Structure is documented below.
                
                Use either `git` or `oci` config option.
-        :param bool prevent_drift: Supported from ACM versions 1.10.0 onwards. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to "false", disables the Config Sync admission webhook and does not prevent drifts.
+        :param bool prevent_drift: Supported from Config Sync versions 1.10.0 onwards. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to "false", disables the Config Sync admission webhook and does not prevent drifts.
         :param str source_format: Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
         """
         if enabled is not None:
@@ -1431,7 +1431,7 @@ class FeatureMembershipConfigmanagementConfigSync(dict):
     @pulumi.getter
     def oci(self) -> Optional['outputs.FeatureMembershipConfigmanagementConfigSyncOci']:
         """
-        (Optional) Supported from ACM versions 1.12.0 onwards. Structure is documented below.
+        (Optional) Supported from Config Sync versions 1.12.0 onwards. Structure is documented below.
 
         Use either `git` or `oci` config option.
         """
@@ -1441,7 +1441,7 @@ class FeatureMembershipConfigmanagementConfigSync(dict):
     @pulumi.getter(name="preventDrift")
     def prevent_drift(self) -> Optional[bool]:
         """
-        Supported from ACM versions 1.10.0 onwards. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to "false", disables the Config Sync admission webhook and does not prevent drifts.
+        Supported from Config Sync versions 1.10.0 onwards. Set to true to enable the Config Sync admission webhook to prevent drifts. If set to "false", disables the Config Sync admission webhook and does not prevent drifts.
         """
         return pulumi.get(self, "prevent_drift")
 

pulumi_gcp/gkehub/scope_iam_binding.py

@@ -404,7 +404,7 @@ class ScopeIamBinding(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/scopeIamBinding:ScopeIamBinding editor projects/{{project}}/locations/global/scopes/{{scope_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 
@@ -583,7 +583,7 @@ class ScopeIamBinding(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/scopeIamBinding:ScopeIamBinding editor projects/{{project}}/locations/global/scopes/{{scope_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 

pulumi_gcp/gkehub/scope_iam_member.py

@@ -404,7 +404,7 @@ class ScopeIamMember(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/scopeIamMember:ScopeIamMember editor projects/{{project}}/locations/global/scopes/{{scope_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 
@@ -583,7 +583,7 @@ class ScopeIamMember(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/scopeIamMember:ScopeIamMember editor projects/{{project}}/locations/global/scopes/{{scope_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 

pulumi_gcp/gkehub/scope_iam_policy.py

@@ -301,7 +301,7 @@ class ScopeIamPolicy(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/scopeIamPolicy:ScopeIamPolicy editor projects/{{project}}/locations/global/scopes/{{scope_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 
@@ -468,7 +468,7 @@ class ScopeIamPolicy(pulumi.CustomResource):
         $ pulumi import gcp:gkehub/scopeIamPolicy:ScopeIamPolicy editor projects/{{project}}/locations/global/scopes/{{scope_id}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 

pulumi_gcp/healthcare/consent_store_iam_binding.py

@@ -322,7 +322,7 @@ class ConsentStoreIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        ## > **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
         ---
@@ -414,7 +414,7 @@ class ConsentStoreIamBinding(pulumi.CustomResource):
         $ pulumi import gcp:healthcare/consentStoreIamBinding:ConsentStoreIamBinding editor {{dataset}}/consentStores/{{consent_store}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 
@@ -502,7 +502,7 @@ class ConsentStoreIamBinding(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        ## > **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
         ---
@@ -594,7 +594,7 @@ class ConsentStoreIamBinding(pulumi.CustomResource):
         $ pulumi import gcp:healthcare/consentStoreIamBinding:ConsentStoreIamBinding editor {{dataset}}/consentStores/{{consent_store}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 

pulumi_gcp/healthcare/consent_store_iam_member.py

@@ -322,7 +322,7 @@ class ConsentStoreIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        ## > **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
         ---
@@ -414,7 +414,7 @@ class ConsentStoreIamMember(pulumi.CustomResource):
         $ pulumi import gcp:healthcare/consentStoreIamMember:ConsentStoreIamMember editor {{dataset}}/consentStores/{{consent_store}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 
@@ -502,7 +502,7 @@ class ConsentStoreIamMember(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        ## > **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
         ---
@@ -594,7 +594,7 @@ class ConsentStoreIamMember(pulumi.CustomResource):
         $ pulumi import gcp:healthcare/consentStoreIamMember:ConsentStoreIamMember editor {{dataset}}/consentStores/{{consent_store}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 

pulumi_gcp/healthcare/consent_store_iam_policy.py

@@ -219,7 +219,7 @@ class ConsentStoreIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        ## > **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
         ---
@@ -311,7 +311,7 @@ class ConsentStoreIamPolicy(pulumi.CustomResource):
         $ pulumi import gcp:healthcare/consentStoreIamPolicy:ConsentStoreIamPolicy editor {{dataset}}/consentStores/{{consent_store}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 
@@ -387,7 +387,7 @@ class ConsentStoreIamPolicy(pulumi.CustomResource):
             member="user:jane@example.com")
         ```
 
-        ## > **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        ## > **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
         full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
         ---
@@ -479,7 +479,7 @@ class ConsentStoreIamPolicy(pulumi.CustomResource):
         $ pulumi import gcp:healthcare/consentStoreIamPolicy:ConsentStoreIamPolicy editor {{dataset}}/consentStores/{{consent_store}}
         ```
 
-        -> **Custom Roles**: If you're importing a IAM resource with a custom role, make sure to use the
+        -> **Custom Roles** If you're importing a IAM resource with a custom role, make sure to use the
 
          full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
 

pulumi_gcp/iam/workload_identity_pool_provider.py

@@ -800,6 +800,34 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 "account_id": "999999999999",
             })
         ```
+        ### Iam Workload Identity Pool Provider Github Actions
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        pool = gcp.iam.WorkloadIdentityPool("pool", workload_identity_pool_id="example-pool")
+        example = gcp.iam.WorkloadIdentityPoolProvider("example",
+            workload_identity_pool_id=pool.workload_identity_pool_id,
+            workload_identity_pool_provider_id="example-prvdr",
+            display_name="Name of provider",
+            description="GitHub Actions identity pool provider for automated test",
+            disabled=True,
+            attribute_condition=\"\"\"    assertion.repository_owner_id == "123456789" &&
+            attribute.repository == "gh-org/gh-repo" &&
+            assertion.ref == "refs/heads/main" &&
+            assertion.ref_type == "branch"
+        \"\"\",
+            attribute_mapping={
+                "google.subject": "assertion.sub",
+                "attribute.actor": "assertion.actor",
+                "attribute.aud": "assertion.aud",
+                "attribute.repository": "assertion.repository",
+            },
+            oidc={
+                "issuer_uri": "https://token.actions.githubusercontent.com",
+            })
+        ```
         ### Iam Workload Identity Pool Provider Oidc Basic
 
         ```python
@@ -1135,6 +1163,34 @@ class WorkloadIdentityPoolProvider(pulumi.CustomResource):
                 "account_id": "999999999999",
             })
         ```
+        ### Iam Workload Identity Pool Provider Github Actions
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        pool = gcp.iam.WorkloadIdentityPool("pool", workload_identity_pool_id="example-pool")
+        example = gcp.iam.WorkloadIdentityPoolProvider("example",
+            workload_identity_pool_id=pool.workload_identity_pool_id,
+            workload_identity_pool_provider_id="example-prvdr",
+            display_name="Name of provider",
+            description="GitHub Actions identity pool provider for automated test",
+            disabled=True,
+            attribute_condition=\"\"\"    assertion.repository_owner_id == "123456789" &&
+            attribute.repository == "gh-org/gh-repo" &&
+            assertion.ref == "refs/heads/main" &&
+            assertion.ref_type == "branch"
+        \"\"\",
+            attribute_mapping={
+                "google.subject": "assertion.sub",
+                "attribute.actor": "assertion.actor",
+                "attribute.aud": "assertion.aud",
+                "attribute.repository": "assertion.repository",
+            },
+            oidc={
+                "issuer_uri": "https://token.actions.githubusercontent.com",
+            })
+        ```
         ### Iam Workload Identity Pool Provider Oidc Basic
 
         ```python

pulumi_gcp/iap/__init__.py

@@ -24,6 +24,7 @@ from .get_web_iam_policy import *
 from .get_web_region_backend_service_iam_policy import *
 from .get_web_type_app_engine_iam_policy import *
 from .get_web_type_compute_iam_policy import *
+from .settings import *
 from .tunnel_dest_group import *
 from .tunnel_dest_group_iam_binding import *
 from .tunnel_dest_group_iam_member import *