pulumi-gcp 9.1.0a1758696393__py3-none-any.whl → 9.1.0a1758939336__py3-none-any.whl

pulumi_gcp/compute/service_attachment.py

@@ -34,7 +34,8 @@ class ServiceAttachmentArgs:
                  propagated_connection_limit: Optional[pulumi.Input[_builtins.int]] = None,
                  reconcile_connections: Optional[pulumi.Input[_builtins.bool]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
-                 send_propagated_connection_limit_if_zero: Optional[pulumi.Input[_builtins.bool]] = None):
+                 send_propagated_connection_limit_if_zero: Optional[pulumi.Input[_builtins.bool]] = None,
+                 tunneling_config: Optional[pulumi.Input['ServiceAttachmentTunnelingConfigArgs']] = None):
         """
         The set of arguments for constructing a ServiceAttachment resource.
         :param pulumi.Input[_builtins.str] connection_preference: The connection preference to use for this service attachment. Valid
@@ -75,6 +76,8 @@ class ServiceAttachmentArgs:
                When false, setting propagated_connection_limit to zero causes the provider to use to the API's default value.
                When true, the provider will set propagated_connection_limit to zero.
                Defaults to false.
+        :param pulumi.Input['ServiceAttachmentTunnelingConfigArgs'] tunneling_config: Tunneling configuration for this service attachment.
+               Structure is documented below.
         """
         pulumi.set(__self__, "connection_preference", connection_preference)
         pulumi.set(__self__, "enable_proxy_protocol", enable_proxy_protocol)
@@ -100,6 +103,8 @@ class ServiceAttachmentArgs:
             pulumi.set(__self__, "region", region)
         if send_propagated_connection_limit_if_zero is not None:
             pulumi.set(__self__, "send_propagated_connection_limit_if_zero", send_propagated_connection_limit_if_zero)
+        if tunneling_config is not None:
+            pulumi.set(__self__, "tunneling_config", tunneling_config)
 
     @_builtins.property
     @pulumi.getter(name="connectionPreference")
@@ -293,6 +298,19 @@ class ServiceAttachmentArgs:
     def send_propagated_connection_limit_if_zero(self, value: Optional[pulumi.Input[_builtins.bool]]):
         pulumi.set(self, "send_propagated_connection_limit_if_zero", value)
 
+    @_builtins.property
+    @pulumi.getter(name="tunnelingConfig")
+    def tunneling_config(self) -> Optional[pulumi.Input['ServiceAttachmentTunnelingConfigArgs']]:
+        """
+        Tunneling configuration for this service attachment.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tunneling_config")
+
+    @tunneling_config.setter
+    def tunneling_config(self, value: Optional[pulumi.Input['ServiceAttachmentTunnelingConfigArgs']]):
+        pulumi.set(self, "tunneling_config", value)
+
 
 @pulumi.input_type
 class _ServiceAttachmentState:
@@ -309,11 +327,13 @@ class _ServiceAttachmentState:
                  nat_subnets: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  project: Optional[pulumi.Input[_builtins.str]] = None,
                  propagated_connection_limit: Optional[pulumi.Input[_builtins.int]] = None,
+                 psc_service_attachment_ids: Optional[pulumi.Input[Sequence[pulumi.Input['ServiceAttachmentPscServiceAttachmentIdArgs']]]] = None,
                  reconcile_connections: Optional[pulumi.Input[_builtins.bool]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  self_link: Optional[pulumi.Input[_builtins.str]] = None,
                  send_propagated_connection_limit_if_zero: Optional[pulumi.Input[_builtins.bool]] = None,
-                 target_service: Optional[pulumi.Input[_builtins.str]] = None):
+                 target_service: Optional[pulumi.Input[_builtins.str]] = None,
+                 tunneling_config: Optional[pulumi.Input['ServiceAttachmentTunnelingConfigArgs']] = None):
         """
         Input properties used for looking up and filtering ServiceAttachment resources.
         :param pulumi.Input[Sequence[pulumi.Input['ServiceAttachmentConnectedEndpointArgs']]] connected_endpoints: An array of the consumer forwarding rules connected to this service
@@ -350,6 +370,8 @@ class _ServiceAttachmentState:
                If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list.
                If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint.
                If unspecified, the default propagated connection limit is 250. To explicitly send a zero value, set `send_propagated_connection_limit_if_zero = true`.
+        :param pulumi.Input[Sequence[pulumi.Input['ServiceAttachmentPscServiceAttachmentIdArgs']]] psc_service_attachment_ids: An 128-bit global unique ID of the PSC service attachment.
+               Structure is documented below.
         :param pulumi.Input[_builtins.bool] reconcile_connections: This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints.
                If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified .
                If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list.
@@ -360,6 +382,8 @@ class _ServiceAttachmentState:
                When true, the provider will set propagated_connection_limit to zero.
                Defaults to false.
         :param pulumi.Input[_builtins.str] target_service: The URL of a service serving the endpoint identified by this service attachment.
+        :param pulumi.Input['ServiceAttachmentTunnelingConfigArgs'] tunneling_config: Tunneling configuration for this service attachment.
+               Structure is documented below.
         """
         if connected_endpoints is not None:
             pulumi.set(__self__, "connected_endpoints", connected_endpoints)
@@ -385,6 +409,8 @@ class _ServiceAttachmentState:
             pulumi.set(__self__, "project", project)
         if propagated_connection_limit is not None:
             pulumi.set(__self__, "propagated_connection_limit", propagated_connection_limit)
+        if psc_service_attachment_ids is not None:
+            pulumi.set(__self__, "psc_service_attachment_ids", psc_service_attachment_ids)
         if reconcile_connections is not None:
             pulumi.set(__self__, "reconcile_connections", reconcile_connections)
         if region is not None:
@@ -395,6 +421,8 @@ class _ServiceAttachmentState:
             pulumi.set(__self__, "send_propagated_connection_limit_if_zero", send_propagated_connection_limit_if_zero)
         if target_service is not None:
             pulumi.set(__self__, "target_service", target_service)
+        if tunneling_config is not None:
+            pulumi.set(__self__, "tunneling_config", tunneling_config)
 
     @_builtins.property
     @pulumi.getter(name="connectedEndpoints")
@@ -562,6 +590,19 @@ class _ServiceAttachmentState:
     def propagated_connection_limit(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "propagated_connection_limit", value)
 
+    @_builtins.property
+    @pulumi.getter(name="pscServiceAttachmentIds")
+    def psc_service_attachment_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['ServiceAttachmentPscServiceAttachmentIdArgs']]]]:
+        """
+        An 128-bit global unique ID of the PSC service attachment.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "psc_service_attachment_ids")
+
+    @psc_service_attachment_ids.setter
+    def psc_service_attachment_ids(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['ServiceAttachmentPscServiceAttachmentIdArgs']]]]):
+        pulumi.set(self, "psc_service_attachment_ids", value)
+
     @_builtins.property
     @pulumi.getter(name="reconcileConnections")
     def reconcile_connections(self) -> Optional[pulumi.Input[_builtins.bool]]:
@@ -627,6 +668,19 @@ class _ServiceAttachmentState:
     def target_service(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "target_service", value)
 
+    @_builtins.property
+    @pulumi.getter(name="tunnelingConfig")
+    def tunneling_config(self) -> Optional[pulumi.Input['ServiceAttachmentTunnelingConfigArgs']]:
+        """
+        Tunneling configuration for this service attachment.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tunneling_config")
+
+    @tunneling_config.setter
+    def tunneling_config(self, value: Optional[pulumi.Input['ServiceAttachmentTunnelingConfigArgs']]):
+        pulumi.set(self, "tunneling_config", value)
+
 
 @pulumi.type_token("gcp:compute/serviceAttachment:ServiceAttachment")
 class ServiceAttachment(pulumi.CustomResource):
@@ -648,6 +702,7 @@ class ServiceAttachment(pulumi.CustomResource):
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  send_propagated_connection_limit_if_zero: Optional[pulumi.Input[_builtins.bool]] = None,
                  target_service: Optional[pulumi.Input[_builtins.str]] = None,
+                 tunneling_config: Optional[pulumi.Input[Union['ServiceAttachmentTunnelingConfigArgs', 'ServiceAttachmentTunnelingConfigArgsDict']]] = None,
                  __props__=None):
         """
         Represents a ServiceAttachment resource.
@@ -921,6 +976,58 @@ class ServiceAttachment(pulumi.CustomResource):
             }],
             reconcile_connections=False)
         ```
+        ### Service Attachment Tunneling Config
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        producer_service_health_check = gcp.compute.HealthCheck("producer_service_health_check",
+            name="producer-service-health-check",
+            check_interval_sec=1,
+            timeout_sec=1,
+            tcp_health_check={
+                "port": 80,
+            })
+        producer_service_backend = gcp.compute.RegionBackendService("producer_service_backend",
+            name="producer-service",
+            region="us-west2",
+            health_checks=producer_service_health_check.id)
+        psc_ilb_network = gcp.compute.Network("psc_ilb_network",
+            name="psc-ilb-network",
+            auto_create_subnetworks=False)
+        psc_ilb_producer_subnetwork = gcp.compute.Subnetwork("psc_ilb_producer_subnetwork",
+            name="psc-ilb-producer-subnetwork",
+            region="us-west2",
+            network=psc_ilb_network.id,
+            ip_cidr_range="10.0.0.0/16")
+        psc_ilb_target_service = gcp.compute.ForwardingRule("psc_ilb_target_service",
+            name="producer-forwarding-rule",
+            region="us-west2",
+            load_balancing_scheme="INTERNAL",
+            backend_service=producer_service_backend.id,
+            all_ports=True,
+            network=psc_ilb_network.name,
+            subnetwork=psc_ilb_producer_subnetwork.name)
+        psc_ilb_nat = gcp.compute.Subnetwork("psc_ilb_nat",
+            name="psc-ilb-nat",
+            region="us-west2",
+            network=psc_ilb_network.id,
+            purpose="PRIVATE_SERVICE_CONNECT",
+            ip_cidr_range="10.1.0.0/16")
+        psc_ilb_service_attachment = gcp.compute.ServiceAttachment("psc_ilb_service_attachment",
+            name="my-psc-ilb",
+            region="us-west2",
+            description="A service attachment configured with tunneling",
+            enable_proxy_protocol=False,
+            connection_preference="ACCEPT_AUTOMATIC",
+            nat_subnets=[psc_ilb_nat.id],
+            target_service=psc_ilb_target_service.id,
+            tunneling_config={
+                "routing_mode": "REGIONAL",
+                "encapsulation_profile": "IPV4",
+            })
+        ```
         ### Service Attachment Cross Region Ilb
 
         ```python
@@ -1055,6 +1162,8 @@ class ServiceAttachment(pulumi.CustomResource):
                When true, the provider will set propagated_connection_limit to zero.
                Defaults to false.
         :param pulumi.Input[_builtins.str] target_service: The URL of a service serving the endpoint identified by this service attachment.
+        :param pulumi.Input[Union['ServiceAttachmentTunnelingConfigArgs', 'ServiceAttachmentTunnelingConfigArgsDict']] tunneling_config: Tunneling configuration for this service attachment.
+               Structure is documented below.
         """
         ...
     @overload
@@ -1334,6 +1443,58 @@ class ServiceAttachment(pulumi.CustomResource):
             }],
             reconcile_connections=False)
         ```
+        ### Service Attachment Tunneling Config
+
+        ```python
+        import pulumi
+        import pulumi_gcp as gcp
+
+        producer_service_health_check = gcp.compute.HealthCheck("producer_service_health_check",
+            name="producer-service-health-check",
+            check_interval_sec=1,
+            timeout_sec=1,
+            tcp_health_check={
+                "port": 80,
+            })
+        producer_service_backend = gcp.compute.RegionBackendService("producer_service_backend",
+            name="producer-service",
+            region="us-west2",
+            health_checks=producer_service_health_check.id)
+        psc_ilb_network = gcp.compute.Network("psc_ilb_network",
+            name="psc-ilb-network",
+            auto_create_subnetworks=False)
+        psc_ilb_producer_subnetwork = gcp.compute.Subnetwork("psc_ilb_producer_subnetwork",
+            name="psc-ilb-producer-subnetwork",
+            region="us-west2",
+            network=psc_ilb_network.id,
+            ip_cidr_range="10.0.0.0/16")
+        psc_ilb_target_service = gcp.compute.ForwardingRule("psc_ilb_target_service",
+            name="producer-forwarding-rule",
+            region="us-west2",
+            load_balancing_scheme="INTERNAL",
+            backend_service=producer_service_backend.id,
+            all_ports=True,
+            network=psc_ilb_network.name,
+            subnetwork=psc_ilb_producer_subnetwork.name)
+        psc_ilb_nat = gcp.compute.Subnetwork("psc_ilb_nat",
+            name="psc-ilb-nat",
+            region="us-west2",
+            network=psc_ilb_network.id,
+            purpose="PRIVATE_SERVICE_CONNECT",
+            ip_cidr_range="10.1.0.0/16")
+        psc_ilb_service_attachment = gcp.compute.ServiceAttachment("psc_ilb_service_attachment",
+            name="my-psc-ilb",
+            region="us-west2",
+            description="A service attachment configured with tunneling",
+            enable_proxy_protocol=False,
+            connection_preference="ACCEPT_AUTOMATIC",
+            nat_subnets=[psc_ilb_nat.id],
+            target_service=psc_ilb_target_service.id,
+            tunneling_config={
+                "routing_mode": "REGIONAL",
+                "encapsulation_profile": "IPV4",
+            })
+        ```
         ### Service Attachment Cross Region Ilb
 
         ```python
@@ -1457,6 +1618,7 @@ class ServiceAttachment(pulumi.CustomResource):
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  send_propagated_connection_limit_if_zero: Optional[pulumi.Input[_builtins.bool]] = None,
                  target_service: Optional[pulumi.Input[_builtins.str]] = None,
+                 tunneling_config: Optional[pulumi.Input[Union['ServiceAttachmentTunnelingConfigArgs', 'ServiceAttachmentTunnelingConfigArgsDict']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -1488,8 +1650,10 @@ class ServiceAttachment(pulumi.CustomResource):
             if target_service is None and not opts.urn:
                 raise TypeError("Missing required property 'target_service'")
             __props__.__dict__["target_service"] = target_service
+            __props__.__dict__["tunneling_config"] = tunneling_config
             __props__.__dict__["connected_endpoints"] = None
             __props__.__dict__["fingerprint"] = None
+            __props__.__dict__["psc_service_attachment_ids"] = None
             __props__.__dict__["self_link"] = None
         super(ServiceAttachment, __self__).__init__(
             'gcp:compute/serviceAttachment:ServiceAttachment',
@@ -1513,11 +1677,13 @@ class ServiceAttachment(pulumi.CustomResource):
             nat_subnets: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
             project: Optional[pulumi.Input[_builtins.str]] = None,
             propagated_connection_limit: Optional[pulumi.Input[_builtins.int]] = None,
+            psc_service_attachment_ids: Optional[pulumi.Input[Sequence[pulumi.Input[Union['ServiceAttachmentPscServiceAttachmentIdArgs', 'ServiceAttachmentPscServiceAttachmentIdArgsDict']]]]] = None,
             reconcile_connections: Optional[pulumi.Input[_builtins.bool]] = None,
             region: Optional[pulumi.Input[_builtins.str]] = None,
             self_link: Optional[pulumi.Input[_builtins.str]] = None,
             send_propagated_connection_limit_if_zero: Optional[pulumi.Input[_builtins.bool]] = None,
-            target_service: Optional[pulumi.Input[_builtins.str]] = None) -> 'ServiceAttachment':
+            target_service: Optional[pulumi.Input[_builtins.str]] = None,
+            tunneling_config: Optional[pulumi.Input[Union['ServiceAttachmentTunnelingConfigArgs', 'ServiceAttachmentTunnelingConfigArgsDict']]] = None) -> 'ServiceAttachment':
         """
         Get an existing ServiceAttachment resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -1559,6 +1725,8 @@ class ServiceAttachment(pulumi.CustomResource):
                If the connection preference of the service attachment is ACCEPT_MANUAL, the limit applies to each project or network that is listed in the consumer accept list.
                If the connection preference of the service attachment is ACCEPT_AUTOMATIC, the limit applies to each project that contains a connected endpoint.
                If unspecified, the default propagated connection limit is 250. To explicitly send a zero value, set `send_propagated_connection_limit_if_zero = true`.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['ServiceAttachmentPscServiceAttachmentIdArgs', 'ServiceAttachmentPscServiceAttachmentIdArgsDict']]]] psc_service_attachment_ids: An 128-bit global unique ID of the PSC service attachment.
+               Structure is documented below.
         :param pulumi.Input[_builtins.bool] reconcile_connections: This flag determines whether a consumer accept/reject list change can reconcile the statuses of existing ACCEPTED or REJECTED PSC endpoints.
                If false, connection policy update will only affect existing PENDING PSC endpoints. Existing ACCEPTED/REJECTED endpoints will remain untouched regardless how the connection policy is modified .
                If true, update will affect both PENDING and ACCEPTED/REJECTED PSC endpoints. For example, an ACCEPTED PSC endpoint will be moved to REJECTED if its project is added to the reject list.
@@ -1569,6 +1737,8 @@ class ServiceAttachment(pulumi.CustomResource):
                When true, the provider will set propagated_connection_limit to zero.
                Defaults to false.
         :param pulumi.Input[_builtins.str] target_service: The URL of a service serving the endpoint identified by this service attachment.
+        :param pulumi.Input[Union['ServiceAttachmentTunnelingConfigArgs', 'ServiceAttachmentTunnelingConfigArgsDict']] tunneling_config: Tunneling configuration for this service attachment.
+               Structure is documented below.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -1586,11 +1756,13 @@ class ServiceAttachment(pulumi.CustomResource):
         __props__.__dict__["nat_subnets"] = nat_subnets
         __props__.__dict__["project"] = project
         __props__.__dict__["propagated_connection_limit"] = propagated_connection_limit
+        __props__.__dict__["psc_service_attachment_ids"] = psc_service_attachment_ids
         __props__.__dict__["reconcile_connections"] = reconcile_connections
         __props__.__dict__["region"] = region
         __props__.__dict__["self_link"] = self_link
         __props__.__dict__["send_propagated_connection_limit_if_zero"] = send_propagated_connection_limit_if_zero
         __props__.__dict__["target_service"] = target_service
+        __props__.__dict__["tunneling_config"] = tunneling_config
         return ServiceAttachment(resource_name, opts=opts, __props__=__props__)
 
     @_builtins.property
@@ -1711,6 +1883,15 @@ class ServiceAttachment(pulumi.CustomResource):
         """
         return pulumi.get(self, "propagated_connection_limit")
 
+    @_builtins.property
+    @pulumi.getter(name="pscServiceAttachmentIds")
+    def psc_service_attachment_ids(self) -> pulumi.Output[Sequence['outputs.ServiceAttachmentPscServiceAttachmentId']]:
+        """
+        An 128-bit global unique ID of the PSC service attachment.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "psc_service_attachment_ids")
+
     @_builtins.property
     @pulumi.getter(name="reconcileConnections")
     def reconcile_connections(self) -> pulumi.Output[_builtins.bool]:
@@ -1756,3 +1937,12 @@ class ServiceAttachment(pulumi.CustomResource):
         """
         return pulumi.get(self, "target_service")
 
+    @_builtins.property
+    @pulumi.getter(name="tunnelingConfig")
+    def tunneling_config(self) -> pulumi.Output[Optional['outputs.ServiceAttachmentTunnelingConfig']]:
+        """
+        Tunneling configuration for this service attachment.
+        Structure is documented below.
+        """
+        return pulumi.get(self, "tunneling_config")
+

pulumi_gcp/compute/snapshot_iam_binding.py

@@ -39,6 +39,7 @@ class SnapshotIamBindingArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `compute.SnapshotIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -70,6 +71,7 @@ class SnapshotIamBindingArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -149,6 +151,7 @@ class _SnapshotIamBindingState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -205,6 +208,7 @@ class _SnapshotIamBindingState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -432,6 +436,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -674,6 +679,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -721,6 +727,7 @@ class SnapshotIamBinding(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 

pulumi_gcp/compute/snapshot_iam_member.py

@@ -39,6 +39,7 @@ class SnapshotIamMemberArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `compute.SnapshotIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -70,6 +71,7 @@ class SnapshotIamMemberArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -149,6 +151,7 @@ class _SnapshotIamMemberState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -205,6 +208,7 @@ class _SnapshotIamMemberState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -432,6 +436,7 @@ class SnapshotIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -674,6 +679,7 @@ class SnapshotIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -721,6 +727,7 @@ class SnapshotIamMember(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 

pulumi_gcp/compute/storage_pool_iam_binding.py

@@ -40,6 +40,7 @@ class StoragePoolIamBindingArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `compute.StoragePoolIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -78,6 +79,7 @@ class StoragePoolIamBindingArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -178,6 +180,7 @@ class _StoragePoolIamBindingState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -243,6 +246,7 @@ class _StoragePoolIamBindingState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -615,6 +619,7 @@ class StoragePoolIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -993,6 +998,7 @@ class StoragePoolIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -1048,6 +1054,7 @@ class StoragePoolIamBinding(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 

pulumi_gcp/compute/storage_pool_iam_member.py

@@ -40,6 +40,7 @@ class StoragePoolIamMemberArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `compute.StoragePoolIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -78,6 +79,7 @@ class StoragePoolIamMemberArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -178,6 +180,7 @@ class _StoragePoolIamMemberState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -243,6 +246,7 @@ class _StoragePoolIamMemberState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -615,6 +619,7 @@ class StoragePoolIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -993,6 +998,7 @@ class StoragePoolIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -1048,6 +1054,7 @@ class StoragePoolIamMember(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")