pulumi-gcp 9.1.0a1758696393__py3-none-any.whl → 9.1.0a1758939336__py3-none-any.whl

pulumi_gcp/kms/ekm_connection_iam_member.py

@@ -40,6 +40,7 @@ class EkmConnectionIamMemberArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `kms.EkmConnectionIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -80,6 +81,7 @@ class EkmConnectionIamMemberArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -187,6 +189,7 @@ class _EkmConnectionIamMemberState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -265,6 +268,7 @@ class _EkmConnectionIamMemberState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -626,6 +630,7 @@ class EkmConnectionIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -1004,6 +1009,7 @@ class EkmConnectionIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -1068,6 +1074,7 @@ class EkmConnectionIamMember(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 

pulumi_gcp/logging/log_view_iam_binding.py

@@ -42,6 +42,7 @@ class LogViewIamBindingArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] parent: The parent of the resource. Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `logging.LogViewIamBinding` can be used per role. Note that custom roles must be of the format
@@ -91,6 +92,7 @@ class LogViewIamBindingArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -195,6 +197,7 @@ class _LogViewIamBindingState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] parent: The parent of the resource. Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -284,6 +287,7 @@ class _LogViewIamBindingState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -655,6 +659,7 @@ class LogViewIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] parent: The parent of the resource. Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -1049,6 +1054,7 @@ class LogViewIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] parent: The parent of the resource. Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -1119,6 +1125,7 @@ class LogViewIamBinding(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 

pulumi_gcp/logging/log_view_iam_member.py

@@ -42,6 +42,7 @@ class LogViewIamMemberArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] parent: The parent of the resource. Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `logging.LogViewIamBinding` can be used per role. Note that custom roles must be of the format
@@ -91,6 +92,7 @@ class LogViewIamMemberArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -195,6 +197,7 @@ class _LogViewIamMemberState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] parent: The parent of the resource. Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -284,6 +287,7 @@ class _LogViewIamMemberState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 
@@ -655,6 +659,7 @@ class LogViewIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] parent: The parent of the resource. Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -1049,6 +1054,7 @@ class LogViewIamMember(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] parent: The parent of the resource. Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
@@ -1119,6 +1125,7 @@ class LogViewIamMember(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "member")
 

pulumi_gcp/managedkafka/connect_cluster.py

@@ -398,8 +398,8 @@ class ConnectCluster(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_32706",
-            name="tf-test_49082",
+            project_id="tf-test_60365",
+            name="tf-test_80215",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -528,8 +528,8 @@ class ConnectCluster(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_32706",
-            name="tf-test_49082",
+            project_id="tf-test_60365",
+            name="tf-test_80215",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")

pulumi_gcp/managedkafka/connector.py

@@ -289,8 +289,8 @@ class Connector(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_60365",
-            name="tf-test_80215",
+            project_id="tf-test_59033",
+            name="tf-test_32081",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")
@@ -447,8 +447,8 @@ class Connector(pulumi.CustomResource):
         import pulumi_time as time
 
         project = gcp.organizations.Project("project",
-            project_id="tf-test_60365",
-            name="tf-test_80215",
+            project_id="tf-test_59033",
+            name="tf-test_32081",
             org_id="123456789",
             billing_account="000000-0000000-0000000-000000",
             deletion_policy="DELETE")

pulumi_gcp/netapp/_inputs.py

@@ -284,6 +284,10 @@ if not MYPY:
         """
         Defines the client ingress specification (allowed clients) as a comma separated list with IPv4 CIDRs or IPv4 host addresses.
         """
+        anon_uid: NotRequired[pulumi.Input[_builtins.int]]
+        """
+        An integer representing the anonymous user ID. Range is 0 to 4294967295. Required when `squash_mode` is `ROOT_SQUASH` or `ALL_SQUASH`.
+        """
         has_root_access: NotRequired[pulumi.Input[_builtins.str]]
         """
         If enabled, the root user (UID = 0) of the specified clients doesn't get mapped to nobody (UID = 65534). This is also known as no_root_squash.
@@ -320,6 +324,11 @@ if not MYPY:
         """
         Enable to apply the export rule to NFSV4.1 clients.
         """
+        squash_mode: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        SquashMode defines how remote user privileges are restricted when accessing an NFS export. It controls how the user identities (like root) are mapped to anonymous users to limit access and enforce security.
+        Possible values are: `NO_ROOT_SQUASH`, `ROOT_SQUASH`, `ALL_SQUASH`.
+        """
 elif False:
     VolumeExportPolicyRuleArgsDict: TypeAlias = Mapping[str, Any]
 
@@ -328,6 +337,7 @@ class VolumeExportPolicyRuleArgs:
     def __init__(__self__, *,
                  access_type: Optional[pulumi.Input[_builtins.str]] = None,
                  allowed_clients: Optional[pulumi.Input[_builtins.str]] = None,
+                 anon_uid: Optional[pulumi.Input[_builtins.int]] = None,
                  has_root_access: Optional[pulumi.Input[_builtins.str]] = None,
                  kerberos5_read_only: Optional[pulumi.Input[_builtins.bool]] = None,
                  kerberos5_read_write: Optional[pulumi.Input[_builtins.bool]] = None,
@@ -336,11 +346,13 @@ class VolumeExportPolicyRuleArgs:
                  kerberos5p_read_only: Optional[pulumi.Input[_builtins.bool]] = None,
                  kerberos5p_read_write: Optional[pulumi.Input[_builtins.bool]] = None,
                  nfsv3: Optional[pulumi.Input[_builtins.bool]] = None,
-                 nfsv4: Optional[pulumi.Input[_builtins.bool]] = None):
+                 nfsv4: Optional[pulumi.Input[_builtins.bool]] = None,
+                 squash_mode: Optional[pulumi.Input[_builtins.str]] = None):
         """
         :param pulumi.Input[_builtins.str] access_type: Defines the access type for clients matching the `allowedClients` specification.
                Possible values are: `READ_ONLY`, `READ_WRITE`, `READ_NONE`.
         :param pulumi.Input[_builtins.str] allowed_clients: Defines the client ingress specification (allowed clients) as a comma separated list with IPv4 CIDRs or IPv4 host addresses.
+        :param pulumi.Input[_builtins.int] anon_uid: An integer representing the anonymous user ID. Range is 0 to 4294967295. Required when `squash_mode` is `ROOT_SQUASH` or `ALL_SQUASH`.
         :param pulumi.Input[_builtins.str] has_root_access: If enabled, the root user (UID = 0) of the specified clients doesn't get mapped to nobody (UID = 65534). This is also known as no_root_squash.
         :param pulumi.Input[_builtins.bool] kerberos5_read_only: If enabled (true) the rule defines a read only access for clients matching the 'allowedClients' specification. It enables nfs clients to mount using 'authentication' kerberos security mode.
         :param pulumi.Input[_builtins.bool] kerberos5_read_write: If enabled (true) the rule defines read and write access for clients matching the 'allowedClients' specification. It enables nfs clients to mount using 'authentication' kerberos security mode. The 'kerberos5ReadOnly' value is ignored if this is enabled.
@@ -350,11 +362,15 @@ class VolumeExportPolicyRuleArgs:
         :param pulumi.Input[_builtins.bool] kerberos5p_read_write: If enabled (true) the rule defines read and write access for clients matching the 'allowedClients' specification. It enables nfs clients to mount using 'privacy' kerberos security mode. The 'kerberos5pReadOnly' value is ignored if this is enabled.
         :param pulumi.Input[_builtins.bool] nfsv3: Enable to apply the export rule to NFSV3 clients.
         :param pulumi.Input[_builtins.bool] nfsv4: Enable to apply the export rule to NFSV4.1 clients.
+        :param pulumi.Input[_builtins.str] squash_mode: SquashMode defines how remote user privileges are restricted when accessing an NFS export. It controls how the user identities (like root) are mapped to anonymous users to limit access and enforce security.
+               Possible values are: `NO_ROOT_SQUASH`, `ROOT_SQUASH`, `ALL_SQUASH`.
         """
         if access_type is not None:
             pulumi.set(__self__, "access_type", access_type)
         if allowed_clients is not None:
             pulumi.set(__self__, "allowed_clients", allowed_clients)
+        if anon_uid is not None:
+            pulumi.set(__self__, "anon_uid", anon_uid)
         if has_root_access is not None:
             pulumi.set(__self__, "has_root_access", has_root_access)
         if kerberos5_read_only is not None:
@@ -373,6 +389,8 @@ class VolumeExportPolicyRuleArgs:
             pulumi.set(__self__, "nfsv3", nfsv3)
         if nfsv4 is not None:
             pulumi.set(__self__, "nfsv4", nfsv4)
+        if squash_mode is not None:
+            pulumi.set(__self__, "squash_mode", squash_mode)
 
     @_builtins.property
     @pulumi.getter(name="accessType")
@@ -399,6 +417,18 @@ class VolumeExportPolicyRuleArgs:
     def allowed_clients(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "allowed_clients", value)
 
+    @_builtins.property
+    @pulumi.getter(name="anonUid")
+    def anon_uid(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        An integer representing the anonymous user ID. Range is 0 to 4294967295. Required when `squash_mode` is `ROOT_SQUASH` or `ALL_SQUASH`.
+        """
+        return pulumi.get(self, "anon_uid")
+
+    @anon_uid.setter
+    def anon_uid(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "anon_uid", value)
+
     @_builtins.property
     @pulumi.getter(name="hasRootAccess")
     def has_root_access(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -507,6 +537,19 @@ class VolumeExportPolicyRuleArgs:
     def nfsv4(self, value: Optional[pulumi.Input[_builtins.bool]]):
         pulumi.set(self, "nfsv4", value)
 
+    @_builtins.property
+    @pulumi.getter(name="squashMode")
+    def squash_mode(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        SquashMode defines how remote user privileges are restricted when accessing an NFS export. It controls how the user identities (like root) are mapped to anonymous users to limit access and enforce security.
+        Possible values are: `NO_ROOT_SQUASH`, `ROOT_SQUASH`, `ALL_SQUASH`.
+        """
+        return pulumi.get(self, "squash_mode")
+
+    @squash_mode.setter
+    def squash_mode(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "squash_mode", value)
+
 
 if not MYPY:
     class VolumeHybridReplicationParametersArgsDict(TypedDict):

pulumi_gcp/netapp/outputs.py

@@ -221,6 +221,8 @@ class VolumeExportPolicyRule(dict):
             suggest = "access_type"
         elif key == "allowedClients":
             suggest = "allowed_clients"
+        elif key == "anonUid":
+            suggest = "anon_uid"
         elif key == "hasRootAccess":
             suggest = "has_root_access"
         elif key == "kerberos5ReadOnly":
@@ -235,6 +237,8 @@ class VolumeExportPolicyRule(dict):
             suggest = "kerberos5p_read_only"
         elif key == "kerberos5pReadWrite":
             suggest = "kerberos5p_read_write"
+        elif key == "squashMode":
+            suggest = "squash_mode"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in VolumeExportPolicyRule. Access the value via the '{suggest}' property getter instead.")
@@ -250,6 +254,7 @@ class VolumeExportPolicyRule(dict):
     def __init__(__self__, *,
                  access_type: Optional[_builtins.str] = None,
                  allowed_clients: Optional[_builtins.str] = None,
+                 anon_uid: Optional[_builtins.int] = None,
                  has_root_access: Optional[_builtins.str] = None,
                  kerberos5_read_only: Optional[_builtins.bool] = None,
                  kerberos5_read_write: Optional[_builtins.bool] = None,
@@ -258,11 +263,13 @@ class VolumeExportPolicyRule(dict):
                  kerberos5p_read_only: Optional[_builtins.bool] = None,
                  kerberos5p_read_write: Optional[_builtins.bool] = None,
                  nfsv3: Optional[_builtins.bool] = None,
-                 nfsv4: Optional[_builtins.bool] = None):
+                 nfsv4: Optional[_builtins.bool] = None,
+                 squash_mode: Optional[_builtins.str] = None):
         """
         :param _builtins.str access_type: Defines the access type for clients matching the `allowedClients` specification.
                Possible values are: `READ_ONLY`, `READ_WRITE`, `READ_NONE`.
         :param _builtins.str allowed_clients: Defines the client ingress specification (allowed clients) as a comma separated list with IPv4 CIDRs or IPv4 host addresses.
+        :param _builtins.int anon_uid: An integer representing the anonymous user ID. Range is 0 to 4294967295. Required when `squash_mode` is `ROOT_SQUASH` or `ALL_SQUASH`.
         :param _builtins.str has_root_access: If enabled, the root user (UID = 0) of the specified clients doesn't get mapped to nobody (UID = 65534). This is also known as no_root_squash.
         :param _builtins.bool kerberos5_read_only: If enabled (true) the rule defines a read only access for clients matching the 'allowedClients' specification. It enables nfs clients to mount using 'authentication' kerberos security mode.
         :param _builtins.bool kerberos5_read_write: If enabled (true) the rule defines read and write access for clients matching the 'allowedClients' specification. It enables nfs clients to mount using 'authentication' kerberos security mode. The 'kerberos5ReadOnly' value is ignored if this is enabled.
@@ -272,11 +279,15 @@ class VolumeExportPolicyRule(dict):
         :param _builtins.bool kerberos5p_read_write: If enabled (true) the rule defines read and write access for clients matching the 'allowedClients' specification. It enables nfs clients to mount using 'privacy' kerberos security mode. The 'kerberos5pReadOnly' value is ignored if this is enabled.
         :param _builtins.bool nfsv3: Enable to apply the export rule to NFSV3 clients.
         :param _builtins.bool nfsv4: Enable to apply the export rule to NFSV4.1 clients.
+        :param _builtins.str squash_mode: SquashMode defines how remote user privileges are restricted when accessing an NFS export. It controls how the user identities (like root) are mapped to anonymous users to limit access and enforce security.
+               Possible values are: `NO_ROOT_SQUASH`, `ROOT_SQUASH`, `ALL_SQUASH`.
         """
         if access_type is not None:
             pulumi.set(__self__, "access_type", access_type)
         if allowed_clients is not None:
             pulumi.set(__self__, "allowed_clients", allowed_clients)
+        if anon_uid is not None:
+            pulumi.set(__self__, "anon_uid", anon_uid)
         if has_root_access is not None:
             pulumi.set(__self__, "has_root_access", has_root_access)
         if kerberos5_read_only is not None:
@@ -295,6 +306,8 @@ class VolumeExportPolicyRule(dict):
             pulumi.set(__self__, "nfsv3", nfsv3)
         if nfsv4 is not None:
             pulumi.set(__self__, "nfsv4", nfsv4)
+        if squash_mode is not None:
+            pulumi.set(__self__, "squash_mode", squash_mode)
 
     @_builtins.property
     @pulumi.getter(name="accessType")
@@ -313,6 +326,14 @@ class VolumeExportPolicyRule(dict):
         """
         return pulumi.get(self, "allowed_clients")
 
+    @_builtins.property
+    @pulumi.getter(name="anonUid")
+    def anon_uid(self) -> Optional[_builtins.int]:
+        """
+        An integer representing the anonymous user ID. Range is 0 to 4294967295. Required when `squash_mode` is `ROOT_SQUASH` or `ALL_SQUASH`.
+        """
+        return pulumi.get(self, "anon_uid")
+
     @_builtins.property
     @pulumi.getter(name="hasRootAccess")
     def has_root_access(self) -> Optional[_builtins.str]:
@@ -385,6 +406,15 @@ class VolumeExportPolicyRule(dict):
         """
         return pulumi.get(self, "nfsv4")
 
+    @_builtins.property
+    @pulumi.getter(name="squashMode")
+    def squash_mode(self) -> Optional[_builtins.str]:
+        """
+        SquashMode defines how remote user privileges are restricted when accessing an NFS export. It controls how the user identities (like root) are mapped to anonymous users to limit access and enforce security.
+        Possible values are: `NO_ROOT_SQUASH`, `ROOT_SQUASH`, `ALL_SQUASH`.
+        """
+        return pulumi.get(self, "squash_mode")
+
 
 @pulumi.output_type
 class VolumeHybridReplicationParameters(dict):

pulumi_gcp/netapp/storage_pool.py

@@ -1390,7 +1390,7 @@ class StoragePool(pulumi.CustomResource):
 
     @_builtins.property
     @pulumi.getter(name="qosType")
-    def qos_type(self) -> pulumi.Output[Optional[_builtins.str]]:
+    def qos_type(self) -> pulumi.Output[_builtins.str]:
         """
         QoS (Quality of Service) type of the storage pool.
         Possible values are: AUTO, MANUAL.

pulumi_gcp/networkconnectivity/spoke.py

@@ -676,15 +676,15 @@ class Spoke(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         network = gcp.compute.Network("network",
-            name="tf-test-network_59033",
+            name="tf-test-network_10393",
             auto_create_subnetworks=False)
         subnetwork = gcp.compute.Subnetwork("subnetwork",
-            name="tf-test-subnet_32081",
+            name="tf-test-subnet_33052",
             ip_cidr_range="10.0.0.0/28",
             region="us-central1",
             network=network.self_link)
         instance = gcp.compute.Instance("instance",
-            name="tf-test-instance_10393",
+            name="tf-test-instance_3684",
             machine_type="e2-medium",
             can_ip_forward=True,
             zone="us-central1-a",
@@ -701,13 +701,13 @@ class Spoke(pulumi.CustomResource):
                 }],
             }])
         basic_hub = gcp.networkconnectivity.Hub("basic_hub",
-            name="tf-test-hub_33052",
+            name="tf-test-hub_10719",
             description="A sample hub",
             labels={
                 "label-two": "value-one",
             })
         primary = gcp.networkconnectivity.Spoke("primary",
-            name="tf-test-name_3684",
+            name="tf-test-name_1443",
             location="us-central1",
             description="A sample spoke with a linked routher appliance instance",
             labels={
@@ -939,8 +939,8 @@ class Spoke(pulumi.CustomResource):
             hub=star_hub.id,
             auto_accept={
                 "auto_accept_projects": [
-                    "foo_10719",
-                    "bar_1443",
+                    "foo_26032",
+                    "bar_8647",
                 ],
             })
         primary = gcp.networkconnectivity.Spoke("primary",
@@ -1134,15 +1134,15 @@ class Spoke(pulumi.CustomResource):
         import pulumi_gcp as gcp
 
         network = gcp.compute.Network("network",
-            name="tf-test-network_59033",
+            name="tf-test-network_10393",
             auto_create_subnetworks=False)
         subnetwork = gcp.compute.Subnetwork("subnetwork",
-            name="tf-test-subnet_32081",
+            name="tf-test-subnet_33052",
             ip_cidr_range="10.0.0.0/28",
             region="us-central1",
             network=network.self_link)
         instance = gcp.compute.Instance("instance",
-            name="tf-test-instance_10393",
+            name="tf-test-instance_3684",
             machine_type="e2-medium",
             can_ip_forward=True,
             zone="us-central1-a",
@@ -1159,13 +1159,13 @@ class Spoke(pulumi.CustomResource):
                 }],
             }])
         basic_hub = gcp.networkconnectivity.Hub("basic_hub",
-            name="tf-test-hub_33052",
+            name="tf-test-hub_10719",
             description="A sample hub",
             labels={
                 "label-two": "value-one",
             })
         primary = gcp.networkconnectivity.Spoke("primary",
-            name="tf-test-name_3684",
+            name="tf-test-name_1443",
             location="us-central1",
             description="A sample spoke with a linked routher appliance instance",
             labels={
@@ -1397,8 +1397,8 @@ class Spoke(pulumi.CustomResource):
             hub=star_hub.id,
             auto_accept={
                 "auto_accept_projects": [
-                    "foo_10719",
-                    "bar_1443",
+                    "foo_26032",
+                    "bar_8647",
                 ],
             })
         primary = gcp.networkconnectivity.Spoke("primary",

pulumi_gcp/networksecurity/address_group_iam_binding.py

@@ -40,6 +40,7 @@ class AddressGroupIamBindingArgs:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] role: The role that should be applied. Only one
                `networksecurity.AddressGroupIamBinding` can be used per role. Note that custom roles must be of the format
                `[projects|organizations]/{parent-name}/roles/{role-name}`.
@@ -77,6 +78,7 @@ class AddressGroupIamBindingArgs:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -176,6 +178,7 @@ class _AddressGroupIamBindingState:
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -249,6 +252,7 @@ class _AddressGroupIamBindingState:
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")
 
@@ -379,6 +383,7 @@ class AddressGroupIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -526,6 +531,7 @@ class AddressGroupIamBinding(pulumi.CustomResource):
                * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
                * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
                * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+               * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         :param pulumi.Input[_builtins.str] name: Used to find the parent resource to bind the IAM policy to
         :param pulumi.Input[_builtins.str] project: The ID of the project in which the resource belongs.
                If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used.
@@ -585,6 +591,7 @@ class AddressGroupIamBinding(pulumi.CustomResource):
         * **projectOwner:projectid**: Owners of the given project. For example, "projectOwner:my-example-project"
         * **projectEditor:projectid**: Editors of the given project. For example, "projectEditor:my-example-project"
         * **projectViewer:projectid**: Viewers of the given project. For example, "projectViewer:my-example-project"
+        * **Federated identities**: One or more federated identities in a workload or workforce identity pool, workload running on GKE, etc. Refer to the [Principal identifiers documentation](https://cloud.google.com/iam/docs/principal-identifiers#allow) for examples of targets and valid configuration. For example, "principal://iam.googleapis.com/locations/global/workforcePools/example-contractors/subject/joe@example.com"
         """
         return pulumi.get(self, "members")