pulumi-gitlab 9.3.0a1759182301__py3-none-any.whl → 9.8.1__py3-none-any.whl

pulumi_gitlab/group_service_account.py

@@ -13,6 +13,8 @@ if sys.version_info >= (3, 11):
 else:
     from typing_extensions import NotRequired, TypedDict, TypeAlias
 from . import _utilities
+from . import outputs
+from ._inputs import *
 
 __all__ = ['GroupServiceAccountArgs', 'GroupServiceAccount']
 
@@ -22,6 +24,7 @@ class GroupServiceAccountArgs:
                  group: pulumi.Input[_builtins.str],
                  email: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 timeouts: Optional[pulumi.Input['GroupServiceAccountTimeoutsArgs']] = None,
                  username: Optional[pulumi.Input[_builtins.str]] = None):
         """
         The set of arguments for constructing a GroupServiceAccount resource.
@@ -35,6 +38,8 @@ class GroupServiceAccountArgs:
             pulumi.set(__self__, "email", email)
         if name is not None:
             pulumi.set(__self__, "name", name)
+        if timeouts is not None:
+            pulumi.set(__self__, "timeouts", timeouts)
         if username is not None:
             pulumi.set(__self__, "username", username)
 
@@ -74,6 +79,15 @@ class GroupServiceAccountArgs:
     def name(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "name", value)
 
+    @_builtins.property
+    @pulumi.getter
+    def timeouts(self) -> Optional[pulumi.Input['GroupServiceAccountTimeoutsArgs']]:
+        return pulumi.get(self, "timeouts")
+
+    @timeouts.setter
+    def timeouts(self, value: Optional[pulumi.Input['GroupServiceAccountTimeoutsArgs']]):
+        pulumi.set(self, "timeouts", value)
+
     @_builtins.property
     @pulumi.getter
     def username(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -94,6 +108,7 @@ class _GroupServiceAccountState:
                  group: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  service_account_id: Optional[pulumi.Input[_builtins.str]] = None,
+                 timeouts: Optional[pulumi.Input['GroupServiceAccountTimeoutsArgs']] = None,
                  username: Optional[pulumi.Input[_builtins.str]] = None):
         """
         Input properties used for looking up and filtering GroupServiceAccount resources.
@@ -111,6 +126,8 @@ class _GroupServiceAccountState:
             pulumi.set(__self__, "name", name)
         if service_account_id is not None:
             pulumi.set(__self__, "service_account_id", service_account_id)
+        if timeouts is not None:
+            pulumi.set(__self__, "timeouts", timeouts)
         if username is not None:
             pulumi.set(__self__, "username", username)
 
@@ -162,6 +179,15 @@ class _GroupServiceAccountState:
     def service_account_id(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "service_account_id", value)
 
+    @_builtins.property
+    @pulumi.getter
+    def timeouts(self) -> Optional[pulumi.Input['GroupServiceAccountTimeoutsArgs']]:
+        return pulumi.get(self, "timeouts")
+
+    @timeouts.setter
+    def timeouts(self, value: Optional[pulumi.Input['GroupServiceAccountTimeoutsArgs']]):
+        pulumi.set(self, "timeouts", value)
+
     @_builtins.property
     @pulumi.getter
     def username(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -184,12 +210,13 @@ class GroupServiceAccount(pulumi.CustomResource):
                  email: Optional[pulumi.Input[_builtins.str]] = None,
                  group: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 timeouts: Optional[pulumi.Input[Union['GroupServiceAccountTimeoutsArgs', 'GroupServiceAccountTimeoutsArgsDict']]] = None,
                  username: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         """
         The `GroupServiceAccount` resource allows creating a GitLab group service account.
 
-        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/group_service_accounts/)
+        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/service_accounts/#group-service-accounts)
 
         ## Example Usage
 
@@ -262,7 +289,7 @@ class GroupServiceAccount(pulumi.CustomResource):
         """
         The `GroupServiceAccount` resource allows creating a GitLab group service account.
 
-        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/group_service_accounts/)
+        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/service_accounts/#group-service-accounts)
 
         ## Example Usage
 
@@ -337,6 +364,7 @@ class GroupServiceAccount(pulumi.CustomResource):
                  email: Optional[pulumi.Input[_builtins.str]] = None,
                  group: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
+                 timeouts: Optional[pulumi.Input[Union['GroupServiceAccountTimeoutsArgs', 'GroupServiceAccountTimeoutsArgsDict']]] = None,
                  username: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -352,6 +380,7 @@ class GroupServiceAccount(pulumi.CustomResource):
                 raise TypeError("Missing required property 'group'")
             __props__.__dict__["group"] = group
             __props__.__dict__["name"] = name
+            __props__.__dict__["timeouts"] = timeouts
             __props__.__dict__["username"] = username
             __props__.__dict__["service_account_id"] = None
         super(GroupServiceAccount, __self__).__init__(
@@ -368,6 +397,7 @@ class GroupServiceAccount(pulumi.CustomResource):
             group: Optional[pulumi.Input[_builtins.str]] = None,
             name: Optional[pulumi.Input[_builtins.str]] = None,
             service_account_id: Optional[pulumi.Input[_builtins.str]] = None,
+            timeouts: Optional[pulumi.Input[Union['GroupServiceAccountTimeoutsArgs', 'GroupServiceAccountTimeoutsArgsDict']]] = None,
             username: Optional[pulumi.Input[_builtins.str]] = None) -> 'GroupServiceAccount':
         """
         Get an existing GroupServiceAccount resource's state with the given name, id, and optional extra
@@ -390,6 +420,7 @@ class GroupServiceAccount(pulumi.CustomResource):
         __props__.__dict__["group"] = group
         __props__.__dict__["name"] = name
         __props__.__dict__["service_account_id"] = service_account_id
+        __props__.__dict__["timeouts"] = timeouts
         __props__.__dict__["username"] = username
         return GroupServiceAccount(resource_name, opts=opts, __props__=__props__)
 
@@ -425,6 +456,11 @@ class GroupServiceAccount(pulumi.CustomResource):
         """
         return pulumi.get(self, "service_account_id")
 
+    @_builtins.property
+    @pulumi.getter
+    def timeouts(self) -> pulumi.Output[Optional['outputs.GroupServiceAccountTimeouts']]:
+        return pulumi.get(self, "timeouts")
+
     @_builtins.property
     @pulumi.getter
     def username(self) -> pulumi.Output[Optional[_builtins.str]]:

pulumi_gitlab/group_service_account_access_token.py

@@ -26,7 +26,8 @@ class GroupServiceAccountAccessTokenArgs:
                  user_id: pulumi.Input[_builtins.int],
                  expires_at: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
-                 rotation_configuration: Optional[pulumi.Input['GroupServiceAccountAccessTokenRotationConfigurationArgs']] = None):
+                 rotation_configuration: Optional[pulumi.Input['GroupServiceAccountAccessTokenRotationConfigurationArgs']] = None,
+                 validate_past_expiration_date: Optional[pulumi.Input[_builtins.bool]] = None):
         """
         The set of arguments for constructing a GroupServiceAccountAccessToken resource.
         :param pulumi.Input[_builtins.str] group: The ID or URL-encoded path of the group containing the service account. Must be a top level group.
@@ -35,6 +36,7 @@ class GroupServiceAccountAccessTokenArgs:
         :param pulumi.Input[_builtins.str] expires_at: The service account access token expiry date. When left blank, the token follows the standard rule of expiry for personal access tokens.
         :param pulumi.Input[_builtins.str] name: The name of the personal access token.
         :param pulumi.Input['GroupServiceAccountAccessTokenRotationConfigurationArgs'] rotation_configuration: The configuration for when to rotate a token automatically. Will not rotate a token until `pulumi up` is run.
+        :param pulumi.Input[_builtins.bool] validate_past_expiration_date: Wether to validate if the expiration date is in the future.
         """
         pulumi.set(__self__, "group", group)
         pulumi.set(__self__, "scopes", scopes)
@@ -45,6 +47,8 @@ class GroupServiceAccountAccessTokenArgs:
             pulumi.set(__self__, "name", name)
         if rotation_configuration is not None:
             pulumi.set(__self__, "rotation_configuration", rotation_configuration)
+        if validate_past_expiration_date is not None:
+            pulumi.set(__self__, "validate_past_expiration_date", validate_past_expiration_date)
 
     @_builtins.property
     @pulumi.getter
@@ -118,6 +122,18 @@ class GroupServiceAccountAccessTokenArgs:
     def rotation_configuration(self, value: Optional[pulumi.Input['GroupServiceAccountAccessTokenRotationConfigurationArgs']]):
         pulumi.set(self, "rotation_configuration", value)
 
+    @_builtins.property
+    @pulumi.getter(name="validatePastExpirationDate")
+    def validate_past_expiration_date(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Wether to validate if the expiration date is in the future.
+        """
+        return pulumi.get(self, "validate_past_expiration_date")
+
+    @validate_past_expiration_date.setter
+    def validate_past_expiration_date(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "validate_past_expiration_date", value)
+
 
 @pulumi.input_type
 class _GroupServiceAccountAccessTokenState:
@@ -131,7 +147,8 @@ class _GroupServiceAccountAccessTokenState:
                  rotation_configuration: Optional[pulumi.Input['GroupServiceAccountAccessTokenRotationConfigurationArgs']] = None,
                  scopes: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  token: Optional[pulumi.Input[_builtins.str]] = None,
-                 user_id: Optional[pulumi.Input[_builtins.int]] = None):
+                 user_id: Optional[pulumi.Input[_builtins.int]] = None,
+                 validate_past_expiration_date: Optional[pulumi.Input[_builtins.bool]] = None):
         """
         Input properties used for looking up and filtering GroupServiceAccountAccessToken resources.
         :param pulumi.Input[_builtins.bool] active: True if the token is active.
@@ -144,6 +161,7 @@ class _GroupServiceAccountAccessTokenState:
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scopes: The scopes of the group service account access token. Valid values are: `api`, `read_user`, `read_api`, `read_repository`, `write_repository`, `read_registry`, `write_registry`, `read_virtual_registry`, `write_virtual_registry`, `sudo`, `admin_mode`, `create_runner`, `manage_runner`, `ai_features`, `k8s_proxy`, `self_rotate`, `read_service_ping`. If `self_rotate` is included, you must also provide either `expires_at` or `rotation_configuration`.
         :param pulumi.Input[_builtins.str] token: The token of the group service account access token. **Note**: the token is not available for imported resources.
         :param pulumi.Input[_builtins.int] user_id: The ID of a service account user.
+        :param pulumi.Input[_builtins.bool] validate_past_expiration_date: Wether to validate if the expiration date is in the future.
         """
         if active is not None:
             pulumi.set(__self__, "active", active)
@@ -165,6 +183,8 @@ class _GroupServiceAccountAccessTokenState:
             pulumi.set(__self__, "token", token)
         if user_id is not None:
             pulumi.set(__self__, "user_id", user_id)
+        if validate_past_expiration_date is not None:
+            pulumi.set(__self__, "validate_past_expiration_date", validate_past_expiration_date)
 
     @_builtins.property
     @pulumi.getter
@@ -286,6 +306,18 @@ class _GroupServiceAccountAccessTokenState:
     def user_id(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "user_id", value)
 
+    @_builtins.property
+    @pulumi.getter(name="validatePastExpirationDate")
+    def validate_past_expiration_date(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Wether to validate if the expiration date is in the future.
+        """
+        return pulumi.get(self, "validate_past_expiration_date")
+
+    @validate_past_expiration_date.setter
+    def validate_past_expiration_date(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "validate_past_expiration_date", value)
+
 
 @pulumi.type_token("gitlab:index/groupServiceAccountAccessToken:GroupServiceAccountAccessToken")
 class GroupServiceAccountAccessToken(pulumi.CustomResource):
@@ -299,6 +331,7 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
                  rotation_configuration: Optional[pulumi.Input[Union['GroupServiceAccountAccessTokenRotationConfigurationArgs', 'GroupServiceAccountAccessTokenRotationConfigurationArgsDict']]] = None,
                  scopes: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  user_id: Optional[pulumi.Input[_builtins.int]] = None,
+                 validate_past_expiration_date: Optional[pulumi.Input[_builtins.bool]] = None,
                  __props__=None):
         """
         The `GroupServiceAccountAccessToken` resource allows to manage the lifecycle of a group service account access token.
@@ -311,7 +344,54 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
 
         > Due to a limitation in the API, the `rotation_configuration` is unable to set the new expiry date before GitLab 17.9. Instead, when the resource is created, it will default the expiry date to 7 days in the future. On each subsequent apply, the new expiry will be 7 days from the date of the apply.
 
-        **Upstream API**: [GitLab API docs](https://docs.gitlab.com/api/group_service_accounts/#create-a-personal-access-token-for-a-service-account-user)
+        **Upstream API**: [GitLab API docs](https://docs.gitlab.com/api/service_accounts/#create-a-personal-access-token-for-a-group-service-account)
+
+        ## Example Usage
+
+        ```python
+        import pulumi
+        import pulumi_gitlab as gitlab
+
+        # This must be a top-level group
+        example = gitlab.Group("example",
+            name="example",
+            path="example",
+            description="An example group")
+        # The service account against the top-level group
+        example_sa = gitlab.GroupServiceAccount("example_sa",
+            group=example.id,
+            name="example-name",
+            username="example-username")
+        # To assign the service account to a group
+        example_membership = gitlab.GroupMembership("example_membership",
+            group_id=example.id,
+            user_id=example_sa.service_account_id,
+            access_level="developer",
+            expires_at="2020-03-14")
+        # The service account access token with no expiry
+        example_sa_token_no_expiry = gitlab.GroupServiceAccountAccessToken("example_sa_token_no_expiry",
+            group=example.id,
+            user_id=example_sa.service_account_id,
+            name="Example service account access token",
+            scopes=["api"])
+        # The service account access token with expires at
+        example_sa_token_expires_at = gitlab.GroupServiceAccountAccessToken("example_sa_token_expires_at",
+            group=example.id,
+            user_id=example_sa.service_account_id,
+            name="Example service account access token",
+            expires_at="2020-03-14",
+            scopes=["api"])
+        # The service account access token with rotation configuration
+        example_sa_token_rotation_configuration = gitlab.GroupServiceAccountAccessToken("example_sa_token_rotation_configuration",
+            group=example.id,
+            user_id=example_sa.service_account_id,
+            name="Example service account access token",
+            rotation_configuration={
+                "rotate_before_days": 2,
+                "expiration_days": 7,
+            },
+            scopes=["api"])
+        ```
 
         ## Import
 
@@ -349,6 +429,7 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
         :param pulumi.Input[Union['GroupServiceAccountAccessTokenRotationConfigurationArgs', 'GroupServiceAccountAccessTokenRotationConfigurationArgsDict']] rotation_configuration: The configuration for when to rotate a token automatically. Will not rotate a token until `pulumi up` is run.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scopes: The scopes of the group service account access token. Valid values are: `api`, `read_user`, `read_api`, `read_repository`, `write_repository`, `read_registry`, `write_registry`, `read_virtual_registry`, `write_virtual_registry`, `sudo`, `admin_mode`, `create_runner`, `manage_runner`, `ai_features`, `k8s_proxy`, `self_rotate`, `read_service_ping`. If `self_rotate` is included, you must also provide either `expires_at` or `rotation_configuration`.
         :param pulumi.Input[_builtins.int] user_id: The ID of a service account user.
+        :param pulumi.Input[_builtins.bool] validate_past_expiration_date: Wether to validate if the expiration date is in the future.
         """
         ...
     @overload
@@ -367,7 +448,54 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
 
         > Due to a limitation in the API, the `rotation_configuration` is unable to set the new expiry date before GitLab 17.9. Instead, when the resource is created, it will default the expiry date to 7 days in the future. On each subsequent apply, the new expiry will be 7 days from the date of the apply.
 
-        **Upstream API**: [GitLab API docs](https://docs.gitlab.com/api/group_service_accounts/#create-a-personal-access-token-for-a-service-account-user)
+        **Upstream API**: [GitLab API docs](https://docs.gitlab.com/api/service_accounts/#create-a-personal-access-token-for-a-group-service-account)
+
+        ## Example Usage
+
+        ```python
+        import pulumi
+        import pulumi_gitlab as gitlab
+
+        # This must be a top-level group
+        example = gitlab.Group("example",
+            name="example",
+            path="example",
+            description="An example group")
+        # The service account against the top-level group
+        example_sa = gitlab.GroupServiceAccount("example_sa",
+            group=example.id,
+            name="example-name",
+            username="example-username")
+        # To assign the service account to a group
+        example_membership = gitlab.GroupMembership("example_membership",
+            group_id=example.id,
+            user_id=example_sa.service_account_id,
+            access_level="developer",
+            expires_at="2020-03-14")
+        # The service account access token with no expiry
+        example_sa_token_no_expiry = gitlab.GroupServiceAccountAccessToken("example_sa_token_no_expiry",
+            group=example.id,
+            user_id=example_sa.service_account_id,
+            name="Example service account access token",
+            scopes=["api"])
+        # The service account access token with expires at
+        example_sa_token_expires_at = gitlab.GroupServiceAccountAccessToken("example_sa_token_expires_at",
+            group=example.id,
+            user_id=example_sa.service_account_id,
+            name="Example service account access token",
+            expires_at="2020-03-14",
+            scopes=["api"])
+        # The service account access token with rotation configuration
+        example_sa_token_rotation_configuration = gitlab.GroupServiceAccountAccessToken("example_sa_token_rotation_configuration",
+            group=example.id,
+            user_id=example_sa.service_account_id,
+            name="Example service account access token",
+            rotation_configuration={
+                "rotate_before_days": 2,
+                "expiration_days": 7,
+            },
+            scopes=["api"])
+        ```
 
         ## Import
 
@@ -418,6 +546,7 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
                  rotation_configuration: Optional[pulumi.Input[Union['GroupServiceAccountAccessTokenRotationConfigurationArgs', 'GroupServiceAccountAccessTokenRotationConfigurationArgsDict']]] = None,
                  scopes: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  user_id: Optional[pulumi.Input[_builtins.int]] = None,
+                 validate_past_expiration_date: Optional[pulumi.Input[_builtins.bool]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -439,6 +568,7 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
             if user_id is None and not opts.urn:
                 raise TypeError("Missing required property 'user_id'")
             __props__.__dict__["user_id"] = user_id
+            __props__.__dict__["validate_past_expiration_date"] = validate_past_expiration_date
             __props__.__dict__["active"] = None
             __props__.__dict__["created_at"] = None
             __props__.__dict__["revoked"] = None
@@ -464,7 +594,8 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
             rotation_configuration: Optional[pulumi.Input[Union['GroupServiceAccountAccessTokenRotationConfigurationArgs', 'GroupServiceAccountAccessTokenRotationConfigurationArgsDict']]] = None,
             scopes: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
             token: Optional[pulumi.Input[_builtins.str]] = None,
-            user_id: Optional[pulumi.Input[_builtins.int]] = None) -> 'GroupServiceAccountAccessToken':
+            user_id: Optional[pulumi.Input[_builtins.int]] = None,
+            validate_past_expiration_date: Optional[pulumi.Input[_builtins.bool]] = None) -> 'GroupServiceAccountAccessToken':
         """
         Get an existing GroupServiceAccountAccessToken resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -482,6 +613,7 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] scopes: The scopes of the group service account access token. Valid values are: `api`, `read_user`, `read_api`, `read_repository`, `write_repository`, `read_registry`, `write_registry`, `read_virtual_registry`, `write_virtual_registry`, `sudo`, `admin_mode`, `create_runner`, `manage_runner`, `ai_features`, `k8s_proxy`, `self_rotate`, `read_service_ping`. If `self_rotate` is included, you must also provide either `expires_at` or `rotation_configuration`.
         :param pulumi.Input[_builtins.str] token: The token of the group service account access token. **Note**: the token is not available for imported resources.
         :param pulumi.Input[_builtins.int] user_id: The ID of a service account user.
+        :param pulumi.Input[_builtins.bool] validate_past_expiration_date: Wether to validate if the expiration date is in the future.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -497,6 +629,7 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
         __props__.__dict__["scopes"] = scopes
         __props__.__dict__["token"] = token
         __props__.__dict__["user_id"] = user_id
+        __props__.__dict__["validate_past_expiration_date"] = validate_past_expiration_date
         return GroupServiceAccountAccessToken(resource_name, opts=opts, __props__=__props__)
 
     @_builtins.property
@@ -579,3 +712,11 @@ class GroupServiceAccountAccessToken(pulumi.CustomResource):
         """
         return pulumi.get(self, "user_id")
 
+    @_builtins.property
+    @pulumi.getter(name="validatePastExpirationDate")
+    def validate_past_expiration_date(self) -> pulumi.Output[_builtins.bool]:
+        """
+        Wether to validate if the expiration date is in the future.
+        """
+        return pulumi.get(self, "validate_past_expiration_date")
+

pulumi_gitlab/group_share_group.py

@@ -30,7 +30,7 @@ class GroupShareGroupArgs:
         :param pulumi.Input[_builtins.str] group_id: The id of the main group to be shared.
         :param pulumi.Input[_builtins.int] share_group_id: The id of the additional group with which the main group will be shared.
         :param pulumi.Input[_builtins.str] expires_at: Share expiration date. Format: `YYYY-MM-DD`
-        :param pulumi.Input[_builtins.int] member_role_id: The ID of a custom member role. Only available for Ultimate instances. If `member_role_id` is removed from the config, the group share will revert to a base role.
+        :param pulumi.Input[_builtins.int] member_role_id: The ID of a custom member role. Only available for Ultimate instances and requires a feature flag enabling, see [this feature issue](https://gitlab.com/gitlab-org/gitlab/-/issues/443369) for details. If `member_role_id` is removed from the config, the group share will revert to a base role.
         """
         pulumi.set(__self__, "group_access", group_access)
         pulumi.set(__self__, "group_id", group_id)
@@ -92,7 +92,7 @@ class GroupShareGroupArgs:
     @pulumi.getter(name="memberRoleId")
     def member_role_id(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
-        The ID of a custom member role. Only available for Ultimate instances. If `member_role_id` is removed from the config, the group share will revert to a base role.
+        The ID of a custom member role. Only available for Ultimate instances and requires a feature flag enabling, see [this feature issue](https://gitlab.com/gitlab-org/gitlab/-/issues/443369) for details. If `member_role_id` is removed from the config, the group share will revert to a base role.
         """
         return pulumi.get(self, "member_role_id")
 
@@ -114,7 +114,7 @@ class _GroupShareGroupState:
         :param pulumi.Input[_builtins.str] expires_at: Share expiration date. Format: `YYYY-MM-DD`
         :param pulumi.Input[_builtins.str] group_access: The access level to grant the group. Valid values are: `no one`, `minimal`, `guest`, `planner`, `reporter`, `developer`, `maintainer`, `owner`
         :param pulumi.Input[_builtins.str] group_id: The id of the main group to be shared.
-        :param pulumi.Input[_builtins.int] member_role_id: The ID of a custom member role. Only available for Ultimate instances. If `member_role_id` is removed from the config, the group share will revert to a base role.
+        :param pulumi.Input[_builtins.int] member_role_id: The ID of a custom member role. Only available for Ultimate instances and requires a feature flag enabling, see [this feature issue](https://gitlab.com/gitlab-org/gitlab/-/issues/443369) for details. If `member_role_id` is removed from the config, the group share will revert to a base role.
         :param pulumi.Input[_builtins.int] share_group_id: The id of the additional group with which the main group will be shared.
         """
         if expires_at is not None:
@@ -168,7 +168,7 @@ class _GroupShareGroupState:
     @pulumi.getter(name="memberRoleId")
     def member_role_id(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
-        The ID of a custom member role. Only available for Ultimate instances. If `member_role_id` is removed from the config, the group share will revert to a base role.
+        The ID of a custom member role. Only available for Ultimate instances and requires a feature flag enabling, see [this feature issue](https://gitlab.com/gitlab-org/gitlab/-/issues/443369) for details. If `member_role_id` is removed from the config, the group share will revert to a base role.
         """
         return pulumi.get(self, "member_role_id")
 
@@ -204,7 +204,9 @@ class GroupShareGroup(pulumi.CustomResource):
         """
         The `GroupShareGroup` resource allows managing the lifecycle of a group shared with another group.
 
-        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/groups/#share-groups-with-groups)
+        > Note that `member_role_id` requires a feature flag enabled, see [this feature issue](https://gitlab.com/gitlab-org/gitlab/-/issues/443369) for details.
+
+        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/groups/#invite-groups)
 
         ## Example Usage
 
@@ -246,7 +248,7 @@ class GroupShareGroup(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] expires_at: Share expiration date. Format: `YYYY-MM-DD`
         :param pulumi.Input[_builtins.str] group_access: The access level to grant the group. Valid values are: `no one`, `minimal`, `guest`, `planner`, `reporter`, `developer`, `maintainer`, `owner`
         :param pulumi.Input[_builtins.str] group_id: The id of the main group to be shared.
-        :param pulumi.Input[_builtins.int] member_role_id: The ID of a custom member role. Only available for Ultimate instances. If `member_role_id` is removed from the config, the group share will revert to a base role.
+        :param pulumi.Input[_builtins.int] member_role_id: The ID of a custom member role. Only available for Ultimate instances and requires a feature flag enabling, see [this feature issue](https://gitlab.com/gitlab-org/gitlab/-/issues/443369) for details. If `member_role_id` is removed from the config, the group share will revert to a base role.
         :param pulumi.Input[_builtins.int] share_group_id: The id of the additional group with which the main group will be shared.
         """
         ...
@@ -258,7 +260,9 @@ class GroupShareGroup(pulumi.CustomResource):
         """
         The `GroupShareGroup` resource allows managing the lifecycle of a group shared with another group.
 
-        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/groups/#share-groups-with-groups)
+        > Note that `member_role_id` requires a feature flag enabled, see [this feature issue](https://gitlab.com/gitlab-org/gitlab/-/issues/443369) for details.
+
+        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/groups/#invite-groups)
 
         ## Example Usage
 
@@ -360,7 +364,7 @@ class GroupShareGroup(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] expires_at: Share expiration date. Format: `YYYY-MM-DD`
         :param pulumi.Input[_builtins.str] group_access: The access level to grant the group. Valid values are: `no one`, `minimal`, `guest`, `planner`, `reporter`, `developer`, `maintainer`, `owner`
         :param pulumi.Input[_builtins.str] group_id: The id of the main group to be shared.
-        :param pulumi.Input[_builtins.int] member_role_id: The ID of a custom member role. Only available for Ultimate instances. If `member_role_id` is removed from the config, the group share will revert to a base role.
+        :param pulumi.Input[_builtins.int] member_role_id: The ID of a custom member role. Only available for Ultimate instances and requires a feature flag enabling, see [this feature issue](https://gitlab.com/gitlab-org/gitlab/-/issues/443369) for details. If `member_role_id` is removed from the config, the group share will revert to a base role.
         :param pulumi.Input[_builtins.int] share_group_id: The id of the additional group with which the main group will be shared.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -402,7 +406,7 @@ class GroupShareGroup(pulumi.CustomResource):
     @pulumi.getter(name="memberRoleId")
     def member_role_id(self) -> pulumi.Output[Optional[_builtins.int]]:
         """
-        The ID of a custom member role. Only available for Ultimate instances. If `member_role_id` is removed from the config, the group share will revert to a base role.
+        The ID of a custom member role. Only available for Ultimate instances and requires a feature flag enabling, see [this feature issue](https://gitlab.com/gitlab-org/gitlab/-/issues/443369) for details. If `member_role_id` is removed from the config, the group share will revert to a base role.
         """
         return pulumi.get(self, "member_role_id")
 

pulumi_gitlab/instance_service_account.py

@@ -186,7 +186,7 @@ class InstanceServiceAccount(pulumi.CustomResource):
 
         > In order for a user to create a user account, they must have admin privileges at the instance level. This makes this feature unavailable on `gitlab.com`
 
-        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/user_service_accounts/)
+        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/service_accounts/#instance-service-accounts)
 
         ## Example Usage
 
@@ -252,7 +252,7 @@ class InstanceServiceAccount(pulumi.CustomResource):
 
         > In order for a user to create a user account, they must have admin privileges at the instance level. This makes this feature unavailable on `gitlab.com`
 
-        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/user_service_accounts/)
+        **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/service_accounts/#instance-service-accounts)
 
         ## Example Usage
 
@@ -403,7 +403,7 @@ class InstanceServiceAccount(pulumi.CustomResource):
 
     @_builtins.property
     @pulumi.getter
-    def username(self) -> pulumi.Output[Optional[_builtins.str]]:
+    def username(self) -> pulumi.Output[_builtins.str]:
         """
         The username of the user account. If not set, generates a name prepended with service*account*.
         """

pulumi_gitlab/instance_variable.py

@@ -31,7 +31,7 @@ class InstanceVariableArgs:
         :param pulumi.Input[_builtins.str] key: The name of the variable.
         :param pulumi.Input[_builtins.str] value: The value of the variable.
         :param pulumi.Input[_builtins.str] description: The description of the variable. Maximum of 255 characters.
-        :param pulumi.Input[_builtins.bool] masked: If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#masked-variables). Defaults to `false`.
+        :param pulumi.Input[_builtins.bool] masked: If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#mask-a-cicd-variable). Defaults to `false`.
         :param pulumi.Input[_builtins.bool] protected: If set to `true`, the variable will be passed only to pipelines running on protected branches and tags. Defaults to `false`.
         :param pulumi.Input[_builtins.bool] raw: Whether the variable is treated as a raw string. Default: false. When true, variables in the value are not expanded.
         :param pulumi.Input[_builtins.str] variable_type: The type of a variable. Valid values are: `env_var`, `file`. Default is `env_var`.
@@ -89,7 +89,7 @@ class InstanceVariableArgs:
     @pulumi.getter
     def masked(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
-        If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#masked-variables). Defaults to `false`.
+        If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#mask-a-cicd-variable). Defaults to `false`.
         """
         return pulumi.get(self, "masked")
 
@@ -148,7 +148,7 @@ class _InstanceVariableState:
         Input properties used for looking up and filtering InstanceVariable resources.
         :param pulumi.Input[_builtins.str] description: The description of the variable. Maximum of 255 characters.
         :param pulumi.Input[_builtins.str] key: The name of the variable.
-        :param pulumi.Input[_builtins.bool] masked: If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#masked-variables). Defaults to `false`.
+        :param pulumi.Input[_builtins.bool] masked: If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#mask-a-cicd-variable). Defaults to `false`.
         :param pulumi.Input[_builtins.bool] protected: If set to `true`, the variable will be passed only to pipelines running on protected branches and tags. Defaults to `false`.
         :param pulumi.Input[_builtins.bool] raw: Whether the variable is treated as a raw string. Default: false. When true, variables in the value are not expanded.
         :param pulumi.Input[_builtins.str] value: The value of the variable.
@@ -197,7 +197,7 @@ class _InstanceVariableState:
     @pulumi.getter
     def masked(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
-        If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#masked-variables). Defaults to `false`.
+        If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#mask-a-cicd-variable). Defaults to `false`.
         """
         return pulumi.get(self, "masked")
 
@@ -312,7 +312,7 @@ class InstanceVariable(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[_builtins.str] description: The description of the variable. Maximum of 255 characters.
         :param pulumi.Input[_builtins.str] key: The name of the variable.
-        :param pulumi.Input[_builtins.bool] masked: If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#masked-variables). Defaults to `false`.
+        :param pulumi.Input[_builtins.bool] masked: If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#mask-a-cicd-variable). Defaults to `false`.
         :param pulumi.Input[_builtins.bool] protected: If set to `true`, the variable will be passed only to pipelines running on protected branches and tags. Defaults to `false`.
         :param pulumi.Input[_builtins.bool] raw: Whether the variable is treated as a raw string. Default: false. When true, variables in the value are not expanded.
         :param pulumi.Input[_builtins.str] value: The value of the variable.
@@ -432,7 +432,7 @@ class InstanceVariable(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[_builtins.str] description: The description of the variable. Maximum of 255 characters.
         :param pulumi.Input[_builtins.str] key: The name of the variable.
-        :param pulumi.Input[_builtins.bool] masked: If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#masked-variables). Defaults to `false`.
+        :param pulumi.Input[_builtins.bool] masked: If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#mask-a-cicd-variable). Defaults to `false`.
         :param pulumi.Input[_builtins.bool] protected: If set to `true`, the variable will be passed only to pipelines running on protected branches and tags. Defaults to `false`.
         :param pulumi.Input[_builtins.bool] raw: Whether the variable is treated as a raw string. Default: false. When true, variables in the value are not expanded.
         :param pulumi.Input[_builtins.str] value: The value of the variable.
@@ -453,7 +453,7 @@ class InstanceVariable(pulumi.CustomResource):
 
     @_builtins.property
     @pulumi.getter
-    def description(self) -> pulumi.Output[Optional[_builtins.str]]:
+    def description(self) -> pulumi.Output[_builtins.str]:
         """
         The description of the variable. Maximum of 255 characters.
         """
@@ -469,15 +469,15 @@ class InstanceVariable(pulumi.CustomResource):
 
     @_builtins.property
     @pulumi.getter
-    def masked(self) -> pulumi.Output[Optional[_builtins.bool]]:
+    def masked(self) -> pulumi.Output[_builtins.bool]:
         """
-        If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#masked-variables). Defaults to `false`.
+        If set to `true`, the value of the variable will be hidden in job logs. The value must meet the [masking requirements](https://docs.gitlab.com/ci/variables/#mask-a-cicd-variable). Defaults to `false`.
         """
         return pulumi.get(self, "masked")
 
     @_builtins.property
     @pulumi.getter
-    def protected(self) -> pulumi.Output[Optional[_builtins.bool]]:
+    def protected(self) -> pulumi.Output[_builtins.bool]:
         """
         If set to `true`, the variable will be passed only to pipelines running on protected branches and tags. Defaults to `false`.
         """
@@ -485,7 +485,7 @@ class InstanceVariable(pulumi.CustomResource):
 
     @_builtins.property
     @pulumi.getter
-    def raw(self) -> pulumi.Output[Optional[_builtins.bool]]:
+    def raw(self) -> pulumi.Output[_builtins.bool]:
         """
         Whether the variable is treated as a raw string. Default: false. When true, variables in the value are not expanded.
         """
@@ -501,7 +501,7 @@ class InstanceVariable(pulumi.CustomResource):
 
     @_builtins.property
     @pulumi.getter(name="variableType")
-    def variable_type(self) -> pulumi.Output[Optional[_builtins.str]]:
+    def variable_type(self) -> pulumi.Output[_builtins.str]:
         """
         The type of a variable. Valid values are: `env_var`, `file`. Default is `env_var`.
         """

pulumi_gitlab/integration_custom_issue_tracker.py

@@ -202,6 +202,8 @@ class IntegrationCustomIssueTracker(pulumi.CustomResource):
         """
         The `IntegrationCustomIssueTracker` resource manages the lifecycle of a project integration with a Custom Issue Tracker.
 
+        > This resource is deprecated and will be removed in 19.0. Use `ProjectIntegrationCustomIssueTracker`instead.
+
         **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/project_integrations/#custom-issue-tracker)
 
         ## Example Usage
@@ -257,6 +259,8 @@ class IntegrationCustomIssueTracker(pulumi.CustomResource):
         """
         The `IntegrationCustomIssueTracker` resource manages the lifecycle of a project integration with a Custom Issue Tracker.
 
+        > This resource is deprecated and will be removed in 19.0. Use `ProjectIntegrationCustomIssueTracker`instead.
+
         **Upstream API**: [GitLab REST API docs](https://docs.gitlab.com/api/project_integrations/#custom-issue-tracker)
 
         ## Example Usage