Docs Packages
  1. Packages
  2. Google Cloud Native
  3. API Docs
  4. gkehub
  5. gkehub/v1alpha
  6. Feature

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

google-native.gkehub/v1alpha.Feature

Explore with Pulumi AI

google-native logo

Google Cloud Native is in preview. Google Cloud Classic is fully supported.

Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
pulumi/pulumi-google-native

    Adds a new Feature. Auto-naming is currently not supported for this resource.

    Create Feature Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Feature(name: string, args?: FeatureArgs, opts?: CustomResourceOptions);
    @overload
def Feature(resource_name: str,
            args: Optional[FeatureArgs] = None,
            opts: Optional[ResourceOptions] = None)

@overload
def Feature(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            feature_id: Optional[str] = None,
            fleet_default_member_config: Optional[CommonFleetDefaultMemberConfigSpecArgs] = None,
            labels: Optional[Mapping[str, str]] = None,
            location: Optional[str] = None,
            membership_specs: Optional[Mapping[str, str]] = None,
            project: Optional[str] = None,
            request_id: Optional[str] = None,
            scope_specs: Optional[Mapping[str, str]] = None,
            spec: Optional[CommonFeatureSpecArgs] = None)
    func NewFeature(ctx *Context, name string, args *FeatureArgs, opts ...ResourceOption) (*Feature, error)
    public Feature(string name, FeatureArgs? args = null, CustomResourceOptions? opts = null)
    public Feature(String name, FeatureArgs args)
public Feature(String name, FeatureArgs args, CustomResourceOptions options)

    type: google-native:gkehub/v1alpha:Feature
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args FeatureArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args FeatureArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args FeatureArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args FeatureArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args FeatureArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var google_nativeFeatureResource = new GoogleNative.GKEHub.V1Alpha.Feature("google-nativeFeatureResource", new()
{
    FeatureId = "string",
    FleetDefaultMemberConfig = new GoogleNative.GKEHub.V1Alpha.Inputs.CommonFleetDefaultMemberConfigSpecArgs
    {
        Configmanagement = new GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementMembershipSpecArgs
        {
            Cluster = "string",
            ConfigSync = new GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementConfigSyncArgs
            {
                Enabled = false,
                Git = new GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementGitConfigArgs
                {
                    GcpServiceAccountEmail = "string",
                    HttpsProxy = "string",
                    PolicyDir = "string",
                    SecretType = "string",
                    SyncBranch = "string",
                    SyncRepo = "string",
                    SyncRev = "string",
                    SyncWaitSecs = "string",
                },
                MetricsGcpServiceAccountEmail = "string",
                Oci = new GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementOciConfigArgs
                {
                    GcpServiceAccountEmail = "string",
                    PolicyDir = "string",
                    SecretType = "string",
                    SyncRepo = "string",
                    SyncWaitSecs = "string",
                },
                PreventDrift = false,
                SourceFormat = "string",
            },
            HierarchyController = new GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementHierarchyControllerConfigArgs
            {
                EnableHierarchicalResourceQuota = false,
                EnablePodTreeLabels = false,
                Enabled = false,
            },
            PolicyController = new GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementPolicyControllerArgs
            {
                AuditIntervalSeconds = "string",
                Enabled = false,
                ExemptableNamespaces = new[]
                {
                    "string",
                },
                LogDeniesEnabled = false,
                Monitoring = new GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementPolicyControllerMonitoringArgs
                {
                    Backends = new[]
                    {
                        GoogleNative.GKEHub.V1Alpha.ConfigManagementPolicyControllerMonitoringBackendsItem.MonitoringBackendUnspecified,
                    },
                },
                MutationEnabled = false,
                ReferentialRulesEnabled = false,
                TemplateLibraryInstalled = false,
            },
            Version = "string",
        },
        Identityservice = new GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceMembershipSpecArgs
        {
            AuthMethods = new[]
            {
                new GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceAuthMethodArgs
                {
                    AzureadConfig = new GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceAzureADConfigArgs
                    {
                        ClientId = "string",
                        ClientSecret = "string",
                        KubectlRedirectUri = "string",
                        Tenant = "string",
                    },
                    GoogleConfig = new GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceGoogleConfigArgs
                    {
                        Disable = false,
                    },
                    Name = "string",
                    OidcConfig = new GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceOidcConfigArgs
                    {
                        CertificateAuthorityData = "string",
                        ClientId = "string",
                        ClientSecret = "string",
                        DeployCloudConsoleProxy = false,
                        EnableAccessToken = false,
                        ExtraParams = "string",
                        GroupPrefix = "string",
                        GroupsClaim = "string",
                        IssuerUri = "string",
                        KubectlRedirectUri = "string",
                        Scopes = "string",
                        UserClaim = "string",
                        UserPrefix = "string",
                    },
                    Proxy = "string",
                },
            },
        },
        Mesh = new GoogleNative.GKEHub.V1Alpha.Inputs.ServiceMeshMembershipSpecArgs
        {
            DefaultChannel = GoogleNative.GKEHub.V1Alpha.ServiceMeshMembershipSpecDefaultChannel.ChannelUnspecified,
            Management = GoogleNative.GKEHub.V1Alpha.ServiceMeshMembershipSpecManagement.ManagementUnspecified,
        },
        Policycontroller = new GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerMembershipSpecArgs
        {
            PolicyControllerHubConfig = new GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerHubConfigArgs
            {
                AuditIntervalSeconds = "string",
                ConstraintViolationLimit = "string",
                DeploymentConfigs = 
                {
                    { "string", "string" },
                },
                ExemptableNamespaces = new[]
                {
                    "string",
                },
                InstallSpec = GoogleNative.GKEHub.V1Alpha.PolicyControllerHubConfigInstallSpec.InstallSpecUnspecified,
                LogDeniesEnabled = false,
                Monitoring = new GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerMonitoringConfigArgs
                {
                    Backends = new[]
                    {
                        GoogleNative.GKEHub.V1Alpha.PolicyControllerMonitoringConfigBackendsItem.MonitoringBackendUnspecified,
                    },
                },
                MutationEnabled = false,
                PolicyContent = new GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerPolicyContentSpecArgs
                {
                    Bundles = 
                    {
                        { "string", "string" },
                    },
                    TemplateLibrary = new GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerTemplateLibraryConfigArgs
                    {
                        Installation = GoogleNative.GKEHub.V1Alpha.PolicyControllerTemplateLibraryConfigInstallation.InstallationUnspecified,
                    },
                },
                ReferentialRulesEnabled = false,
            },
            Version = "string",
        },
    },
    Labels = 
    {
        { "string", "string" },
    },
    Location = "string",
    MembershipSpecs = 
    {
        { "string", "string" },
    },
    Project = "string",
    RequestId = "string",
    ScopeSpecs = 
    {
        { "string", "string" },
    },
    Spec = new GoogleNative.GKEHub.V1Alpha.Inputs.CommonFeatureSpecArgs
    {
        Anthosobservability = new GoogleNative.GKEHub.V1Alpha.Inputs.AnthosObservabilityFeatureSpecArgs
        {
            DefaultMembershipSpec = new GoogleNative.GKEHub.V1Alpha.Inputs.AnthosObservabilityMembershipSpecArgs
            {
                DoNotOptimizeMetrics = false,
                EnableStackdriverOnApplications = false,
                Version = "string",
            },
        },
        Appdevexperience = null,
        Cloudauditlogging = new GoogleNative.GKEHub.V1Alpha.Inputs.CloudAuditLoggingFeatureSpecArgs
        {
            AllowlistedServiceAccounts = new[]
            {
                "string",
            },
        },
        Clusterupgrade = new GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeFleetSpecArgs
        {
            PostConditions = new GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradePostConditionsArgs
            {
                Soaking = "string",
            },
            GkeUpgradeOverrides = new[]
            {
                new GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeGKEUpgradeOverrideArgs
                {
                    PostConditions = new GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradePostConditionsArgs
                    {
                        Soaking = "string",
                    },
                    Upgrade = new GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeGKEUpgradeArgs
                    {
                        Name = "string",
                        Version = "string",
                    },
                },
            },
            UpstreamFleets = new[]
            {
                "string",
            },
        },
        Fleetobservability = new GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityFeatureSpecArgs
        {
            LoggingConfig = new GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityLoggingConfigArgs
            {
                DefaultConfig = new GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityRoutingConfigArgs
                {
                    Mode = GoogleNative.GKEHub.V1Alpha.FleetObservabilityRoutingConfigMode.ModeUnspecified,
                },
                FleetScopeLogsConfig = new GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityRoutingConfigArgs
                {
                    Mode = GoogleNative.GKEHub.V1Alpha.FleetObservabilityRoutingConfigMode.ModeUnspecified,
                },
            },
        },
        Multiclusteringress = new GoogleNative.GKEHub.V1Alpha.Inputs.MultiClusterIngressFeatureSpecArgs
        {
            ConfigMembership = "string",
        },
        Namespaceactuation = new GoogleNative.GKEHub.V1Alpha.Inputs.NamespaceActuationFeatureSpecArgs
        {
            ActuationMode = GoogleNative.GKEHub.V1Alpha.NamespaceActuationFeatureSpecActuationMode.ActuationModeUnspecified,
        },
        Workloadcertificate = new GoogleNative.GKEHub.V1Alpha.Inputs.FeatureSpecArgs
        {
            DefaultConfig = new GoogleNative.GKEHub.V1Alpha.Inputs.MembershipSpecArgs
            {
                CertificateManagement = GoogleNative.GKEHub.V1Alpha.MembershipSpecCertificateManagement.CertificateManagementUnspecified,
            },
            ProvisionGoogleCa = GoogleNative.GKEHub.V1Alpha.FeatureSpecProvisionGoogleCa.GoogleCaProvisioningUnspecified,
        },
    },
});

    example, err := gkehubv1alpha.NewFeature(ctx, "google-nativeFeatureResource", &gkehubv1alpha.FeatureArgs{
FeatureId: pulumi.String("string"),
FleetDefaultMemberConfig: &gkehub.CommonFleetDefaultMemberConfigSpecArgs{
Configmanagement: &gkehub.ConfigManagementMembershipSpecArgs{
Cluster: pulumi.String("string"),
ConfigSync: &gkehub.ConfigManagementConfigSyncArgs{
Enabled: pulumi.Bool(false),
Git: &gkehub.ConfigManagementGitConfigArgs{
GcpServiceAccountEmail: pulumi.String("string"),
HttpsProxy: pulumi.String("string"),
PolicyDir: pulumi.String("string"),
SecretType: pulumi.String("string"),
SyncBranch: pulumi.String("string"),
SyncRepo: pulumi.String("string"),
SyncRev: pulumi.String("string"),
SyncWaitSecs: pulumi.String("string"),
},
MetricsGcpServiceAccountEmail: pulumi.String("string"),
Oci: &gkehub.ConfigManagementOciConfigArgs{
GcpServiceAccountEmail: pulumi.String("string"),
PolicyDir: pulumi.String("string"),
SecretType: pulumi.String("string"),
SyncRepo: pulumi.String("string"),
SyncWaitSecs: pulumi.String("string"),
},
PreventDrift: pulumi.Bool(false),
SourceFormat: pulumi.String("string"),
},
HierarchyController: &gkehub.ConfigManagementHierarchyControllerConfigArgs{
EnableHierarchicalResourceQuota: pulumi.Bool(false),
EnablePodTreeLabels: pulumi.Bool(false),
Enabled: pulumi.Bool(false),
},
PolicyController: &gkehub.ConfigManagementPolicyControllerArgs{
AuditIntervalSeconds: pulumi.String("string"),
Enabled: pulumi.Bool(false),
ExemptableNamespaces: pulumi.StringArray{
pulumi.String("string"),
},
LogDeniesEnabled: pulumi.Bool(false),
Monitoring: &gkehub.ConfigManagementPolicyControllerMonitoringArgs{
Backends: gkehub.ConfigManagementPolicyControllerMonitoringBackendsItemArray{
gkehubv1alpha.ConfigManagementPolicyControllerMonitoringBackendsItemMonitoringBackendUnspecified,
},
},
MutationEnabled: pulumi.Bool(false),
ReferentialRulesEnabled: pulumi.Bool(false),
TemplateLibraryInstalled: pulumi.Bool(false),
},
Version: pulumi.String("string"),
},
Identityservice: &gkehub.IdentityServiceMembershipSpecArgs{
AuthMethods: gkehub.IdentityServiceAuthMethodArray{
&gkehub.IdentityServiceAuthMethodArgs{
AzureadConfig: &gkehub.IdentityServiceAzureADConfigArgs{
ClientId: pulumi.String("string"),
ClientSecret: pulumi.String("string"),
KubectlRedirectUri: pulumi.String("string"),
Tenant: pulumi.String("string"),
},
GoogleConfig: &gkehub.IdentityServiceGoogleConfigArgs{
Disable: pulumi.Bool(false),
},
Name: pulumi.String("string"),
OidcConfig: &gkehub.IdentityServiceOidcConfigArgs{
CertificateAuthorityData: pulumi.String("string"),
ClientId: pulumi.String("string"),
ClientSecret: pulumi.String("string"),
DeployCloudConsoleProxy: pulumi.Bool(false),
EnableAccessToken: pulumi.Bool(false),
ExtraParams: pulumi.String("string"),
GroupPrefix: pulumi.String("string"),
GroupsClaim: pulumi.String("string"),
IssuerUri: pulumi.String("string"),
KubectlRedirectUri: pulumi.String("string"),
Scopes: pulumi.String("string"),
UserClaim: pulumi.String("string"),
UserPrefix: pulumi.String("string"),
},
Proxy: pulumi.String("string"),
},
},
},
Mesh: &gkehub.ServiceMeshMembershipSpecArgs{
DefaultChannel: gkehubv1alpha.ServiceMeshMembershipSpecDefaultChannelChannelUnspecified,
Management: gkehubv1alpha.ServiceMeshMembershipSpecManagementManagementUnspecified,
},
Policycontroller: &gkehub.PolicyControllerMembershipSpecArgs{
PolicyControllerHubConfig: &gkehub.PolicyControllerHubConfigArgs{
AuditIntervalSeconds: pulumi.String("string"),
ConstraintViolationLimit: pulumi.String("string"),
DeploymentConfigs: pulumi.StringMap{
"string": pulumi.String("string"),
},
ExemptableNamespaces: pulumi.StringArray{
pulumi.String("string"),
},
InstallSpec: gkehubv1alpha.PolicyControllerHubConfigInstallSpecInstallSpecUnspecified,
LogDeniesEnabled: pulumi.Bool(false),
Monitoring: &gkehub.PolicyControllerMonitoringConfigArgs{
Backends: gkehub.PolicyControllerMonitoringConfigBackendsItemArray{
gkehubv1alpha.PolicyControllerMonitoringConfigBackendsItemMonitoringBackendUnspecified,
},
},
MutationEnabled: pulumi.Bool(false),
PolicyContent: &gkehub.PolicyControllerPolicyContentSpecArgs{
Bundles: pulumi.StringMap{
"string": pulumi.String("string"),
},
TemplateLibrary: &gkehub.PolicyControllerTemplateLibraryConfigArgs{
Installation: gkehubv1alpha.PolicyControllerTemplateLibraryConfigInstallationInstallationUnspecified,
},
},
ReferentialRulesEnabled: pulumi.Bool(false),
},
Version: pulumi.String("string"),
},
},
Labels: pulumi.StringMap{
"string": pulumi.String("string"),
},
Location: pulumi.String("string"),
MembershipSpecs: pulumi.StringMap{
"string": pulumi.String("string"),
},
Project: pulumi.String("string"),
RequestId: pulumi.String("string"),
ScopeSpecs: pulumi.StringMap{
"string": pulumi.String("string"),
},
Spec: &gkehub.CommonFeatureSpecArgs{
Anthosobservability: &gkehub.AnthosObservabilityFeatureSpecArgs{
DefaultMembershipSpec: &gkehub.AnthosObservabilityMembershipSpecArgs{
DoNotOptimizeMetrics: pulumi.Bool(false),
EnableStackdriverOnApplications: pulumi.Bool(false),
Version: pulumi.String("string"),
},
},
Appdevexperience: nil,
Cloudauditlogging: &gkehub.CloudAuditLoggingFeatureSpecArgs{
AllowlistedServiceAccounts: pulumi.StringArray{
pulumi.String("string"),
},
},
Clusterupgrade: &gkehub.ClusterUpgradeFleetSpecArgs{
PostConditions: &gkehub.ClusterUpgradePostConditionsArgs{
Soaking: pulumi.String("string"),
},
GkeUpgradeOverrides: gkehub.ClusterUpgradeGKEUpgradeOverrideArray{
&gkehub.ClusterUpgradeGKEUpgradeOverrideArgs{
PostConditions: &gkehub.ClusterUpgradePostConditionsArgs{
Soaking: pulumi.String("string"),
},
Upgrade: &gkehub.ClusterUpgradeGKEUpgradeArgs{
Name: pulumi.String("string"),
Version: pulumi.String("string"),
},
},
},
UpstreamFleets: pulumi.StringArray{
pulumi.String("string"),
},
},
Fleetobservability: &gkehub.FleetObservabilityFeatureSpecArgs{
LoggingConfig: &gkehub.FleetObservabilityLoggingConfigArgs{
DefaultConfig: &gkehub.FleetObservabilityRoutingConfigArgs{
Mode: gkehubv1alpha.FleetObservabilityRoutingConfigModeModeUnspecified,
},
FleetScopeLogsConfig: &gkehub.FleetObservabilityRoutingConfigArgs{
Mode: gkehubv1alpha.FleetObservabilityRoutingConfigModeModeUnspecified,
},
},
},
Multiclusteringress: &gkehub.MultiClusterIngressFeatureSpecArgs{
ConfigMembership: pulumi.String("string"),
},
Namespaceactuation: &gkehub.NamespaceActuationFeatureSpecArgs{
ActuationMode: gkehubv1alpha.NamespaceActuationFeatureSpecActuationModeActuationModeUnspecified,
},
Workloadcertificate: &gkehub.FeatureSpecArgs{
DefaultConfig: &gkehub.MembershipSpecArgs{
CertificateManagement: gkehubv1alpha.MembershipSpecCertificateManagementCertificateManagementUnspecified,
},
ProvisionGoogleCa: gkehubv1alpha.FeatureSpecProvisionGoogleCaGoogleCaProvisioningUnspecified,
},
},
})

    var google_nativeFeatureResource = new Feature("google-nativeFeatureResource", FeatureArgs.builder()
    .featureId("string")
    .fleetDefaultMemberConfig(CommonFleetDefaultMemberConfigSpecArgs.builder()
        .configmanagement(ConfigManagementMembershipSpecArgs.builder()
            .cluster("string")
            .configSync(ConfigManagementConfigSyncArgs.builder()
                .enabled(false)
                .git(ConfigManagementGitConfigArgs.builder()
                    .gcpServiceAccountEmail("string")
                    .httpsProxy("string")
                    .policyDir("string")
                    .secretType("string")
                    .syncBranch("string")
                    .syncRepo("string")
                    .syncRev("string")
                    .syncWaitSecs("string")
                    .build())
                .metricsGcpServiceAccountEmail("string")
                .oci(ConfigManagementOciConfigArgs.builder()
                    .gcpServiceAccountEmail("string")
                    .policyDir("string")
                    .secretType("string")
                    .syncRepo("string")
                    .syncWaitSecs("string")
                    .build())
                .preventDrift(false)
                .sourceFormat("string")
                .build())
            .hierarchyController(ConfigManagementHierarchyControllerConfigArgs.builder()
                .enableHierarchicalResourceQuota(false)
                .enablePodTreeLabels(false)
                .enabled(false)
                .build())
            .policyController(ConfigManagementPolicyControllerArgs.builder()
                .auditIntervalSeconds("string")
                .enabled(false)
                .exemptableNamespaces("string")
                .logDeniesEnabled(false)
                .monitoring(ConfigManagementPolicyControllerMonitoringArgs.builder()
                    .backends("MONITORING_BACKEND_UNSPECIFIED")
                    .build())
                .mutationEnabled(false)
                .referentialRulesEnabled(false)
                .templateLibraryInstalled(false)
                .build())
            .version("string")
            .build())
        .identityservice(IdentityServiceMembershipSpecArgs.builder()
            .authMethods(IdentityServiceAuthMethodArgs.builder()
                .azureadConfig(IdentityServiceAzureADConfigArgs.builder()
                    .clientId("string")
                    .clientSecret("string")
                    .kubectlRedirectUri("string")
                    .tenant("string")
                    .build())
                .googleConfig(IdentityServiceGoogleConfigArgs.builder()
                    .disable(false)
                    .build())
                .name("string")
                .oidcConfig(IdentityServiceOidcConfigArgs.builder()
                    .certificateAuthorityData("string")
                    .clientId("string")
                    .clientSecret("string")
                    .deployCloudConsoleProxy(false)
                    .enableAccessToken(false)
                    .extraParams("string")
                    .groupPrefix("string")
                    .groupsClaim("string")
                    .issuerUri("string")
                    .kubectlRedirectUri("string")
                    .scopes("string")
                    .userClaim("string")
                    .userPrefix("string")
                    .build())
                .proxy("string")
                .build())
            .build())
        .mesh(ServiceMeshMembershipSpecArgs.builder()
            .defaultChannel("CHANNEL_UNSPECIFIED")
            .management("MANAGEMENT_UNSPECIFIED")
            .build())
        .policycontroller(PolicyControllerMembershipSpecArgs.builder()
            .policyControllerHubConfig(PolicyControllerHubConfigArgs.builder()
                .auditIntervalSeconds("string")
                .constraintViolationLimit("string")
                .deploymentConfigs(Map.of("string", "string"))
                .exemptableNamespaces("string")
                .installSpec("INSTALL_SPEC_UNSPECIFIED")
                .logDeniesEnabled(false)
                .monitoring(PolicyControllerMonitoringConfigArgs.builder()
                    .backends("MONITORING_BACKEND_UNSPECIFIED")
                    .build())
                .mutationEnabled(false)
                .policyContent(PolicyControllerPolicyContentSpecArgs.builder()
                    .bundles(Map.of("string", "string"))
                    .templateLibrary(PolicyControllerTemplateLibraryConfigArgs.builder()
                        .installation("INSTALLATION_UNSPECIFIED")
                        .build())
                    .build())
                .referentialRulesEnabled(false)
                .build())
            .version("string")
            .build())
        .build())
    .labels(Map.of("string", "string"))
    .location("string")
    .membershipSpecs(Map.of("string", "string"))
    .project("string")
    .requestId("string")
    .scopeSpecs(Map.of("string", "string"))
    .spec(CommonFeatureSpecArgs.builder()
        .anthosobservability(AnthosObservabilityFeatureSpecArgs.builder()
            .defaultMembershipSpec(AnthosObservabilityMembershipSpecArgs.builder()
                .doNotOptimizeMetrics(false)
                .enableStackdriverOnApplications(false)
                .version("string")
                .build())
            .build())
        .appdevexperience()
        .cloudauditlogging(CloudAuditLoggingFeatureSpecArgs.builder()
            .allowlistedServiceAccounts("string")
            .build())
        .clusterupgrade(ClusterUpgradeFleetSpecArgs.builder()
            .postConditions(ClusterUpgradePostConditionsArgs.builder()
                .soaking("string")
                .build())
            .gkeUpgradeOverrides(ClusterUpgradeGKEUpgradeOverrideArgs.builder()
                .postConditions(ClusterUpgradePostConditionsArgs.builder()
                    .soaking("string")
                    .build())
                .upgrade(ClusterUpgradeGKEUpgradeArgs.builder()
                    .name("string")
                    .version("string")
                    .build())
                .build())
            .upstreamFleets("string")
            .build())
        .fleetobservability(FleetObservabilityFeatureSpecArgs.builder()
            .loggingConfig(FleetObservabilityLoggingConfigArgs.builder()
                .defaultConfig(FleetObservabilityRoutingConfigArgs.builder()
                    .mode("MODE_UNSPECIFIED")
                    .build())
                .fleetScopeLogsConfig(FleetObservabilityRoutingConfigArgs.builder()
                    .mode("MODE_UNSPECIFIED")
                    .build())
                .build())
            .build())
        .multiclusteringress(MultiClusterIngressFeatureSpecArgs.builder()
            .configMembership("string")
            .build())
        .namespaceactuation(NamespaceActuationFeatureSpecArgs.builder()
            .actuationMode("ACTUATION_MODE_UNSPECIFIED")
            .build())
        .workloadcertificate(FeatureSpecArgs.builder()
            .defaultConfig(MembershipSpecArgs.builder()
                .certificateManagement("CERTIFICATE_MANAGEMENT_UNSPECIFIED")
                .build())
            .provisionGoogleCa("GOOGLE_CA_PROVISIONING_UNSPECIFIED")
            .build())
        .build())
    .build());

    google_native_feature_resource = google_native.gkehub.v1alpha.Feature("google-nativeFeatureResource",
    feature_id="string",
    fleet_default_member_config=google_native.gkehub.v1alpha.CommonFleetDefaultMemberConfigSpecArgs(
        configmanagement=google_native.gkehub.v1alpha.ConfigManagementMembershipSpecArgs(
            cluster="string",
            config_sync=google_native.gkehub.v1alpha.ConfigManagementConfigSyncArgs(
                enabled=False,
                git=google_native.gkehub.v1alpha.ConfigManagementGitConfigArgs(
                    gcp_service_account_email="string",
                    https_proxy="string",
                    policy_dir="string",
                    secret_type="string",
                    sync_branch="string",
                    sync_repo="string",
                    sync_rev="string",
                    sync_wait_secs="string",
                ),
                metrics_gcp_service_account_email="string",
                oci=google_native.gkehub.v1alpha.ConfigManagementOciConfigArgs(
                    gcp_service_account_email="string",
                    policy_dir="string",
                    secret_type="string",
                    sync_repo="string",
                    sync_wait_secs="string",
                ),
                prevent_drift=False,
                source_format="string",
            ),
            hierarchy_controller=google_native.gkehub.v1alpha.ConfigManagementHierarchyControllerConfigArgs(
                enable_hierarchical_resource_quota=False,
                enable_pod_tree_labels=False,
                enabled=False,
            ),
            policy_controller=google_native.gkehub.v1alpha.ConfigManagementPolicyControllerArgs(
                audit_interval_seconds="string",
                enabled=False,
                exemptable_namespaces=["string"],
                log_denies_enabled=False,
                monitoring=google_native.gkehub.v1alpha.ConfigManagementPolicyControllerMonitoringArgs(
                    backends=[google_native.gkehub.v1alpha.ConfigManagementPolicyControllerMonitoringBackendsItem.MONITORING_BACKEND_UNSPECIFIED],
                ),
                mutation_enabled=False,
                referential_rules_enabled=False,
                template_library_installed=False,
            ),
            version="string",
        ),
        identityservice=google_native.gkehub.v1alpha.IdentityServiceMembershipSpecArgs(
            auth_methods=[google_native.gkehub.v1alpha.IdentityServiceAuthMethodArgs(
                azuread_config=google_native.gkehub.v1alpha.IdentityServiceAzureADConfigArgs(
                    client_id="string",
                    client_secret="string",
                    kubectl_redirect_uri="string",
                    tenant="string",
                ),
                google_config=google_native.gkehub.v1alpha.IdentityServiceGoogleConfigArgs(
                    disable=False,
                ),
                name="string",
                oidc_config=google_native.gkehub.v1alpha.IdentityServiceOidcConfigArgs(
                    certificate_authority_data="string",
                    client_id="string",
                    client_secret="string",
                    deploy_cloud_console_proxy=False,
                    enable_access_token=False,
                    extra_params="string",
                    group_prefix="string",
                    groups_claim="string",
                    issuer_uri="string",
                    kubectl_redirect_uri="string",
                    scopes="string",
                    user_claim="string",
                    user_prefix="string",
                ),
                proxy="string",
            )],
        ),
        mesh=google_native.gkehub.v1alpha.ServiceMeshMembershipSpecArgs(
            default_channel=google_native.gkehub.v1alpha.ServiceMeshMembershipSpecDefaultChannel.CHANNEL_UNSPECIFIED,
            management=google_native.gkehub.v1alpha.ServiceMeshMembershipSpecManagement.MANAGEMENT_UNSPECIFIED,
        ),
        policycontroller=google_native.gkehub.v1alpha.PolicyControllerMembershipSpecArgs(
            policy_controller_hub_config=google_native.gkehub.v1alpha.PolicyControllerHubConfigArgs(
                audit_interval_seconds="string",
                constraint_violation_limit="string",
                deployment_configs={
                    "string": "string",
                },
                exemptable_namespaces=["string"],
                install_spec=google_native.gkehub.v1alpha.PolicyControllerHubConfigInstallSpec.INSTALL_SPEC_UNSPECIFIED,
                log_denies_enabled=False,
                monitoring=google_native.gkehub.v1alpha.PolicyControllerMonitoringConfigArgs(
                    backends=[google_native.gkehub.v1alpha.PolicyControllerMonitoringConfigBackendsItem.MONITORING_BACKEND_UNSPECIFIED],
                ),
                mutation_enabled=False,
                policy_content=google_native.gkehub.v1alpha.PolicyControllerPolicyContentSpecArgs(
                    bundles={
                        "string": "string",
                    },
                    template_library=google_native.gkehub.v1alpha.PolicyControllerTemplateLibraryConfigArgs(
                        installation=google_native.gkehub.v1alpha.PolicyControllerTemplateLibraryConfigInstallation.INSTALLATION_UNSPECIFIED,
                    ),
                ),
                referential_rules_enabled=False,
            ),
            version="string",
        ),
    ),
    labels={
        "string": "string",
    },
    location="string",
    membership_specs={
        "string": "string",
    },
    project="string",
    request_id="string",
    scope_specs={
        "string": "string",
    },
    spec=google_native.gkehub.v1alpha.CommonFeatureSpecArgs(
        anthosobservability=google_native.gkehub.v1alpha.AnthosObservabilityFeatureSpecArgs(
            default_membership_spec=google_native.gkehub.v1alpha.AnthosObservabilityMembershipSpecArgs(
                do_not_optimize_metrics=False,
                enable_stackdriver_on_applications=False,
                version="string",
            ),
        ),
        appdevexperience=google_native.gkehub.v1alpha.AppDevExperienceFeatureSpecArgs(),
        cloudauditlogging=google_native.gkehub.v1alpha.CloudAuditLoggingFeatureSpecArgs(
            allowlisted_service_accounts=["string"],
        ),
        clusterupgrade=google_native.gkehub.v1alpha.ClusterUpgradeFleetSpecArgs(
            post_conditions=google_native.gkehub.v1alpha.ClusterUpgradePostConditionsArgs(
                soaking="string",
            ),
            gke_upgrade_overrides=[google_native.gkehub.v1alpha.ClusterUpgradeGKEUpgradeOverrideArgs(
                post_conditions=google_native.gkehub.v1alpha.ClusterUpgradePostConditionsArgs(
                    soaking="string",
                ),
                upgrade=google_native.gkehub.v1alpha.ClusterUpgradeGKEUpgradeArgs(
                    name="string",
                    version="string",
                ),
            )],
            upstream_fleets=["string"],
        ),
        fleetobservability=google_native.gkehub.v1alpha.FleetObservabilityFeatureSpecArgs(
            logging_config=google_native.gkehub.v1alpha.FleetObservabilityLoggingConfigArgs(
                default_config=google_native.gkehub.v1alpha.FleetObservabilityRoutingConfigArgs(
                    mode=google_native.gkehub.v1alpha.FleetObservabilityRoutingConfigMode.MODE_UNSPECIFIED,
                ),
                fleet_scope_logs_config=google_native.gkehub.v1alpha.FleetObservabilityRoutingConfigArgs(
                    mode=google_native.gkehub.v1alpha.FleetObservabilityRoutingConfigMode.MODE_UNSPECIFIED,
                ),
            ),
        ),
        multiclusteringress=google_native.gkehub.v1alpha.MultiClusterIngressFeatureSpecArgs(
            config_membership="string",
        ),
        namespaceactuation=google_native.gkehub.v1alpha.NamespaceActuationFeatureSpecArgs(
            actuation_mode=google_native.gkehub.v1alpha.NamespaceActuationFeatureSpecActuationMode.ACTUATION_MODE_UNSPECIFIED,
        ),
        workloadcertificate=google_native.gkehub.v1alpha.FeatureSpecArgs(
            default_config=google_native.gkehub.v1alpha.MembershipSpecArgs(
                certificate_management=google_native.gkehub.v1alpha.MembershipSpecCertificateManagement.CERTIFICATE_MANAGEMENT_UNSPECIFIED,
            ),
            provision_google_ca=google_native.gkehub.v1alpha.FeatureSpecProvisionGoogleCa.GOOGLE_CA_PROVISIONING_UNSPECIFIED,
        ),
    ))

    const google_nativeFeatureResource = new google_native.gkehub.v1alpha.Feature("google-nativeFeatureResource", {
    featureId: "string",
    fleetDefaultMemberConfig: {
        configmanagement: {
            cluster: "string",
            configSync: {
                enabled: false,
                git: {
                    gcpServiceAccountEmail: "string",
                    httpsProxy: "string",
                    policyDir: "string",
                    secretType: "string",
                    syncBranch: "string",
                    syncRepo: "string",
                    syncRev: "string",
                    syncWaitSecs: "string",
                },
                metricsGcpServiceAccountEmail: "string",
                oci: {
                    gcpServiceAccountEmail: "string",
                    policyDir: "string",
                    secretType: "string",
                    syncRepo: "string",
                    syncWaitSecs: "string",
                },
                preventDrift: false,
                sourceFormat: "string",
            },
            hierarchyController: {
                enableHierarchicalResourceQuota: false,
                enablePodTreeLabels: false,
                enabled: false,
            },
            policyController: {
                auditIntervalSeconds: "string",
                enabled: false,
                exemptableNamespaces: ["string"],
                logDeniesEnabled: false,
                monitoring: {
                    backends: [google_native.gkehub.v1alpha.ConfigManagementPolicyControllerMonitoringBackendsItem.MonitoringBackendUnspecified],
                },
                mutationEnabled: false,
                referentialRulesEnabled: false,
                templateLibraryInstalled: false,
            },
            version: "string",
        },
        identityservice: {
            authMethods: [{
                azureadConfig: {
                    clientId: "string",
                    clientSecret: "string",
                    kubectlRedirectUri: "string",
                    tenant: "string",
                },
                googleConfig: {
                    disable: false,
                },
                name: "string",
                oidcConfig: {
                    certificateAuthorityData: "string",
                    clientId: "string",
                    clientSecret: "string",
                    deployCloudConsoleProxy: false,
                    enableAccessToken: false,
                    extraParams: "string",
                    groupPrefix: "string",
                    groupsClaim: "string",
                    issuerUri: "string",
                    kubectlRedirectUri: "string",
                    scopes: "string",
                    userClaim: "string",
                    userPrefix: "string",
                },
                proxy: "string",
            }],
        },
        mesh: {
            defaultChannel: google_native.gkehub.v1alpha.ServiceMeshMembershipSpecDefaultChannel.ChannelUnspecified,
            management: google_native.gkehub.v1alpha.ServiceMeshMembershipSpecManagement.ManagementUnspecified,
        },
        policycontroller: {
            policyControllerHubConfig: {
                auditIntervalSeconds: "string",
                constraintViolationLimit: "string",
                deploymentConfigs: {
                    string: "string",
                },
                exemptableNamespaces: ["string"],
                installSpec: google_native.gkehub.v1alpha.PolicyControllerHubConfigInstallSpec.InstallSpecUnspecified,
                logDeniesEnabled: false,
                monitoring: {
                    backends: [google_native.gkehub.v1alpha.PolicyControllerMonitoringConfigBackendsItem.MonitoringBackendUnspecified],
                },
                mutationEnabled: false,
                policyContent: {
                    bundles: {
                        string: "string",
                    },
                    templateLibrary: {
                        installation: google_native.gkehub.v1alpha.PolicyControllerTemplateLibraryConfigInstallation.InstallationUnspecified,
                    },
                },
                referentialRulesEnabled: false,
            },
            version: "string",
        },
    },
    labels: {
        string: "string",
    },
    location: "string",
    membershipSpecs: {
        string: "string",
    },
    project: "string",
    requestId: "string",
    scopeSpecs: {
        string: "string",
    },
    spec: {
        anthosobservability: {
            defaultMembershipSpec: {
                doNotOptimizeMetrics: false,
                enableStackdriverOnApplications: false,
                version: "string",
            },
        },
        appdevexperience: {},
        cloudauditlogging: {
            allowlistedServiceAccounts: ["string"],
        },
        clusterupgrade: {
            postConditions: {
                soaking: "string",
            },
            gkeUpgradeOverrides: [{
                postConditions: {
                    soaking: "string",
                },
                upgrade: {
                    name: "string",
                    version: "string",
                },
            }],
            upstreamFleets: ["string"],
        },
        fleetobservability: {
            loggingConfig: {
                defaultConfig: {
                    mode: google_native.gkehub.v1alpha.FleetObservabilityRoutingConfigMode.ModeUnspecified,
                },
                fleetScopeLogsConfig: {
                    mode: google_native.gkehub.v1alpha.FleetObservabilityRoutingConfigMode.ModeUnspecified,
                },
            },
        },
        multiclusteringress: {
            configMembership: "string",
        },
        namespaceactuation: {
            actuationMode: google_native.gkehub.v1alpha.NamespaceActuationFeatureSpecActuationMode.ActuationModeUnspecified,
        },
        workloadcertificate: {
            defaultConfig: {
                certificateManagement: google_native.gkehub.v1alpha.MembershipSpecCertificateManagement.CertificateManagementUnspecified,
            },
            provisionGoogleCa: google_native.gkehub.v1alpha.FeatureSpecProvisionGoogleCa.GoogleCaProvisioningUnspecified,
        },
    },
});

    type: google-native:gkehub/v1alpha:Feature
properties:
    featureId: string
    fleetDefaultMemberConfig:
        configmanagement:
            cluster: string
            configSync:
                enabled: false
                git:
                    gcpServiceAccountEmail: string
                    httpsProxy: string
                    policyDir: string
                    secretType: string
                    syncBranch: string
                    syncRepo: string
                    syncRev: string
                    syncWaitSecs: string
                metricsGcpServiceAccountEmail: string
                oci:
                    gcpServiceAccountEmail: string
                    policyDir: string
                    secretType: string
                    syncRepo: string
                    syncWaitSecs: string
                preventDrift: false
                sourceFormat: string
            hierarchyController:
                enableHierarchicalResourceQuota: false
                enablePodTreeLabels: false
                enabled: false
            policyController:
                auditIntervalSeconds: string
                enabled: false
                exemptableNamespaces:
                    - string
                logDeniesEnabled: false
                monitoring:
                    backends:
                        - MONITORING_BACKEND_UNSPECIFIED
                mutationEnabled: false
                referentialRulesEnabled: false
                templateLibraryInstalled: false
            version: string
        identityservice:
            authMethods:
                - azureadConfig:
                    clientId: string
                    clientSecret: string
                    kubectlRedirectUri: string
                    tenant: string
                  googleConfig:
                    disable: false
                  name: string
                  oidcConfig:
                    certificateAuthorityData: string
                    clientId: string
                    clientSecret: string
                    deployCloudConsoleProxy: false
                    enableAccessToken: false
                    extraParams: string
                    groupPrefix: string
                    groupsClaim: string
                    issuerUri: string
                    kubectlRedirectUri: string
                    scopes: string
                    userClaim: string
                    userPrefix: string
                  proxy: string
        mesh:
            defaultChannel: CHANNEL_UNSPECIFIED
            management: MANAGEMENT_UNSPECIFIED
        policycontroller:
            policyControllerHubConfig:
                auditIntervalSeconds: string
                constraintViolationLimit: string
                deploymentConfigs:
                    string: string
                exemptableNamespaces:
                    - string
                installSpec: INSTALL_SPEC_UNSPECIFIED
                logDeniesEnabled: false
                monitoring:
                    backends:
                        - MONITORING_BACKEND_UNSPECIFIED
                mutationEnabled: false
                policyContent:
                    bundles:
                        string: string
                    templateLibrary:
                        installation: INSTALLATION_UNSPECIFIED
                referentialRulesEnabled: false
            version: string
    labels:
        string: string
    location: string
    membershipSpecs:
        string: string
    project: string
    requestId: string
    scopeSpecs:
        string: string
    spec:
        anthosobservability:
            defaultMembershipSpec:
                doNotOptimizeMetrics: false
                enableStackdriverOnApplications: false
                version: string
        appdevexperience: {}
        cloudauditlogging:
            allowlistedServiceAccounts:
                - string
        clusterupgrade:
            gkeUpgradeOverrides:
                - postConditions:
                    soaking: string
                  upgrade:
                    name: string
                    version: string
            postConditions:
                soaking: string
            upstreamFleets:
                - string
        fleetobservability:
            loggingConfig:
                defaultConfig:
                    mode: MODE_UNSPECIFIED
                fleetScopeLogsConfig:
                    mode: MODE_UNSPECIFIED
        multiclusteringress:
            configMembership: string
        namespaceactuation:
            actuationMode: ACTUATION_MODE_UNSPECIFIED
        workloadcertificate:
            defaultConfig:
                certificateManagement: CERTIFICATE_MANAGEMENT_UNSPECIFIED
            provisionGoogleCa: GOOGLE_CA_PROVISIONING_UNSPECIFIED

    Feature Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    The Feature resource accepts the following input properties:

    FeatureId string
    The ID of the feature to create.
    FleetDefaultMemberConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.CommonFleetDefaultMemberConfigSpec
    Optional. Feature configuration applicable to all memberships of the fleet.
    Labels Dictionary<string, string>
    Labels for this Feature.
    Location string
    MembershipSpecs Dictionary<string, string>
    Optional. Membership-specific configuration for this Feature. If this Feature does not support any per-Membership configuration, this field may be unused. The keys indicate which Membership the configuration is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Membership is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    Project string
    RequestId string
    A request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).
    ScopeSpecs Dictionary<string, string>
    Optional. Scope-specific configuration for this Feature. If this Feature does not support any per-Scope configuration, this field may be unused. The keys indicate which Scope the configuration is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Scope is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    Spec Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.CommonFeatureSpec
    Optional. Hub-wide Feature configuration. If this Feature does not support any Hub-wide configuration, this field may be unused.
    FeatureId string
    The ID of the feature to create.
    FleetDefaultMemberConfig CommonFleetDefaultMemberConfigSpecArgs
    Optional. Feature configuration applicable to all memberships of the fleet.
    Labels map[string]string
    Labels for this Feature.
    Location string
    MembershipSpecs map[string]string
    Optional. Membership-specific configuration for this Feature. If this Feature does not support any per-Membership configuration, this field may be unused. The keys indicate which Membership the configuration is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Membership is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    Project string
    RequestId string
    A request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).
    ScopeSpecs map[string]string
    Optional. Scope-specific configuration for this Feature. If this Feature does not support any per-Scope configuration, this field may be unused. The keys indicate which Scope the configuration is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Scope is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    Spec CommonFeatureSpecArgs
    Optional. Hub-wide Feature configuration. If this Feature does not support any Hub-wide configuration, this field may be unused.
    featureId String
    The ID of the feature to create.
    fleetDefaultMemberConfig CommonFleetDefaultMemberConfigSpec
    Optional. Feature configuration applicable to all memberships of the fleet.
    labels Map<String,String>
    Labels for this Feature.
    location String
    membershipSpecs Map<String,String>
    Optional. Membership-specific configuration for this Feature. If this Feature does not support any per-Membership configuration, this field may be unused. The keys indicate which Membership the configuration is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Membership is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    project String
    requestId String
    A request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).
    scopeSpecs Map<String,String>
    Optional. Scope-specific configuration for this Feature. If this Feature does not support any per-Scope configuration, this field may be unused. The keys indicate which Scope the configuration is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Scope is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    spec CommonFeatureSpec
    Optional. Hub-wide Feature configuration. If this Feature does not support any Hub-wide configuration, this field may be unused.
    featureId string
    The ID of the feature to create.
    fleetDefaultMemberConfig CommonFleetDefaultMemberConfigSpec
    Optional. Feature configuration applicable to all memberships of the fleet.
    labels {[key: string]: string}
    Labels for this Feature.
    location string
    membershipSpecs {[key: string]: string}
    Optional. Membership-specific configuration for this Feature. If this Feature does not support any per-Membership configuration, this field may be unused. The keys indicate which Membership the configuration is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Membership is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    project string
    requestId string
    A request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).
    scopeSpecs {[key: string]: string}
    Optional. Scope-specific configuration for this Feature. If this Feature does not support any per-Scope configuration, this field may be unused. The keys indicate which Scope the configuration is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Scope is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    spec CommonFeatureSpec
    Optional. Hub-wide Feature configuration. If this Feature does not support any Hub-wide configuration, this field may be unused.
    feature_id str
    The ID of the feature to create.
    fleet_default_member_config CommonFleetDefaultMemberConfigSpecArgs
    Optional. Feature configuration applicable to all memberships of the fleet.
    labels Mapping[str, str]
    Labels for this Feature.
    location str
    membership_specs Mapping[str, str]
    Optional. Membership-specific configuration for this Feature. If this Feature does not support any per-Membership configuration, this field may be unused. The keys indicate which Membership the configuration is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Membership is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    project str
    request_id str
    A request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).
    scope_specs Mapping[str, str]
    Optional. Scope-specific configuration for this Feature. If this Feature does not support any per-Scope configuration, this field may be unused. The keys indicate which Scope the configuration is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Scope is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    spec CommonFeatureSpecArgs
    Optional. Hub-wide Feature configuration. If this Feature does not support any Hub-wide configuration, this field may be unused.
    featureId String
    The ID of the feature to create.
    fleetDefaultMemberConfig Property Map
    Optional. Feature configuration applicable to all memberships of the fleet.
    labels Map<String>
    Labels for this Feature.
    location String
    membershipSpecs Map<String>
    Optional. Membership-specific configuration for this Feature. If this Feature does not support any per-Membership configuration, this field may be unused. The keys indicate which Membership the configuration is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Membership is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    project String
    requestId String
    A request ID to identify requests. Specify a unique request ID so that if you must retry your request, the server will know to ignore the request if it has already been completed. The server will guarantee that for at least 60 minutes after the first request. For example, consider a situation where you make an initial request and the request times out. If you make the request again with the same request ID, the server can check if original operation with the same request ID was received, and if so, will ignore the second request. This prevents clients from accidentally creating duplicate commitments. The request ID must be a valid UUID with the exception that zero UUID is not supported (00000000-0000-0000-0000-000000000000).
    scopeSpecs Map<String>
    Optional. Scope-specific configuration for this Feature. If this Feature does not support any per-Scope configuration, this field may be unused. The keys indicate which Scope the configuration is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project. {p} will always be returned as the project number, but the project ID is also accepted during input. If the same Scope is specified in the map twice (using the project ID form, and the project number form), exactly ONE of the entries will be saved, with no guarantees as to which. For this reason, it is recommended the same format be used for all entries when mutating a Feature.
    spec Property Map
    Optional. Hub-wide Feature configuration. If this Feature does not support any Hub-wide configuration, this field may be unused.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Feature resource produces the following output properties:

    CreateTime string
    When the Feature resource was created.
    DeleteTime string
    When the Feature resource was deleted.
    Id string
    The provider-assigned unique ID for this managed resource.
    MembershipStates Dictionary<string, string>
    Membership-specific Feature status. If this Feature does report any per-Membership status, this field may be unused. The keys indicate which Membership the state is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project number, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} MUST match the Feature's project number.
    Name string
    The full, unique name of this Feature resource in the format projects/*/locations/*/features/*.
    ResourceState Pulumi.GoogleNative.GKEHub.V1Alpha.Outputs.FeatureResourceStateResponse
    State of the Feature resource itself.
    ScopeStates Dictionary<string, string>
    Scope-specific Feature status. If this Feature does report any per-Scope status, this field may be unused. The keys indicate which Scope the state is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project.
    State Pulumi.GoogleNative.GKEHub.V1Alpha.Outputs.CommonFeatureStateResponse
    The Hub-wide Feature state.
    UpdateTime string
    When the Feature resource was last updated.
    CreateTime string
    When the Feature resource was created.
    DeleteTime string
    When the Feature resource was deleted.
    Id string
    The provider-assigned unique ID for this managed resource.
    MembershipStates map[string]string
    Membership-specific Feature status. If this Feature does report any per-Membership status, this field may be unused. The keys indicate which Membership the state is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project number, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} MUST match the Feature's project number.
    Name string
    The full, unique name of this Feature resource in the format projects/*/locations/*/features/*.
    ResourceState FeatureResourceStateResponse
    State of the Feature resource itself.
    ScopeStates map[string]string
    Scope-specific Feature status. If this Feature does report any per-Scope status, this field may be unused. The keys indicate which Scope the state is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project.
    State CommonFeatureStateResponse
    The Hub-wide Feature state.
    UpdateTime string
    When the Feature resource was last updated.
    createTime String
    When the Feature resource was created.
    deleteTime String
    When the Feature resource was deleted.
    id String
    The provider-assigned unique ID for this managed resource.
    membershipStates Map<String,String>
    Membership-specific Feature status. If this Feature does report any per-Membership status, this field may be unused. The keys indicate which Membership the state is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project number, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} MUST match the Feature's project number.
    name String
    The full, unique name of this Feature resource in the format projects/*/locations/*/features/*.
    resourceState FeatureResourceStateResponse
    State of the Feature resource itself.
    scopeStates Map<String,String>
    Scope-specific Feature status. If this Feature does report any per-Scope status, this field may be unused. The keys indicate which Scope the state is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project.
    state CommonFeatureStateResponse
    The Hub-wide Feature state.
    updateTime String
    When the Feature resource was last updated.
    createTime string
    When the Feature resource was created.
    deleteTime string
    When the Feature resource was deleted.
    id string
    The provider-assigned unique ID for this managed resource.
    membershipStates {[key: string]: string}
    Membership-specific Feature status. If this Feature does report any per-Membership status, this field may be unused. The keys indicate which Membership the state is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project number, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} MUST match the Feature's project number.
    name string
    The full, unique name of this Feature resource in the format projects/*/locations/*/features/*.
    resourceState FeatureResourceStateResponse
    State of the Feature resource itself.
    scopeStates {[key: string]: string}
    Scope-specific Feature status. If this Feature does report any per-Scope status, this field may be unused. The keys indicate which Scope the state is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project.
    state CommonFeatureStateResponse
    The Hub-wide Feature state.
    updateTime string
    When the Feature resource was last updated.
    create_time str
    When the Feature resource was created.
    delete_time str
    When the Feature resource was deleted.
    id str
    The provider-assigned unique ID for this managed resource.
    membership_states Mapping[str, str]
    Membership-specific Feature status. If this Feature does report any per-Membership status, this field may be unused. The keys indicate which Membership the state is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project number, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} MUST match the Feature's project number.
    name str
    The full, unique name of this Feature resource in the format projects/*/locations/*/features/*.
    resource_state FeatureResourceStateResponse
    State of the Feature resource itself.
    scope_states Mapping[str, str]
    Scope-specific Feature status. If this Feature does report any per-Scope status, this field may be unused. The keys indicate which Scope the state is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project.
    state CommonFeatureStateResponse
    The Hub-wide Feature state.
    update_time str
    When the Feature resource was last updated.
    createTime String
    When the Feature resource was created.
    deleteTime String
    When the Feature resource was deleted.
    id String
    The provider-assigned unique ID for this managed resource.
    membershipStates Map<String>
    Membership-specific Feature status. If this Feature does report any per-Membership status, this field may be unused. The keys indicate which Membership the state is for, in the form: projects/{p}/locations/{l}/memberships/{m} Where {p} is the project number, {l} is a valid location and {m} is a valid Membership in this project at that location. {p} MUST match the Feature's project number.
    name String
    The full, unique name of this Feature resource in the format projects/*/locations/*/features/*.
    resourceState Property Map
    State of the Feature resource itself.
    scopeStates Map<String>
    Scope-specific Feature status. If this Feature does report any per-Scope status, this field may be unused. The keys indicate which Scope the state is for, in the form: projects/{p}/locations/global/scopes/{s} Where {p} is the project, {s} is a valid Scope in this project. {p} WILL match the Feature's project.
    state Property Map
    The Hub-wide Feature state.
    updateTime String
    When the Feature resource was last updated.

    Supporting Types

    AnthosObservabilityFeatureSpec, AnthosObservabilityFeatureSpecArgs

    DefaultMembershipSpec AnthosObservabilityMembershipSpec
    Default membership spec for unconfigured memberships
    defaultMembershipSpec AnthosObservabilityMembershipSpec
    Default membership spec for unconfigured memberships
    defaultMembershipSpec AnthosObservabilityMembershipSpec
    Default membership spec for unconfigured memberships
    default_membership_spec AnthosObservabilityMembershipSpec
    Default membership spec for unconfigured memberships
    defaultMembershipSpec Property Map
    Default membership spec for unconfigured memberships

    AnthosObservabilityFeatureSpecResponse, AnthosObservabilityFeatureSpecResponseArgs

    DefaultMembershipSpec AnthosObservabilityMembershipSpecResponse
    Default membership spec for unconfigured memberships
    defaultMembershipSpec AnthosObservabilityMembershipSpecResponse
    Default membership spec for unconfigured memberships
    defaultMembershipSpec AnthosObservabilityMembershipSpecResponse
    Default membership spec for unconfigured memberships
    default_membership_spec AnthosObservabilityMembershipSpecResponse
    Default membership spec for unconfigured memberships
    defaultMembershipSpec Property Map
    Default membership spec for unconfigured memberships

    AnthosObservabilityMembershipSpec, AnthosObservabilityMembershipSpecArgs

    DoNotOptimizeMetrics bool
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    EnableStackdriverOnApplications bool
    Enable collecting and reporting metrics and logs from user apps.
    Version string
    the version of stackdriver operator used by this feature
    DoNotOptimizeMetrics bool
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    EnableStackdriverOnApplications bool
    Enable collecting and reporting metrics and logs from user apps.
    Version string
    the version of stackdriver operator used by this feature
    doNotOptimizeMetrics Boolean
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    enableStackdriverOnApplications Boolean
    Enable collecting and reporting metrics and logs from user apps.
    version String
    the version of stackdriver operator used by this feature
    doNotOptimizeMetrics boolean
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    enableStackdriverOnApplications boolean
    Enable collecting and reporting metrics and logs from user apps.
    version string
    the version of stackdriver operator used by this feature
    do_not_optimize_metrics bool
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    enable_stackdriver_on_applications bool
    Enable collecting and reporting metrics and logs from user apps.
    version str
    the version of stackdriver operator used by this feature
    doNotOptimizeMetrics Boolean
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    enableStackdriverOnApplications Boolean
    Enable collecting and reporting metrics and logs from user apps.
    version String
    the version of stackdriver operator used by this feature

    AnthosObservabilityMembershipSpecResponse, AnthosObservabilityMembershipSpecResponseArgs

    DoNotOptimizeMetrics bool
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    EnableStackdriverOnApplications bool
    Enable collecting and reporting metrics and logs from user apps.
    Version string
    the version of stackdriver operator used by this feature
    DoNotOptimizeMetrics bool
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    EnableStackdriverOnApplications bool
    Enable collecting and reporting metrics and logs from user apps.
    Version string
    the version of stackdriver operator used by this feature
    doNotOptimizeMetrics Boolean
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    enableStackdriverOnApplications Boolean
    Enable collecting and reporting metrics and logs from user apps.
    version String
    the version of stackdriver operator used by this feature
    doNotOptimizeMetrics boolean
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    enableStackdriverOnApplications boolean
    Enable collecting and reporting metrics and logs from user apps.
    version string
    the version of stackdriver operator used by this feature
    do_not_optimize_metrics bool
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    enable_stackdriver_on_applications bool
    Enable collecting and reporting metrics and logs from user apps.
    version str
    the version of stackdriver operator used by this feature
    doNotOptimizeMetrics Boolean
    Use full of metrics rather than optimized metrics. See https://cloud.google.com/anthos/clusters/docs/on-prem/1.8/concepts/logging-and-monitoring#optimized_metrics_default_metrics
    enableStackdriverOnApplications Boolean
    Enable collecting and reporting metrics and logs from user apps.
    version String
    the version of stackdriver operator used by this feature

    AppDevExperienceFeatureStateResponse, AppDevExperienceFeatureStateResponseArgs

    NetworkingInstallSucceeded Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.StatusResponse
    Status of subcomponent that detects configured Service Mesh resources.
    NetworkingInstallSucceeded StatusResponse
    Status of subcomponent that detects configured Service Mesh resources.
    networkingInstallSucceeded StatusResponse
    Status of subcomponent that detects configured Service Mesh resources.
    networkingInstallSucceeded StatusResponse
    Status of subcomponent that detects configured Service Mesh resources.
    networking_install_succeeded StatusResponse
    Status of subcomponent that detects configured Service Mesh resources.
    networkingInstallSucceeded Property Map
    Status of subcomponent that detects configured Service Mesh resources.

    CloudAuditLoggingFeatureSpec, CloudAuditLoggingFeatureSpecArgs

    AllowlistedServiceAccounts List<string>
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    AllowlistedServiceAccounts []string
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    allowlistedServiceAccounts List<String>
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    allowlistedServiceAccounts string[]
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    allowlisted_service_accounts Sequence[str]
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    allowlistedServiceAccounts List<String>
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)

    CloudAuditLoggingFeatureSpecResponse, CloudAuditLoggingFeatureSpecResponseArgs

    AllowlistedServiceAccounts List<string>
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    AllowlistedServiceAccounts []string
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    allowlistedServiceAccounts List<String>
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    allowlistedServiceAccounts string[]
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    allowlisted_service_accounts Sequence[str]
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)
    allowlistedServiceAccounts List<String>
    Service account that should be allowlisted to send the audit logs; eg cloudauditlogging@gcp-project.iam.gserviceaccount.com. These accounts must already exist, but do not need to have any permissions granted to them. The customer's entitlements will be checked prior to allowlisting (i.e. the customer must be an Anthos customer.)

    ClusterUpgradeFleetSpec, ClusterUpgradeFleetSpecArgs

    PostConditions Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradePostConditions
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    GkeUpgradeOverrides List<Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeGKEUpgradeOverride>
    Allow users to override some properties of each GKE upgrade.
    UpstreamFleets List<string>
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    PostConditions ClusterUpgradePostConditions
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    GkeUpgradeOverrides []ClusterUpgradeGKEUpgradeOverride
    Allow users to override some properties of each GKE upgrade.
    UpstreamFleets []string
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    postConditions ClusterUpgradePostConditions
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    gkeUpgradeOverrides List<ClusterUpgradeGKEUpgradeOverride>
    Allow users to override some properties of each GKE upgrade.
    upstreamFleets List<String>
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    postConditions ClusterUpgradePostConditions
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    gkeUpgradeOverrides ClusterUpgradeGKEUpgradeOverride[]
    Allow users to override some properties of each GKE upgrade.
    upstreamFleets string[]
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    post_conditions ClusterUpgradePostConditions
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    gke_upgrade_overrides Sequence[ClusterUpgradeGKEUpgradeOverride]
    Allow users to override some properties of each GKE upgrade.
    upstream_fleets Sequence[str]
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    postConditions Property Map
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    gkeUpgradeOverrides List<Property Map>
    Allow users to override some properties of each GKE upgrade.
    upstreamFleets List<String>
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.

    ClusterUpgradeFleetSpecResponse, ClusterUpgradeFleetSpecResponseArgs

    GkeUpgradeOverrides List<Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeGKEUpgradeOverrideResponse>
    Allow users to override some properties of each GKE upgrade.
    PostConditions Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradePostConditionsResponse
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    UpstreamFleets List<string>
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    GkeUpgradeOverrides []ClusterUpgradeGKEUpgradeOverrideResponse
    Allow users to override some properties of each GKE upgrade.
    PostConditions ClusterUpgradePostConditionsResponse
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    UpstreamFleets []string
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    gkeUpgradeOverrides List<ClusterUpgradeGKEUpgradeOverrideResponse>
    Allow users to override some properties of each GKE upgrade.
    postConditions ClusterUpgradePostConditionsResponse
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    upstreamFleets List<String>
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    gkeUpgradeOverrides ClusterUpgradeGKEUpgradeOverrideResponse[]
    Allow users to override some properties of each GKE upgrade.
    postConditions ClusterUpgradePostConditionsResponse
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    upstreamFleets string[]
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    gke_upgrade_overrides Sequence[ClusterUpgradeGKEUpgradeOverrideResponse]
    Allow users to override some properties of each GKE upgrade.
    post_conditions ClusterUpgradePostConditionsResponse
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    upstream_fleets Sequence[str]
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.
    gkeUpgradeOverrides List<Property Map>
    Allow users to override some properties of each GKE upgrade.
    postConditions Property Map
    Post conditions to evaluate to mark an upgrade COMPLETE. Required.
    upstreamFleets List<String>
    This fleet consumes upgrades that have COMPLETE status code in the upstream fleets. See UpgradeStatus.Code for code definitions. The fleet name should be either fleet project number or id. This is defined as repeated for future proof reasons. Initial implementation will enforce at most one upstream fleet.

    ClusterUpgradeFleetStateResponse, ClusterUpgradeFleetStateResponseArgs

    DownstreamFleets List<string>
    This fleets whose upstream_fleets contain the current fleet. The fleet name should be either fleet project number or id.
    GkeState Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeGKEUpgradeFeatureStateResponse
    Feature state for GKE clusters.
    Ignored Dictionary<string, string>
    A list of memberships ignored by the feature. For example, manually upgraded clusters can be ignored if they are newer than the default versions of its release channel. The membership resource is in the format: projects/{p}/locations/{l}/membership/{m}.
    DownstreamFleets []string
    This fleets whose upstream_fleets contain the current fleet. The fleet name should be either fleet project number or id.
    GkeState ClusterUpgradeGKEUpgradeFeatureStateResponse
    Feature state for GKE clusters.
    Ignored map[string]string
    A list of memberships ignored by the feature. For example, manually upgraded clusters can be ignored if they are newer than the default versions of its release channel. The membership resource is in the format: projects/{p}/locations/{l}/membership/{m}.
    downstreamFleets List<String>
    This fleets whose upstream_fleets contain the current fleet. The fleet name should be either fleet project number or id.
    gkeState ClusterUpgradeGKEUpgradeFeatureStateResponse
    Feature state for GKE clusters.
    ignored Map<String,String>
    A list of memberships ignored by the feature. For example, manually upgraded clusters can be ignored if they are newer than the default versions of its release channel. The membership resource is in the format: projects/{p}/locations/{l}/membership/{m}.
    downstreamFleets string[]
    This fleets whose upstream_fleets contain the current fleet. The fleet name should be either fleet project number or id.
    gkeState ClusterUpgradeGKEUpgradeFeatureStateResponse
    Feature state for GKE clusters.
    ignored {[key: string]: string}
    A list of memberships ignored by the feature. For example, manually upgraded clusters can be ignored if they are newer than the default versions of its release channel. The membership resource is in the format: projects/{p}/locations/{l}/membership/{m}.
    downstream_fleets Sequence[str]
    This fleets whose upstream_fleets contain the current fleet. The fleet name should be either fleet project number or id.
    gke_state ClusterUpgradeGKEUpgradeFeatureStateResponse
    Feature state for GKE clusters.
    ignored Mapping[str, str]
    A list of memberships ignored by the feature. For example, manually upgraded clusters can be ignored if they are newer than the default versions of its release channel. The membership resource is in the format: projects/{p}/locations/{l}/membership/{m}.
    downstreamFleets List<String>
    This fleets whose upstream_fleets contain the current fleet. The fleet name should be either fleet project number or id.
    gkeState Property Map
    Feature state for GKE clusters.
    ignored Map<String>
    A list of memberships ignored by the feature. For example, manually upgraded clusters can be ignored if they are newer than the default versions of its release channel. The membership resource is in the format: projects/{p}/locations/{l}/membership/{m}.

    ClusterUpgradeGKEUpgrade, ClusterUpgradeGKEUpgradeArgs

    Name string
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    Version string
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    Name string
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    Version string
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    name String
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    version String
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    name string
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    version string
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    name str
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    version str
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    name String
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    version String
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.

    ClusterUpgradeGKEUpgradeFeatureConditionResponse, ClusterUpgradeGKEUpgradeFeatureConditionResponseArgs

    Reason string
    Reason why the feature is in this status.
    Status string
    Status of the condition, one of True, False, Unknown.
    Type string
    Type of the condition, for example, "ready".
    UpdateTime string
    Last timestamp the condition was updated.
    Reason string
    Reason why the feature is in this status.
    Status string
    Status of the condition, one of True, False, Unknown.
    Type string
    Type of the condition, for example, "ready".
    UpdateTime string
    Last timestamp the condition was updated.
    reason String
    Reason why the feature is in this status.
    status String
    Status of the condition, one of True, False, Unknown.
    type String
    Type of the condition, for example, "ready".
    updateTime String
    Last timestamp the condition was updated.
    reason string
    Reason why the feature is in this status.
    status string
    Status of the condition, one of True, False, Unknown.
    type string
    Type of the condition, for example, "ready".
    updateTime string
    Last timestamp the condition was updated.
    reason str
    Reason why the feature is in this status.
    status str
    Status of the condition, one of True, False, Unknown.
    type str
    Type of the condition, for example, "ready".
    update_time str
    Last timestamp the condition was updated.
    reason String
    Reason why the feature is in this status.
    status String
    Status of the condition, one of True, False, Unknown.
    type String
    Type of the condition, for example, "ready".
    updateTime String
    Last timestamp the condition was updated.

    ClusterUpgradeGKEUpgradeFeatureStateResponse, ClusterUpgradeGKEUpgradeFeatureStateResponseArgs

    Conditions []ClusterUpgradeGKEUpgradeFeatureConditionResponse
    Current conditions of the feature.
    UpgradeState []ClusterUpgradeGKEUpgradeStateResponse
    Upgrade state. It will eventually replace state.
    conditions List<ClusterUpgradeGKEUpgradeFeatureConditionResponse>
    Current conditions of the feature.
    upgradeState List<ClusterUpgradeGKEUpgradeStateResponse>
    Upgrade state. It will eventually replace state.
    conditions ClusterUpgradeGKEUpgradeFeatureConditionResponse[]
    Current conditions of the feature.
    upgradeState ClusterUpgradeGKEUpgradeStateResponse[]
    Upgrade state. It will eventually replace state.
    conditions List<Property Map>
    Current conditions of the feature.
    upgradeState List<Property Map>
    Upgrade state. It will eventually replace state.

    ClusterUpgradeGKEUpgradeOverride, ClusterUpgradeGKEUpgradeOverrideArgs

    PostConditions Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradePostConditions
    Post conditions to override for the specified upgrade (name + version). Required.
    Upgrade Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeGKEUpgrade
    Which upgrade to override. Required.
    PostConditions ClusterUpgradePostConditions
    Post conditions to override for the specified upgrade (name + version). Required.
    Upgrade ClusterUpgradeGKEUpgrade
    Which upgrade to override. Required.
    postConditions ClusterUpgradePostConditions
    Post conditions to override for the specified upgrade (name + version). Required.
    upgrade ClusterUpgradeGKEUpgrade
    Which upgrade to override. Required.
    postConditions ClusterUpgradePostConditions
    Post conditions to override for the specified upgrade (name + version). Required.
    upgrade ClusterUpgradeGKEUpgrade
    Which upgrade to override. Required.
    post_conditions ClusterUpgradePostConditions
    Post conditions to override for the specified upgrade (name + version). Required.
    upgrade ClusterUpgradeGKEUpgrade
    Which upgrade to override. Required.
    postConditions Property Map
    Post conditions to override for the specified upgrade (name + version). Required.
    upgrade Property Map
    Which upgrade to override. Required.

    ClusterUpgradeGKEUpgradeOverrideResponse, ClusterUpgradeGKEUpgradeOverrideResponseArgs

    PostConditions Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradePostConditionsResponse
    Post conditions to override for the specified upgrade (name + version). Required.
    Upgrade Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeGKEUpgradeResponse
    Which upgrade to override. Required.
    PostConditions ClusterUpgradePostConditionsResponse
    Post conditions to override for the specified upgrade (name + version). Required.
    Upgrade ClusterUpgradeGKEUpgradeResponse
    Which upgrade to override. Required.
    postConditions ClusterUpgradePostConditionsResponse
    Post conditions to override for the specified upgrade (name + version). Required.
    upgrade ClusterUpgradeGKEUpgradeResponse
    Which upgrade to override. Required.
    postConditions ClusterUpgradePostConditionsResponse
    Post conditions to override for the specified upgrade (name + version). Required.
    upgrade ClusterUpgradeGKEUpgradeResponse
    Which upgrade to override. Required.
    post_conditions ClusterUpgradePostConditionsResponse
    Post conditions to override for the specified upgrade (name + version). Required.
    upgrade ClusterUpgradeGKEUpgradeResponse
    Which upgrade to override. Required.
    postConditions Property Map
    Post conditions to override for the specified upgrade (name + version). Required.
    upgrade Property Map
    Which upgrade to override. Required.

    ClusterUpgradeGKEUpgradeResponse, ClusterUpgradeGKEUpgradeResponseArgs

    Name string
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    Version string
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    Name string
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    Version string
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    name String
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    version String
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    name string
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    version string
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    name str
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    version str
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.
    name String
    Name of the upgrade, e.g., "k8s_control_plane". It should be a valid upgrade name. It must not exceet 99 characters.
    version String
    Version of the upgrade, e.g., "1.22.1-gke.100". It should be a valid version. It must not exceet 99 characters.

    ClusterUpgradeGKEUpgradeStateResponse, ClusterUpgradeGKEUpgradeStateResponseArgs

    Stats Dictionary<string, string>
    Number of GKE clusters in each status code.
    Status Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeUpgradeStatusResponse
    Status of the upgrade.
    Upgrade Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeGKEUpgradeResponse
    Which upgrade to track the state.
    Stats map[string]string
    Number of GKE clusters in each status code.
    Status ClusterUpgradeUpgradeStatusResponse
    Status of the upgrade.
    Upgrade ClusterUpgradeGKEUpgradeResponse
    Which upgrade to track the state.
    stats Map<String,String>
    Number of GKE clusters in each status code.
    status ClusterUpgradeUpgradeStatusResponse
    Status of the upgrade.
    upgrade ClusterUpgradeGKEUpgradeResponse
    Which upgrade to track the state.
    stats {[key: string]: string}
    Number of GKE clusters in each status code.
    status ClusterUpgradeUpgradeStatusResponse
    Status of the upgrade.
    upgrade ClusterUpgradeGKEUpgradeResponse
    Which upgrade to track the state.
    stats Mapping[str, str]
    Number of GKE clusters in each status code.
    status ClusterUpgradeUpgradeStatusResponse
    Status of the upgrade.
    upgrade ClusterUpgradeGKEUpgradeResponse
    Which upgrade to track the state.
    stats Map<String>
    Number of GKE clusters in each status code.
    status Property Map
    Status of the upgrade.
    upgrade Property Map
    Which upgrade to track the state.

    ClusterUpgradePostConditions, ClusterUpgradePostConditionsArgs

    Soaking string
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    Soaking string
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    soaking String
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    soaking string
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    soaking str
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    soaking String
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.

    ClusterUpgradePostConditionsResponse, ClusterUpgradePostConditionsResponseArgs

    Soaking string
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    Soaking string
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    soaking String
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    soaking string
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    soaking str
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.
    soaking String
    Amount of time to "soak" after a rollout has been finished before marking it COMPLETE. Cannot exceed 30 days. Required.

    ClusterUpgradeUpgradeStatusResponse, ClusterUpgradeUpgradeStatusResponseArgs

    Code string
    Status code of the upgrade.
    Reason string
    Reason for this status.
    UpdateTime string
    Last timestamp the status was updated.
    Code string
    Status code of the upgrade.
    Reason string
    Reason for this status.
    UpdateTime string
    Last timestamp the status was updated.
    code String
    Status code of the upgrade.
    reason String
    Reason for this status.
    updateTime String
    Last timestamp the status was updated.
    code string
    Status code of the upgrade.
    reason string
    Reason for this status.
    updateTime string
    Last timestamp the status was updated.
    code str
    Status code of the upgrade.
    reason str
    Reason for this status.
    update_time str
    Last timestamp the status was updated.
    code String
    Status code of the upgrade.
    reason String
    Reason for this status.
    updateTime String
    Last timestamp the status was updated.

    CommonFeatureSpec, CommonFeatureSpecArgs

    Anthosobservability Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.AnthosObservabilityFeatureSpec
    Anthos Observability spec
    Appdevexperience Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.AppDevExperienceFeatureSpec
    Appdevexperience specific spec.
    Cloudauditlogging Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.CloudAuditLoggingFeatureSpec
    Cloud Audit Logging-specific spec.
    Clusterupgrade Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeFleetSpec
    ClusterUpgrade (fleet-based) feature spec.
    Fleetobservability Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityFeatureSpec
    FleetObservability feature spec.
    Multiclusteringress Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.MultiClusterIngressFeatureSpec
    Multicluster Ingress-specific spec.
    Namespaceactuation Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.NamespaceActuationFeatureSpec
    Namespace Actuation feature spec
    Workloadcertificate Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FeatureSpec
    Workload Certificate spec.
    Anthosobservability AnthosObservabilityFeatureSpec
    Anthos Observability spec
    Appdevexperience AppDevExperienceFeatureSpec
    Appdevexperience specific spec.
    Cloudauditlogging CloudAuditLoggingFeatureSpec
    Cloud Audit Logging-specific spec.
    Clusterupgrade ClusterUpgradeFleetSpec
    ClusterUpgrade (fleet-based) feature spec.
    Fleetobservability FleetObservabilityFeatureSpec
    FleetObservability feature spec.
    Multiclusteringress MultiClusterIngressFeatureSpec
    Multicluster Ingress-specific spec.
    Namespaceactuation NamespaceActuationFeatureSpec
    Namespace Actuation feature spec
    Workloadcertificate FeatureSpec
    Workload Certificate spec.
    anthosobservability AnthosObservabilityFeatureSpec
    Anthos Observability spec
    appdevexperience AppDevExperienceFeatureSpec
    Appdevexperience specific spec.
    cloudauditlogging CloudAuditLoggingFeatureSpec
    Cloud Audit Logging-specific spec.
    clusterupgrade ClusterUpgradeFleetSpec
    ClusterUpgrade (fleet-based) feature spec.
    fleetobservability FleetObservabilityFeatureSpec
    FleetObservability feature spec.
    multiclusteringress MultiClusterIngressFeatureSpec
    Multicluster Ingress-specific spec.
    namespaceactuation NamespaceActuationFeatureSpec
    Namespace Actuation feature spec
    workloadcertificate FeatureSpec
    Workload Certificate spec.
    anthosobservability AnthosObservabilityFeatureSpec
    Anthos Observability spec
    appdevexperience AppDevExperienceFeatureSpec
    Appdevexperience specific spec.
    cloudauditlogging CloudAuditLoggingFeatureSpec
    Cloud Audit Logging-specific spec.
    clusterupgrade ClusterUpgradeFleetSpec
    ClusterUpgrade (fleet-based) feature spec.
    fleetobservability FleetObservabilityFeatureSpec
    FleetObservability feature spec.
    multiclusteringress MultiClusterIngressFeatureSpec
    Multicluster Ingress-specific spec.
    namespaceactuation NamespaceActuationFeatureSpec
    Namespace Actuation feature spec
    workloadcertificate FeatureSpec
    Workload Certificate spec.
    anthosobservability AnthosObservabilityFeatureSpec
    Anthos Observability spec
    appdevexperience AppDevExperienceFeatureSpec
    Appdevexperience specific spec.
    cloudauditlogging CloudAuditLoggingFeatureSpec
    Cloud Audit Logging-specific spec.
    clusterupgrade ClusterUpgradeFleetSpec
    ClusterUpgrade (fleet-based) feature spec.
    fleetobservability FleetObservabilityFeatureSpec
    FleetObservability feature spec.
    multiclusteringress MultiClusterIngressFeatureSpec
    Multicluster Ingress-specific spec.
    namespaceactuation NamespaceActuationFeatureSpec
    Namespace Actuation feature spec
    workloadcertificate FeatureSpec
    Workload Certificate spec.
    anthosobservability Property Map
    Anthos Observability spec
    appdevexperience Property Map
    Appdevexperience specific spec.
    cloudauditlogging Property Map
    Cloud Audit Logging-specific spec.
    clusterupgrade Property Map
    ClusterUpgrade (fleet-based) feature spec.
    fleetobservability Property Map
    FleetObservability feature spec.
    multiclusteringress Property Map
    Multicluster Ingress-specific spec.
    namespaceactuation Property Map
    Namespace Actuation feature spec
    workloadcertificate Property Map
    Workload Certificate spec.

    CommonFeatureSpecResponse, CommonFeatureSpecResponseArgs

    Anthosobservability Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.AnthosObservabilityFeatureSpecResponse
    Anthos Observability spec
    Appdevexperience Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.AppDevExperienceFeatureSpecResponse
    Appdevexperience specific spec.
    Cloudauditlogging Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.CloudAuditLoggingFeatureSpecResponse
    Cloud Audit Logging-specific spec.
    Clusterupgrade Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ClusterUpgradeFleetSpecResponse
    ClusterUpgrade (fleet-based) feature spec.
    Fleetobservability Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityFeatureSpecResponse
    FleetObservability feature spec.
    Multiclusteringress Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.MultiClusterIngressFeatureSpecResponse
    Multicluster Ingress-specific spec.
    Namespaceactuation Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.NamespaceActuationFeatureSpecResponse
    Namespace Actuation feature spec
    Workloadcertificate Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FeatureSpecResponse
    Workload Certificate spec.
    anthosobservability Property Map
    Anthos Observability spec
    appdevexperience Property Map
    Appdevexperience specific spec.
    cloudauditlogging Property Map
    Cloud Audit Logging-specific spec.
    clusterupgrade Property Map
    ClusterUpgrade (fleet-based) feature spec.
    fleetobservability Property Map
    FleetObservability feature spec.
    multiclusteringress Property Map
    Multicluster Ingress-specific spec.
    namespaceactuation Property Map
    Namespace Actuation feature spec
    workloadcertificate Property Map
    Workload Certificate spec.

    CommonFeatureStateResponse, CommonFeatureStateResponseArgs

    Appdevexperience AppDevExperienceFeatureStateResponse
    Appdevexperience specific state.
    Clusterupgrade ClusterUpgradeFleetStateResponse
    ClusterUpgrade fleet-level state.
    Fleetobservability FleetObservabilityFeatureStateResponse
    FleetObservability feature state.
    Namespaceactuation NamespaceActuationFeatureStateResponse
    Namespace Actuation feature state.
    Servicemesh ServiceMeshFeatureStateResponse
    Service Mesh-specific state.
    State FeatureStateResponse
    The "running state" of the Feature in this Hub.
    appdevexperience AppDevExperienceFeatureStateResponse
    Appdevexperience specific state.
    clusterupgrade ClusterUpgradeFleetStateResponse
    ClusterUpgrade fleet-level state.
    fleetobservability FleetObservabilityFeatureStateResponse
    FleetObservability feature state.
    namespaceactuation NamespaceActuationFeatureStateResponse
    Namespace Actuation feature state.
    servicemesh ServiceMeshFeatureStateResponse
    Service Mesh-specific state.
    state FeatureStateResponse
    The "running state" of the Feature in this Hub.
    appdevexperience AppDevExperienceFeatureStateResponse
    Appdevexperience specific state.
    clusterupgrade ClusterUpgradeFleetStateResponse
    ClusterUpgrade fleet-level state.
    fleetobservability FleetObservabilityFeatureStateResponse
    FleetObservability feature state.
    namespaceactuation NamespaceActuationFeatureStateResponse
    Namespace Actuation feature state.
    servicemesh ServiceMeshFeatureStateResponse
    Service Mesh-specific state.
    state FeatureStateResponse
    The "running state" of the Feature in this Hub.
    appdevexperience AppDevExperienceFeatureStateResponse
    Appdevexperience specific state.
    clusterupgrade ClusterUpgradeFleetStateResponse
    ClusterUpgrade fleet-level state.
    fleetobservability FleetObservabilityFeatureStateResponse
    FleetObservability feature state.
    namespaceactuation NamespaceActuationFeatureStateResponse
    Namespace Actuation feature state.
    servicemesh ServiceMeshFeatureStateResponse
    Service Mesh-specific state.
    state FeatureStateResponse
    The "running state" of the Feature in this Hub.
    appdevexperience Property Map
    Appdevexperience specific state.
    clusterupgrade Property Map
    ClusterUpgrade fleet-level state.
    fleetobservability Property Map
    FleetObservability feature state.
    namespaceactuation Property Map
    Namespace Actuation feature state.
    servicemesh Property Map
    Service Mesh-specific state.
    state Property Map
    The "running state" of the Feature in this Hub.

    CommonFleetDefaultMemberConfigSpec, CommonFleetDefaultMemberConfigSpecArgs

    Configmanagement ConfigManagementMembershipSpec
    Config Management-specific spec.
    Identityservice IdentityServiceMembershipSpec
    Identity Service-specific spec.
    Mesh ServiceMeshMembershipSpec
    Anthos Service Mesh-specific spec
    Policycontroller PolicyControllerMembershipSpec
    Policy Controller spec.
    configmanagement ConfigManagementMembershipSpec
    Config Management-specific spec.
    identityservice IdentityServiceMembershipSpec
    Identity Service-specific spec.
    mesh ServiceMeshMembershipSpec
    Anthos Service Mesh-specific spec
    policycontroller PolicyControllerMembershipSpec
    Policy Controller spec.
    configmanagement ConfigManagementMembershipSpec
    Config Management-specific spec.
    identityservice IdentityServiceMembershipSpec
    Identity Service-specific spec.
    mesh ServiceMeshMembershipSpec
    Anthos Service Mesh-specific spec
    policycontroller PolicyControllerMembershipSpec
    Policy Controller spec.
    configmanagement ConfigManagementMembershipSpec
    Config Management-specific spec.
    identityservice IdentityServiceMembershipSpec
    Identity Service-specific spec.
    mesh ServiceMeshMembershipSpec
    Anthos Service Mesh-specific spec
    policycontroller PolicyControllerMembershipSpec
    Policy Controller spec.
    configmanagement Property Map
    Config Management-specific spec.
    identityservice Property Map
    Identity Service-specific spec.
    mesh Property Map
    Anthos Service Mesh-specific spec
    policycontroller Property Map
    Policy Controller spec.

    CommonFleetDefaultMemberConfigSpecResponse, CommonFleetDefaultMemberConfigSpecResponseArgs

    configmanagement Property Map
    Config Management-specific spec.
    identityservice Property Map
    Identity Service-specific spec.
    mesh Property Map
    Anthos Service Mesh-specific spec
    policycontroller Property Map
    Policy Controller spec.

    ConfigManagementBinauthzConfig, ConfigManagementBinauthzConfigArgs

    Enabled bool
    Whether binauthz is enabled in this cluster.
    Enabled bool
    Whether binauthz is enabled in this cluster.
    enabled Boolean
    Whether binauthz is enabled in this cluster.
    enabled boolean
    Whether binauthz is enabled in this cluster.
    enabled bool
    Whether binauthz is enabled in this cluster.
    enabled Boolean
    Whether binauthz is enabled in this cluster.

    ConfigManagementBinauthzConfigResponse, ConfigManagementBinauthzConfigResponseArgs

    Enabled bool
    Whether binauthz is enabled in this cluster.
    Enabled bool
    Whether binauthz is enabled in this cluster.
    enabled Boolean
    Whether binauthz is enabled in this cluster.
    enabled boolean
    Whether binauthz is enabled in this cluster.
    enabled bool
    Whether binauthz is enabled in this cluster.
    enabled Boolean
    Whether binauthz is enabled in this cluster.

    ConfigManagementConfigSync, ConfigManagementConfigSyncArgs

    AllowVerticalScale bool
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Enabled bool
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    Git Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementGitConfig
    Git repo configuration for the cluster.
    MetricsGcpServiceAccountEmail string
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    Oci Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementOciConfig
    OCI repo configuration for the cluster
    PreventDrift bool
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    SourceFormat string
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    AllowVerticalScale bool
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Enabled bool
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    Git ConfigManagementGitConfig
    Git repo configuration for the cluster.
    MetricsGcpServiceAccountEmail string
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    Oci ConfigManagementOciConfig
    OCI repo configuration for the cluster
    PreventDrift bool
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    SourceFormat string
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    allowVerticalScale Boolean
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    enabled Boolean
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    git ConfigManagementGitConfig
    Git repo configuration for the cluster.
    metricsGcpServiceAccountEmail String
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    oci ConfigManagementOciConfig
    OCI repo configuration for the cluster
    preventDrift Boolean
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    sourceFormat String
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    allowVerticalScale boolean
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    enabled boolean
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    git ConfigManagementGitConfig
    Git repo configuration for the cluster.
    metricsGcpServiceAccountEmail string
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    oci ConfigManagementOciConfig
    OCI repo configuration for the cluster
    preventDrift boolean
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    sourceFormat string
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    allow_vertical_scale bool
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    enabled bool
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    git ConfigManagementGitConfig
    Git repo configuration for the cluster.
    metrics_gcp_service_account_email str
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    oci ConfigManagementOciConfig
    OCI repo configuration for the cluster
    prevent_drift bool
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    source_format str
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    allowVerticalScale Boolean
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    enabled Boolean
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    git Property Map
    Git repo configuration for the cluster.
    metricsGcpServiceAccountEmail String
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    oci Property Map
    OCI repo configuration for the cluster
    preventDrift Boolean
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    sourceFormat String
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.

    ConfigManagementConfigSyncResponse, ConfigManagementConfigSyncResponseArgs

    AllowVerticalScale bool
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Enabled bool
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    Git Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementGitConfigResponse
    Git repo configuration for the cluster.
    MetricsGcpServiceAccountEmail string
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    Oci Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementOciConfigResponse
    OCI repo configuration for the cluster
    PreventDrift bool
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    SourceFormat string
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    AllowVerticalScale bool
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Enabled bool
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    Git ConfigManagementGitConfigResponse
    Git repo configuration for the cluster.
    MetricsGcpServiceAccountEmail string
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    Oci ConfigManagementOciConfigResponse
    OCI repo configuration for the cluster
    PreventDrift bool
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    SourceFormat string
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    allowVerticalScale Boolean
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    enabled Boolean
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    git ConfigManagementGitConfigResponse
    Git repo configuration for the cluster.
    metricsGcpServiceAccountEmail String
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    oci ConfigManagementOciConfigResponse
    OCI repo configuration for the cluster
    preventDrift Boolean
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    sourceFormat String
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    allowVerticalScale boolean
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    enabled boolean
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    git ConfigManagementGitConfigResponse
    Git repo configuration for the cluster.
    metricsGcpServiceAccountEmail string
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    oci ConfigManagementOciConfigResponse
    OCI repo configuration for the cluster
    preventDrift boolean
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    sourceFormat string
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    allow_vertical_scale bool
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    enabled bool
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    git ConfigManagementGitConfigResponse
    Git repo configuration for the cluster.
    metrics_gcp_service_account_email str
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    oci ConfigManagementOciConfigResponse
    OCI repo configuration for the cluster
    prevent_drift bool
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    source_format str
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.
    allowVerticalScale Boolean
    Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    Deprecated: Set to true to allow the vertical scaling. Defaults to false which disallows vertical scaling. This field is deprecated.

    enabled Boolean
    Enables the installation of ConfigSync. If set to true, ConfigSync resources will be created and the other ConfigSync fields will be applied if exist. If set to false, all other ConfigSync fields will be ignored, ConfigSync resources will be deleted. If omitted, ConfigSync resources will be managed depends on the presence of the git or oci field.
    git Property Map
    Git repo configuration for the cluster.
    metricsGcpServiceAccountEmail String
    The Email of the Google Cloud Service Account (GSA) used for exporting Config Sync metrics to Cloud Monitoring and Cloud Monarch when Workload Identity is enabled. The GSA should have the Monitoring Metric Writer (roles/monitoring.metricWriter) IAM role. The Kubernetes ServiceAccount default in the namespace config-management-monitoring should be bound to the GSA. This field is required when automatic Feature management is enabled.
    oci Property Map
    OCI repo configuration for the cluster
    preventDrift Boolean
    Set to true to enable the Config Sync admission webhook to prevent drifts. If set to false, disables the Config Sync admission webhook and does not prevent drifts.
    sourceFormat String
    Specifies whether the Config Sync Repo is in "hierarchical" or "unstructured" mode.

    ConfigManagementGitConfig, ConfigManagementGitConfigArgs

    GcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    HttpsProxy string
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    PolicyDir string
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    SecretType string
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    SyncBranch string
    The branch of the repository to sync from. Default: master.
    SyncRepo string
    The URL of the Git repository to use as the source of truth.
    SyncRev string
    Git revision (tag or hash) to check out. Default HEAD.
    SyncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    GcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    HttpsProxy string
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    PolicyDir string
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    SecretType string
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    SyncBranch string
    The branch of the repository to sync from. Default: master.
    SyncRepo string
    The URL of the Git repository to use as the source of truth.
    SyncRev string
    Git revision (tag or hash) to check out. Default HEAD.
    SyncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail String
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    httpsProxy String
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    policyDir String
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    secretType String
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    syncBranch String
    The branch of the repository to sync from. Default: master.
    syncRepo String
    The URL of the Git repository to use as the source of truth.
    syncRev String
    Git revision (tag or hash) to check out. Default HEAD.
    syncWaitSecs String
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    httpsProxy string
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    policyDir string
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    secretType string
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    syncBranch string
    The branch of the repository to sync from. Default: master.
    syncRepo string
    The URL of the Git repository to use as the source of truth.
    syncRev string
    Git revision (tag or hash) to check out. Default HEAD.
    syncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    gcp_service_account_email str
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    https_proxy str
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    policy_dir str
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    secret_type str
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    sync_branch str
    The branch of the repository to sync from. Default: master.
    sync_repo str
    The URL of the Git repository to use as the source of truth.
    sync_rev str
    Git revision (tag or hash) to check out. Default HEAD.
    sync_wait_secs str
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail String
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    httpsProxy String
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    policyDir String
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    secretType String
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    syncBranch String
    The branch of the repository to sync from. Default: master.
    syncRepo String
    The URL of the Git repository to use as the source of truth.
    syncRev String
    Git revision (tag or hash) to check out. Default HEAD.
    syncWaitSecs String
    Period in seconds between consecutive syncs. Default: 15.

    ConfigManagementGitConfigResponse, ConfigManagementGitConfigResponseArgs

    GcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    HttpsProxy string
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    PolicyDir string
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    SecretType string
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    SyncBranch string
    The branch of the repository to sync from. Default: master.
    SyncRepo string
    The URL of the Git repository to use as the source of truth.
    SyncRev string
    Git revision (tag or hash) to check out. Default HEAD.
    SyncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    GcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    HttpsProxy string
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    PolicyDir string
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    SecretType string
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    SyncBranch string
    The branch of the repository to sync from. Default: master.
    SyncRepo string
    The URL of the Git repository to use as the source of truth.
    SyncRev string
    Git revision (tag or hash) to check out. Default HEAD.
    SyncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail String
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    httpsProxy String
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    policyDir String
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    secretType String
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    syncBranch String
    The branch of the repository to sync from. Default: master.
    syncRepo String
    The URL of the Git repository to use as the source of truth.
    syncRev String
    Git revision (tag or hash) to check out. Default HEAD.
    syncWaitSecs String
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    httpsProxy string
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    policyDir string
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    secretType string
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    syncBranch string
    The branch of the repository to sync from. Default: master.
    syncRepo string
    The URL of the Git repository to use as the source of truth.
    syncRev string
    Git revision (tag or hash) to check out. Default HEAD.
    syncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    gcp_service_account_email str
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    https_proxy str
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    policy_dir str
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    secret_type str
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    sync_branch str
    The branch of the repository to sync from. Default: master.
    sync_repo str
    The URL of the Git repository to use as the source of truth.
    sync_rev str
    Git revision (tag or hash) to check out. Default HEAD.
    sync_wait_secs str
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail String
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    httpsProxy String
    URL for the HTTPS proxy to be used when communicating with the Git repo.
    policyDir String
    The path within the Git repository that represents the top level of the repo to sync. Default: the root directory of the repository.
    secretType String
    Type of secret configured for access to the Git repo. Must be one of ssh, cookiefile, gcenode, token, gcpserviceaccount or none. The validation of this is case-sensitive. Required.
    syncBranch String
    The branch of the repository to sync from. Default: master.
    syncRepo String
    The URL of the Git repository to use as the source of truth.
    syncRev String
    Git revision (tag or hash) to check out. Default HEAD.
    syncWaitSecs String
    Period in seconds between consecutive syncs. Default: 15.

    ConfigManagementHierarchyControllerConfig, ConfigManagementHierarchyControllerConfigArgs

    EnableHierarchicalResourceQuota bool
    Whether hierarchical resource quota is enabled in this cluster.
    EnablePodTreeLabels bool
    Whether pod tree labels are enabled in this cluster.
    Enabled bool
    Whether Hierarchy Controller is enabled in this cluster.
    EnableHierarchicalResourceQuota bool
    Whether hierarchical resource quota is enabled in this cluster.
    EnablePodTreeLabels bool
    Whether pod tree labels are enabled in this cluster.
    Enabled bool
    Whether Hierarchy Controller is enabled in this cluster.
    enableHierarchicalResourceQuota Boolean
    Whether hierarchical resource quota is enabled in this cluster.
    enablePodTreeLabels Boolean
    Whether pod tree labels are enabled in this cluster.
    enabled Boolean
    Whether Hierarchy Controller is enabled in this cluster.
    enableHierarchicalResourceQuota boolean
    Whether hierarchical resource quota is enabled in this cluster.
    enablePodTreeLabels boolean
    Whether pod tree labels are enabled in this cluster.
    enabled boolean
    Whether Hierarchy Controller is enabled in this cluster.
    enable_hierarchical_resource_quota bool
    Whether hierarchical resource quota is enabled in this cluster.
    enable_pod_tree_labels bool
    Whether pod tree labels are enabled in this cluster.
    enabled bool
    Whether Hierarchy Controller is enabled in this cluster.
    enableHierarchicalResourceQuota Boolean
    Whether hierarchical resource quota is enabled in this cluster.
    enablePodTreeLabels Boolean
    Whether pod tree labels are enabled in this cluster.
    enabled Boolean
    Whether Hierarchy Controller is enabled in this cluster.

    ConfigManagementHierarchyControllerConfigResponse, ConfigManagementHierarchyControllerConfigResponseArgs

    EnableHierarchicalResourceQuota bool
    Whether hierarchical resource quota is enabled in this cluster.
    EnablePodTreeLabels bool
    Whether pod tree labels are enabled in this cluster.
    Enabled bool
    Whether Hierarchy Controller is enabled in this cluster.
    EnableHierarchicalResourceQuota bool
    Whether hierarchical resource quota is enabled in this cluster.
    EnablePodTreeLabels bool
    Whether pod tree labels are enabled in this cluster.
    Enabled bool
    Whether Hierarchy Controller is enabled in this cluster.
    enableHierarchicalResourceQuota Boolean
    Whether hierarchical resource quota is enabled in this cluster.
    enablePodTreeLabels Boolean
    Whether pod tree labels are enabled in this cluster.
    enabled Boolean
    Whether Hierarchy Controller is enabled in this cluster.
    enableHierarchicalResourceQuota boolean
    Whether hierarchical resource quota is enabled in this cluster.
    enablePodTreeLabels boolean
    Whether pod tree labels are enabled in this cluster.
    enabled boolean
    Whether Hierarchy Controller is enabled in this cluster.
    enable_hierarchical_resource_quota bool
    Whether hierarchical resource quota is enabled in this cluster.
    enable_pod_tree_labels bool
    Whether pod tree labels are enabled in this cluster.
    enabled bool
    Whether Hierarchy Controller is enabled in this cluster.
    enableHierarchicalResourceQuota Boolean
    Whether hierarchical resource quota is enabled in this cluster.
    enablePodTreeLabels Boolean
    Whether pod tree labels are enabled in this cluster.
    enabled Boolean
    Whether Hierarchy Controller is enabled in this cluster.

    ConfigManagementMembershipSpec, ConfigManagementMembershipSpecArgs

    Binauthz Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementBinauthzConfig
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Cluster string
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    ConfigSync Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementConfigSync
    Config Sync configuration for the cluster.
    HierarchyController Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementHierarchyControllerConfig
    Hierarchy Controller configuration for the cluster.
    PolicyController Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementPolicyController
    Policy Controller configuration for the cluster.
    Version string
    Version of ACM installed.
    Binauthz ConfigManagementBinauthzConfig
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Cluster string
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    ConfigSync ConfigManagementConfigSync
    Config Sync configuration for the cluster.
    HierarchyController ConfigManagementHierarchyControllerConfig
    Hierarchy Controller configuration for the cluster.
    PolicyController ConfigManagementPolicyController
    Policy Controller configuration for the cluster.
    Version string
    Version of ACM installed.
    binauthz ConfigManagementBinauthzConfig
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    cluster String
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    configSync ConfigManagementConfigSync
    Config Sync configuration for the cluster.
    hierarchyController ConfigManagementHierarchyControllerConfig
    Hierarchy Controller configuration for the cluster.
    policyController ConfigManagementPolicyController
    Policy Controller configuration for the cluster.
    version String
    Version of ACM installed.
    binauthz ConfigManagementBinauthzConfig
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    cluster string
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    configSync ConfigManagementConfigSync
    Config Sync configuration for the cluster.
    hierarchyController ConfigManagementHierarchyControllerConfig
    Hierarchy Controller configuration for the cluster.
    policyController ConfigManagementPolicyController
    Policy Controller configuration for the cluster.
    version string
    Version of ACM installed.
    binauthz ConfigManagementBinauthzConfig
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    cluster str
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    config_sync ConfigManagementConfigSync
    Config Sync configuration for the cluster.
    hierarchy_controller ConfigManagementHierarchyControllerConfig
    Hierarchy Controller configuration for the cluster.
    policy_controller ConfigManagementPolicyController
    Policy Controller configuration for the cluster.
    version str
    Version of ACM installed.
    binauthz Property Map
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    cluster String
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    configSync Property Map
    Config Sync configuration for the cluster.
    hierarchyController Property Map
    Hierarchy Controller configuration for the cluster.
    policyController Property Map
    Policy Controller configuration for the cluster.
    version String
    Version of ACM installed.

    ConfigManagementMembershipSpecResponse, ConfigManagementMembershipSpecResponseArgs

    Binauthz Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementBinauthzConfigResponse
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Cluster string
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    ConfigSync Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementConfigSyncResponse
    Config Sync configuration for the cluster.
    HierarchyController Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementHierarchyControllerConfigResponse
    Hierarchy Controller configuration for the cluster.
    PolicyController Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementPolicyControllerResponse
    Policy Controller configuration for the cluster.
    Version string
    Version of ACM installed.
    Binauthz ConfigManagementBinauthzConfigResponse
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Cluster string
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    ConfigSync ConfigManagementConfigSyncResponse
    Config Sync configuration for the cluster.
    HierarchyController ConfigManagementHierarchyControllerConfigResponse
    Hierarchy Controller configuration for the cluster.
    PolicyController ConfigManagementPolicyControllerResponse
    Policy Controller configuration for the cluster.
    Version string
    Version of ACM installed.
    binauthz ConfigManagementBinauthzConfigResponse
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    cluster String
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    configSync ConfigManagementConfigSyncResponse
    Config Sync configuration for the cluster.
    hierarchyController ConfigManagementHierarchyControllerConfigResponse
    Hierarchy Controller configuration for the cluster.
    policyController ConfigManagementPolicyControllerResponse
    Policy Controller configuration for the cluster.
    version String
    Version of ACM installed.
    binauthz ConfigManagementBinauthzConfigResponse
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    cluster string
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    configSync ConfigManagementConfigSyncResponse
    Config Sync configuration for the cluster.
    hierarchyController ConfigManagementHierarchyControllerConfigResponse
    Hierarchy Controller configuration for the cluster.
    policyController ConfigManagementPolicyControllerResponse
    Policy Controller configuration for the cluster.
    version string
    Version of ACM installed.
    binauthz ConfigManagementBinauthzConfigResponse
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    cluster str
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    config_sync ConfigManagementConfigSyncResponse
    Config Sync configuration for the cluster.
    hierarchy_controller ConfigManagementHierarchyControllerConfigResponse
    Hierarchy Controller configuration for the cluster.
    policy_controller ConfigManagementPolicyControllerResponse
    Policy Controller configuration for the cluster.
    version str
    Version of ACM installed.
    binauthz Property Map
    Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    Deprecated: Binauthz conifguration for the cluster. Deprecated: This field will be ignored and should not be set.

    cluster String
    The user-specified cluster name used by Config Sync cluster-name-selector annotation or ClusterSelector, for applying configs to only a subset of clusters. Omit this field if the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector. Set this field if a name different from the cluster's fleet membership name is used by Config Sync cluster-name-selector annotation or ClusterSelector.
    configSync Property Map
    Config Sync configuration for the cluster.
    hierarchyController Property Map
    Hierarchy Controller configuration for the cluster.
    policyController Property Map
    Policy Controller configuration for the cluster.
    version String
    Version of ACM installed.

    ConfigManagementOciConfig, ConfigManagementOciConfigArgs

    GcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    PolicyDir string
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    SecretType string
    Type of secret configured for access to the Git repo.
    SyncRepo string
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    SyncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    GcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    PolicyDir string
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    SecretType string
    Type of secret configured for access to the Git repo.
    SyncRepo string
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    SyncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail String
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    policyDir String
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    secretType String
    Type of secret configured for access to the Git repo.
    syncRepo String
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    syncWaitSecs String
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    policyDir string
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    secretType string
    Type of secret configured for access to the Git repo.
    syncRepo string
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    syncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    gcp_service_account_email str
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    policy_dir str
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    secret_type str
    Type of secret configured for access to the Git repo.
    sync_repo str
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    sync_wait_secs str
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail String
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    policyDir String
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    secretType String
    Type of secret configured for access to the Git repo.
    syncRepo String
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    syncWaitSecs String
    Period in seconds between consecutive syncs. Default: 15.

    ConfigManagementOciConfigResponse, ConfigManagementOciConfigResponseArgs

    GcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    PolicyDir string
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    SecretType string
    Type of secret configured for access to the Git repo.
    SyncRepo string
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    SyncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    GcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    PolicyDir string
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    SecretType string
    Type of secret configured for access to the Git repo.
    SyncRepo string
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    SyncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail String
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    policyDir String
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    secretType String
    Type of secret configured for access to the Git repo.
    syncRepo String
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    syncWaitSecs String
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail string
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    policyDir string
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    secretType string
    Type of secret configured for access to the Git repo.
    syncRepo string
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    syncWaitSecs string
    Period in seconds between consecutive syncs. Default: 15.
    gcp_service_account_email str
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    policy_dir str
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    secret_type str
    Type of secret configured for access to the Git repo.
    sync_repo str
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    sync_wait_secs str
    Period in seconds between consecutive syncs. Default: 15.
    gcpServiceAccountEmail String
    The Google Cloud Service Account Email used for auth when secret_type is gcpServiceAccount.
    policyDir String
    The absolute path of the directory that contains the local resources. Default: the root directory of the image.
    secretType String
    Type of secret configured for access to the Git repo.
    syncRepo String
    The OCI image repository URL for the package to sync from. e.g. LOCATION-docker.pkg.dev/PROJECT_ID/REPOSITORY_NAME/PACKAGE_NAME.
    syncWaitSecs String
    Period in seconds between consecutive syncs. Default: 15.

    ConfigManagementPolicyController, ConfigManagementPolicyControllerArgs

    AuditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    Enabled bool
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    ExemptableNamespaces List<string>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    LogDeniesEnabled bool
    Logs all denies and dry run failures.
    Monitoring Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementPolicyControllerMonitoring
    Monitoring specifies the configuration of monitoring.
    MutationEnabled bool
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    ReferentialRulesEnabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    TemplateLibraryInstalled bool
    Installs the default template library along with Policy Controller.
    AuditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    Enabled bool
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    ExemptableNamespaces []string
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    LogDeniesEnabled bool
    Logs all denies and dry run failures.
    Monitoring ConfigManagementPolicyControllerMonitoring
    Monitoring specifies the configuration of monitoring.
    MutationEnabled bool
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    ReferentialRulesEnabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    TemplateLibraryInstalled bool
    Installs the default template library along with Policy Controller.
    auditIntervalSeconds String
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    enabled Boolean
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    exemptableNamespaces List<String>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    logDeniesEnabled Boolean
    Logs all denies and dry run failures.
    monitoring ConfigManagementPolicyControllerMonitoring
    Monitoring specifies the configuration of monitoring.
    mutationEnabled Boolean
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    referentialRulesEnabled Boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    templateLibraryInstalled Boolean
    Installs the default template library along with Policy Controller.
    auditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    enabled boolean
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    exemptableNamespaces string[]
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    logDeniesEnabled boolean
    Logs all denies and dry run failures.
    monitoring ConfigManagementPolicyControllerMonitoring
    Monitoring specifies the configuration of monitoring.
    mutationEnabled boolean
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    referentialRulesEnabled boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    templateLibraryInstalled boolean
    Installs the default template library along with Policy Controller.
    audit_interval_seconds str
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    enabled bool
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    exemptable_namespaces Sequence[str]
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    log_denies_enabled bool
    Logs all denies and dry run failures.
    monitoring ConfigManagementPolicyControllerMonitoring
    Monitoring specifies the configuration of monitoring.
    mutation_enabled bool
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    referential_rules_enabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    template_library_installed bool
    Installs the default template library along with Policy Controller.
    auditIntervalSeconds String
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    enabled Boolean
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    exemptableNamespaces List<String>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    logDeniesEnabled Boolean
    Logs all denies and dry run failures.
    monitoring Property Map
    Monitoring specifies the configuration of monitoring.
    mutationEnabled Boolean
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    referentialRulesEnabled Boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    templateLibraryInstalled Boolean
    Installs the default template library along with Policy Controller.

    ConfigManagementPolicyControllerMonitoring, ConfigManagementPolicyControllerMonitoringArgs

    Backends List<Pulumi.GoogleNative.GKEHub.V1Alpha.ConfigManagementPolicyControllerMonitoringBackendsItem>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    Backends []ConfigManagementPolicyControllerMonitoringBackendsItem
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends List<ConfigManagementPolicyControllerMonitoringBackendsItem>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends ConfigManagementPolicyControllerMonitoringBackendsItem[]
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends Sequence[ConfigManagementPolicyControllerMonitoringBackendsItem]
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends List<"MONITORING_BACKEND_UNSPECIFIED" | "PROMETHEUS" | "CLOUD_MONITORING">
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.

    ConfigManagementPolicyControllerMonitoringBackendsItem, ConfigManagementPolicyControllerMonitoringBackendsItemArgs

    MonitoringBackendUnspecified
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    Prometheus
    PROMETHEUSPrometheus backend for monitoring
    CloudMonitoring
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    ConfigManagementPolicyControllerMonitoringBackendsItemMonitoringBackendUnspecified
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    ConfigManagementPolicyControllerMonitoringBackendsItemPrometheus
    PROMETHEUSPrometheus backend for monitoring
    ConfigManagementPolicyControllerMonitoringBackendsItemCloudMonitoring
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    MonitoringBackendUnspecified
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    Prometheus
    PROMETHEUSPrometheus backend for monitoring
    CloudMonitoring
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    MonitoringBackendUnspecified
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    Prometheus
    PROMETHEUSPrometheus backend for monitoring
    CloudMonitoring
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    MONITORING_BACKEND_UNSPECIFIED
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    PROMETHEUS
    PROMETHEUSPrometheus backend for monitoring
    CLOUD_MONITORING
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    "MONITORING_BACKEND_UNSPECIFIED"
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    "PROMETHEUS"
    PROMETHEUSPrometheus backend for monitoring
    "CLOUD_MONITORING"
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring

    ConfigManagementPolicyControllerMonitoringResponse, ConfigManagementPolicyControllerMonitoringResponseArgs

    Backends List<string>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    Backends []string
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends List<String>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends string[]
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends Sequence[str]
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends List<String>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.

    ConfigManagementPolicyControllerResponse, ConfigManagementPolicyControllerResponseArgs

    AuditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    Enabled bool
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    ExemptableNamespaces List<string>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    LogDeniesEnabled bool
    Logs all denies and dry run failures.
    Monitoring Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ConfigManagementPolicyControllerMonitoringResponse
    Monitoring specifies the configuration of monitoring.
    MutationEnabled bool
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    ReferentialRulesEnabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    TemplateLibraryInstalled bool
    Installs the default template library along with Policy Controller.
    UpdateTime string
    Last time this membership spec was updated.
    AuditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    Enabled bool
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    ExemptableNamespaces []string
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    LogDeniesEnabled bool
    Logs all denies and dry run failures.
    Monitoring ConfigManagementPolicyControllerMonitoringResponse
    Monitoring specifies the configuration of monitoring.
    MutationEnabled bool
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    ReferentialRulesEnabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    TemplateLibraryInstalled bool
    Installs the default template library along with Policy Controller.
    UpdateTime string
    Last time this membership spec was updated.
    auditIntervalSeconds String
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    enabled Boolean
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    exemptableNamespaces List<String>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    logDeniesEnabled Boolean
    Logs all denies and dry run failures.
    monitoring ConfigManagementPolicyControllerMonitoringResponse
    Monitoring specifies the configuration of monitoring.
    mutationEnabled Boolean
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    referentialRulesEnabled Boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    templateLibraryInstalled Boolean
    Installs the default template library along with Policy Controller.
    updateTime String
    Last time this membership spec was updated.
    auditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    enabled boolean
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    exemptableNamespaces string[]
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    logDeniesEnabled boolean
    Logs all denies and dry run failures.
    monitoring ConfigManagementPolicyControllerMonitoringResponse
    Monitoring specifies the configuration of monitoring.
    mutationEnabled boolean
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    referentialRulesEnabled boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    templateLibraryInstalled boolean
    Installs the default template library along with Policy Controller.
    updateTime string
    Last time this membership spec was updated.
    audit_interval_seconds str
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    enabled bool
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    exemptable_namespaces Sequence[str]
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    log_denies_enabled bool
    Logs all denies and dry run failures.
    monitoring ConfigManagementPolicyControllerMonitoringResponse
    Monitoring specifies the configuration of monitoring.
    mutation_enabled bool
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    referential_rules_enabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    template_library_installed bool
    Installs the default template library along with Policy Controller.
    update_time str
    Last time this membership spec was updated.
    auditIntervalSeconds String
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    enabled Boolean
    Enables the installation of Policy Controller. If false, the rest of PolicyController fields take no effect.
    exemptableNamespaces List<String>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    logDeniesEnabled Boolean
    Logs all denies and dry run failures.
    monitoring Property Map
    Monitoring specifies the configuration of monitoring.
    mutationEnabled Boolean
    Enable or disable mutation in policy controller. If true, mutation CRDs, webhook and controller deployment will be deployed to the cluster.
    referentialRulesEnabled Boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    templateLibraryInstalled Boolean
    Installs the default template library along with Policy Controller.
    updateTime String
    Last time this membership spec was updated.

    FeatureResourceStateResponse, FeatureResourceStateResponseArgs

    State string
    The current state of the Feature resource in the Hub API.
    State string
    The current state of the Feature resource in the Hub API.
    state String
    The current state of the Feature resource in the Hub API.
    state string
    The current state of the Feature resource in the Hub API.
    state str
    The current state of the Feature resource in the Hub API.
    state String
    The current state of the Feature resource in the Hub API.

    FeatureSpec, FeatureSpecArgs

    DefaultConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.MembershipSpec
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    ProvisionGoogleCa Pulumi.GoogleNative.GKEHub.V1Alpha.FeatureSpecProvisionGoogleCa
    Immutable. Specifies CA configuration.
    DefaultConfig MembershipSpec
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    ProvisionGoogleCa FeatureSpecProvisionGoogleCa
    Immutable. Specifies CA configuration.
    defaultConfig MembershipSpec
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    provisionGoogleCa FeatureSpecProvisionGoogleCa
    Immutable. Specifies CA configuration.
    defaultConfig MembershipSpec
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    provisionGoogleCa FeatureSpecProvisionGoogleCa
    Immutable. Specifies CA configuration.
    default_config MembershipSpec
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    provision_google_ca FeatureSpecProvisionGoogleCa
    Immutable. Specifies CA configuration.
    defaultConfig Property Map
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    provisionGoogleCa "GOOGLE_CA_PROVISIONING_UNSPECIFIED" | "DISABLED" | "ENABLED" | "ENABLED_WITH_MANAGED_CA" | "ENABLED_WITH_DEFAULT_CA"
    Immutable. Specifies CA configuration.

    FeatureSpecProvisionGoogleCa, FeatureSpecProvisionGoogleCaArgs

    GoogleCaProvisioningUnspecified
    GOOGLE_CA_PROVISIONING_UNSPECIFIEDDisable default Google managed CA.
    Disabled
    DISABLEDDisable default Google managed CA.
    Enabled
    ENABLEDUse default Google managed CA.
    EnabledWithManagedCa
    ENABLED_WITH_MANAGED_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is managed by Google with managed CAS which is more secure than the default CA.
    EnabledWithDefaultCa
    ENABLED_WITH_DEFAULT_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is using the default CA which is free.
    FeatureSpecProvisionGoogleCaGoogleCaProvisioningUnspecified
    GOOGLE_CA_PROVISIONING_UNSPECIFIEDDisable default Google managed CA.
    FeatureSpecProvisionGoogleCaDisabled
    DISABLEDDisable default Google managed CA.
    FeatureSpecProvisionGoogleCaEnabled
    ENABLEDUse default Google managed CA.
    FeatureSpecProvisionGoogleCaEnabledWithManagedCa
    ENABLED_WITH_MANAGED_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is managed by Google with managed CAS which is more secure than the default CA.
    FeatureSpecProvisionGoogleCaEnabledWithDefaultCa
    ENABLED_WITH_DEFAULT_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is using the default CA which is free.
    GoogleCaProvisioningUnspecified
    GOOGLE_CA_PROVISIONING_UNSPECIFIEDDisable default Google managed CA.
    Disabled
    DISABLEDDisable default Google managed CA.
    Enabled
    ENABLEDUse default Google managed CA.
    EnabledWithManagedCa
    ENABLED_WITH_MANAGED_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is managed by Google with managed CAS which is more secure than the default CA.
    EnabledWithDefaultCa
    ENABLED_WITH_DEFAULT_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is using the default CA which is free.
    GoogleCaProvisioningUnspecified
    GOOGLE_CA_PROVISIONING_UNSPECIFIEDDisable default Google managed CA.
    Disabled
    DISABLEDDisable default Google managed CA.
    Enabled
    ENABLEDUse default Google managed CA.
    EnabledWithManagedCa
    ENABLED_WITH_MANAGED_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is managed by Google with managed CAS which is more secure than the default CA.
    EnabledWithDefaultCa
    ENABLED_WITH_DEFAULT_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is using the default CA which is free.
    GOOGLE_CA_PROVISIONING_UNSPECIFIED
    GOOGLE_CA_PROVISIONING_UNSPECIFIEDDisable default Google managed CA.
    DISABLED
    DISABLEDDisable default Google managed CA.
    ENABLED
    ENABLEDUse default Google managed CA.
    ENABLED_WITH_MANAGED_CA
    ENABLED_WITH_MANAGED_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is managed by Google with managed CAS which is more secure than the default CA.
    ENABLED_WITH_DEFAULT_CA
    ENABLED_WITH_DEFAULT_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is using the default CA which is free.
    "GOOGLE_CA_PROVISIONING_UNSPECIFIED"
    GOOGLE_CA_PROVISIONING_UNSPECIFIEDDisable default Google managed CA.
    "DISABLED"
    DISABLEDDisable default Google managed CA.
    "ENABLED"
    ENABLEDUse default Google managed CA.
    "ENABLED_WITH_MANAGED_CA"
    ENABLED_WITH_MANAGED_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is managed by Google with managed CAS which is more secure than the default CA.
    "ENABLED_WITH_DEFAULT_CA"
    ENABLED_WITH_DEFAULT_CAWorkload certificate feature is enabled, and the entire certificate provisioning process is using the default CA which is free.

    FeatureSpecResponse, FeatureSpecResponseArgs

    DefaultConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.MembershipSpecResponse
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    ProvisionGoogleCa string
    Immutable. Specifies CA configuration.
    DefaultConfig MembershipSpecResponse
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    ProvisionGoogleCa string
    Immutable. Specifies CA configuration.
    defaultConfig MembershipSpecResponse
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    provisionGoogleCa String
    Immutable. Specifies CA configuration.
    defaultConfig MembershipSpecResponse
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    provisionGoogleCa string
    Immutable. Specifies CA configuration.
    default_config MembershipSpecResponse
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    provision_google_ca str
    Immutable. Specifies CA configuration.
    defaultConfig Property Map
    Specifies default membership spec. Users can override the default in the member_configs for each member.
    provisionGoogleCa String
    Immutable. Specifies CA configuration.

    FeatureStateResponse, FeatureStateResponseArgs

    Code string
    The high-level, machine-readable status of this Feature.
    Description string
    A human-readable description of the current status.
    UpdateTime string
    The time this status and any related Feature-specific details were updated.
    Code string
    The high-level, machine-readable status of this Feature.
    Description string
    A human-readable description of the current status.
    UpdateTime string
    The time this status and any related Feature-specific details were updated.
    code String
    The high-level, machine-readable status of this Feature.
    description String
    A human-readable description of the current status.
    updateTime String
    The time this status and any related Feature-specific details were updated.
    code string
    The high-level, machine-readable status of this Feature.
    description string
    A human-readable description of the current status.
    updateTime string
    The time this status and any related Feature-specific details were updated.
    code str
    The high-level, machine-readable status of this Feature.
    description str
    A human-readable description of the current status.
    update_time str
    The time this status and any related Feature-specific details were updated.
    code String
    The high-level, machine-readable status of this Feature.
    description String
    A human-readable description of the current status.
    updateTime String
    The time this status and any related Feature-specific details were updated.

    FleetObservabilityFeatureErrorResponse, FleetObservabilityFeatureErrorResponseArgs

    Code string
    The code of the error.
    Description string
    A human-readable description of the current status.
    Code string
    The code of the error.
    Description string
    A human-readable description of the current status.
    code String
    The code of the error.
    description String
    A human-readable description of the current status.
    code string
    The code of the error.
    description string
    A human-readable description of the current status.
    code str
    The code of the error.
    description str
    A human-readable description of the current status.
    code String
    The code of the error.
    description String
    A human-readable description of the current status.

    FleetObservabilityFeatureSpec, FleetObservabilityFeatureSpecArgs

    LoggingConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityLoggingConfig
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    LoggingConfig FleetObservabilityLoggingConfig
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    loggingConfig FleetObservabilityLoggingConfig
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    loggingConfig FleetObservabilityLoggingConfig
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    logging_config FleetObservabilityLoggingConfig
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    loggingConfig Property Map
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.

    FleetObservabilityFeatureSpecResponse, FleetObservabilityFeatureSpecResponseArgs

    LoggingConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityLoggingConfigResponse
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    LoggingConfig FleetObservabilityLoggingConfigResponse
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    loggingConfig FleetObservabilityLoggingConfigResponse
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    loggingConfig FleetObservabilityLoggingConfigResponse
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    logging_config FleetObservabilityLoggingConfigResponse
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.
    loggingConfig Property Map
    Specified if fleet logging feature is enabled for the entire fleet. If UNSPECIFIED, fleet logging feature is disabled for the entire fleet.

    FleetObservabilityFeatureStateResponse, FleetObservabilityFeatureStateResponseArgs

    logging Property Map
    The feature state of default logging.
    monitoring Property Map
    The feature state of fleet monitoring.

    FleetObservabilityFleetObservabilityBaseFeatureStateResponse, FleetObservabilityFleetObservabilityBaseFeatureStateResponseArgs

    Code string
    The high-level, machine-readable status of this Feature.
    Errors List<Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityFeatureErrorResponse>
    Errors after reconciling the monitoring and logging feature if the code is not OK.
    Code string
    The high-level, machine-readable status of this Feature.
    Errors []FleetObservabilityFeatureErrorResponse
    Errors after reconciling the monitoring and logging feature if the code is not OK.
    code String
    The high-level, machine-readable status of this Feature.
    errors List<FleetObservabilityFeatureErrorResponse>
    Errors after reconciling the monitoring and logging feature if the code is not OK.
    code string
    The high-level, machine-readable status of this Feature.
    errors FleetObservabilityFeatureErrorResponse[]
    Errors after reconciling the monitoring and logging feature if the code is not OK.
    code str
    The high-level, machine-readable status of this Feature.
    errors Sequence[FleetObservabilityFeatureErrorResponse]
    Errors after reconciling the monitoring and logging feature if the code is not OK.
    code String
    The high-level, machine-readable status of this Feature.
    errors List<Property Map>
    Errors after reconciling the monitoring and logging feature if the code is not OK.

    FleetObservabilityFleetObservabilityLoggingStateResponse, FleetObservabilityFleetObservabilityLoggingStateResponseArgs

    defaultLog Property Map
    The base feature state of fleet default log.
    scopeLog Property Map
    The base feature state of fleet scope log.

    FleetObservabilityFleetObservabilityMonitoringStateResponse, FleetObservabilityFleetObservabilityMonitoringStateResponseArgs

    State FleetObservabilityFleetObservabilityBaseFeatureStateResponse
    The base feature state of fleet monitoring feature.
    state FleetObservabilityFleetObservabilityBaseFeatureStateResponse
    The base feature state of fleet monitoring feature.
    state FleetObservabilityFleetObservabilityBaseFeatureStateResponse
    The base feature state of fleet monitoring feature.
    state FleetObservabilityFleetObservabilityBaseFeatureStateResponse
    The base feature state of fleet monitoring feature.
    state Property Map
    The base feature state of fleet monitoring feature.

    FleetObservabilityLoggingConfig, FleetObservabilityLoggingConfigArgs

    DefaultConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityRoutingConfig
    Specified if applying the default routing config to logs not specified in other configs.
    FleetScopeLogsConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityRoutingConfig
    Specified if applying the routing config to all logs for all fleet scopes.
    DefaultConfig FleetObservabilityRoutingConfig
    Specified if applying the default routing config to logs not specified in other configs.
    FleetScopeLogsConfig FleetObservabilityRoutingConfig
    Specified if applying the routing config to all logs for all fleet scopes.
    defaultConfig FleetObservabilityRoutingConfig
    Specified if applying the default routing config to logs not specified in other configs.
    fleetScopeLogsConfig FleetObservabilityRoutingConfig
    Specified if applying the routing config to all logs for all fleet scopes.
    defaultConfig FleetObservabilityRoutingConfig
    Specified if applying the default routing config to logs not specified in other configs.
    fleetScopeLogsConfig FleetObservabilityRoutingConfig
    Specified if applying the routing config to all logs for all fleet scopes.
    default_config FleetObservabilityRoutingConfig
    Specified if applying the default routing config to logs not specified in other configs.
    fleet_scope_logs_config FleetObservabilityRoutingConfig
    Specified if applying the routing config to all logs for all fleet scopes.
    defaultConfig Property Map
    Specified if applying the default routing config to logs not specified in other configs.
    fleetScopeLogsConfig Property Map
    Specified if applying the routing config to all logs for all fleet scopes.

    FleetObservabilityLoggingConfigResponse, FleetObservabilityLoggingConfigResponseArgs

    DefaultConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityRoutingConfigResponse
    Specified if applying the default routing config to logs not specified in other configs.
    FleetScopeLogsConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.FleetObservabilityRoutingConfigResponse
    Specified if applying the routing config to all logs for all fleet scopes.
    DefaultConfig FleetObservabilityRoutingConfigResponse
    Specified if applying the default routing config to logs not specified in other configs.
    FleetScopeLogsConfig FleetObservabilityRoutingConfigResponse
    Specified if applying the routing config to all logs for all fleet scopes.
    defaultConfig FleetObservabilityRoutingConfigResponse
    Specified if applying the default routing config to logs not specified in other configs.
    fleetScopeLogsConfig FleetObservabilityRoutingConfigResponse
    Specified if applying the routing config to all logs for all fleet scopes.
    defaultConfig FleetObservabilityRoutingConfigResponse
    Specified if applying the default routing config to logs not specified in other configs.
    fleetScopeLogsConfig FleetObservabilityRoutingConfigResponse
    Specified if applying the routing config to all logs for all fleet scopes.
    default_config FleetObservabilityRoutingConfigResponse
    Specified if applying the default routing config to logs not specified in other configs.
    fleet_scope_logs_config FleetObservabilityRoutingConfigResponse
    Specified if applying the routing config to all logs for all fleet scopes.
    defaultConfig Property Map
    Specified if applying the default routing config to logs not specified in other configs.
    fleetScopeLogsConfig Property Map
    Specified if applying the routing config to all logs for all fleet scopes.

    FleetObservabilityRoutingConfig, FleetObservabilityRoutingConfigArgs

    Mode FleetObservabilityRoutingConfigMode
    mode configures the logs routing mode.
    mode FleetObservabilityRoutingConfigMode
    mode configures the logs routing mode.
    mode FleetObservabilityRoutingConfigMode
    mode configures the logs routing mode.
    mode FleetObservabilityRoutingConfigMode
    mode configures the logs routing mode.
    mode "MODE_UNSPECIFIED" | "COPY" | "MOVE"
    mode configures the logs routing mode.

    FleetObservabilityRoutingConfigMode, FleetObservabilityRoutingConfigModeArgs

    ModeUnspecified
    MODE_UNSPECIFIEDIf UNSPECIFIED, fleet logging feature is disabled.
    Copy
    COPYlogs will be copied to the destination project.
    Move
    MOVElogs will be moved to the destination project.
    FleetObservabilityRoutingConfigModeModeUnspecified
    MODE_UNSPECIFIEDIf UNSPECIFIED, fleet logging feature is disabled.
    FleetObservabilityRoutingConfigModeCopy
    COPYlogs will be copied to the destination project.
    FleetObservabilityRoutingConfigModeMove
    MOVElogs will be moved to the destination project.
    ModeUnspecified
    MODE_UNSPECIFIEDIf UNSPECIFIED, fleet logging feature is disabled.
    Copy
    COPYlogs will be copied to the destination project.
    Move
    MOVElogs will be moved to the destination project.
    ModeUnspecified
    MODE_UNSPECIFIEDIf UNSPECIFIED, fleet logging feature is disabled.
    Copy
    COPYlogs will be copied to the destination project.
    Move
    MOVElogs will be moved to the destination project.
    MODE_UNSPECIFIED
    MODE_UNSPECIFIEDIf UNSPECIFIED, fleet logging feature is disabled.
    COPY
    COPYlogs will be copied to the destination project.
    MOVE
    MOVElogs will be moved to the destination project.
    "MODE_UNSPECIFIED"
    MODE_UNSPECIFIEDIf UNSPECIFIED, fleet logging feature is disabled.
    "COPY"
    COPYlogs will be copied to the destination project.
    "MOVE"
    MOVElogs will be moved to the destination project.

    FleetObservabilityRoutingConfigResponse, FleetObservabilityRoutingConfigResponseArgs

    Mode string
    mode configures the logs routing mode.
    Mode string
    mode configures the logs routing mode.
    mode String
    mode configures the logs routing mode.
    mode string
    mode configures the logs routing mode.
    mode str
    mode configures the logs routing mode.
    mode String
    mode configures the logs routing mode.

    IdentityServiceAuthMethod, IdentityServiceAuthMethodArgs

    AzureadConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceAzureADConfig
    AzureAD specific Configuration.
    GoogleConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceGoogleConfig
    GoogleConfig specific configuration.
    Name string
    Identifier for auth config.
    OidcConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceOidcConfig
    OIDC specific configuration.
    Proxy string
    Proxy server address to use for auth method.
    AzureadConfig IdentityServiceAzureADConfig
    AzureAD specific Configuration.
    GoogleConfig IdentityServiceGoogleConfig
    GoogleConfig specific configuration.
    Name string
    Identifier for auth config.
    OidcConfig IdentityServiceOidcConfig
    OIDC specific configuration.
    Proxy string
    Proxy server address to use for auth method.
    azureadConfig IdentityServiceAzureADConfig
    AzureAD specific Configuration.
    googleConfig IdentityServiceGoogleConfig
    GoogleConfig specific configuration.
    name String
    Identifier for auth config.
    oidcConfig IdentityServiceOidcConfig
    OIDC specific configuration.
    proxy String
    Proxy server address to use for auth method.
    azureadConfig IdentityServiceAzureADConfig
    AzureAD specific Configuration.
    googleConfig IdentityServiceGoogleConfig
    GoogleConfig specific configuration.
    name string
    Identifier for auth config.
    oidcConfig IdentityServiceOidcConfig
    OIDC specific configuration.
    proxy string
    Proxy server address to use for auth method.
    azuread_config IdentityServiceAzureADConfig
    AzureAD specific Configuration.
    google_config IdentityServiceGoogleConfig
    GoogleConfig specific configuration.
    name str
    Identifier for auth config.
    oidc_config IdentityServiceOidcConfig
    OIDC specific configuration.
    proxy str
    Proxy server address to use for auth method.
    azureadConfig Property Map
    AzureAD specific Configuration.
    googleConfig Property Map
    GoogleConfig specific configuration.
    name String
    Identifier for auth config.
    oidcConfig Property Map
    OIDC specific configuration.
    proxy String
    Proxy server address to use for auth method.

    IdentityServiceAuthMethodResponse, IdentityServiceAuthMethodResponseArgs

    AzureadConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceAzureADConfigResponse
    AzureAD specific Configuration.
    GoogleConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceGoogleConfigResponse
    GoogleConfig specific configuration.
    Name string
    Identifier for auth config.
    OidcConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.IdentityServiceOidcConfigResponse
    OIDC specific configuration.
    Proxy string
    Proxy server address to use for auth method.
    AzureadConfig IdentityServiceAzureADConfigResponse
    AzureAD specific Configuration.
    GoogleConfig IdentityServiceGoogleConfigResponse
    GoogleConfig specific configuration.
    Name string
    Identifier for auth config.
    OidcConfig IdentityServiceOidcConfigResponse
    OIDC specific configuration.
    Proxy string
    Proxy server address to use for auth method.
    azureadConfig IdentityServiceAzureADConfigResponse
    AzureAD specific Configuration.
    googleConfig IdentityServiceGoogleConfigResponse
    GoogleConfig specific configuration.
    name String
    Identifier for auth config.
    oidcConfig IdentityServiceOidcConfigResponse
    OIDC specific configuration.
    proxy String
    Proxy server address to use for auth method.
    azureadConfig IdentityServiceAzureADConfigResponse
    AzureAD specific Configuration.
    googleConfig IdentityServiceGoogleConfigResponse
    GoogleConfig specific configuration.
    name string
    Identifier for auth config.
    oidcConfig IdentityServiceOidcConfigResponse
    OIDC specific configuration.
    proxy string
    Proxy server address to use for auth method.
    azuread_config IdentityServiceAzureADConfigResponse
    AzureAD specific Configuration.
    google_config IdentityServiceGoogleConfigResponse
    GoogleConfig specific configuration.
    name str
    Identifier for auth config.
    oidc_config IdentityServiceOidcConfigResponse
    OIDC specific configuration.
    proxy str
    Proxy server address to use for auth method.
    azureadConfig Property Map
    AzureAD specific Configuration.
    googleConfig Property Map
    GoogleConfig specific configuration.
    name String
    Identifier for auth config.
    oidcConfig Property Map
    OIDC specific configuration.
    proxy String
    Proxy server address to use for auth method.

    IdentityServiceAzureADConfig, IdentityServiceAzureADConfigArgs

    ClientId string
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    ClientSecret string
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    KubectlRedirectUri string
    The redirect URL that kubectl uses for authorization.
    Tenant string
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    ClientId string
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    ClientSecret string
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    KubectlRedirectUri string
    The redirect URL that kubectl uses for authorization.
    Tenant string
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    clientId String
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    clientSecret String
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    kubectlRedirectUri String
    The redirect URL that kubectl uses for authorization.
    tenant String
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    clientId string
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    clientSecret string
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    kubectlRedirectUri string
    The redirect URL that kubectl uses for authorization.
    tenant string
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    client_id str
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    client_secret str
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    kubectl_redirect_uri str
    The redirect URL that kubectl uses for authorization.
    tenant str
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    clientId String
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    clientSecret String
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    kubectlRedirectUri String
    The redirect URL that kubectl uses for authorization.
    tenant String
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.

    IdentityServiceAzureADConfigResponse, IdentityServiceAzureADConfigResponseArgs

    ClientId string
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    ClientSecret string
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    EncryptedClientSecret string
    Encrypted AzureAD client secret.
    KubectlRedirectUri string
    The redirect URL that kubectl uses for authorization.
    Tenant string
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    ClientId string
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    ClientSecret string
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    EncryptedClientSecret string
    Encrypted AzureAD client secret.
    KubectlRedirectUri string
    The redirect URL that kubectl uses for authorization.
    Tenant string
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    clientId String
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    clientSecret String
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    encryptedClientSecret String
    Encrypted AzureAD client secret.
    kubectlRedirectUri String
    The redirect URL that kubectl uses for authorization.
    tenant String
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    clientId string
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    clientSecret string
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    encryptedClientSecret string
    Encrypted AzureAD client secret.
    kubectlRedirectUri string
    The redirect URL that kubectl uses for authorization.
    tenant string
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    client_id str
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    client_secret str
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    encrypted_client_secret str
    Encrypted AzureAD client secret.
    kubectl_redirect_uri str
    The redirect URL that kubectl uses for authorization.
    tenant str
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.
    clientId String
    ID for the registered client application that makes authentication requests to the Azure AD identity provider.
    clientSecret String
    Input only. Unencrypted AzureAD client secret will be passed to the GKE Hub CLH.
    encryptedClientSecret String
    Encrypted AzureAD client secret.
    kubectlRedirectUri String
    The redirect URL that kubectl uses for authorization.
    tenant String
    Kind of Azure AD account to be authenticated. Supported values are or for accounts belonging to a specific tenant.

    IdentityServiceGoogleConfig, IdentityServiceGoogleConfigArgs

    Disable bool
    Disable automatic configuration of Google Plugin on supported platforms.
    Disable bool
    Disable automatic configuration of Google Plugin on supported platforms.
    disable Boolean
    Disable automatic configuration of Google Plugin on supported platforms.
    disable boolean
    Disable automatic configuration of Google Plugin on supported platforms.
    disable bool
    Disable automatic configuration of Google Plugin on supported platforms.
    disable Boolean
    Disable automatic configuration of Google Plugin on supported platforms.

    IdentityServiceGoogleConfigResponse, IdentityServiceGoogleConfigResponseArgs

    Disable bool
    Disable automatic configuration of Google Plugin on supported platforms.
    Disable bool
    Disable automatic configuration of Google Plugin on supported platforms.
    disable Boolean
    Disable automatic configuration of Google Plugin on supported platforms.
    disable boolean
    Disable automatic configuration of Google Plugin on supported platforms.
    disable bool
    Disable automatic configuration of Google Plugin on supported platforms.
    disable Boolean
    Disable automatic configuration of Google Plugin on supported platforms.

    IdentityServiceMembershipSpec, IdentityServiceMembershipSpecArgs

    AuthMethods []IdentityServiceAuthMethod
    A member may support multiple auth methods.
    authMethods List<IdentityServiceAuthMethod>
    A member may support multiple auth methods.
    authMethods IdentityServiceAuthMethod[]
    A member may support multiple auth methods.
    auth_methods Sequence[IdentityServiceAuthMethod]
    A member may support multiple auth methods.
    authMethods List<Property Map>
    A member may support multiple auth methods.

    IdentityServiceMembershipSpecResponse, IdentityServiceMembershipSpecResponseArgs

    AuthMethods []IdentityServiceAuthMethodResponse
    A member may support multiple auth methods.
    authMethods List<IdentityServiceAuthMethodResponse>
    A member may support multiple auth methods.
    authMethods IdentityServiceAuthMethodResponse[]
    A member may support multiple auth methods.
    auth_methods Sequence[IdentityServiceAuthMethodResponse]
    A member may support multiple auth methods.
    authMethods List<Property Map>
    A member may support multiple auth methods.

    IdentityServiceOidcConfig, IdentityServiceOidcConfigArgs

    CertificateAuthorityData string
    PEM-encoded CA for OIDC provider.
    ClientId string
    ID for OIDC client application.
    ClientSecret string
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    DeployCloudConsoleProxy bool
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    EnableAccessToken bool
    Enable access token.
    ExtraParams string
    Comma-separated list of key-value pairs.
    GroupPrefix string
    Prefix to prepend to group name.
    GroupsClaim string
    Claim in OIDC ID token that holds group information.
    IssuerUri string
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    KubectlRedirectUri string
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    Scopes string
    Comma-separated list of identifiers.
    UserClaim string
    Claim in OIDC ID token that holds username.
    UserPrefix string
    Prefix to prepend to user name.
    CertificateAuthorityData string
    PEM-encoded CA for OIDC provider.
    ClientId string
    ID for OIDC client application.
    ClientSecret string
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    DeployCloudConsoleProxy bool
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    EnableAccessToken bool
    Enable access token.
    ExtraParams string
    Comma-separated list of key-value pairs.
    GroupPrefix string
    Prefix to prepend to group name.
    GroupsClaim string
    Claim in OIDC ID token that holds group information.
    IssuerUri string
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    KubectlRedirectUri string
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    Scopes string
    Comma-separated list of identifiers.
    UserClaim string
    Claim in OIDC ID token that holds username.
    UserPrefix string
    Prefix to prepend to user name.
    certificateAuthorityData String
    PEM-encoded CA for OIDC provider.
    clientId String
    ID for OIDC client application.
    clientSecret String
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    deployCloudConsoleProxy Boolean
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    enableAccessToken Boolean
    Enable access token.
    extraParams String
    Comma-separated list of key-value pairs.
    groupPrefix String
    Prefix to prepend to group name.
    groupsClaim String
    Claim in OIDC ID token that holds group information.
    issuerUri String
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    kubectlRedirectUri String
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    scopes String
    Comma-separated list of identifiers.
    userClaim String
    Claim in OIDC ID token that holds username.
    userPrefix String
    Prefix to prepend to user name.
    certificateAuthorityData string
    PEM-encoded CA for OIDC provider.
    clientId string
    ID for OIDC client application.
    clientSecret string
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    deployCloudConsoleProxy boolean
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    enableAccessToken boolean
    Enable access token.
    extraParams string
    Comma-separated list of key-value pairs.
    groupPrefix string
    Prefix to prepend to group name.
    groupsClaim string
    Claim in OIDC ID token that holds group information.
    issuerUri string
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    kubectlRedirectUri string
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    scopes string
    Comma-separated list of identifiers.
    userClaim string
    Claim in OIDC ID token that holds username.
    userPrefix string
    Prefix to prepend to user name.
    certificate_authority_data str
    PEM-encoded CA for OIDC provider.
    client_id str
    ID for OIDC client application.
    client_secret str
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    deploy_cloud_console_proxy bool
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    enable_access_token bool
    Enable access token.
    extra_params str
    Comma-separated list of key-value pairs.
    group_prefix str
    Prefix to prepend to group name.
    groups_claim str
    Claim in OIDC ID token that holds group information.
    issuer_uri str
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    kubectl_redirect_uri str
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    scopes str
    Comma-separated list of identifiers.
    user_claim str
    Claim in OIDC ID token that holds username.
    user_prefix str
    Prefix to prepend to user name.
    certificateAuthorityData String
    PEM-encoded CA for OIDC provider.
    clientId String
    ID for OIDC client application.
    clientSecret String
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    deployCloudConsoleProxy Boolean
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    enableAccessToken Boolean
    Enable access token.
    extraParams String
    Comma-separated list of key-value pairs.
    groupPrefix String
    Prefix to prepend to group name.
    groupsClaim String
    Claim in OIDC ID token that holds group information.
    issuerUri String
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    kubectlRedirectUri String
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    scopes String
    Comma-separated list of identifiers.
    userClaim String
    Claim in OIDC ID token that holds username.
    userPrefix String
    Prefix to prepend to user name.

    IdentityServiceOidcConfigResponse, IdentityServiceOidcConfigResponseArgs

    CertificateAuthorityData string
    PEM-encoded CA for OIDC provider.
    ClientId string
    ID for OIDC client application.
    ClientSecret string
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    DeployCloudConsoleProxy bool
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    EnableAccessToken bool
    Enable access token.
    EncryptedClientSecret string
    Encrypted OIDC Client secret
    ExtraParams string
    Comma-separated list of key-value pairs.
    GroupPrefix string
    Prefix to prepend to group name.
    GroupsClaim string
    Claim in OIDC ID token that holds group information.
    IssuerUri string
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    KubectlRedirectUri string
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    Scopes string
    Comma-separated list of identifiers.
    UserClaim string
    Claim in OIDC ID token that holds username.
    UserPrefix string
    Prefix to prepend to user name.
    CertificateAuthorityData string
    PEM-encoded CA for OIDC provider.
    ClientId string
    ID for OIDC client application.
    ClientSecret string
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    DeployCloudConsoleProxy bool
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    EnableAccessToken bool
    Enable access token.
    EncryptedClientSecret string
    Encrypted OIDC Client secret
    ExtraParams string
    Comma-separated list of key-value pairs.
    GroupPrefix string
    Prefix to prepend to group name.
    GroupsClaim string
    Claim in OIDC ID token that holds group information.
    IssuerUri string
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    KubectlRedirectUri string
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    Scopes string
    Comma-separated list of identifiers.
    UserClaim string
    Claim in OIDC ID token that holds username.
    UserPrefix string
    Prefix to prepend to user name.
    certificateAuthorityData String
    PEM-encoded CA for OIDC provider.
    clientId String
    ID for OIDC client application.
    clientSecret String
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    deployCloudConsoleProxy Boolean
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    enableAccessToken Boolean
    Enable access token.
    encryptedClientSecret String
    Encrypted OIDC Client secret
    extraParams String
    Comma-separated list of key-value pairs.
    groupPrefix String
    Prefix to prepend to group name.
    groupsClaim String
    Claim in OIDC ID token that holds group information.
    issuerUri String
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    kubectlRedirectUri String
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    scopes String
    Comma-separated list of identifiers.
    userClaim String
    Claim in OIDC ID token that holds username.
    userPrefix String
    Prefix to prepend to user name.
    certificateAuthorityData string
    PEM-encoded CA for OIDC provider.
    clientId string
    ID for OIDC client application.
    clientSecret string
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    deployCloudConsoleProxy boolean
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    enableAccessToken boolean
    Enable access token.
    encryptedClientSecret string
    Encrypted OIDC Client secret
    extraParams string
    Comma-separated list of key-value pairs.
    groupPrefix string
    Prefix to prepend to group name.
    groupsClaim string
    Claim in OIDC ID token that holds group information.
    issuerUri string
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    kubectlRedirectUri string
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    scopes string
    Comma-separated list of identifiers.
    userClaim string
    Claim in OIDC ID token that holds username.
    userPrefix string
    Prefix to prepend to user name.
    certificate_authority_data str
    PEM-encoded CA for OIDC provider.
    client_id str
    ID for OIDC client application.
    client_secret str
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    deploy_cloud_console_proxy bool
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    enable_access_token bool
    Enable access token.
    encrypted_client_secret str
    Encrypted OIDC Client secret
    extra_params str
    Comma-separated list of key-value pairs.
    group_prefix str
    Prefix to prepend to group name.
    groups_claim str
    Claim in OIDC ID token that holds group information.
    issuer_uri str
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    kubectl_redirect_uri str
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    scopes str
    Comma-separated list of identifiers.
    user_claim str
    Claim in OIDC ID token that holds username.
    user_prefix str
    Prefix to prepend to user name.
    certificateAuthorityData String
    PEM-encoded CA for OIDC provider.
    clientId String
    ID for OIDC client application.
    clientSecret String
    Input only. Unencrypted OIDC client secret will be passed to the GKE Hub CLH.
    deployCloudConsoleProxy Boolean
    Flag to denote if reverse proxy is used to connect to auth provider. This flag should be set to true when provider is not reachable by Google Cloud Console.
    enableAccessToken Boolean
    Enable access token.
    encryptedClientSecret String
    Encrypted OIDC Client secret
    extraParams String
    Comma-separated list of key-value pairs.
    groupPrefix String
    Prefix to prepend to group name.
    groupsClaim String
    Claim in OIDC ID token that holds group information.
    issuerUri String
    URI for the OIDC provider. This should point to the level below .well-known/openid-configuration.
    kubectlRedirectUri String
    Registered redirect uri to redirect users going through OAuth flow using kubectl plugin.
    scopes String
    Comma-separated list of identifiers.
    userClaim String
    Claim in OIDC ID token that holds username.
    userPrefix String
    Prefix to prepend to user name.

    MembershipSpec, MembershipSpecArgs

    CertificateManagement MembershipSpecCertificateManagement
    Specifies workload certificate management.
    certificateManagement MembershipSpecCertificateManagement
    Specifies workload certificate management.
    certificateManagement MembershipSpecCertificateManagement
    Specifies workload certificate management.
    certificate_management MembershipSpecCertificateManagement
    Specifies workload certificate management.

    MembershipSpecCertificateManagement, MembershipSpecCertificateManagementArgs

    CertificateManagementUnspecified
    CERTIFICATE_MANAGEMENT_UNSPECIFIEDDisable workload certificate feature.
    Disabled
    DISABLEDDisable workload certificate feature.
    Enabled
    ENABLEDEnable workload certificate feature.
    MembershipSpecCertificateManagementCertificateManagementUnspecified
    CERTIFICATE_MANAGEMENT_UNSPECIFIEDDisable workload certificate feature.
    MembershipSpecCertificateManagementDisabled
    DISABLEDDisable workload certificate feature.
    MembershipSpecCertificateManagementEnabled
    ENABLEDEnable workload certificate feature.
    CertificateManagementUnspecified
    CERTIFICATE_MANAGEMENT_UNSPECIFIEDDisable workload certificate feature.
    Disabled
    DISABLEDDisable workload certificate feature.
    Enabled
    ENABLEDEnable workload certificate feature.
    CertificateManagementUnspecified
    CERTIFICATE_MANAGEMENT_UNSPECIFIEDDisable workload certificate feature.
    Disabled
    DISABLEDDisable workload certificate feature.
    Enabled
    ENABLEDEnable workload certificate feature.
    CERTIFICATE_MANAGEMENT_UNSPECIFIED
    CERTIFICATE_MANAGEMENT_UNSPECIFIEDDisable workload certificate feature.
    DISABLED
    DISABLEDDisable workload certificate feature.
    ENABLED
    ENABLEDEnable workload certificate feature.
    "CERTIFICATE_MANAGEMENT_UNSPECIFIED"
    CERTIFICATE_MANAGEMENT_UNSPECIFIEDDisable workload certificate feature.
    "DISABLED"
    DISABLEDDisable workload certificate feature.
    "ENABLED"
    ENABLEDEnable workload certificate feature.

    MembershipSpecResponse, MembershipSpecResponseArgs

    CertificateManagement string
    Specifies workload certificate management.
    CertificateManagement string
    Specifies workload certificate management.
    certificateManagement String
    Specifies workload certificate management.
    certificateManagement string
    Specifies workload certificate management.
    certificate_management str
    Specifies workload certificate management.
    certificateManagement String
    Specifies workload certificate management.

    MultiClusterIngressFeatureSpec, MultiClusterIngressFeatureSpecArgs

    Billing Pulumi.GoogleNative.GKEHub.V1Alpha.MultiClusterIngressFeatureSpecBilling
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    ConfigMembership string
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    Billing MultiClusterIngressFeatureSpecBilling
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    ConfigMembership string
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    billing MultiClusterIngressFeatureSpecBilling
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    configMembership String
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    billing MultiClusterIngressFeatureSpecBilling
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    configMembership string
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    billing MultiClusterIngressFeatureSpecBilling
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    config_membership str
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    billing "BILLING_UNSPECIFIED" | "PAY_AS_YOU_GO" | "ANTHOS_LICENSE"
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    configMembership String
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar

    MultiClusterIngressFeatureSpecBilling, MultiClusterIngressFeatureSpecBillingArgs

    BillingUnspecified
    BILLING_UNSPECIFIEDUnknown
    PayAsYouGo
    PAY_AS_YOU_GOUser pays a fee per-endpoint.
    AnthosLicense
    ANTHOS_LICENSEUser is paying for Anthos as a whole.
    MultiClusterIngressFeatureSpecBillingBillingUnspecified
    BILLING_UNSPECIFIEDUnknown
    MultiClusterIngressFeatureSpecBillingPayAsYouGo
    PAY_AS_YOU_GOUser pays a fee per-endpoint.
    MultiClusterIngressFeatureSpecBillingAnthosLicense
    ANTHOS_LICENSEUser is paying for Anthos as a whole.
    BillingUnspecified
    BILLING_UNSPECIFIEDUnknown
    PayAsYouGo
    PAY_AS_YOU_GOUser pays a fee per-endpoint.
    AnthosLicense
    ANTHOS_LICENSEUser is paying for Anthos as a whole.
    BillingUnspecified
    BILLING_UNSPECIFIEDUnknown
    PayAsYouGo
    PAY_AS_YOU_GOUser pays a fee per-endpoint.
    AnthosLicense
    ANTHOS_LICENSEUser is paying for Anthos as a whole.
    BILLING_UNSPECIFIED
    BILLING_UNSPECIFIEDUnknown
    PAY_AS_YOU_GO
    PAY_AS_YOU_GOUser pays a fee per-endpoint.
    ANTHOS_LICENSE
    ANTHOS_LICENSEUser is paying for Anthos as a whole.
    "BILLING_UNSPECIFIED"
    BILLING_UNSPECIFIEDUnknown
    "PAY_AS_YOU_GO"
    PAY_AS_YOU_GOUser pays a fee per-endpoint.
    "ANTHOS_LICENSE"
    ANTHOS_LICENSEUser is paying for Anthos as a whole.

    MultiClusterIngressFeatureSpecResponse, MultiClusterIngressFeatureSpecResponseArgs

    Billing string
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    ConfigMembership string
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    Billing string
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    ConfigMembership string
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    billing String
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    configMembership String
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    billing string
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    configMembership string
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    billing str
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    config_membership str
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar
    billing String
    Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    Deprecated: Deprecated: This field will be ignored and should not be set. Customer's billing structure.

    configMembership String
    Fully-qualified Membership name which hosts the MultiClusterIngress CRD. Example: projects/foo-proj/locations/global/memberships/bar

    NamespaceActuationFeatureSpec, NamespaceActuationFeatureSpecArgs

    ActuationMode NamespaceActuationFeatureSpecActuationMode
    actuation_mode controls the behavior of the controller
    actuationMode NamespaceActuationFeatureSpecActuationMode
    actuation_mode controls the behavior of the controller
    actuationMode NamespaceActuationFeatureSpecActuationMode
    actuation_mode controls the behavior of the controller
    actuation_mode NamespaceActuationFeatureSpecActuationMode
    actuation_mode controls the behavior of the controller

    NamespaceActuationFeatureSpecActuationMode, NamespaceActuationFeatureSpecActuationModeArgs

    ActuationModeUnspecified
    ACTUATION_MODE_UNSPECIFIEDACTUATION_MODE_UNSPECIFIED is similar to CREATE_AND_DELETE_IF_CREATED in the default controller behavior.
    ActuationModeCreateAndDeleteIfCreated
    ACTUATION_MODE_CREATE_AND_DELETE_IF_CREATEDACTUATION_MODE_CREATE_AND_DELETE_IF_CREATED has the controller create cluster namespaces for each fleet namespace and it deletes only the ones it created, which are identified by a label.
    ActuationModeAddAndRemoveFleetLabels
    ACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELSACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELS has the controller only apply labels to cluster namespaces to signal fleet namespace enablement. It doesn't create or delete cluster namespaces.
    NamespaceActuationFeatureSpecActuationModeActuationModeUnspecified
    ACTUATION_MODE_UNSPECIFIEDACTUATION_MODE_UNSPECIFIED is similar to CREATE_AND_DELETE_IF_CREATED in the default controller behavior.
    NamespaceActuationFeatureSpecActuationModeActuationModeCreateAndDeleteIfCreated
    ACTUATION_MODE_CREATE_AND_DELETE_IF_CREATEDACTUATION_MODE_CREATE_AND_DELETE_IF_CREATED has the controller create cluster namespaces for each fleet namespace and it deletes only the ones it created, which are identified by a label.
    NamespaceActuationFeatureSpecActuationModeActuationModeAddAndRemoveFleetLabels
    ACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELSACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELS has the controller only apply labels to cluster namespaces to signal fleet namespace enablement. It doesn't create or delete cluster namespaces.
    ActuationModeUnspecified
    ACTUATION_MODE_UNSPECIFIEDACTUATION_MODE_UNSPECIFIED is similar to CREATE_AND_DELETE_IF_CREATED in the default controller behavior.
    ActuationModeCreateAndDeleteIfCreated
    ACTUATION_MODE_CREATE_AND_DELETE_IF_CREATEDACTUATION_MODE_CREATE_AND_DELETE_IF_CREATED has the controller create cluster namespaces for each fleet namespace and it deletes only the ones it created, which are identified by a label.
    ActuationModeAddAndRemoveFleetLabels
    ACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELSACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELS has the controller only apply labels to cluster namespaces to signal fleet namespace enablement. It doesn't create or delete cluster namespaces.
    ActuationModeUnspecified
    ACTUATION_MODE_UNSPECIFIEDACTUATION_MODE_UNSPECIFIED is similar to CREATE_AND_DELETE_IF_CREATED in the default controller behavior.
    ActuationModeCreateAndDeleteIfCreated
    ACTUATION_MODE_CREATE_AND_DELETE_IF_CREATEDACTUATION_MODE_CREATE_AND_DELETE_IF_CREATED has the controller create cluster namespaces for each fleet namespace and it deletes only the ones it created, which are identified by a label.
    ActuationModeAddAndRemoveFleetLabels
    ACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELSACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELS has the controller only apply labels to cluster namespaces to signal fleet namespace enablement. It doesn't create or delete cluster namespaces.
    ACTUATION_MODE_UNSPECIFIED
    ACTUATION_MODE_UNSPECIFIEDACTUATION_MODE_UNSPECIFIED is similar to CREATE_AND_DELETE_IF_CREATED in the default controller behavior.
    ACTUATION_MODE_CREATE_AND_DELETE_IF_CREATED
    ACTUATION_MODE_CREATE_AND_DELETE_IF_CREATEDACTUATION_MODE_CREATE_AND_DELETE_IF_CREATED has the controller create cluster namespaces for each fleet namespace and it deletes only the ones it created, which are identified by a label.
    ACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELS
    ACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELSACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELS has the controller only apply labels to cluster namespaces to signal fleet namespace enablement. It doesn't create or delete cluster namespaces.
    "ACTUATION_MODE_UNSPECIFIED"
    ACTUATION_MODE_UNSPECIFIEDACTUATION_MODE_UNSPECIFIED is similar to CREATE_AND_DELETE_IF_CREATED in the default controller behavior.
    "ACTUATION_MODE_CREATE_AND_DELETE_IF_CREATED"
    ACTUATION_MODE_CREATE_AND_DELETE_IF_CREATEDACTUATION_MODE_CREATE_AND_DELETE_IF_CREATED has the controller create cluster namespaces for each fleet namespace and it deletes only the ones it created, which are identified by a label.
    "ACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELS"
    ACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELSACTUATION_MODE_ADD_AND_REMOVE_FLEET_LABELS has the controller only apply labels to cluster namespaces to signal fleet namespace enablement. It doesn't create or delete cluster namespaces.

    NamespaceActuationFeatureSpecResponse, NamespaceActuationFeatureSpecResponseArgs

    ActuationMode string
    actuation_mode controls the behavior of the controller
    ActuationMode string
    actuation_mode controls the behavior of the controller
    actuationMode String
    actuation_mode controls the behavior of the controller
    actuationMode string
    actuation_mode controls the behavior of the controller
    actuation_mode str
    actuation_mode controls the behavior of the controller
    actuationMode String
    actuation_mode controls the behavior of the controller

    PolicyControllerHubConfig, PolicyControllerHubConfigArgs

    AuditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    ConstraintViolationLimit string
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    DeploymentConfigs Dictionary<string, string>
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    ExemptableNamespaces List<string>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    InstallSpec Pulumi.GoogleNative.GKEHub.V1Alpha.PolicyControllerHubConfigInstallSpec
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    LogDeniesEnabled bool
    Logs all denies and dry run failures.
    Monitoring Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerMonitoringConfig
    Monitoring specifies the configuration of monitoring.
    MutationEnabled bool
    Enables the ability to mutate resources using Policy Controller.
    PolicyContent Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerPolicyContentSpec
    Specifies the desired policy content on the cluster
    ReferentialRulesEnabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    AuditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    ConstraintViolationLimit string
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    DeploymentConfigs map[string]string
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    ExemptableNamespaces []string
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    InstallSpec PolicyControllerHubConfigInstallSpec
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    LogDeniesEnabled bool
    Logs all denies and dry run failures.
    Monitoring PolicyControllerMonitoringConfig
    Monitoring specifies the configuration of monitoring.
    MutationEnabled bool
    Enables the ability to mutate resources using Policy Controller.
    PolicyContent PolicyControllerPolicyContentSpec
    Specifies the desired policy content on the cluster
    ReferentialRulesEnabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    auditIntervalSeconds String
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    constraintViolationLimit String
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    deploymentConfigs Map<String,String>
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    exemptableNamespaces List<String>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    installSpec PolicyControllerHubConfigInstallSpec
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    logDeniesEnabled Boolean
    Logs all denies and dry run failures.
    monitoring PolicyControllerMonitoringConfig
    Monitoring specifies the configuration of monitoring.
    mutationEnabled Boolean
    Enables the ability to mutate resources using Policy Controller.
    policyContent PolicyControllerPolicyContentSpec
    Specifies the desired policy content on the cluster
    referentialRulesEnabled Boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    auditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    constraintViolationLimit string
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    deploymentConfigs {[key: string]: string}
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    exemptableNamespaces string[]
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    installSpec PolicyControllerHubConfigInstallSpec
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    logDeniesEnabled boolean
    Logs all denies and dry run failures.
    monitoring PolicyControllerMonitoringConfig
    Monitoring specifies the configuration of monitoring.
    mutationEnabled boolean
    Enables the ability to mutate resources using Policy Controller.
    policyContent PolicyControllerPolicyContentSpec
    Specifies the desired policy content on the cluster
    referentialRulesEnabled boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    audit_interval_seconds str
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    constraint_violation_limit str
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    deployment_configs Mapping[str, str]
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    exemptable_namespaces Sequence[str]
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    install_spec PolicyControllerHubConfigInstallSpec
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    log_denies_enabled bool
    Logs all denies and dry run failures.
    monitoring PolicyControllerMonitoringConfig
    Monitoring specifies the configuration of monitoring.
    mutation_enabled bool
    Enables the ability to mutate resources using Policy Controller.
    policy_content PolicyControllerPolicyContentSpec
    Specifies the desired policy content on the cluster
    referential_rules_enabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    auditIntervalSeconds String
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    constraintViolationLimit String
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    deploymentConfigs Map<String>
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    exemptableNamespaces List<String>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    installSpec "INSTALL_SPEC_UNSPECIFIED" | "INSTALL_SPEC_NOT_INSTALLED" | "INSTALL_SPEC_ENABLED" | "INSTALL_SPEC_SUSPENDED" | "INSTALL_SPEC_DETACHED"
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    logDeniesEnabled Boolean
    Logs all denies and dry run failures.
    monitoring Property Map
    Monitoring specifies the configuration of monitoring.
    mutationEnabled Boolean
    Enables the ability to mutate resources using Policy Controller.
    policyContent Property Map
    Specifies the desired policy content on the cluster
    referentialRulesEnabled Boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.

    PolicyControllerHubConfigInstallSpec, PolicyControllerHubConfigInstallSpecArgs

    InstallSpecUnspecified
    INSTALL_SPEC_UNSPECIFIEDSpec is unknown.
    InstallSpecNotInstalled
    INSTALL_SPEC_NOT_INSTALLEDRequest to uninstall Policy Controller.
    InstallSpecEnabled
    INSTALL_SPEC_ENABLEDRequest to install and enable Policy Controller.
    InstallSpecSuspended
    INSTALL_SPEC_SUSPENDEDRequest to suspend Policy Controller i.e. its webhooks. If Policy Controller is not installed, it will be installed but suspended.
    InstallSpecDetached
    INSTALL_SPEC_DETACHEDRequest to stop all reconciliation actions by PoCo Hub controller. This is a breakglass mechanism to stop PoCo Hub from affecting cluster resources.
    PolicyControllerHubConfigInstallSpecInstallSpecUnspecified
    INSTALL_SPEC_UNSPECIFIEDSpec is unknown.
    PolicyControllerHubConfigInstallSpecInstallSpecNotInstalled
    INSTALL_SPEC_NOT_INSTALLEDRequest to uninstall Policy Controller.
    PolicyControllerHubConfigInstallSpecInstallSpecEnabled
    INSTALL_SPEC_ENABLEDRequest to install and enable Policy Controller.
    PolicyControllerHubConfigInstallSpecInstallSpecSuspended
    INSTALL_SPEC_SUSPENDEDRequest to suspend Policy Controller i.e. its webhooks. If Policy Controller is not installed, it will be installed but suspended.
    PolicyControllerHubConfigInstallSpecInstallSpecDetached
    INSTALL_SPEC_DETACHEDRequest to stop all reconciliation actions by PoCo Hub controller. This is a breakglass mechanism to stop PoCo Hub from affecting cluster resources.
    InstallSpecUnspecified
    INSTALL_SPEC_UNSPECIFIEDSpec is unknown.
    InstallSpecNotInstalled
    INSTALL_SPEC_NOT_INSTALLEDRequest to uninstall Policy Controller.
    InstallSpecEnabled
    INSTALL_SPEC_ENABLEDRequest to install and enable Policy Controller.
    InstallSpecSuspended
    INSTALL_SPEC_SUSPENDEDRequest to suspend Policy Controller i.e. its webhooks. If Policy Controller is not installed, it will be installed but suspended.
    InstallSpecDetached
    INSTALL_SPEC_DETACHEDRequest to stop all reconciliation actions by PoCo Hub controller. This is a breakglass mechanism to stop PoCo Hub from affecting cluster resources.
    InstallSpecUnspecified
    INSTALL_SPEC_UNSPECIFIEDSpec is unknown.
    InstallSpecNotInstalled
    INSTALL_SPEC_NOT_INSTALLEDRequest to uninstall Policy Controller.
    InstallSpecEnabled
    INSTALL_SPEC_ENABLEDRequest to install and enable Policy Controller.
    InstallSpecSuspended
    INSTALL_SPEC_SUSPENDEDRequest to suspend Policy Controller i.e. its webhooks. If Policy Controller is not installed, it will be installed but suspended.
    InstallSpecDetached
    INSTALL_SPEC_DETACHEDRequest to stop all reconciliation actions by PoCo Hub controller. This is a breakglass mechanism to stop PoCo Hub from affecting cluster resources.
    INSTALL_SPEC_UNSPECIFIED
    INSTALL_SPEC_UNSPECIFIEDSpec is unknown.
    INSTALL_SPEC_NOT_INSTALLED
    INSTALL_SPEC_NOT_INSTALLEDRequest to uninstall Policy Controller.
    INSTALL_SPEC_ENABLED
    INSTALL_SPEC_ENABLEDRequest to install and enable Policy Controller.
    INSTALL_SPEC_SUSPENDED
    INSTALL_SPEC_SUSPENDEDRequest to suspend Policy Controller i.e. its webhooks. If Policy Controller is not installed, it will be installed but suspended.
    INSTALL_SPEC_DETACHED
    INSTALL_SPEC_DETACHEDRequest to stop all reconciliation actions by PoCo Hub controller. This is a breakglass mechanism to stop PoCo Hub from affecting cluster resources.
    "INSTALL_SPEC_UNSPECIFIED"
    INSTALL_SPEC_UNSPECIFIEDSpec is unknown.
    "INSTALL_SPEC_NOT_INSTALLED"
    INSTALL_SPEC_NOT_INSTALLEDRequest to uninstall Policy Controller.
    "INSTALL_SPEC_ENABLED"
    INSTALL_SPEC_ENABLEDRequest to install and enable Policy Controller.
    "INSTALL_SPEC_SUSPENDED"
    INSTALL_SPEC_SUSPENDEDRequest to suspend Policy Controller i.e. its webhooks. If Policy Controller is not installed, it will be installed but suspended.
    "INSTALL_SPEC_DETACHED"
    INSTALL_SPEC_DETACHEDRequest to stop all reconciliation actions by PoCo Hub controller. This is a breakglass mechanism to stop PoCo Hub from affecting cluster resources.

    PolicyControllerHubConfigResponse, PolicyControllerHubConfigResponseArgs

    AuditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    ConstraintViolationLimit string
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    DeploymentConfigs Dictionary<string, string>
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    ExemptableNamespaces List<string>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    InstallSpec string
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    LogDeniesEnabled bool
    Logs all denies and dry run failures.
    Monitoring Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerMonitoringConfigResponse
    Monitoring specifies the configuration of monitoring.
    MutationEnabled bool
    Enables the ability to mutate resources using Policy Controller.
    PolicyContent Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerPolicyContentSpecResponse
    Specifies the desired policy content on the cluster
    ReferentialRulesEnabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    AuditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    ConstraintViolationLimit string
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    DeploymentConfigs map[string]string
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    ExemptableNamespaces []string
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    InstallSpec string
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    LogDeniesEnabled bool
    Logs all denies and dry run failures.
    Monitoring PolicyControllerMonitoringConfigResponse
    Monitoring specifies the configuration of monitoring.
    MutationEnabled bool
    Enables the ability to mutate resources using Policy Controller.
    PolicyContent PolicyControllerPolicyContentSpecResponse
    Specifies the desired policy content on the cluster
    ReferentialRulesEnabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    auditIntervalSeconds String
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    constraintViolationLimit String
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    deploymentConfigs Map<String,String>
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    exemptableNamespaces List<String>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    installSpec String
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    logDeniesEnabled Boolean
    Logs all denies and dry run failures.
    monitoring PolicyControllerMonitoringConfigResponse
    Monitoring specifies the configuration of monitoring.
    mutationEnabled Boolean
    Enables the ability to mutate resources using Policy Controller.
    policyContent PolicyControllerPolicyContentSpecResponse
    Specifies the desired policy content on the cluster
    referentialRulesEnabled Boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    auditIntervalSeconds string
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    constraintViolationLimit string
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    deploymentConfigs {[key: string]: string}
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    exemptableNamespaces string[]
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    installSpec string
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    logDeniesEnabled boolean
    Logs all denies and dry run failures.
    monitoring PolicyControllerMonitoringConfigResponse
    Monitoring specifies the configuration of monitoring.
    mutationEnabled boolean
    Enables the ability to mutate resources using Policy Controller.
    policyContent PolicyControllerPolicyContentSpecResponse
    Specifies the desired policy content on the cluster
    referentialRulesEnabled boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    audit_interval_seconds str
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    constraint_violation_limit str
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    deployment_configs Mapping[str, str]
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    exemptable_namespaces Sequence[str]
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    install_spec str
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    log_denies_enabled bool
    Logs all denies and dry run failures.
    monitoring PolicyControllerMonitoringConfigResponse
    Monitoring specifies the configuration of monitoring.
    mutation_enabled bool
    Enables the ability to mutate resources using Policy Controller.
    policy_content PolicyControllerPolicyContentSpecResponse
    Specifies the desired policy content on the cluster
    referential_rules_enabled bool
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.
    auditIntervalSeconds String
    Sets the interval for Policy Controller Audit Scans (in seconds). When set to 0, this disables audit functionality altogether.
    constraintViolationLimit String
    The maximum number of audit violations to be stored in a constraint. If not set, the internal default (currently 20) will be used.
    deploymentConfigs Map<String>
    Map of deployment configs to deployments ("admission", "audit", "mutation').
    exemptableNamespaces List<String>
    The set of namespaces that are excluded from Policy Controller checks. Namespaces do not need to currently exist on the cluster.
    installSpec String
    The install_spec represents the intended state specified by the latest request that mutated install_spec in the feature spec, not the lifecycle state of the feature observed by the Hub feature controller that is reported in the feature state.
    logDeniesEnabled Boolean
    Logs all denies and dry run failures.
    monitoring Property Map
    Monitoring specifies the configuration of monitoring.
    mutationEnabled Boolean
    Enables the ability to mutate resources using Policy Controller.
    policyContent Property Map
    Specifies the desired policy content on the cluster
    referentialRulesEnabled Boolean
    Enables the ability to use Constraint Templates that reference to objects other than the object currently being evaluated.

    PolicyControllerMembershipSpec, PolicyControllerMembershipSpecArgs

    PolicyControllerHubConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerHubConfig
    Policy Controller configuration for the cluster.
    Version string
    Version of Policy Controller installed.
    PolicyControllerHubConfig PolicyControllerHubConfig
    Policy Controller configuration for the cluster.
    Version string
    Version of Policy Controller installed.
    policyControllerHubConfig PolicyControllerHubConfig
    Policy Controller configuration for the cluster.
    version String
    Version of Policy Controller installed.
    policyControllerHubConfig PolicyControllerHubConfig
    Policy Controller configuration for the cluster.
    version string
    Version of Policy Controller installed.
    policy_controller_hub_config PolicyControllerHubConfig
    Policy Controller configuration for the cluster.
    version str
    Version of Policy Controller installed.
    policyControllerHubConfig Property Map
    Policy Controller configuration for the cluster.
    version String
    Version of Policy Controller installed.

    PolicyControllerMembershipSpecResponse, PolicyControllerMembershipSpecResponseArgs

    PolicyControllerHubConfig Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerHubConfigResponse
    Policy Controller configuration for the cluster.
    Version string
    Version of Policy Controller installed.
    PolicyControllerHubConfig PolicyControllerHubConfigResponse
    Policy Controller configuration for the cluster.
    Version string
    Version of Policy Controller installed.
    policyControllerHubConfig PolicyControllerHubConfigResponse
    Policy Controller configuration for the cluster.
    version String
    Version of Policy Controller installed.
    policyControllerHubConfig PolicyControllerHubConfigResponse
    Policy Controller configuration for the cluster.
    version string
    Version of Policy Controller installed.
    policy_controller_hub_config PolicyControllerHubConfigResponse
    Policy Controller configuration for the cluster.
    version str
    Version of Policy Controller installed.
    policyControllerHubConfig Property Map
    Policy Controller configuration for the cluster.
    version String
    Version of Policy Controller installed.

    PolicyControllerMonitoringConfig, PolicyControllerMonitoringConfigArgs

    Backends List<Pulumi.GoogleNative.GKEHub.V1Alpha.PolicyControllerMonitoringConfigBackendsItem>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    Backends []PolicyControllerMonitoringConfigBackendsItem
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends List<PolicyControllerMonitoringConfigBackendsItem>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends PolicyControllerMonitoringConfigBackendsItem[]
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends Sequence[PolicyControllerMonitoringConfigBackendsItem]
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends List<"MONITORING_BACKEND_UNSPECIFIED" | "PROMETHEUS" | "CLOUD_MONITORING">
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.

    PolicyControllerMonitoringConfigBackendsItem, PolicyControllerMonitoringConfigBackendsItemArgs

    MonitoringBackendUnspecified
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    Prometheus
    PROMETHEUSPrometheus backend for monitoring
    CloudMonitoring
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    PolicyControllerMonitoringConfigBackendsItemMonitoringBackendUnspecified
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    PolicyControllerMonitoringConfigBackendsItemPrometheus
    PROMETHEUSPrometheus backend for monitoring
    PolicyControllerMonitoringConfigBackendsItemCloudMonitoring
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    MonitoringBackendUnspecified
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    Prometheus
    PROMETHEUSPrometheus backend for monitoring
    CloudMonitoring
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    MonitoringBackendUnspecified
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    Prometheus
    PROMETHEUSPrometheus backend for monitoring
    CloudMonitoring
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    MONITORING_BACKEND_UNSPECIFIED
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    PROMETHEUS
    PROMETHEUSPrometheus backend for monitoring
    CLOUD_MONITORING
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring
    "MONITORING_BACKEND_UNSPECIFIED"
    MONITORING_BACKEND_UNSPECIFIEDBackend cannot be determined
    "PROMETHEUS"
    PROMETHEUSPrometheus backend for monitoring
    "CLOUD_MONITORING"
    CLOUD_MONITORINGStackdriver/Cloud Monitoring backend for monitoring

    PolicyControllerMonitoringConfigResponse, PolicyControllerMonitoringConfigResponseArgs

    Backends List<string>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    Backends []string
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends List<String>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends string[]
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends Sequence[str]
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.
    backends List<String>
    Specifies the list of backends Policy Controller will export to. An empty list would effectively disable metrics export.

    PolicyControllerPolicyContentSpec, PolicyControllerPolicyContentSpecArgs

    Bundles Dictionary<string, string>
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    TemplateLibrary Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerTemplateLibraryConfig
    Configures the installation of the Template Library.
    Bundles map[string]string
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    TemplateLibrary PolicyControllerTemplateLibraryConfig
    Configures the installation of the Template Library.
    bundles Map<String,String>
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    templateLibrary PolicyControllerTemplateLibraryConfig
    Configures the installation of the Template Library.
    bundles {[key: string]: string}
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    templateLibrary PolicyControllerTemplateLibraryConfig
    Configures the installation of the Template Library.
    bundles Mapping[str, str]
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    template_library PolicyControllerTemplateLibraryConfig
    Configures the installation of the Template Library.
    bundles Map<String>
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    templateLibrary Property Map
    Configures the installation of the Template Library.

    PolicyControllerPolicyContentSpecResponse, PolicyControllerPolicyContentSpecResponseArgs

    Bundles Dictionary<string, string>
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    TemplateLibrary Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.PolicyControllerTemplateLibraryConfigResponse
    Configures the installation of the Template Library.
    Bundles map[string]string
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    TemplateLibrary PolicyControllerTemplateLibraryConfigResponse
    Configures the installation of the Template Library.
    bundles Map<String,String>
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    templateLibrary PolicyControllerTemplateLibraryConfigResponse
    Configures the installation of the Template Library.
    bundles {[key: string]: string}
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    templateLibrary PolicyControllerTemplateLibraryConfigResponse
    Configures the installation of the Template Library.
    bundles Mapping[str, str]
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    template_library PolicyControllerTemplateLibraryConfigResponse
    Configures the installation of the Template Library.
    bundles Map<String>
    map of bundle name to BundleInstallSpec. The bundle name maps to the bundleName key in the policycontroller.gke.io/constraintData annotation on a constraint.
    templateLibrary Property Map
    Configures the installation of the Template Library.

    PolicyControllerTemplateLibraryConfig, PolicyControllerTemplateLibraryConfigArgs

    Installation Pulumi.GoogleNative.GKEHub.V1Alpha.PolicyControllerTemplateLibraryConfigInstallation
    Configures the manner in which the template library is installed on the cluster.
    Installation PolicyControllerTemplateLibraryConfigInstallation
    Configures the manner in which the template library is installed on the cluster.
    installation PolicyControllerTemplateLibraryConfigInstallation
    Configures the manner in which the template library is installed on the cluster.
    installation PolicyControllerTemplateLibraryConfigInstallation
    Configures the manner in which the template library is installed on the cluster.
    installation PolicyControllerTemplateLibraryConfigInstallation
    Configures the manner in which the template library is installed on the cluster.
    installation "INSTALLATION_UNSPECIFIED" | "NOT_INSTALLED" | "ALL"
    Configures the manner in which the template library is installed on the cluster.

    PolicyControllerTemplateLibraryConfigInstallation, PolicyControllerTemplateLibraryConfigInstallationArgs

    InstallationUnspecified
    INSTALLATION_UNSPECIFIEDNo installation strategy has been specified.
    NotInstalled
    NOT_INSTALLEDDo not install the template library.
    All
    ALLInstall the entire template library.
    PolicyControllerTemplateLibraryConfigInstallationInstallationUnspecified
    INSTALLATION_UNSPECIFIEDNo installation strategy has been specified.
    PolicyControllerTemplateLibraryConfigInstallationNotInstalled
    NOT_INSTALLEDDo not install the template library.
    PolicyControllerTemplateLibraryConfigInstallationAll
    ALLInstall the entire template library.
    InstallationUnspecified
    INSTALLATION_UNSPECIFIEDNo installation strategy has been specified.
    NotInstalled
    NOT_INSTALLEDDo not install the template library.
    All
    ALLInstall the entire template library.
    InstallationUnspecified
    INSTALLATION_UNSPECIFIEDNo installation strategy has been specified.
    NotInstalled
    NOT_INSTALLEDDo not install the template library.
    All
    ALLInstall the entire template library.
    INSTALLATION_UNSPECIFIED
    INSTALLATION_UNSPECIFIEDNo installation strategy has been specified.
    NOT_INSTALLED
    NOT_INSTALLEDDo not install the template library.
    ALL
    ALLInstall the entire template library.
    "INSTALLATION_UNSPECIFIED"
    INSTALLATION_UNSPECIFIEDNo installation strategy has been specified.
    "NOT_INSTALLED"
    NOT_INSTALLEDDo not install the template library.
    "ALL"
    ALLInstall the entire template library.

    PolicyControllerTemplateLibraryConfigResponse, PolicyControllerTemplateLibraryConfigResponseArgs

    Installation string
    Configures the manner in which the template library is installed on the cluster.
    Installation string
    Configures the manner in which the template library is installed on the cluster.
    installation String
    Configures the manner in which the template library is installed on the cluster.
    installation string
    Configures the manner in which the template library is installed on the cluster.
    installation str
    Configures the manner in which the template library is installed on the cluster.
    installation String
    Configures the manner in which the template library is installed on the cluster.

    ServiceMeshAnalysisMessageBaseResponse, ServiceMeshAnalysisMessageBaseResponseArgs

    DocumentationUrl string
    A url pointing to the Service Mesh or Istio documentation for this specific error type.
    Level string
    Represents how severe a message is.
    Type Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ServiceMeshTypeResponse
    Represents the specific type of a message.
    DocumentationUrl string
    A url pointing to the Service Mesh or Istio documentation for this specific error type.
    Level string
    Represents how severe a message is.
    Type ServiceMeshTypeResponse
    Represents the specific type of a message.
    documentationUrl String
    A url pointing to the Service Mesh or Istio documentation for this specific error type.
    level String
    Represents how severe a message is.
    type ServiceMeshTypeResponse
    Represents the specific type of a message.
    documentationUrl string
    A url pointing to the Service Mesh or Istio documentation for this specific error type.
    level string
    Represents how severe a message is.
    type ServiceMeshTypeResponse
    Represents the specific type of a message.
    documentation_url str
    A url pointing to the Service Mesh or Istio documentation for this specific error type.
    level str
    Represents how severe a message is.
    type ServiceMeshTypeResponse
    Represents the specific type of a message.
    documentationUrl String
    A url pointing to the Service Mesh or Istio documentation for this specific error type.
    level String
    Represents how severe a message is.
    type Property Map
    Represents the specific type of a message.

    ServiceMeshAnalysisMessageResponse, ServiceMeshAnalysisMessageResponseArgs

    Args Dictionary<string, string>
    A UI can combine these args with a template (based on message_base.type) to produce an internationalized message.
    Description string
    A human readable description of what the error means. It is suitable for non-internationalize display purposes.
    MessageBase Pulumi.GoogleNative.GKEHub.V1Alpha.Inputs.ServiceMeshAnalysisMessageBaseResponse
    Details common to all types of Istio and ServiceMesh analysis messages.
    ResourcePaths List<string>
    A list of strings specifying the resource identifiers that were the cause of message generation. A "path" here may be: * MEMBERSHIP_ID if the cause is a specific member cluster * MEMBERSHIP_ID/(NAMESPACE/)?RESOURCETYPE/NAME if the cause is a resource in a cluster
    Args map[string]string
    A UI can combine these args with a template (based on message_base.type) to produce an internationalized message.
    Description string
    A human readable description of what the error means. It is suitable for non-internationalize display purposes.
    MessageBase ServiceMeshAnalysisMessageBaseResponse
    Details common to all types of Istio and ServiceMesh analysis messages.
    ResourcePaths []string
    A list of strings specifying the resource identifiers that were the cause of message generation. A "path" here may be: * MEMBERSHIP_ID if the cause is a specific member cluster * MEMBERSHIP_ID/(NAMESPACE/)?RESOURCETYPE/NAME if the cause is a resource in a cluster
    args Map<String,String>
    A UI can combine these args with a template (based on message_base.type) to produce an internationalized message.
    description String
    A human readable description of what the error means. It is suitable for non-internationalize display purposes.
    messageBase ServiceMeshAnalysisMessageBaseResponse
    Details common to all types of Istio and ServiceMesh analysis messages.
    resourcePaths List<String>
    A list of strings specifying the resource identifiers that were the cause of message generation. A "path" here may be: * MEMBERSHIP_ID if the cause is a specific member cluster * MEMBERSHIP_ID/(NAMESPACE/)?RESOURCETYPE/NAME if the cause is a resource in a cluster
    args {[key: string]: string}
    A UI can combine these args with a template (based on message_base.type) to produce an internationalized message.
    description string
    A human readable description of what the error means. It is suitable for non-internationalize display purposes.
    messageBase ServiceMeshAnalysisMessageBaseResponse
    Details common to all types of Istio and ServiceMesh analysis messages.
    resourcePaths string[]
    A list of strings specifying the resource identifiers that were the cause of message generation. A "path" here may be: * MEMBERSHIP_ID if the cause is a specific member cluster * MEMBERSHIP_ID/(NAMESPACE/)?RESOURCETYPE/NAME if the cause is a resource in a cluster
    args Mapping[str, str]
    A UI can combine these args with a template (based on message_base.type) to produce an internationalized message.
    description str
    A human readable description of what the error means. It is suitable for non-internationalize display purposes.
    message_base ServiceMeshAnalysisMessageBaseResponse
    Details common to all types of Istio and ServiceMesh analysis messages.
    resource_paths Sequence[str]
    A list of strings specifying the resource identifiers that were the cause of message generation. A "path" here may be: * MEMBERSHIP_ID if the cause is a specific member cluster * MEMBERSHIP_ID/(NAMESPACE/)?RESOURCETYPE/NAME if the cause is a resource in a cluster
    args Map<String>
    A UI can combine these args with a template (based on message_base.type) to produce an internationalized message.
    description String
    A human readable description of what the error means. It is suitable for non-internationalize display purposes.
    messageBase Property Map
    Details common to all types of Istio and ServiceMesh analysis messages.
    resourcePaths List<String>
    A list of strings specifying the resource identifiers that were the cause of message generation. A "path" here may be: * MEMBERSHIP_ID if the cause is a specific member cluster * MEMBERSHIP_ID/(NAMESPACE/)?RESOURCETYPE/NAME if the cause is a resource in a cluster

    ServiceMeshFeatureStateResponse, ServiceMeshFeatureStateResponseArgs

    AnalysisMessages []ServiceMeshAnalysisMessageResponse
    Results of running Service Mesh analyzers.
    analysisMessages List<ServiceMeshAnalysisMessageResponse>
    Results of running Service Mesh analyzers.
    analysisMessages ServiceMeshAnalysisMessageResponse[]
    Results of running Service Mesh analyzers.
    analysis_messages Sequence[ServiceMeshAnalysisMessageResponse]
    Results of running Service Mesh analyzers.
    analysisMessages List<Property Map>
    Results of running Service Mesh analyzers.

    ServiceMeshMembershipSpec, ServiceMeshMembershipSpecArgs

    ControlPlane Pulumi.GoogleNative.GKEHub.V1Alpha.ServiceMeshMembershipSpecControlPlane
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    DefaultChannel Pulumi.GoogleNative.GKEHub.V1Alpha.ServiceMeshMembershipSpecDefaultChannel
    Determines which release channel to use for default injection and service mesh APIs.
    Management Pulumi.GoogleNative.GKEHub.V1Alpha.ServiceMeshMembershipSpecManagement
    Enables automatic Service Mesh management.
    ControlPlane ServiceMeshMembershipSpecControlPlane
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    DefaultChannel ServiceMeshMembershipSpecDefaultChannel
    Determines which release channel to use for default injection and service mesh APIs.
    Management ServiceMeshMembershipSpecManagement
    Enables automatic Service Mesh management.
    controlPlane ServiceMeshMembershipSpecControlPlane
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    defaultChannel ServiceMeshMembershipSpecDefaultChannel
    Determines which release channel to use for default injection and service mesh APIs.
    management ServiceMeshMembershipSpecManagement
    Enables automatic Service Mesh management.
    controlPlane ServiceMeshMembershipSpecControlPlane
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    defaultChannel ServiceMeshMembershipSpecDefaultChannel
    Determines which release channel to use for default injection and service mesh APIs.
    management ServiceMeshMembershipSpecManagement
    Enables automatic Service Mesh management.
    control_plane ServiceMeshMembershipSpecControlPlane
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    default_channel ServiceMeshMembershipSpecDefaultChannel
    Determines which release channel to use for default injection and service mesh APIs.
    management ServiceMeshMembershipSpecManagement
    Enables automatic Service Mesh management.
    controlPlane "CONTROL_PLANE_MANAGEMENT_UNSPECIFIED" | "AUTOMATIC" | "MANUAL"
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    defaultChannel "CHANNEL_UNSPECIFIED" | "RAPID" | "REGULAR" | "STABLE"
    Determines which release channel to use for default injection and service mesh APIs.
    management "MANAGEMENT_UNSPECIFIED" | "MANAGEMENT_AUTOMATIC" | "MANAGEMENT_MANUAL"
    Enables automatic Service Mesh management.

    ServiceMeshMembershipSpecControlPlane, ServiceMeshMembershipSpecControlPlaneArgs

    ControlPlaneManagementUnspecified
    CONTROL_PLANE_MANAGEMENT_UNSPECIFIEDUnspecified
    Automatic
    AUTOMATICGoogle should provision a control plane revision and make it available in the cluster. Google will enroll this revision in a release channel and keep it up to date. The control plane revision may be a managed service, or a managed install.
    Manual
    MANUALUser will manually configure the control plane (e.g. via CLI, or via the ControlPlaneRevision KRM API)
    ServiceMeshMembershipSpecControlPlaneControlPlaneManagementUnspecified
    CONTROL_PLANE_MANAGEMENT_UNSPECIFIEDUnspecified
    ServiceMeshMembershipSpecControlPlaneAutomatic
    AUTOMATICGoogle should provision a control plane revision and make it available in the cluster. Google will enroll this revision in a release channel and keep it up to date. The control plane revision may be a managed service, or a managed install.
    ServiceMeshMembershipSpecControlPlaneManual
    MANUALUser will manually configure the control plane (e.g. via CLI, or via the ControlPlaneRevision KRM API)
    ControlPlaneManagementUnspecified
    CONTROL_PLANE_MANAGEMENT_UNSPECIFIEDUnspecified
    Automatic
    AUTOMATICGoogle should provision a control plane revision and make it available in the cluster. Google will enroll this revision in a release channel and keep it up to date. The control plane revision may be a managed service, or a managed install.
    Manual
    MANUALUser will manually configure the control plane (e.g. via CLI, or via the ControlPlaneRevision KRM API)
    ControlPlaneManagementUnspecified
    CONTROL_PLANE_MANAGEMENT_UNSPECIFIEDUnspecified
    Automatic
    AUTOMATICGoogle should provision a control plane revision and make it available in the cluster. Google will enroll this revision in a release channel and keep it up to date. The control plane revision may be a managed service, or a managed install.
    Manual
    MANUALUser will manually configure the control plane (e.g. via CLI, or via the ControlPlaneRevision KRM API)
    CONTROL_PLANE_MANAGEMENT_UNSPECIFIED
    CONTROL_PLANE_MANAGEMENT_UNSPECIFIEDUnspecified
    AUTOMATIC
    AUTOMATICGoogle should provision a control plane revision and make it available in the cluster. Google will enroll this revision in a release channel and keep it up to date. The control plane revision may be a managed service, or a managed install.
    MANUAL
    MANUALUser will manually configure the control plane (e.g. via CLI, or via the ControlPlaneRevision KRM API)
    "CONTROL_PLANE_MANAGEMENT_UNSPECIFIED"
    CONTROL_PLANE_MANAGEMENT_UNSPECIFIEDUnspecified
    "AUTOMATIC"
    AUTOMATICGoogle should provision a control plane revision and make it available in the cluster. Google will enroll this revision in a release channel and keep it up to date. The control plane revision may be a managed service, or a managed install.
    "MANUAL"
    MANUALUser will manually configure the control plane (e.g. via CLI, or via the ControlPlaneRevision KRM API)

    ServiceMeshMembershipSpecDefaultChannel, ServiceMeshMembershipSpecDefaultChannelArgs

    ChannelUnspecified
    CHANNEL_UNSPECIFIEDUnspecified
    Rapid
    RAPIDRAPID channel is offered on an early access basis for customers who want to test new releases.
    Regular
    REGULARREGULAR channel is intended for production users who want to take advantage of new features.
    Stable
    STABLESTABLE channel includes versions that are known to be stable and reliable in production.
    ServiceMeshMembershipSpecDefaultChannelChannelUnspecified
    CHANNEL_UNSPECIFIEDUnspecified
    ServiceMeshMembershipSpecDefaultChannelRapid
    RAPIDRAPID channel is offered on an early access basis for customers who want to test new releases.
    ServiceMeshMembershipSpecDefaultChannelRegular
    REGULARREGULAR channel is intended for production users who want to take advantage of new features.
    ServiceMeshMembershipSpecDefaultChannelStable
    STABLESTABLE channel includes versions that are known to be stable and reliable in production.
    ChannelUnspecified
    CHANNEL_UNSPECIFIEDUnspecified
    Rapid
    RAPIDRAPID channel is offered on an early access basis for customers who want to test new releases.
    Regular
    REGULARREGULAR channel is intended for production users who want to take advantage of new features.
    Stable
    STABLESTABLE channel includes versions that are known to be stable and reliable in production.
    ChannelUnspecified
    CHANNEL_UNSPECIFIEDUnspecified
    Rapid
    RAPIDRAPID channel is offered on an early access basis for customers who want to test new releases.
    Regular
    REGULARREGULAR channel is intended for production users who want to take advantage of new features.
    Stable
    STABLESTABLE channel includes versions that are known to be stable and reliable in production.
    CHANNEL_UNSPECIFIED
    CHANNEL_UNSPECIFIEDUnspecified
    RAPID
    RAPIDRAPID channel is offered on an early access basis for customers who want to test new releases.
    REGULAR
    REGULARREGULAR channel is intended for production users who want to take advantage of new features.
    STABLE
    STABLESTABLE channel includes versions that are known to be stable and reliable in production.
    "CHANNEL_UNSPECIFIED"
    CHANNEL_UNSPECIFIEDUnspecified
    "RAPID"
    RAPIDRAPID channel is offered on an early access basis for customers who want to test new releases.
    "REGULAR"
    REGULARREGULAR channel is intended for production users who want to take advantage of new features.
    "STABLE"
    STABLESTABLE channel includes versions that are known to be stable and reliable in production.

    ServiceMeshMembershipSpecManagement, ServiceMeshMembershipSpecManagementArgs

    ManagementUnspecified
    MANAGEMENT_UNSPECIFIEDUnspecified
    ManagementAutomatic
    MANAGEMENT_AUTOMATICGoogle should manage my Service Mesh for the cluster.
    ManagementManual
    MANAGEMENT_MANUALUser will manually configure their service mesh components.
    ServiceMeshMembershipSpecManagementManagementUnspecified
    MANAGEMENT_UNSPECIFIEDUnspecified
    ServiceMeshMembershipSpecManagementManagementAutomatic
    MANAGEMENT_AUTOMATICGoogle should manage my Service Mesh for the cluster.
    ServiceMeshMembershipSpecManagementManagementManual
    MANAGEMENT_MANUALUser will manually configure their service mesh components.
    ManagementUnspecified
    MANAGEMENT_UNSPECIFIEDUnspecified
    ManagementAutomatic
    MANAGEMENT_AUTOMATICGoogle should manage my Service Mesh for the cluster.
    ManagementManual
    MANAGEMENT_MANUALUser will manually configure their service mesh components.
    ManagementUnspecified
    MANAGEMENT_UNSPECIFIEDUnspecified
    ManagementAutomatic
    MANAGEMENT_AUTOMATICGoogle should manage my Service Mesh for the cluster.
    ManagementManual
    MANAGEMENT_MANUALUser will manually configure their service mesh components.
    MANAGEMENT_UNSPECIFIED
    MANAGEMENT_UNSPECIFIEDUnspecified
    MANAGEMENT_AUTOMATIC
    MANAGEMENT_AUTOMATICGoogle should manage my Service Mesh for the cluster.
    MANAGEMENT_MANUAL
    MANAGEMENT_MANUALUser will manually configure their service mesh components.
    "MANAGEMENT_UNSPECIFIED"
    MANAGEMENT_UNSPECIFIEDUnspecified
    "MANAGEMENT_AUTOMATIC"
    MANAGEMENT_AUTOMATICGoogle should manage my Service Mesh for the cluster.
    "MANAGEMENT_MANUAL"
    MANAGEMENT_MANUALUser will manually configure their service mesh components.

    ServiceMeshMembershipSpecResponse, ServiceMeshMembershipSpecResponseArgs

    ControlPlane string
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    DefaultChannel string
    Determines which release channel to use for default injection and service mesh APIs.
    Management string
    Enables automatic Service Mesh management.
    ControlPlane string
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    DefaultChannel string
    Determines which release channel to use for default injection and service mesh APIs.
    Management string
    Enables automatic Service Mesh management.
    controlPlane String
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    defaultChannel String
    Determines which release channel to use for default injection and service mesh APIs.
    management String
    Enables automatic Service Mesh management.
    controlPlane string
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    defaultChannel string
    Determines which release channel to use for default injection and service mesh APIs.
    management string
    Enables automatic Service Mesh management.
    control_plane str
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    default_channel str
    Determines which release channel to use for default injection and service mesh APIs.
    management str
    Enables automatic Service Mesh management.
    controlPlane String
    Deprecated: use management instead Enables automatic control plane management.

    Deprecated: Deprecated: use management instead Enables automatic control plane management.

    defaultChannel String
    Determines which release channel to use for default injection and service mesh APIs.
    management String
    Enables automatic Service Mesh management.

    ServiceMeshTypeResponse, ServiceMeshTypeResponseArgs

    Code string
    A 7 character code matching ^IST[0-9]{4}$ or ^ASM[0-9]{4}$, intended to uniquely identify the message type. (e.g. "IST0001" is mapped to the "InternalError" message type.)
    DisplayName string
    A human-readable name for the message type. e.g. "InternalError", "PodMissingProxy". This should be the same for all messages of the same type. (This corresponds to the name field in open-source Istio.)
    Code string
    A 7 character code matching ^IST[0-9]{4}$ or ^ASM[0-9]{4}$, intended to uniquely identify the message type. (e.g. "IST0001" is mapped to the "InternalError" message type.)
    DisplayName string
    A human-readable name for the message type. e.g. "InternalError", "PodMissingProxy". This should be the same for all messages of the same type. (This corresponds to the name field in open-source Istio.)
    code String
    A 7 character code matching ^IST[0-9]{4}$ or ^ASM[0-9]{4}$, intended to uniquely identify the message type. (e.g. "IST0001" is mapped to the "InternalError" message type.)
    displayName String
    A human-readable name for the message type. e.g. "InternalError", "PodMissingProxy". This should be the same for all messages of the same type. (This corresponds to the name field in open-source Istio.)
    code string
    A 7 character code matching ^IST[0-9]{4}$ or ^ASM[0-9]{4}$, intended to uniquely identify the message type. (e.g. "IST0001" is mapped to the "InternalError" message type.)
    displayName string
    A human-readable name for the message type. e.g. "InternalError", "PodMissingProxy". This should be the same for all messages of the same type. (This corresponds to the name field in open-source Istio.)
    code str
    A 7 character code matching ^IST[0-9]{4}$ or ^ASM[0-9]{4}$, intended to uniquely identify the message type. (e.g. "IST0001" is mapped to the "InternalError" message type.)
    display_name str
    A human-readable name for the message type. e.g. "InternalError", "PodMissingProxy". This should be the same for all messages of the same type. (This corresponds to the name field in open-source Istio.)
    code String
    A 7 character code matching ^IST[0-9]{4}$ or ^ASM[0-9]{4}$, intended to uniquely identify the message type. (e.g. "IST0001" is mapped to the "InternalError" message type.)
    displayName String
    A human-readable name for the message type. e.g. "InternalError", "PodMissingProxy". This should be the same for all messages of the same type. (This corresponds to the name field in open-source Istio.)

    StatusResponse, StatusResponseArgs

    Code string
    Code specifies AppDevExperienceFeature's subcomponent ready state.
    Description string
    Description is populated if Code is Failed, explaining why it has failed.
    Code string
    Code specifies AppDevExperienceFeature's subcomponent ready state.
    Description string
    Description is populated if Code is Failed, explaining why it has failed.
    code String
    Code specifies AppDevExperienceFeature's subcomponent ready state.
    description String
    Description is populated if Code is Failed, explaining why it has failed.
    code string
    Code specifies AppDevExperienceFeature's subcomponent ready state.
    description string
    Description is populated if Code is Failed, explaining why it has failed.
    code str
    Code specifies AppDevExperienceFeature's subcomponent ready state.
    description str
    Description is populated if Code is Failed, explaining why it has failed.
    code String
    Code specifies AppDevExperienceFeature's subcomponent ready state.
    description String
    Description is populated if Code is Failed, explaining why it has failed.

    Package Details

    Repository
    Google Cloud Native pulumi/pulumi-google-native
    License
    Apache-2.0
    google-native logo

    Google Cloud Native is in preview. Google Cloud Classic is fully supported.

    Google Cloud Native v0.32.0 published on Wednesday, Nov 29, 2023 by Pulumi
    pulumi/pulumi-google-native