pulumiTypes.go

// Code generated by the Pulumi Terraform Bridge (tfgen) Tool DO NOT EDIT.
// *** WARNING: Do not edit by hand unless you're certain you know what you are doing! ***

package binaryauthorization

import (
	"context"
	"reflect"

	"github.com/pulumi/pulumi-gcp/sdk/v7/go/gcp/internal"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

var _ = internal.GetEnvOrDefault

type AttestorAttestationAuthorityNote struct {
	// (Output)
	// This field will contain the service account email address that
	// this Attestor will use as the principal when querying Container
	// Analysis. Attestor administrators must grant this service account
	// the IAM role needed to read attestations from the noteReference in
	// Container Analysis (containeranalysis.notes.occurrences.viewer).
	// This email address is fixed for the lifetime of the Attestor, but
	// callers should not make any other assumptions about the service
	// account email; future versions may use an email based on a
	// different naming pattern.
	DelegationServiceAccountEmail *string `pulumi:"delegationServiceAccountEmail"`
	// The resource name of a ATTESTATION_AUTHORITY Note, created by the
	// user. If the Note is in a different project from the Attestor, it
	// should be specified in the format `projects/*/notes/*` (or the legacy
	// `providers/*/notes/*`). This field may not be updated.
	// An attestation by this attestor is stored as a Container Analysis
	// ATTESTATION_AUTHORITY Occurrence that names a container image
	// and that links to this Note.
	NoteReference string `pulumi:"noteReference"`
	// Public keys that verify attestations signed by this attestor. This
	// field may be updated.
	// If this field is non-empty, one of the specified public keys must
	// verify that an attestation was signed by this attestor for the
	// image specified in the admission request.
	// If this field is empty, this attestor always returns that no valid
	// attestations exist.
	// Structure is documented below.
	PublicKeys []AttestorAttestationAuthorityNotePublicKey `pulumi:"publicKeys"`
}

// AttestorAttestationAuthorityNoteInput is an input type that accepts AttestorAttestationAuthorityNoteArgs and AttestorAttestationAuthorityNoteOutput values.
// You can construct a concrete instance of `AttestorAttestationAuthorityNoteInput` via:
//
//	AttestorAttestationAuthorityNoteArgs{...}
type AttestorAttestationAuthorityNoteInput interface {
	pulumi.Input

	ToAttestorAttestationAuthorityNoteOutput() AttestorAttestationAuthorityNoteOutput
	ToAttestorAttestationAuthorityNoteOutputWithContext(context.Context) AttestorAttestationAuthorityNoteOutput
}

type AttestorAttestationAuthorityNoteArgs struct {
	// (Output)
	// This field will contain the service account email address that
	// this Attestor will use as the principal when querying Container
	// Analysis. Attestor administrators must grant this service account
	// the IAM role needed to read attestations from the noteReference in
	// Container Analysis (containeranalysis.notes.occurrences.viewer).
	// This email address is fixed for the lifetime of the Attestor, but
	// callers should not make any other assumptions about the service
	// account email; future versions may use an email based on a
	// different naming pattern.
	DelegationServiceAccountEmail pulumi.StringPtrInput `pulumi:"delegationServiceAccountEmail"`
	// The resource name of a ATTESTATION_AUTHORITY Note, created by the
	// user. If the Note is in a different project from the Attestor, it
	// should be specified in the format `projects/*/notes/*` (or the legacy
	// `providers/*/notes/*`). This field may not be updated.
	// An attestation by this attestor is stored as a Container Analysis
	// ATTESTATION_AUTHORITY Occurrence that names a container image
	// and that links to this Note.
	NoteReference pulumi.StringInput `pulumi:"noteReference"`
	// Public keys that verify attestations signed by this attestor. This
	// field may be updated.
	// If this field is non-empty, one of the specified public keys must
	// verify that an attestation was signed by this attestor for the
	// image specified in the admission request.
	// If this field is empty, this attestor always returns that no valid
	// attestations exist.
	// Structure is documented below.
	PublicKeys AttestorAttestationAuthorityNotePublicKeyArrayInput `pulumi:"publicKeys"`
}

func (AttestorAttestationAuthorityNoteArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorAttestationAuthorityNote)(nil)).Elem()
}

func (i AttestorAttestationAuthorityNoteArgs) ToAttestorAttestationAuthorityNoteOutput() AttestorAttestationAuthorityNoteOutput {
	return i.ToAttestorAttestationAuthorityNoteOutputWithContext(context.Background())
}

func (i AttestorAttestationAuthorityNoteArgs) ToAttestorAttestationAuthorityNoteOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNoteOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorAttestationAuthorityNoteOutput)
}

func (i AttestorAttestationAuthorityNoteArgs) ToAttestorAttestationAuthorityNotePtrOutput() AttestorAttestationAuthorityNotePtrOutput {
	return i.ToAttestorAttestationAuthorityNotePtrOutputWithContext(context.Background())
}

func (i AttestorAttestationAuthorityNoteArgs) ToAttestorAttestationAuthorityNotePtrOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorAttestationAuthorityNoteOutput).ToAttestorAttestationAuthorityNotePtrOutputWithContext(ctx)
}

// AttestorAttestationAuthorityNotePtrInput is an input type that accepts AttestorAttestationAuthorityNoteArgs, AttestorAttestationAuthorityNotePtr and AttestorAttestationAuthorityNotePtrOutput values.
// You can construct a concrete instance of `AttestorAttestationAuthorityNotePtrInput` via:
//
//	        AttestorAttestationAuthorityNoteArgs{...}
//
//	or:
//
//	        nil
type AttestorAttestationAuthorityNotePtrInput interface {
	pulumi.Input

	ToAttestorAttestationAuthorityNotePtrOutput() AttestorAttestationAuthorityNotePtrOutput
	ToAttestorAttestationAuthorityNotePtrOutputWithContext(context.Context) AttestorAttestationAuthorityNotePtrOutput
}

type attestorAttestationAuthorityNotePtrType AttestorAttestationAuthorityNoteArgs

func AttestorAttestationAuthorityNotePtr(v *AttestorAttestationAuthorityNoteArgs) AttestorAttestationAuthorityNotePtrInput {
	return (*attestorAttestationAuthorityNotePtrType)(v)
}

func (*attestorAttestationAuthorityNotePtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**AttestorAttestationAuthorityNote)(nil)).Elem()
}

func (i *attestorAttestationAuthorityNotePtrType) ToAttestorAttestationAuthorityNotePtrOutput() AttestorAttestationAuthorityNotePtrOutput {
	return i.ToAttestorAttestationAuthorityNotePtrOutputWithContext(context.Background())
}

func (i *attestorAttestationAuthorityNotePtrType) ToAttestorAttestationAuthorityNotePtrOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorAttestationAuthorityNotePtrOutput)
}

type AttestorAttestationAuthorityNoteOutput struct{ *pulumi.OutputState }

func (AttestorAttestationAuthorityNoteOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorAttestationAuthorityNote)(nil)).Elem()
}

func (o AttestorAttestationAuthorityNoteOutput) ToAttestorAttestationAuthorityNoteOutput() AttestorAttestationAuthorityNoteOutput {
	return o
}

func (o AttestorAttestationAuthorityNoteOutput) ToAttestorAttestationAuthorityNoteOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNoteOutput {
	return o
}

func (o AttestorAttestationAuthorityNoteOutput) ToAttestorAttestationAuthorityNotePtrOutput() AttestorAttestationAuthorityNotePtrOutput {
	return o.ToAttestorAttestationAuthorityNotePtrOutputWithContext(context.Background())
}

func (o AttestorAttestationAuthorityNoteOutput) ToAttestorAttestationAuthorityNotePtrOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v AttestorAttestationAuthorityNote) *AttestorAttestationAuthorityNote {
		return &v
	}).(AttestorAttestationAuthorityNotePtrOutput)
}

// (Output)
// This field will contain the service account email address that
// this Attestor will use as the principal when querying Container
// Analysis. Attestor administrators must grant this service account
// the IAM role needed to read attestations from the noteReference in
// Container Analysis (containeranalysis.notes.occurrences.viewer).
// This email address is fixed for the lifetime of the Attestor, but
// callers should not make any other assumptions about the service
// account email; future versions may use an email based on a
// different naming pattern.
func (o AttestorAttestationAuthorityNoteOutput) DelegationServiceAccountEmail() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AttestorAttestationAuthorityNote) *string { return v.DelegationServiceAccountEmail }).(pulumi.StringPtrOutput)
}

// The resource name of a ATTESTATION_AUTHORITY Note, created by the
// user. If the Note is in a different project from the Attestor, it
// should be specified in the format `projects/*/notes/*` (or the legacy
// `providers/*/notes/*`). This field may not be updated.
// An attestation by this attestor is stored as a Container Analysis
// ATTESTATION_AUTHORITY Occurrence that names a container image
// and that links to this Note.
func (o AttestorAttestationAuthorityNoteOutput) NoteReference() pulumi.StringOutput {
	return o.ApplyT(func(v AttestorAttestationAuthorityNote) string { return v.NoteReference }).(pulumi.StringOutput)
}

// Public keys that verify attestations signed by this attestor. This
// field may be updated.
// If this field is non-empty, one of the specified public keys must
// verify that an attestation was signed by this attestor for the
// image specified in the admission request.
// If this field is empty, this attestor always returns that no valid
// attestations exist.
// Structure is documented below.
func (o AttestorAttestationAuthorityNoteOutput) PublicKeys() AttestorAttestationAuthorityNotePublicKeyArrayOutput {
	return o.ApplyT(func(v AttestorAttestationAuthorityNote) []AttestorAttestationAuthorityNotePublicKey {
		return v.PublicKeys
	}).(AttestorAttestationAuthorityNotePublicKeyArrayOutput)
}

type AttestorAttestationAuthorityNotePtrOutput struct{ *pulumi.OutputState }

func (AttestorAttestationAuthorityNotePtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**AttestorAttestationAuthorityNote)(nil)).Elem()
}

func (o AttestorAttestationAuthorityNotePtrOutput) ToAttestorAttestationAuthorityNotePtrOutput() AttestorAttestationAuthorityNotePtrOutput {
	return o
}

func (o AttestorAttestationAuthorityNotePtrOutput) ToAttestorAttestationAuthorityNotePtrOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePtrOutput {
	return o
}

func (o AttestorAttestationAuthorityNotePtrOutput) Elem() AttestorAttestationAuthorityNoteOutput {
	return o.ApplyT(func(v *AttestorAttestationAuthorityNote) AttestorAttestationAuthorityNote {
		if v != nil {
			return *v
		}
		var ret AttestorAttestationAuthorityNote
		return ret
	}).(AttestorAttestationAuthorityNoteOutput)
}

// (Output)
// This field will contain the service account email address that
// this Attestor will use as the principal when querying Container
// Analysis. Attestor administrators must grant this service account
// the IAM role needed to read attestations from the noteReference in
// Container Analysis (containeranalysis.notes.occurrences.viewer).
// This email address is fixed for the lifetime of the Attestor, but
// callers should not make any other assumptions about the service
// account email; future versions may use an email based on a
// different naming pattern.
func (o AttestorAttestationAuthorityNotePtrOutput) DelegationServiceAccountEmail() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorAttestationAuthorityNote) *string {
		if v == nil {
			return nil
		}
		return v.DelegationServiceAccountEmail
	}).(pulumi.StringPtrOutput)
}

// The resource name of a ATTESTATION_AUTHORITY Note, created by the
// user. If the Note is in a different project from the Attestor, it
// should be specified in the format `projects/*/notes/*` (or the legacy
// `providers/*/notes/*`). This field may not be updated.
// An attestation by this attestor is stored as a Container Analysis
// ATTESTATION_AUTHORITY Occurrence that names a container image
// and that links to this Note.
func (o AttestorAttestationAuthorityNotePtrOutput) NoteReference() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorAttestationAuthorityNote) *string {
		if v == nil {
			return nil
		}
		return &v.NoteReference
	}).(pulumi.StringPtrOutput)
}

// Public keys that verify attestations signed by this attestor. This
// field may be updated.
// If this field is non-empty, one of the specified public keys must
// verify that an attestation was signed by this attestor for the
// image specified in the admission request.
// If this field is empty, this attestor always returns that no valid
// attestations exist.
// Structure is documented below.
func (o AttestorAttestationAuthorityNotePtrOutput) PublicKeys() AttestorAttestationAuthorityNotePublicKeyArrayOutput {
	return o.ApplyT(func(v *AttestorAttestationAuthorityNote) []AttestorAttestationAuthorityNotePublicKey {
		if v == nil {
			return nil
		}
		return v.PublicKeys
	}).(AttestorAttestationAuthorityNotePublicKeyArrayOutput)
}

type AttestorAttestationAuthorityNotePublicKey struct {
	// ASCII-armored representation of a PGP public key, as the
	// entire output by the command
	// `gpg --export --armor foo@example.com` (either LF or CRLF
	// line endings). When using this field, id should be left
	// blank. The BinAuthz API handlers will calculate the ID
	// and fill it in automatically. BinAuthz computes this ID
	// as the OpenPGP RFC4880 V4 fingerprint, represented as
	// upper-case hex. If id is provided by the caller, it will
	// be overwritten by the API-calculated ID.
	AsciiArmoredPgpPublicKey *string `pulumi:"asciiArmoredPgpPublicKey"`
	// A descriptive comment. This field may be updated.
	Comment *string `pulumi:"comment"`
	// The ID of this public key. Signatures verified by BinAuthz
	// must include the ID of the public key that can be used to
	// verify them, and that ID must match the contents of this
	// field exactly. Additional restrictions on this field can
	// be imposed based on which public key type is encapsulated.
	// See the documentation on publicKey cases below for details.
	Id *string `pulumi:"id"`
	// A raw PKIX SubjectPublicKeyInfo format public key.
	// NOTE: id may be explicitly provided by the caller when using this
	// type of public key, but it MUST be a valid RFC3986 URI. If id is left
	// blank, a default one will be computed based on the digest of the DER
	// encoding of the public key.
	// Structure is documented below.
	PkixPublicKey *AttestorAttestationAuthorityNotePublicKeyPkixPublicKey `pulumi:"pkixPublicKey"`
}

// AttestorAttestationAuthorityNotePublicKeyInput is an input type that accepts AttestorAttestationAuthorityNotePublicKeyArgs and AttestorAttestationAuthorityNotePublicKeyOutput values.
// You can construct a concrete instance of `AttestorAttestationAuthorityNotePublicKeyInput` via:
//
//	AttestorAttestationAuthorityNotePublicKeyArgs{...}
type AttestorAttestationAuthorityNotePublicKeyInput interface {
	pulumi.Input

	ToAttestorAttestationAuthorityNotePublicKeyOutput() AttestorAttestationAuthorityNotePublicKeyOutput
	ToAttestorAttestationAuthorityNotePublicKeyOutputWithContext(context.Context) AttestorAttestationAuthorityNotePublicKeyOutput
}

type AttestorAttestationAuthorityNotePublicKeyArgs struct {
	// ASCII-armored representation of a PGP public key, as the
	// entire output by the command
	// `gpg --export --armor foo@example.com` (either LF or CRLF
	// line endings). When using this field, id should be left
	// blank. The BinAuthz API handlers will calculate the ID
	// and fill it in automatically. BinAuthz computes this ID
	// as the OpenPGP RFC4880 V4 fingerprint, represented as
	// upper-case hex. If id is provided by the caller, it will
	// be overwritten by the API-calculated ID.
	AsciiArmoredPgpPublicKey pulumi.StringPtrInput `pulumi:"asciiArmoredPgpPublicKey"`
	// A descriptive comment. This field may be updated.
	Comment pulumi.StringPtrInput `pulumi:"comment"`
	// The ID of this public key. Signatures verified by BinAuthz
	// must include the ID of the public key that can be used to
	// verify them, and that ID must match the contents of this
	// field exactly. Additional restrictions on this field can
	// be imposed based on which public key type is encapsulated.
	// See the documentation on publicKey cases below for details.
	Id pulumi.StringPtrInput `pulumi:"id"`
	// A raw PKIX SubjectPublicKeyInfo format public key.
	// NOTE: id may be explicitly provided by the caller when using this
	// type of public key, but it MUST be a valid RFC3986 URI. If id is left
	// blank, a default one will be computed based on the digest of the DER
	// encoding of the public key.
	// Structure is documented below.
	PkixPublicKey AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrInput `pulumi:"pkixPublicKey"`
}

func (AttestorAttestationAuthorityNotePublicKeyArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorAttestationAuthorityNotePublicKey)(nil)).Elem()
}

func (i AttestorAttestationAuthorityNotePublicKeyArgs) ToAttestorAttestationAuthorityNotePublicKeyOutput() AttestorAttestationAuthorityNotePublicKeyOutput {
	return i.ToAttestorAttestationAuthorityNotePublicKeyOutputWithContext(context.Background())
}

func (i AttestorAttestationAuthorityNotePublicKeyArgs) ToAttestorAttestationAuthorityNotePublicKeyOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorAttestationAuthorityNotePublicKeyOutput)
}

// AttestorAttestationAuthorityNotePublicKeyArrayInput is an input type that accepts AttestorAttestationAuthorityNotePublicKeyArray and AttestorAttestationAuthorityNotePublicKeyArrayOutput values.
// You can construct a concrete instance of `AttestorAttestationAuthorityNotePublicKeyArrayInput` via:
//
//	AttestorAttestationAuthorityNotePublicKeyArray{ AttestorAttestationAuthorityNotePublicKeyArgs{...} }
type AttestorAttestationAuthorityNotePublicKeyArrayInput interface {
	pulumi.Input

	ToAttestorAttestationAuthorityNotePublicKeyArrayOutput() AttestorAttestationAuthorityNotePublicKeyArrayOutput
	ToAttestorAttestationAuthorityNotePublicKeyArrayOutputWithContext(context.Context) AttestorAttestationAuthorityNotePublicKeyArrayOutput
}

type AttestorAttestationAuthorityNotePublicKeyArray []AttestorAttestationAuthorityNotePublicKeyInput

func (AttestorAttestationAuthorityNotePublicKeyArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AttestorAttestationAuthorityNotePublicKey)(nil)).Elem()
}

func (i AttestorAttestationAuthorityNotePublicKeyArray) ToAttestorAttestationAuthorityNotePublicKeyArrayOutput() AttestorAttestationAuthorityNotePublicKeyArrayOutput {
	return i.ToAttestorAttestationAuthorityNotePublicKeyArrayOutputWithContext(context.Background())
}

func (i AttestorAttestationAuthorityNotePublicKeyArray) ToAttestorAttestationAuthorityNotePublicKeyArrayOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorAttestationAuthorityNotePublicKeyArrayOutput)
}

type AttestorAttestationAuthorityNotePublicKeyOutput struct{ *pulumi.OutputState }

func (AttestorAttestationAuthorityNotePublicKeyOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorAttestationAuthorityNotePublicKey)(nil)).Elem()
}

func (o AttestorAttestationAuthorityNotePublicKeyOutput) ToAttestorAttestationAuthorityNotePublicKeyOutput() AttestorAttestationAuthorityNotePublicKeyOutput {
	return o
}

func (o AttestorAttestationAuthorityNotePublicKeyOutput) ToAttestorAttestationAuthorityNotePublicKeyOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyOutput {
	return o
}

// ASCII-armored representation of a PGP public key, as the
// entire output by the command
// `gpg --export --armor foo@example.com` (either LF or CRLF
// line endings). When using this field, id should be left
// blank. The BinAuthz API handlers will calculate the ID
// and fill it in automatically. BinAuthz computes this ID
// as the OpenPGP RFC4880 V4 fingerprint, represented as
// upper-case hex. If id is provided by the caller, it will
// be overwritten by the API-calculated ID.
func (o AttestorAttestationAuthorityNotePublicKeyOutput) AsciiArmoredPgpPublicKey() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AttestorAttestationAuthorityNotePublicKey) *string { return v.AsciiArmoredPgpPublicKey }).(pulumi.StringPtrOutput)
}

// A descriptive comment. This field may be updated.
func (o AttestorAttestationAuthorityNotePublicKeyOutput) Comment() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AttestorAttestationAuthorityNotePublicKey) *string { return v.Comment }).(pulumi.StringPtrOutput)
}

// The ID of this public key. Signatures verified by BinAuthz
// must include the ID of the public key that can be used to
// verify them, and that ID must match the contents of this
// field exactly. Additional restrictions on this field can
// be imposed based on which public key type is encapsulated.
// See the documentation on publicKey cases below for details.
func (o AttestorAttestationAuthorityNotePublicKeyOutput) Id() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AttestorAttestationAuthorityNotePublicKey) *string { return v.Id }).(pulumi.StringPtrOutput)
}

// A raw PKIX SubjectPublicKeyInfo format public key.
// NOTE: id may be explicitly provided by the caller when using this
// type of public key, but it MUST be a valid RFC3986 URI. If id is left
// blank, a default one will be computed based on the digest of the DER
// encoding of the public key.
// Structure is documented below.
func (o AttestorAttestationAuthorityNotePublicKeyOutput) PkixPublicKey() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput {
	return o.ApplyT(func(v AttestorAttestationAuthorityNotePublicKey) *AttestorAttestationAuthorityNotePublicKeyPkixPublicKey {
		return v.PkixPublicKey
	}).(AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput)
}

type AttestorAttestationAuthorityNotePublicKeyArrayOutput struct{ *pulumi.OutputState }

func (AttestorAttestationAuthorityNotePublicKeyArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]AttestorAttestationAuthorityNotePublicKey)(nil)).Elem()
}

func (o AttestorAttestationAuthorityNotePublicKeyArrayOutput) ToAttestorAttestationAuthorityNotePublicKeyArrayOutput() AttestorAttestationAuthorityNotePublicKeyArrayOutput {
	return o
}

func (o AttestorAttestationAuthorityNotePublicKeyArrayOutput) ToAttestorAttestationAuthorityNotePublicKeyArrayOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyArrayOutput {
	return o
}

func (o AttestorAttestationAuthorityNotePublicKeyArrayOutput) Index(i pulumi.IntInput) AttestorAttestationAuthorityNotePublicKeyOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) AttestorAttestationAuthorityNotePublicKey {
		return vs[0].([]AttestorAttestationAuthorityNotePublicKey)[vs[1].(int)]
	}).(AttestorAttestationAuthorityNotePublicKeyOutput)
}

type AttestorAttestationAuthorityNotePublicKeyPkixPublicKey struct {
	// A PEM-encoded public key, as described in
	// `https://tools.ietf.org/html/rfc7468#section-13`
	PublicKeyPem *string `pulumi:"publicKeyPem"`
	// The signature algorithm used to verify a message against
	// a signature using this key. These signature algorithm must
	// match the structure and any object identifiers encoded in
	// publicKeyPem (i.e. this algorithm must match that of the
	// public key).
	//
	// ***
	SignatureAlgorithm *string `pulumi:"signatureAlgorithm"`
}

// AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyInput is an input type that accepts AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs and AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput values.
// You can construct a concrete instance of `AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyInput` via:
//
//	AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs{...}
type AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyInput interface {
	pulumi.Input

	ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput
	ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutputWithContext(context.Context) AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput
}

type AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs struct {
	// A PEM-encoded public key, as described in
	// `https://tools.ietf.org/html/rfc7468#section-13`
	PublicKeyPem pulumi.StringPtrInput `pulumi:"publicKeyPem"`
	// The signature algorithm used to verify a message against
	// a signature using this key. These signature algorithm must
	// match the structure and any object identifiers encoded in
	// publicKeyPem (i.e. this algorithm must match that of the
	// public key).
	//
	// ***
	SignatureAlgorithm pulumi.StringPtrInput `pulumi:"signatureAlgorithm"`
}

func (AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorAttestationAuthorityNotePublicKeyPkixPublicKey)(nil)).Elem()
}

func (i AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput {
	return i.ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutputWithContext(context.Background())
}

func (i AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput)
}

func (i AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput {
	return i.ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutputWithContext(context.Background())
}

func (i AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput).ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutputWithContext(ctx)
}

// AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrInput is an input type that accepts AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs, AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtr and AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput values.
// You can construct a concrete instance of `AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrInput` via:
//
//	        AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs{...}
//
//	or:
//
//	        nil
type AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrInput interface {
	pulumi.Input

	ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput
	ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutputWithContext(context.Context) AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput
}

type attestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrType AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs

func AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtr(v *AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs) AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrInput {
	return (*attestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrType)(v)
}

func (*attestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**AttestorAttestationAuthorityNotePublicKeyPkixPublicKey)(nil)).Elem()
}

func (i *attestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrType) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput {
	return i.ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutputWithContext(context.Background())
}

func (i *attestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrType) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput)
}

type AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput struct{ *pulumi.OutputState }

func (AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorAttestationAuthorityNotePublicKeyPkixPublicKey)(nil)).Elem()
}

func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput {
	return o
}

func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput {
	return o
}

func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput {
	return o.ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutputWithContext(context.Background())
}

func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v AttestorAttestationAuthorityNotePublicKeyPkixPublicKey) *AttestorAttestationAuthorityNotePublicKeyPkixPublicKey {
		return &v
	}).(AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput)
}

// A PEM-encoded public key, as described in
// `https://tools.ietf.org/html/rfc7468#section-13`
func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput) PublicKeyPem() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AttestorAttestationAuthorityNotePublicKeyPkixPublicKey) *string { return v.PublicKeyPem }).(pulumi.StringPtrOutput)
}

// The signature algorithm used to verify a message against
// a signature using this key. These signature algorithm must
// match the structure and any object identifiers encoded in
// publicKeyPem (i.e. this algorithm must match that of the
// public key).
//
// ***
func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput) SignatureAlgorithm() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AttestorAttestationAuthorityNotePublicKeyPkixPublicKey) *string { return v.SignatureAlgorithm }).(pulumi.StringPtrOutput)
}

type AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput struct{ *pulumi.OutputState }

func (AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**AttestorAttestationAuthorityNotePublicKeyPkixPublicKey)(nil)).Elem()
}

func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput {
	return o
}

func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput) ToAttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutputWithContext(ctx context.Context) AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput {
	return o
}

func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput) Elem() AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput {
	return o.ApplyT(func(v *AttestorAttestationAuthorityNotePublicKeyPkixPublicKey) AttestorAttestationAuthorityNotePublicKeyPkixPublicKey {
		if v != nil {
			return *v
		}
		var ret AttestorAttestationAuthorityNotePublicKeyPkixPublicKey
		return ret
	}).(AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput)
}

// A PEM-encoded public key, as described in
// `https://tools.ietf.org/html/rfc7468#section-13`
func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput) PublicKeyPem() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorAttestationAuthorityNotePublicKeyPkixPublicKey) *string {
		if v == nil {
			return nil
		}
		return v.PublicKeyPem
	}).(pulumi.StringPtrOutput)
}

// The signature algorithm used to verify a message against
// a signature using this key. These signature algorithm must
// match the structure and any object identifiers encoded in
// publicKeyPem (i.e. this algorithm must match that of the
// public key).
//
// ***
func (o AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput) SignatureAlgorithm() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorAttestationAuthorityNotePublicKeyPkixPublicKey) *string {
		if v == nil {
			return nil
		}
		return v.SignatureAlgorithm
	}).(pulumi.StringPtrOutput)
}

type AttestorIamBindingCondition struct {
	Description *string `pulumi:"description"`
	Expression  string  `pulumi:"expression"`
	Title       string  `pulumi:"title"`
}

// AttestorIamBindingConditionInput is an input type that accepts AttestorIamBindingConditionArgs and AttestorIamBindingConditionOutput values.
// You can construct a concrete instance of `AttestorIamBindingConditionInput` via:
//
//	AttestorIamBindingConditionArgs{...}
type AttestorIamBindingConditionInput interface {
	pulumi.Input

	ToAttestorIamBindingConditionOutput() AttestorIamBindingConditionOutput
	ToAttestorIamBindingConditionOutputWithContext(context.Context) AttestorIamBindingConditionOutput
}

type AttestorIamBindingConditionArgs struct {
	Description pulumi.StringPtrInput `pulumi:"description"`
	Expression  pulumi.StringInput    `pulumi:"expression"`
	Title       pulumi.StringInput    `pulumi:"title"`
}

func (AttestorIamBindingConditionArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorIamBindingCondition)(nil)).Elem()
}

func (i AttestorIamBindingConditionArgs) ToAttestorIamBindingConditionOutput() AttestorIamBindingConditionOutput {
	return i.ToAttestorIamBindingConditionOutputWithContext(context.Background())
}

func (i AttestorIamBindingConditionArgs) ToAttestorIamBindingConditionOutputWithContext(ctx context.Context) AttestorIamBindingConditionOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorIamBindingConditionOutput)
}

func (i AttestorIamBindingConditionArgs) ToAttestorIamBindingConditionPtrOutput() AttestorIamBindingConditionPtrOutput {
	return i.ToAttestorIamBindingConditionPtrOutputWithContext(context.Background())
}

func (i AttestorIamBindingConditionArgs) ToAttestorIamBindingConditionPtrOutputWithContext(ctx context.Context) AttestorIamBindingConditionPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorIamBindingConditionOutput).ToAttestorIamBindingConditionPtrOutputWithContext(ctx)
}

// AttestorIamBindingConditionPtrInput is an input type that accepts AttestorIamBindingConditionArgs, AttestorIamBindingConditionPtr and AttestorIamBindingConditionPtrOutput values.
// You can construct a concrete instance of `AttestorIamBindingConditionPtrInput` via:
//
//	        AttestorIamBindingConditionArgs{...}
//
//	or:
//
//	        nil
type AttestorIamBindingConditionPtrInput interface {
	pulumi.Input

	ToAttestorIamBindingConditionPtrOutput() AttestorIamBindingConditionPtrOutput
	ToAttestorIamBindingConditionPtrOutputWithContext(context.Context) AttestorIamBindingConditionPtrOutput
}

type attestorIamBindingConditionPtrType AttestorIamBindingConditionArgs

func AttestorIamBindingConditionPtr(v *AttestorIamBindingConditionArgs) AttestorIamBindingConditionPtrInput {
	return (*attestorIamBindingConditionPtrType)(v)
}

func (*attestorIamBindingConditionPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**AttestorIamBindingCondition)(nil)).Elem()
}

func (i *attestorIamBindingConditionPtrType) ToAttestorIamBindingConditionPtrOutput() AttestorIamBindingConditionPtrOutput {
	return i.ToAttestorIamBindingConditionPtrOutputWithContext(context.Background())
}

func (i *attestorIamBindingConditionPtrType) ToAttestorIamBindingConditionPtrOutputWithContext(ctx context.Context) AttestorIamBindingConditionPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorIamBindingConditionPtrOutput)
}

type AttestorIamBindingConditionOutput struct{ *pulumi.OutputState }

func (AttestorIamBindingConditionOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorIamBindingCondition)(nil)).Elem()
}

func (o AttestorIamBindingConditionOutput) ToAttestorIamBindingConditionOutput() AttestorIamBindingConditionOutput {
	return o
}

func (o AttestorIamBindingConditionOutput) ToAttestorIamBindingConditionOutputWithContext(ctx context.Context) AttestorIamBindingConditionOutput {
	return o
}

func (o AttestorIamBindingConditionOutput) ToAttestorIamBindingConditionPtrOutput() AttestorIamBindingConditionPtrOutput {
	return o.ToAttestorIamBindingConditionPtrOutputWithContext(context.Background())
}

func (o AttestorIamBindingConditionOutput) ToAttestorIamBindingConditionPtrOutputWithContext(ctx context.Context) AttestorIamBindingConditionPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v AttestorIamBindingCondition) *AttestorIamBindingCondition {
		return &v
	}).(AttestorIamBindingConditionPtrOutput)
}

func (o AttestorIamBindingConditionOutput) Description() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AttestorIamBindingCondition) *string { return v.Description }).(pulumi.StringPtrOutput)
}

func (o AttestorIamBindingConditionOutput) Expression() pulumi.StringOutput {
	return o.ApplyT(func(v AttestorIamBindingCondition) string { return v.Expression }).(pulumi.StringOutput)
}

func (o AttestorIamBindingConditionOutput) Title() pulumi.StringOutput {
	return o.ApplyT(func(v AttestorIamBindingCondition) string { return v.Title }).(pulumi.StringOutput)
}

type AttestorIamBindingConditionPtrOutput struct{ *pulumi.OutputState }

func (AttestorIamBindingConditionPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**AttestorIamBindingCondition)(nil)).Elem()
}

func (o AttestorIamBindingConditionPtrOutput) ToAttestorIamBindingConditionPtrOutput() AttestorIamBindingConditionPtrOutput {
	return o
}

func (o AttestorIamBindingConditionPtrOutput) ToAttestorIamBindingConditionPtrOutputWithContext(ctx context.Context) AttestorIamBindingConditionPtrOutput {
	return o
}

func (o AttestorIamBindingConditionPtrOutput) Elem() AttestorIamBindingConditionOutput {
	return o.ApplyT(func(v *AttestorIamBindingCondition) AttestorIamBindingCondition {
		if v != nil {
			return *v
		}
		var ret AttestorIamBindingCondition
		return ret
	}).(AttestorIamBindingConditionOutput)
}

func (o AttestorIamBindingConditionPtrOutput) Description() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorIamBindingCondition) *string {
		if v == nil {
			return nil
		}
		return v.Description
	}).(pulumi.StringPtrOutput)
}

func (o AttestorIamBindingConditionPtrOutput) Expression() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorIamBindingCondition) *string {
		if v == nil {
			return nil
		}
		return &v.Expression
	}).(pulumi.StringPtrOutput)
}

func (o AttestorIamBindingConditionPtrOutput) Title() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorIamBindingCondition) *string {
		if v == nil {
			return nil
		}
		return &v.Title
	}).(pulumi.StringPtrOutput)
}

type AttestorIamMemberCondition struct {
	Description *string `pulumi:"description"`
	Expression  string  `pulumi:"expression"`
	Title       string  `pulumi:"title"`
}

// AttestorIamMemberConditionInput is an input type that accepts AttestorIamMemberConditionArgs and AttestorIamMemberConditionOutput values.
// You can construct a concrete instance of `AttestorIamMemberConditionInput` via:
//
//	AttestorIamMemberConditionArgs{...}
type AttestorIamMemberConditionInput interface {
	pulumi.Input

	ToAttestorIamMemberConditionOutput() AttestorIamMemberConditionOutput
	ToAttestorIamMemberConditionOutputWithContext(context.Context) AttestorIamMemberConditionOutput
}

type AttestorIamMemberConditionArgs struct {
	Description pulumi.StringPtrInput `pulumi:"description"`
	Expression  pulumi.StringInput    `pulumi:"expression"`
	Title       pulumi.StringInput    `pulumi:"title"`
}

func (AttestorIamMemberConditionArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorIamMemberCondition)(nil)).Elem()
}

func (i AttestorIamMemberConditionArgs) ToAttestorIamMemberConditionOutput() AttestorIamMemberConditionOutput {
	return i.ToAttestorIamMemberConditionOutputWithContext(context.Background())
}

func (i AttestorIamMemberConditionArgs) ToAttestorIamMemberConditionOutputWithContext(ctx context.Context) AttestorIamMemberConditionOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorIamMemberConditionOutput)
}

func (i AttestorIamMemberConditionArgs) ToAttestorIamMemberConditionPtrOutput() AttestorIamMemberConditionPtrOutput {
	return i.ToAttestorIamMemberConditionPtrOutputWithContext(context.Background())
}

func (i AttestorIamMemberConditionArgs) ToAttestorIamMemberConditionPtrOutputWithContext(ctx context.Context) AttestorIamMemberConditionPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorIamMemberConditionOutput).ToAttestorIamMemberConditionPtrOutputWithContext(ctx)
}

// AttestorIamMemberConditionPtrInput is an input type that accepts AttestorIamMemberConditionArgs, AttestorIamMemberConditionPtr and AttestorIamMemberConditionPtrOutput values.
// You can construct a concrete instance of `AttestorIamMemberConditionPtrInput` via:
//
//	        AttestorIamMemberConditionArgs{...}
//
//	or:
//
//	        nil
type AttestorIamMemberConditionPtrInput interface {
	pulumi.Input

	ToAttestorIamMemberConditionPtrOutput() AttestorIamMemberConditionPtrOutput
	ToAttestorIamMemberConditionPtrOutputWithContext(context.Context) AttestorIamMemberConditionPtrOutput
}

type attestorIamMemberConditionPtrType AttestorIamMemberConditionArgs

func AttestorIamMemberConditionPtr(v *AttestorIamMemberConditionArgs) AttestorIamMemberConditionPtrInput {
	return (*attestorIamMemberConditionPtrType)(v)
}

func (*attestorIamMemberConditionPtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**AttestorIamMemberCondition)(nil)).Elem()
}

func (i *attestorIamMemberConditionPtrType) ToAttestorIamMemberConditionPtrOutput() AttestorIamMemberConditionPtrOutput {
	return i.ToAttestorIamMemberConditionPtrOutputWithContext(context.Background())
}

func (i *attestorIamMemberConditionPtrType) ToAttestorIamMemberConditionPtrOutputWithContext(ctx context.Context) AttestorIamMemberConditionPtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(AttestorIamMemberConditionPtrOutput)
}

type AttestorIamMemberConditionOutput struct{ *pulumi.OutputState }

func (AttestorIamMemberConditionOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*AttestorIamMemberCondition)(nil)).Elem()
}

func (o AttestorIamMemberConditionOutput) ToAttestorIamMemberConditionOutput() AttestorIamMemberConditionOutput {
	return o
}

func (o AttestorIamMemberConditionOutput) ToAttestorIamMemberConditionOutputWithContext(ctx context.Context) AttestorIamMemberConditionOutput {
	return o
}

func (o AttestorIamMemberConditionOutput) ToAttestorIamMemberConditionPtrOutput() AttestorIamMemberConditionPtrOutput {
	return o.ToAttestorIamMemberConditionPtrOutputWithContext(context.Background())
}

func (o AttestorIamMemberConditionOutput) ToAttestorIamMemberConditionPtrOutputWithContext(ctx context.Context) AttestorIamMemberConditionPtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v AttestorIamMemberCondition) *AttestorIamMemberCondition {
		return &v
	}).(AttestorIamMemberConditionPtrOutput)
}

func (o AttestorIamMemberConditionOutput) Description() pulumi.StringPtrOutput {
	return o.ApplyT(func(v AttestorIamMemberCondition) *string { return v.Description }).(pulumi.StringPtrOutput)
}

func (o AttestorIamMemberConditionOutput) Expression() pulumi.StringOutput {
	return o.ApplyT(func(v AttestorIamMemberCondition) string { return v.Expression }).(pulumi.StringOutput)
}

func (o AttestorIamMemberConditionOutput) Title() pulumi.StringOutput {
	return o.ApplyT(func(v AttestorIamMemberCondition) string { return v.Title }).(pulumi.StringOutput)
}

type AttestorIamMemberConditionPtrOutput struct{ *pulumi.OutputState }

func (AttestorIamMemberConditionPtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**AttestorIamMemberCondition)(nil)).Elem()
}

func (o AttestorIamMemberConditionPtrOutput) ToAttestorIamMemberConditionPtrOutput() AttestorIamMemberConditionPtrOutput {
	return o
}

func (o AttestorIamMemberConditionPtrOutput) ToAttestorIamMemberConditionPtrOutputWithContext(ctx context.Context) AttestorIamMemberConditionPtrOutput {
	return o
}

func (o AttestorIamMemberConditionPtrOutput) Elem() AttestorIamMemberConditionOutput {
	return o.ApplyT(func(v *AttestorIamMemberCondition) AttestorIamMemberCondition {
		if v != nil {
			return *v
		}
		var ret AttestorIamMemberCondition
		return ret
	}).(AttestorIamMemberConditionOutput)
}

func (o AttestorIamMemberConditionPtrOutput) Description() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorIamMemberCondition) *string {
		if v == nil {
			return nil
		}
		return v.Description
	}).(pulumi.StringPtrOutput)
}

func (o AttestorIamMemberConditionPtrOutput) Expression() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorIamMemberCondition) *string {
		if v == nil {
			return nil
		}
		return &v.Expression
	}).(pulumi.StringPtrOutput)
}

func (o AttestorIamMemberConditionPtrOutput) Title() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *AttestorIamMemberCondition) *string {
		if v == nil {
			return nil
		}
		return &v.Title
	}).(pulumi.StringPtrOutput)
}

type PolicyAdmissionWhitelistPattern struct {
	// An image name pattern to whitelist, in the form
	// `registry/path/to/image`. This supports a trailing * as a
	// wildcard, but this is allowed only in text after the registry/
	// part.
	NamePattern string `pulumi:"namePattern"`
}

// PolicyAdmissionWhitelistPatternInput is an input type that accepts PolicyAdmissionWhitelistPatternArgs and PolicyAdmissionWhitelistPatternOutput values.
// You can construct a concrete instance of `PolicyAdmissionWhitelistPatternInput` via:
//
//	PolicyAdmissionWhitelistPatternArgs{...}
type PolicyAdmissionWhitelistPatternInput interface {
	pulumi.Input

	ToPolicyAdmissionWhitelistPatternOutput() PolicyAdmissionWhitelistPatternOutput
	ToPolicyAdmissionWhitelistPatternOutputWithContext(context.Context) PolicyAdmissionWhitelistPatternOutput
}

type PolicyAdmissionWhitelistPatternArgs struct {
	// An image name pattern to whitelist, in the form
	// `registry/path/to/image`. This supports a trailing * as a
	// wildcard, but this is allowed only in text after the registry/
	// part.
	NamePattern pulumi.StringInput `pulumi:"namePattern"`
}

func (PolicyAdmissionWhitelistPatternArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PolicyAdmissionWhitelistPattern)(nil)).Elem()
}

func (i PolicyAdmissionWhitelistPatternArgs) ToPolicyAdmissionWhitelistPatternOutput() PolicyAdmissionWhitelistPatternOutput {
	return i.ToPolicyAdmissionWhitelistPatternOutputWithContext(context.Background())
}

func (i PolicyAdmissionWhitelistPatternArgs) ToPolicyAdmissionWhitelistPatternOutputWithContext(ctx context.Context) PolicyAdmissionWhitelistPatternOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PolicyAdmissionWhitelistPatternOutput)
}

// PolicyAdmissionWhitelistPatternArrayInput is an input type that accepts PolicyAdmissionWhitelistPatternArray and PolicyAdmissionWhitelistPatternArrayOutput values.
// You can construct a concrete instance of `PolicyAdmissionWhitelistPatternArrayInput` via:
//
//	PolicyAdmissionWhitelistPatternArray{ PolicyAdmissionWhitelistPatternArgs{...} }
type PolicyAdmissionWhitelistPatternArrayInput interface {
	pulumi.Input

	ToPolicyAdmissionWhitelistPatternArrayOutput() PolicyAdmissionWhitelistPatternArrayOutput
	ToPolicyAdmissionWhitelistPatternArrayOutputWithContext(context.Context) PolicyAdmissionWhitelistPatternArrayOutput
}

type PolicyAdmissionWhitelistPatternArray []PolicyAdmissionWhitelistPatternInput

func (PolicyAdmissionWhitelistPatternArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]PolicyAdmissionWhitelistPattern)(nil)).Elem()
}

func (i PolicyAdmissionWhitelistPatternArray) ToPolicyAdmissionWhitelistPatternArrayOutput() PolicyAdmissionWhitelistPatternArrayOutput {
	return i.ToPolicyAdmissionWhitelistPatternArrayOutputWithContext(context.Background())
}

func (i PolicyAdmissionWhitelistPatternArray) ToPolicyAdmissionWhitelistPatternArrayOutputWithContext(ctx context.Context) PolicyAdmissionWhitelistPatternArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PolicyAdmissionWhitelistPatternArrayOutput)
}

type PolicyAdmissionWhitelistPatternOutput struct{ *pulumi.OutputState }

func (PolicyAdmissionWhitelistPatternOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PolicyAdmissionWhitelistPattern)(nil)).Elem()
}

func (o PolicyAdmissionWhitelistPatternOutput) ToPolicyAdmissionWhitelistPatternOutput() PolicyAdmissionWhitelistPatternOutput {
	return o
}

func (o PolicyAdmissionWhitelistPatternOutput) ToPolicyAdmissionWhitelistPatternOutputWithContext(ctx context.Context) PolicyAdmissionWhitelistPatternOutput {
	return o
}

// An image name pattern to whitelist, in the form
// `registry/path/to/image`. This supports a trailing * as a
// wildcard, but this is allowed only in text after the registry/
// part.
func (o PolicyAdmissionWhitelistPatternOutput) NamePattern() pulumi.StringOutput {
	return o.ApplyT(func(v PolicyAdmissionWhitelistPattern) string { return v.NamePattern }).(pulumi.StringOutput)
}

type PolicyAdmissionWhitelistPatternArrayOutput struct{ *pulumi.OutputState }

func (PolicyAdmissionWhitelistPatternArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]PolicyAdmissionWhitelistPattern)(nil)).Elem()
}

func (o PolicyAdmissionWhitelistPatternArrayOutput) ToPolicyAdmissionWhitelistPatternArrayOutput() PolicyAdmissionWhitelistPatternArrayOutput {
	return o
}

func (o PolicyAdmissionWhitelistPatternArrayOutput) ToPolicyAdmissionWhitelistPatternArrayOutputWithContext(ctx context.Context) PolicyAdmissionWhitelistPatternArrayOutput {
	return o
}

func (o PolicyAdmissionWhitelistPatternArrayOutput) Index(i pulumi.IntInput) PolicyAdmissionWhitelistPatternOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) PolicyAdmissionWhitelistPattern {
		return vs[0].([]PolicyAdmissionWhitelistPattern)[vs[1].(int)]
	}).(PolicyAdmissionWhitelistPatternOutput)
}

type PolicyClusterAdmissionRule struct {
	// The identifier for this object. Format specified above.
	Cluster string `pulumi:"cluster"`
	// The action when a pod creation is denied by the admission rule.
	// Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
	EnforcementMode string `pulumi:"enforcementMode"`
	// How this admission rule will be evaluated.
	// Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
	EvaluationMode string `pulumi:"evaluationMode"`
	// The resource names of the attestors that must attest to a
	// container image. If the attestor is in a different project from the
	// policy, it should be specified in the format `projects/*/attestors/*`.
	// Each attestor must exist before a policy can reference it. To add an
	// attestor to a policy the principal issuing the policy change
	// request must be able to read the attestor resource.
	// Note: this field must be non-empty when the evaluationMode field
	// specifies REQUIRE_ATTESTATION, otherwise it must be empty.
	RequireAttestationsBies []string `pulumi:"requireAttestationsBies"`
}

// PolicyClusterAdmissionRuleInput is an input type that accepts PolicyClusterAdmissionRuleArgs and PolicyClusterAdmissionRuleOutput values.
// You can construct a concrete instance of `PolicyClusterAdmissionRuleInput` via:
//
//	PolicyClusterAdmissionRuleArgs{...}
type PolicyClusterAdmissionRuleInput interface {
	pulumi.Input

	ToPolicyClusterAdmissionRuleOutput() PolicyClusterAdmissionRuleOutput
	ToPolicyClusterAdmissionRuleOutputWithContext(context.Context) PolicyClusterAdmissionRuleOutput
}

type PolicyClusterAdmissionRuleArgs struct {
	// The identifier for this object. Format specified above.
	Cluster pulumi.StringInput `pulumi:"cluster"`
	// The action when a pod creation is denied by the admission rule.
	// Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
	EnforcementMode pulumi.StringInput `pulumi:"enforcementMode"`
	// How this admission rule will be evaluated.
	// Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
	EvaluationMode pulumi.StringInput `pulumi:"evaluationMode"`
	// The resource names of the attestors that must attest to a
	// container image. If the attestor is in a different project from the
	// policy, it should be specified in the format `projects/*/attestors/*`.
	// Each attestor must exist before a policy can reference it. To add an
	// attestor to a policy the principal issuing the policy change
	// request must be able to read the attestor resource.
	// Note: this field must be non-empty when the evaluationMode field
	// specifies REQUIRE_ATTESTATION, otherwise it must be empty.
	RequireAttestationsBies pulumi.StringArrayInput `pulumi:"requireAttestationsBies"`
}

func (PolicyClusterAdmissionRuleArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PolicyClusterAdmissionRule)(nil)).Elem()
}

func (i PolicyClusterAdmissionRuleArgs) ToPolicyClusterAdmissionRuleOutput() PolicyClusterAdmissionRuleOutput {
	return i.ToPolicyClusterAdmissionRuleOutputWithContext(context.Background())
}

func (i PolicyClusterAdmissionRuleArgs) ToPolicyClusterAdmissionRuleOutputWithContext(ctx context.Context) PolicyClusterAdmissionRuleOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PolicyClusterAdmissionRuleOutput)
}

// PolicyClusterAdmissionRuleArrayInput is an input type that accepts PolicyClusterAdmissionRuleArray and PolicyClusterAdmissionRuleArrayOutput values.
// You can construct a concrete instance of `PolicyClusterAdmissionRuleArrayInput` via:
//
//	PolicyClusterAdmissionRuleArray{ PolicyClusterAdmissionRuleArgs{...} }
type PolicyClusterAdmissionRuleArrayInput interface {
	pulumi.Input

	ToPolicyClusterAdmissionRuleArrayOutput() PolicyClusterAdmissionRuleArrayOutput
	ToPolicyClusterAdmissionRuleArrayOutputWithContext(context.Context) PolicyClusterAdmissionRuleArrayOutput
}

type PolicyClusterAdmissionRuleArray []PolicyClusterAdmissionRuleInput

func (PolicyClusterAdmissionRuleArray) ElementType() reflect.Type {
	return reflect.TypeOf((*[]PolicyClusterAdmissionRule)(nil)).Elem()
}

func (i PolicyClusterAdmissionRuleArray) ToPolicyClusterAdmissionRuleArrayOutput() PolicyClusterAdmissionRuleArrayOutput {
	return i.ToPolicyClusterAdmissionRuleArrayOutputWithContext(context.Background())
}

func (i PolicyClusterAdmissionRuleArray) ToPolicyClusterAdmissionRuleArrayOutputWithContext(ctx context.Context) PolicyClusterAdmissionRuleArrayOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PolicyClusterAdmissionRuleArrayOutput)
}

type PolicyClusterAdmissionRuleOutput struct{ *pulumi.OutputState }

func (PolicyClusterAdmissionRuleOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PolicyClusterAdmissionRule)(nil)).Elem()
}

func (o PolicyClusterAdmissionRuleOutput) ToPolicyClusterAdmissionRuleOutput() PolicyClusterAdmissionRuleOutput {
	return o
}

func (o PolicyClusterAdmissionRuleOutput) ToPolicyClusterAdmissionRuleOutputWithContext(ctx context.Context) PolicyClusterAdmissionRuleOutput {
	return o
}

// The identifier for this object. Format specified above.
func (o PolicyClusterAdmissionRuleOutput) Cluster() pulumi.StringOutput {
	return o.ApplyT(func(v PolicyClusterAdmissionRule) string { return v.Cluster }).(pulumi.StringOutput)
}

// The action when a pod creation is denied by the admission rule.
// Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
func (o PolicyClusterAdmissionRuleOutput) EnforcementMode() pulumi.StringOutput {
	return o.ApplyT(func(v PolicyClusterAdmissionRule) string { return v.EnforcementMode }).(pulumi.StringOutput)
}

// How this admission rule will be evaluated.
// Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
func (o PolicyClusterAdmissionRuleOutput) EvaluationMode() pulumi.StringOutput {
	return o.ApplyT(func(v PolicyClusterAdmissionRule) string { return v.EvaluationMode }).(pulumi.StringOutput)
}

// The resource names of the attestors that must attest to a
// container image. If the attestor is in a different project from the
// policy, it should be specified in the format `projects/*/attestors/*`.
// Each attestor must exist before a policy can reference it. To add an
// attestor to a policy the principal issuing the policy change
// request must be able to read the attestor resource.
// Note: this field must be non-empty when the evaluationMode field
// specifies REQUIRE_ATTESTATION, otherwise it must be empty.
func (o PolicyClusterAdmissionRuleOutput) RequireAttestationsBies() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PolicyClusterAdmissionRule) []string { return v.RequireAttestationsBies }).(pulumi.StringArrayOutput)
}

type PolicyClusterAdmissionRuleArrayOutput struct{ *pulumi.OutputState }

func (PolicyClusterAdmissionRuleArrayOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*[]PolicyClusterAdmissionRule)(nil)).Elem()
}

func (o PolicyClusterAdmissionRuleArrayOutput) ToPolicyClusterAdmissionRuleArrayOutput() PolicyClusterAdmissionRuleArrayOutput {
	return o
}

func (o PolicyClusterAdmissionRuleArrayOutput) ToPolicyClusterAdmissionRuleArrayOutputWithContext(ctx context.Context) PolicyClusterAdmissionRuleArrayOutput {
	return o
}

func (o PolicyClusterAdmissionRuleArrayOutput) Index(i pulumi.IntInput) PolicyClusterAdmissionRuleOutput {
	return pulumi.All(o, i).ApplyT(func(vs []interface{}) PolicyClusterAdmissionRule {
		return vs[0].([]PolicyClusterAdmissionRule)[vs[1].(int)]
	}).(PolicyClusterAdmissionRuleOutput)
}

type PolicyDefaultAdmissionRule struct {
	// The action when a pod creation is denied by the admission rule.
	// Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
	//
	// ***
	EnforcementMode string `pulumi:"enforcementMode"`
	// How this admission rule will be evaluated.
	// Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
	EvaluationMode string `pulumi:"evaluationMode"`
	// The resource names of the attestors that must attest to a
	// container image. If the attestor is in a different project from the
	// policy, it should be specified in the format `projects/*/attestors/*`.
	// Each attestor must exist before a policy can reference it. To add an
	// attestor to a policy the principal issuing the policy change
	// request must be able to read the attestor resource.
	// Note: this field must be non-empty when the evaluationMode field
	// specifies REQUIRE_ATTESTATION, otherwise it must be empty.
	RequireAttestationsBies []string `pulumi:"requireAttestationsBies"`
}

// PolicyDefaultAdmissionRuleInput is an input type that accepts PolicyDefaultAdmissionRuleArgs and PolicyDefaultAdmissionRuleOutput values.
// You can construct a concrete instance of `PolicyDefaultAdmissionRuleInput` via:
//
//	PolicyDefaultAdmissionRuleArgs{...}
type PolicyDefaultAdmissionRuleInput interface {
	pulumi.Input

	ToPolicyDefaultAdmissionRuleOutput() PolicyDefaultAdmissionRuleOutput
	ToPolicyDefaultAdmissionRuleOutputWithContext(context.Context) PolicyDefaultAdmissionRuleOutput
}

type PolicyDefaultAdmissionRuleArgs struct {
	// The action when a pod creation is denied by the admission rule.
	// Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
	//
	// ***
	EnforcementMode pulumi.StringInput `pulumi:"enforcementMode"`
	// How this admission rule will be evaluated.
	// Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
	EvaluationMode pulumi.StringInput `pulumi:"evaluationMode"`
	// The resource names of the attestors that must attest to a
	// container image. If the attestor is in a different project from the
	// policy, it should be specified in the format `projects/*/attestors/*`.
	// Each attestor must exist before a policy can reference it. To add an
	// attestor to a policy the principal issuing the policy change
	// request must be able to read the attestor resource.
	// Note: this field must be non-empty when the evaluationMode field
	// specifies REQUIRE_ATTESTATION, otherwise it must be empty.
	RequireAttestationsBies pulumi.StringArrayInput `pulumi:"requireAttestationsBies"`
}

func (PolicyDefaultAdmissionRuleArgs) ElementType() reflect.Type {
	return reflect.TypeOf((*PolicyDefaultAdmissionRule)(nil)).Elem()
}

func (i PolicyDefaultAdmissionRuleArgs) ToPolicyDefaultAdmissionRuleOutput() PolicyDefaultAdmissionRuleOutput {
	return i.ToPolicyDefaultAdmissionRuleOutputWithContext(context.Background())
}

func (i PolicyDefaultAdmissionRuleArgs) ToPolicyDefaultAdmissionRuleOutputWithContext(ctx context.Context) PolicyDefaultAdmissionRuleOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PolicyDefaultAdmissionRuleOutput)
}

func (i PolicyDefaultAdmissionRuleArgs) ToPolicyDefaultAdmissionRulePtrOutput() PolicyDefaultAdmissionRulePtrOutput {
	return i.ToPolicyDefaultAdmissionRulePtrOutputWithContext(context.Background())
}

func (i PolicyDefaultAdmissionRuleArgs) ToPolicyDefaultAdmissionRulePtrOutputWithContext(ctx context.Context) PolicyDefaultAdmissionRulePtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PolicyDefaultAdmissionRuleOutput).ToPolicyDefaultAdmissionRulePtrOutputWithContext(ctx)
}

// PolicyDefaultAdmissionRulePtrInput is an input type that accepts PolicyDefaultAdmissionRuleArgs, PolicyDefaultAdmissionRulePtr and PolicyDefaultAdmissionRulePtrOutput values.
// You can construct a concrete instance of `PolicyDefaultAdmissionRulePtrInput` via:
//
//	        PolicyDefaultAdmissionRuleArgs{...}
//
//	or:
//
//	        nil
type PolicyDefaultAdmissionRulePtrInput interface {
	pulumi.Input

	ToPolicyDefaultAdmissionRulePtrOutput() PolicyDefaultAdmissionRulePtrOutput
	ToPolicyDefaultAdmissionRulePtrOutputWithContext(context.Context) PolicyDefaultAdmissionRulePtrOutput
}

type policyDefaultAdmissionRulePtrType PolicyDefaultAdmissionRuleArgs

func PolicyDefaultAdmissionRulePtr(v *PolicyDefaultAdmissionRuleArgs) PolicyDefaultAdmissionRulePtrInput {
	return (*policyDefaultAdmissionRulePtrType)(v)
}

func (*policyDefaultAdmissionRulePtrType) ElementType() reflect.Type {
	return reflect.TypeOf((**PolicyDefaultAdmissionRule)(nil)).Elem()
}

func (i *policyDefaultAdmissionRulePtrType) ToPolicyDefaultAdmissionRulePtrOutput() PolicyDefaultAdmissionRulePtrOutput {
	return i.ToPolicyDefaultAdmissionRulePtrOutputWithContext(context.Background())
}

func (i *policyDefaultAdmissionRulePtrType) ToPolicyDefaultAdmissionRulePtrOutputWithContext(ctx context.Context) PolicyDefaultAdmissionRulePtrOutput {
	return pulumi.ToOutputWithContext(ctx, i).(PolicyDefaultAdmissionRulePtrOutput)
}

type PolicyDefaultAdmissionRuleOutput struct{ *pulumi.OutputState }

func (PolicyDefaultAdmissionRuleOutput) ElementType() reflect.Type {
	return reflect.TypeOf((*PolicyDefaultAdmissionRule)(nil)).Elem()
}

func (o PolicyDefaultAdmissionRuleOutput) ToPolicyDefaultAdmissionRuleOutput() PolicyDefaultAdmissionRuleOutput {
	return o
}

func (o PolicyDefaultAdmissionRuleOutput) ToPolicyDefaultAdmissionRuleOutputWithContext(ctx context.Context) PolicyDefaultAdmissionRuleOutput {
	return o
}

func (o PolicyDefaultAdmissionRuleOutput) ToPolicyDefaultAdmissionRulePtrOutput() PolicyDefaultAdmissionRulePtrOutput {
	return o.ToPolicyDefaultAdmissionRulePtrOutputWithContext(context.Background())
}

func (o PolicyDefaultAdmissionRuleOutput) ToPolicyDefaultAdmissionRulePtrOutputWithContext(ctx context.Context) PolicyDefaultAdmissionRulePtrOutput {
	return o.ApplyTWithContext(ctx, func(_ context.Context, v PolicyDefaultAdmissionRule) *PolicyDefaultAdmissionRule {
		return &v
	}).(PolicyDefaultAdmissionRulePtrOutput)
}

// The action when a pod creation is denied by the admission rule.
// Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
//
// ***
func (o PolicyDefaultAdmissionRuleOutput) EnforcementMode() pulumi.StringOutput {
	return o.ApplyT(func(v PolicyDefaultAdmissionRule) string { return v.EnforcementMode }).(pulumi.StringOutput)
}

// How this admission rule will be evaluated.
// Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
func (o PolicyDefaultAdmissionRuleOutput) EvaluationMode() pulumi.StringOutput {
	return o.ApplyT(func(v PolicyDefaultAdmissionRule) string { return v.EvaluationMode }).(pulumi.StringOutput)
}

// The resource names of the attestors that must attest to a
// container image. If the attestor is in a different project from the
// policy, it should be specified in the format `projects/*/attestors/*`.
// Each attestor must exist before a policy can reference it. To add an
// attestor to a policy the principal issuing the policy change
// request must be able to read the attestor resource.
// Note: this field must be non-empty when the evaluationMode field
// specifies REQUIRE_ATTESTATION, otherwise it must be empty.
func (o PolicyDefaultAdmissionRuleOutput) RequireAttestationsBies() pulumi.StringArrayOutput {
	return o.ApplyT(func(v PolicyDefaultAdmissionRule) []string { return v.RequireAttestationsBies }).(pulumi.StringArrayOutput)
}

type PolicyDefaultAdmissionRulePtrOutput struct{ *pulumi.OutputState }

func (PolicyDefaultAdmissionRulePtrOutput) ElementType() reflect.Type {
	return reflect.TypeOf((**PolicyDefaultAdmissionRule)(nil)).Elem()
}

func (o PolicyDefaultAdmissionRulePtrOutput) ToPolicyDefaultAdmissionRulePtrOutput() PolicyDefaultAdmissionRulePtrOutput {
	return o
}

func (o PolicyDefaultAdmissionRulePtrOutput) ToPolicyDefaultAdmissionRulePtrOutputWithContext(ctx context.Context) PolicyDefaultAdmissionRulePtrOutput {
	return o
}

func (o PolicyDefaultAdmissionRulePtrOutput) Elem() PolicyDefaultAdmissionRuleOutput {
	return o.ApplyT(func(v *PolicyDefaultAdmissionRule) PolicyDefaultAdmissionRule {
		if v != nil {
			return *v
		}
		var ret PolicyDefaultAdmissionRule
		return ret
	}).(PolicyDefaultAdmissionRuleOutput)
}

// The action when a pod creation is denied by the admission rule.
// Possible values are: `ENFORCED_BLOCK_AND_AUDIT_LOG`, `DRYRUN_AUDIT_LOG_ONLY`.
//
// ***
func (o PolicyDefaultAdmissionRulePtrOutput) EnforcementMode() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *PolicyDefaultAdmissionRule) *string {
		if v == nil {
			return nil
		}
		return &v.EnforcementMode
	}).(pulumi.StringPtrOutput)
}

// How this admission rule will be evaluated.
// Possible values are: `ALWAYS_ALLOW`, `REQUIRE_ATTESTATION`, `ALWAYS_DENY`.
func (o PolicyDefaultAdmissionRulePtrOutput) EvaluationMode() pulumi.StringPtrOutput {
	return o.ApplyT(func(v *PolicyDefaultAdmissionRule) *string {
		if v == nil {
			return nil
		}
		return &v.EvaluationMode
	}).(pulumi.StringPtrOutput)
}

// The resource names of the attestors that must attest to a
// container image. If the attestor is in a different project from the
// policy, it should be specified in the format `projects/*/attestors/*`.
// Each attestor must exist before a policy can reference it. To add an
// attestor to a policy the principal issuing the policy change
// request must be able to read the attestor resource.
// Note: this field must be non-empty when the evaluationMode field
// specifies REQUIRE_ATTESTATION, otherwise it must be empty.
func (o PolicyDefaultAdmissionRulePtrOutput) RequireAttestationsBies() pulumi.StringArrayOutput {
	return o.ApplyT(func(v *PolicyDefaultAdmissionRule) []string {
		if v == nil {
			return nil
		}
		return v.RequireAttestationsBies
	}).(pulumi.StringArrayOutput)
}

func init() {
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorAttestationAuthorityNoteInput)(nil)).Elem(), AttestorAttestationAuthorityNoteArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorAttestationAuthorityNotePtrInput)(nil)).Elem(), AttestorAttestationAuthorityNoteArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorAttestationAuthorityNotePublicKeyInput)(nil)).Elem(), AttestorAttestationAuthorityNotePublicKeyArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorAttestationAuthorityNotePublicKeyArrayInput)(nil)).Elem(), AttestorAttestationAuthorityNotePublicKeyArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyInput)(nil)).Elem(), AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrInput)(nil)).Elem(), AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorIamBindingConditionInput)(nil)).Elem(), AttestorIamBindingConditionArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorIamBindingConditionPtrInput)(nil)).Elem(), AttestorIamBindingConditionArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorIamMemberConditionInput)(nil)).Elem(), AttestorIamMemberConditionArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*AttestorIamMemberConditionPtrInput)(nil)).Elem(), AttestorIamMemberConditionArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PolicyAdmissionWhitelistPatternInput)(nil)).Elem(), PolicyAdmissionWhitelistPatternArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PolicyAdmissionWhitelistPatternArrayInput)(nil)).Elem(), PolicyAdmissionWhitelistPatternArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*PolicyClusterAdmissionRuleInput)(nil)).Elem(), PolicyClusterAdmissionRuleArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PolicyClusterAdmissionRuleArrayInput)(nil)).Elem(), PolicyClusterAdmissionRuleArray{})
	pulumi.RegisterInputType(reflect.TypeOf((*PolicyDefaultAdmissionRuleInput)(nil)).Elem(), PolicyDefaultAdmissionRuleArgs{})
	pulumi.RegisterInputType(reflect.TypeOf((*PolicyDefaultAdmissionRulePtrInput)(nil)).Elem(), PolicyDefaultAdmissionRuleArgs{})
	pulumi.RegisterOutputType(AttestorAttestationAuthorityNoteOutput{})
	pulumi.RegisterOutputType(AttestorAttestationAuthorityNotePtrOutput{})
	pulumi.RegisterOutputType(AttestorAttestationAuthorityNotePublicKeyOutput{})
	pulumi.RegisterOutputType(AttestorAttestationAuthorityNotePublicKeyArrayOutput{})
	pulumi.RegisterOutputType(AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyOutput{})
	pulumi.RegisterOutputType(AttestorAttestationAuthorityNotePublicKeyPkixPublicKeyPtrOutput{})
	pulumi.RegisterOutputType(AttestorIamBindingConditionOutput{})
	pulumi.RegisterOutputType(AttestorIamBindingConditionPtrOutput{})
	pulumi.RegisterOutputType(AttestorIamMemberConditionOutput{})
	pulumi.RegisterOutputType(AttestorIamMemberConditionPtrOutput{})
	pulumi.RegisterOutputType(PolicyAdmissionWhitelistPatternOutput{})
	pulumi.RegisterOutputType(PolicyAdmissionWhitelistPatternArrayOutput{})
	pulumi.RegisterOutputType(PolicyClusterAdmissionRuleOutput{})
	pulumi.RegisterOutputType(PolicyClusterAdmissionRuleArrayOutput{})
	pulumi.RegisterOutputType(PolicyDefaultAdmissionRuleOutput{})
	pulumi.RegisterOutputType(PolicyDefaultAdmissionRulePtrOutput{})
}