Google Cloud v8.31.0, May 15 25

Google Cloud v8.31.0 published on Thursday, May 15, 2025 by Pulumi

gcp.compute.Image

Explore with Pulumi AI

Google Cloud v8.31.0 published on Thursday, May 15, 2025 by Pulumi

Google Compute Engine uses operating system images to create the root persistent disks for your instances. You specify an image when you create an instance. Images contain a boot loader, an operating system, and a root file system. Linux operating system images are also capable of running containers on Compute Engine.

Images can be either public or custom.

Public images are provided and maintained by Google, open-source communities, and third-party vendors. By default, all projects have access to these images and can use them to create instances. Custom images are available only to your project. You can create a custom image from root persistent disks and other images. Then, use the custom image to create an instance.

To get more information about Image, see:

API documentation
How-to Guides
- Official Documentation

Example Usage

Image Basic

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const debian = gcp.compute.getImage({
    family: "debian-12",
    project: "debian-cloud",
});
const persistent = new gcp.compute.Disk("persistent", {
    name: "example-disk",
    image: debian.then(debian => debian.selfLink),
    size: 10,
    type: "pd-ssd",
    zone: "us-central1-a",
});
const example = new gcp.compute.Image("example", {
    name: "example-image",
    sourceDisk: persistent.id,
});

import pulumi
import pulumi_gcp as gcp

debian = gcp.compute.get_image(family="debian-12",
    project="debian-cloud")
persistent = gcp.compute.Disk("persistent",
    name="example-disk",
    image=debian.self_link,
    size=10,
    type="pd-ssd",
    zone="us-central1-a")
example = gcp.compute.Image("example",
    name="example-image",
    source_disk=persistent.id)

package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		debian, err := compute.LookupImage(ctx, &compute.LookupImageArgs{
			Family:  pulumi.StringRef("debian-12"),
			Project: pulumi.StringRef("debian-cloud"),
		}, nil)
		if err != nil {
			return err
		}
		persistent, err := compute.NewDisk(ctx, "persistent", &compute.DiskArgs{
			Name:  pulumi.String("example-disk"),
			Image: pulumi.String(debian.SelfLink),
			Size:  pulumi.Int(10),
			Type:  pulumi.String("pd-ssd"),
			Zone:  pulumi.String("us-central1-a"),
		})
		if err != nil {
			return err
		}
		_, err = compute.NewImage(ctx, "example", &compute.ImageArgs{
			Name:       pulumi.String("example-image"),
			SourceDisk: persistent.ID(),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var debian = Gcp.Compute.GetImage.Invoke(new()
    {
        Family = "debian-12",
        Project = "debian-cloud",
    });

    var persistent = new Gcp.Compute.Disk("persistent", new()
    {
        Name = "example-disk",
        Image = debian.Apply(getImageResult => getImageResult.SelfLink),
        Size = 10,
        Type = "pd-ssd",
        Zone = "us-central1-a",
    });

    var example = new Gcp.Compute.Image("example", new()
    {
        Name = "example-image",
        SourceDisk = persistent.Id,
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.ComputeFunctions;
import com.pulumi.gcp.compute.inputs.GetImageArgs;
import com.pulumi.gcp.compute.Disk;
import com.pulumi.gcp.compute.DiskArgs;
import com.pulumi.gcp.compute.Image;
import com.pulumi.gcp.compute.ImageArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var debian = ComputeFunctions.getImage(GetImageArgs.builder()
            .family("debian-12")
            .project("debian-cloud")
            .build());

        var persistent = new Disk("persistent", DiskArgs.builder()
            .name("example-disk")
            .image(debian.selfLink())
            .size(10)
            .type("pd-ssd")
            .zone("us-central1-a")
            .build());

        var example = new Image("example", ImageArgs.builder()
            .name("example-image")
            .sourceDisk(persistent.id())
            .build());

    }
}

resources:
  persistent:
    type: gcp:compute:Disk
    properties:
      name: example-disk
      image: ${debian.selfLink}
      size: 10
      type: pd-ssd
      zone: us-central1-a
  example:
    type: gcp:compute:Image
    properties:
      name: example-image
      sourceDisk: ${persistent.id}
variables:
  debian:
    fn::invoke:
      function: gcp:compute:getImage
      arguments:
        family: debian-12
        project: debian-cloud

Image Guest Os

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const debian = gcp.compute.getImage({
    family: "debian-12",
    project: "debian-cloud",
});
const persistent = new gcp.compute.Disk("persistent", {
    name: "example-disk",
    image: debian.then(debian => debian.selfLink),
    size: 10,
    type: "pd-ssd",
    zone: "us-central1-a",
});
const example = new gcp.compute.Image("example", {
    name: "example-image",
    sourceDisk: persistent.id,
    guestOsFeatures: [
        {
            type: "UEFI_COMPATIBLE",
        },
        {
            type: "VIRTIO_SCSI_MULTIQUEUE",
        },
        {
            type: "GVNIC",
        },
        {
            type: "SEV_CAPABLE",
        },
        {
            type: "SEV_LIVE_MIGRATABLE_V2",
        },
    ],
});

import pulumi
import pulumi_gcp as gcp

debian = gcp.compute.get_image(family="debian-12",
    project="debian-cloud")
persistent = gcp.compute.Disk("persistent",
    name="example-disk",
    image=debian.self_link,
    size=10,
    type="pd-ssd",
    zone="us-central1-a")
example = gcp.compute.Image("example",
    name="example-image",
    source_disk=persistent.id,
    guest_os_features=[
        {
            "type": "UEFI_COMPATIBLE",
        },
        {
            "type": "VIRTIO_SCSI_MULTIQUEUE",
        },
        {
            "type": "GVNIC",
        },
        {
            "type": "SEV_CAPABLE",
        },
        {
            "type": "SEV_LIVE_MIGRATABLE_V2",
        },
    ])

package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		debian, err := compute.LookupImage(ctx, &compute.LookupImageArgs{
			Family:  pulumi.StringRef("debian-12"),
			Project: pulumi.StringRef("debian-cloud"),
		}, nil)
		if err != nil {
			return err
		}
		persistent, err := compute.NewDisk(ctx, "persistent", &compute.DiskArgs{
			Name:  pulumi.String("example-disk"),
			Image: pulumi.String(debian.SelfLink),
			Size:  pulumi.Int(10),
			Type:  pulumi.String("pd-ssd"),
			Zone:  pulumi.String("us-central1-a"),
		})
		if err != nil {
			return err
		}
		_, err = compute.NewImage(ctx, "example", &compute.ImageArgs{
			Name:       pulumi.String("example-image"),
			SourceDisk: persistent.ID(),
			GuestOsFeatures: compute.ImageGuestOsFeatureArray{
				&compute.ImageGuestOsFeatureArgs{
					Type: pulumi.String("UEFI_COMPATIBLE"),
				},
				&compute.ImageGuestOsFeatureArgs{
					Type: pulumi.String("VIRTIO_SCSI_MULTIQUEUE"),
				},
				&compute.ImageGuestOsFeatureArgs{
					Type: pulumi.String("GVNIC"),
				},
				&compute.ImageGuestOsFeatureArgs{
					Type: pulumi.String("SEV_CAPABLE"),
				},
				&compute.ImageGuestOsFeatureArgs{
					Type: pulumi.String("SEV_LIVE_MIGRATABLE_V2"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var debian = Gcp.Compute.GetImage.Invoke(new()
    {
        Family = "debian-12",
        Project = "debian-cloud",
    });

    var persistent = new Gcp.Compute.Disk("persistent", new()
    {
        Name = "example-disk",
        Image = debian.Apply(getImageResult => getImageResult.SelfLink),
        Size = 10,
        Type = "pd-ssd",
        Zone = "us-central1-a",
    });

    var example = new Gcp.Compute.Image("example", new()
    {
        Name = "example-image",
        SourceDisk = persistent.Id,
        GuestOsFeatures = new[]
        {
            new Gcp.Compute.Inputs.ImageGuestOsFeatureArgs
            {
                Type = "UEFI_COMPATIBLE",
            },
            new Gcp.Compute.Inputs.ImageGuestOsFeatureArgs
            {
                Type = "VIRTIO_SCSI_MULTIQUEUE",
            },
            new Gcp.Compute.Inputs.ImageGuestOsFeatureArgs
            {
                Type = "GVNIC",
            },
            new Gcp.Compute.Inputs.ImageGuestOsFeatureArgs
            {
                Type = "SEV_CAPABLE",
            },
            new Gcp.Compute.Inputs.ImageGuestOsFeatureArgs
            {
                Type = "SEV_LIVE_MIGRATABLE_V2",
            },
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.ComputeFunctions;
import com.pulumi.gcp.compute.inputs.GetImageArgs;
import com.pulumi.gcp.compute.Disk;
import com.pulumi.gcp.compute.DiskArgs;
import com.pulumi.gcp.compute.Image;
import com.pulumi.gcp.compute.ImageArgs;
import com.pulumi.gcp.compute.inputs.ImageGuestOsFeatureArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var debian = ComputeFunctions.getImage(GetImageArgs.builder()
            .family("debian-12")
            .project("debian-cloud")
            .build());

        var persistent = new Disk("persistent", DiskArgs.builder()
            .name("example-disk")
            .image(debian.selfLink())
            .size(10)
            .type("pd-ssd")
            .zone("us-central1-a")
            .build());

        var example = new Image("example", ImageArgs.builder()
            .name("example-image")
            .sourceDisk(persistent.id())
            .guestOsFeatures(            
                ImageGuestOsFeatureArgs.builder()
                    .type("UEFI_COMPATIBLE")
                    .build(),
                ImageGuestOsFeatureArgs.builder()
                    .type("VIRTIO_SCSI_MULTIQUEUE")
                    .build(),
                ImageGuestOsFeatureArgs.builder()
                    .type("GVNIC")
                    .build(),
                ImageGuestOsFeatureArgs.builder()
                    .type("SEV_CAPABLE")
                    .build(),
                ImageGuestOsFeatureArgs.builder()
                    .type("SEV_LIVE_MIGRATABLE_V2")
                    .build())
            .build());

    }
}

resources:
  persistent:
    type: gcp:compute:Disk
    properties:
      name: example-disk
      image: ${debian.selfLink}
      size: 10
      type: pd-ssd
      zone: us-central1-a
  example:
    type: gcp:compute:Image
    properties:
      name: example-image
      sourceDisk: ${persistent.id}
      guestOsFeatures:
        - type: UEFI_COMPATIBLE
        - type: VIRTIO_SCSI_MULTIQUEUE
        - type: GVNIC
        - type: SEV_CAPABLE
        - type: SEV_LIVE_MIGRATABLE_V2
variables:
  debian:
    fn::invoke:
      function: gcp:compute:getImage
      arguments:
        family: debian-12
        project: debian-cloud

Image Basic Storage Location

import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";

const debian = gcp.compute.getImage({
    family: "debian-12",
    project: "debian-cloud",
});
const persistent = new gcp.compute.Disk("persistent", {
    name: "example-disk",
    image: debian.then(debian => debian.selfLink),
    size: 10,
    type: "pd-ssd",
    zone: "us-central1-a",
});
const example = new gcp.compute.Image("example", {
    name: "example-sl-image",
    sourceDisk: persistent.id,
    storageLocations: ["us-central1"],
});

import pulumi
import pulumi_gcp as gcp

debian = gcp.compute.get_image(family="debian-12",
    project="debian-cloud")
persistent = gcp.compute.Disk("persistent",
    name="example-disk",
    image=debian.self_link,
    size=10,
    type="pd-ssd",
    zone="us-central1-a")
example = gcp.compute.Image("example",
    name="example-sl-image",
    source_disk=persistent.id,
    storage_locations=["us-central1"])

package main

import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/compute"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		debian, err := compute.LookupImage(ctx, &compute.LookupImageArgs{
			Family:  pulumi.StringRef("debian-12"),
			Project: pulumi.StringRef("debian-cloud"),
		}, nil)
		if err != nil {
			return err
		}
		persistent, err := compute.NewDisk(ctx, "persistent", &compute.DiskArgs{
			Name:  pulumi.String("example-disk"),
			Image: pulumi.String(debian.SelfLink),
			Size:  pulumi.Int(10),
			Type:  pulumi.String("pd-ssd"),
			Zone:  pulumi.String("us-central1-a"),
		})
		if err != nil {
			return err
		}
		_, err = compute.NewImage(ctx, "example", &compute.ImageArgs{
			Name:       pulumi.String("example-sl-image"),
			SourceDisk: persistent.ID(),
			StorageLocations: pulumi.StringArray{
				pulumi.String("us-central1"),
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;

return await Deployment.RunAsync(() => 
{
    var debian = Gcp.Compute.GetImage.Invoke(new()
    {
        Family = "debian-12",
        Project = "debian-cloud",
    });

    var persistent = new Gcp.Compute.Disk("persistent", new()
    {
        Name = "example-disk",
        Image = debian.Apply(getImageResult => getImageResult.SelfLink),
        Size = 10,
        Type = "pd-ssd",
        Zone = "us-central1-a",
    });

    var example = new Gcp.Compute.Image("example", new()
    {
        Name = "example-sl-image",
        SourceDisk = persistent.Id,
        StorageLocations = new[]
        {
            "us-central1",
        },
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.compute.ComputeFunctions;
import com.pulumi.gcp.compute.inputs.GetImageArgs;
import com.pulumi.gcp.compute.Disk;
import com.pulumi.gcp.compute.DiskArgs;
import com.pulumi.gcp.compute.Image;
import com.pulumi.gcp.compute.ImageArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var debian = ComputeFunctions.getImage(GetImageArgs.builder()
            .family("debian-12")
            .project("debian-cloud")
            .build());

        var persistent = new Disk("persistent", DiskArgs.builder()
            .name("example-disk")
            .image(debian.selfLink())
            .size(10)
            .type("pd-ssd")
            .zone("us-central1-a")
            .build());

        var example = new Image("example", ImageArgs.builder()
            .name("example-sl-image")
            .sourceDisk(persistent.id())
            .storageLocations("us-central1")
            .build());

    }
}

resources:
  persistent:
    type: gcp:compute:Disk
    properties:
      name: example-disk
      image: ${debian.selfLink}
      size: 10
      type: pd-ssd
      zone: us-central1-a
  example:
    type: gcp:compute:Image
    properties:
      name: example-sl-image
      sourceDisk: ${persistent.id}
      storageLocations:
        - us-central1
variables:
  debian:
    fn::invoke:
      function: gcp:compute:getImage
      arguments:
        family: debian-12
        project: debian-cloud

Create Image Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Image(name: string, args?: ImageArgs, opts?: CustomResourceOptions);

@overload
def Image(resource_name: str,
          args: Optional[ImageArgs] = None,
          opts: Optional[ResourceOptions] = None)

@overload
def Image(resource_name: str,
          opts: Optional[ResourceOptions] = None,
          description: Optional[str] = None,
          disk_size_gb: Optional[int] = None,
          family: Optional[str] = None,
          guest_os_features: Optional[Sequence[ImageGuestOsFeatureArgs]] = None,
          image_encryption_key: Optional[ImageImageEncryptionKeyArgs] = None,
          labels: Optional[Mapping[str, str]] = None,
          licenses: Optional[Sequence[str]] = None,
          name: Optional[str] = None,
          project: Optional[str] = None,
          raw_disk: Optional[ImageRawDiskArgs] = None,
          shielded_instance_initial_state: Optional[ImageShieldedInstanceInitialStateArgs] = None,
          source_disk: Optional[str] = None,
          source_disk_encryption_key: Optional[ImageSourceDiskEncryptionKeyArgs] = None,
          source_image: Optional[str] = None,
          source_image_encryption_key: Optional[ImageSourceImageEncryptionKeyArgs] = None,
          source_snapshot: Optional[str] = None,
          source_snapshot_encryption_key: Optional[ImageSourceSnapshotEncryptionKeyArgs] = None,
          storage_locations: Optional[Sequence[str]] = None)

func NewImage(ctx *Context, name string, args *ImageArgs, opts ...ResourceOption) (*Image, error)

public Image(string name, ImageArgs? args = null, CustomResourceOptions? opts = null)

public Image(String name, ImageArgs args)
public Image(String name, ImageArgs args, CustomResourceOptions options)

type: gcp:compute:Image
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name string: The unique name of the resource.
args ImageArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args ImageArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args ImageArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args ImageArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args ImageArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var imageResource = new Gcp.Compute.Image("imageResource", new()
{
    Description = "string",
    DiskSizeGb = 0,
    Family = "string",
    GuestOsFeatures = new[]
    {
        new Gcp.Compute.Inputs.ImageGuestOsFeatureArgs
        {
            Type = "string",
        },
    },
    ImageEncryptionKey = new Gcp.Compute.Inputs.ImageImageEncryptionKeyArgs
    {
        KmsKeySelfLink = "string",
        KmsKeyServiceAccount = "string",
        RawKey = "string",
        RsaEncryptedKey = "string",
    },
    Labels = 
    {
        { "string", "string" },
    },
    Licenses = new[]
    {
        "string",
    },
    Name = "string",
    Project = "string",
    RawDisk = new Gcp.Compute.Inputs.ImageRawDiskArgs
    {
        Source = "string",
        ContainerType = "string",
        Sha1 = "string",
    },
    ShieldedInstanceInitialState = new Gcp.Compute.Inputs.ImageShieldedInstanceInitialStateArgs
    {
        Dbs = new[]
        {
            new Gcp.Compute.Inputs.ImageShieldedInstanceInitialStateDbArgs
            {
                Content = "string",
                FileType = "string",
            },
        },
        Dbxs = new[]
        {
            new Gcp.Compute.Inputs.ImageShieldedInstanceInitialStateDbxArgs
            {
                Content = "string",
                FileType = "string",
            },
        },
        Keks = new[]
        {
            new Gcp.Compute.Inputs.ImageShieldedInstanceInitialStateKekArgs
            {
                Content = "string",
                FileType = "string",
            },
        },
        Pk = new Gcp.Compute.Inputs.ImageShieldedInstanceInitialStatePkArgs
        {
            Content = "string",
            FileType = "string",
        },
    },
    SourceDisk = "string",
    SourceDiskEncryptionKey = new Gcp.Compute.Inputs.ImageSourceDiskEncryptionKeyArgs
    {
        KmsKeySelfLink = "string",
        KmsKeyServiceAccount = "string",
        RawKey = "string",
        RsaEncryptedKey = "string",
    },
    SourceImage = "string",
    SourceImageEncryptionKey = new Gcp.Compute.Inputs.ImageSourceImageEncryptionKeyArgs
    {
        KmsKeySelfLink = "string",
        KmsKeyServiceAccount = "string",
        RawKey = "string",
        RsaEncryptedKey = "string",
    },
    SourceSnapshot = "string",
    SourceSnapshotEncryptionKey = new Gcp.Compute.Inputs.ImageSourceSnapshotEncryptionKeyArgs
    {
        KmsKeySelfLink = "string",
        KmsKeyServiceAccount = "string",
        RawKey = "string",
        RsaEncryptedKey = "string",
    },
    StorageLocations = new[]
    {
        "string",
    },
});

example, err := compute.NewImage(ctx, "imageResource", &compute.ImageArgs{
	Description: pulumi.String("string"),
	DiskSizeGb:  pulumi.Int(0),
	Family:      pulumi.String("string"),
	GuestOsFeatures: compute.ImageGuestOsFeatureArray{
		&compute.ImageGuestOsFeatureArgs{
			Type: pulumi.String("string"),
		},
	},
	ImageEncryptionKey: &compute.ImageImageEncryptionKeyArgs{
		KmsKeySelfLink:       pulumi.String("string"),
		KmsKeyServiceAccount: pulumi.String("string"),
		RawKey:               pulumi.String("string"),
		RsaEncryptedKey:      pulumi.String("string"),
	},
	Labels: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Licenses: pulumi.StringArray{
		pulumi.String("string"),
	},
	Name:    pulumi.String("string"),
	Project: pulumi.String("string"),
	RawDisk: &compute.ImageRawDiskArgs{
		Source:        pulumi.String("string"),
		ContainerType: pulumi.String("string"),
		Sha1:          pulumi.String("string"),
	},
	ShieldedInstanceInitialState: &compute.ImageShieldedInstanceInitialStateArgs{
		Dbs: compute.ImageShieldedInstanceInitialStateDbArray{
			&compute.ImageShieldedInstanceInitialStateDbArgs{
				Content:  pulumi.String("string"),
				FileType: pulumi.String("string"),
			},
		},
		Dbxs: compute.ImageShieldedInstanceInitialStateDbxArray{
			&compute.ImageShieldedInstanceInitialStateDbxArgs{
				Content:  pulumi.String("string"),
				FileType: pulumi.String("string"),
			},
		},
		Keks: compute.ImageShieldedInstanceInitialStateKekArray{
			&compute.ImageShieldedInstanceInitialStateKekArgs{
				Content:  pulumi.String("string"),
				FileType: pulumi.String("string"),
			},
		},
		Pk: &compute.ImageShieldedInstanceInitialStatePkArgs{
			Content:  pulumi.String("string"),
			FileType: pulumi.String("string"),
		},
	},
	SourceDisk: pulumi.String("string"),
	SourceDiskEncryptionKey: &compute.ImageSourceDiskEncryptionKeyArgs{
		KmsKeySelfLink:       pulumi.String("string"),
		KmsKeyServiceAccount: pulumi.String("string"),
		RawKey:               pulumi.String("string"),
		RsaEncryptedKey:      pulumi.String("string"),
	},
	SourceImage: pulumi.String("string"),
	SourceImageEncryptionKey: &compute.ImageSourceImageEncryptionKeyArgs{
		KmsKeySelfLink:       pulumi.String("string"),
		KmsKeyServiceAccount: pulumi.String("string"),
		RawKey:               pulumi.String("string"),
		RsaEncryptedKey:      pulumi.String("string"),
	},
	SourceSnapshot: pulumi.String("string"),
	SourceSnapshotEncryptionKey: &compute.ImageSourceSnapshotEncryptionKeyArgs{
		KmsKeySelfLink:       pulumi.String("string"),
		KmsKeyServiceAccount: pulumi.String("string"),
		RawKey:               pulumi.String("string"),
		RsaEncryptedKey:      pulumi.String("string"),
	},
	StorageLocations: pulumi.StringArray{
		pulumi.String("string"),
	},
})

var imageResource = new Image("imageResource", ImageArgs.builder()
    .description("string")
    .diskSizeGb(0)
    .family("string")
    .guestOsFeatures(ImageGuestOsFeatureArgs.builder()
        .type("string")
        .build())
    .imageEncryptionKey(ImageImageEncryptionKeyArgs.builder()
        .kmsKeySelfLink("string")
        .kmsKeyServiceAccount("string")
        .rawKey("string")
        .rsaEncryptedKey("string")
        .build())
    .labels(Map.of("string", "string"))
    .licenses("string")
    .name("string")
    .project("string")
    .rawDisk(ImageRawDiskArgs.builder()
        .source("string")
        .containerType("string")
        .sha1("string")
        .build())
    .shieldedInstanceInitialState(ImageShieldedInstanceInitialStateArgs.builder()
        .dbs(ImageShieldedInstanceInitialStateDbArgs.builder()
            .content("string")
            .fileType("string")
            .build())
        .dbxs(ImageShieldedInstanceInitialStateDbxArgs.builder()
            .content("string")
            .fileType("string")
            .build())
        .keks(ImageShieldedInstanceInitialStateKekArgs.builder()
            .content("string")
            .fileType("string")
            .build())
        .pk(ImageShieldedInstanceInitialStatePkArgs.builder()
            .content("string")
            .fileType("string")
            .build())
        .build())
    .sourceDisk("string")
    .sourceDiskEncryptionKey(ImageSourceDiskEncryptionKeyArgs.builder()
        .kmsKeySelfLink("string")
        .kmsKeyServiceAccount("string")
        .rawKey("string")
        .rsaEncryptedKey("string")
        .build())
    .sourceImage("string")
    .sourceImageEncryptionKey(ImageSourceImageEncryptionKeyArgs.builder()
        .kmsKeySelfLink("string")
        .kmsKeyServiceAccount("string")
        .rawKey("string")
        .rsaEncryptedKey("string")
        .build())
    .sourceSnapshot("string")
    .sourceSnapshotEncryptionKey(ImageSourceSnapshotEncryptionKeyArgs.builder()
        .kmsKeySelfLink("string")
        .kmsKeyServiceAccount("string")
        .rawKey("string")
        .rsaEncryptedKey("string")
        .build())
    .storageLocations("string")
    .build());

image_resource = gcp.compute.Image("imageResource",
    description="string",
    disk_size_gb=0,
    family="string",
    guest_os_features=[{
        "type": "string",
    }],
    image_encryption_key={
        "kms_key_self_link": "string",
        "kms_key_service_account": "string",
        "raw_key": "string",
        "rsa_encrypted_key": "string",
    },
    labels={
        "string": "string",
    },
    licenses=["string"],
    name="string",
    project="string",
    raw_disk={
        "source": "string",
        "container_type": "string",
        "sha1": "string",
    },
    shielded_instance_initial_state={
        "dbs": [{
            "content": "string",
            "file_type": "string",
        }],
        "dbxs": [{
            "content": "string",
            "file_type": "string",
        }],
        "keks": [{
            "content": "string",
            "file_type": "string",
        }],
        "pk": {
            "content": "string",
            "file_type": "string",
        },
    },
    source_disk="string",
    source_disk_encryption_key={
        "kms_key_self_link": "string",
        "kms_key_service_account": "string",
        "raw_key": "string",
        "rsa_encrypted_key": "string",
    },
    source_image="string",
    source_image_encryption_key={
        "kms_key_self_link": "string",
        "kms_key_service_account": "string",
        "raw_key": "string",
        "rsa_encrypted_key": "string",
    },
    source_snapshot="string",
    source_snapshot_encryption_key={
        "kms_key_self_link": "string",
        "kms_key_service_account": "string",
        "raw_key": "string",
        "rsa_encrypted_key": "string",
    },
    storage_locations=["string"])

const imageResource = new gcp.compute.Image("imageResource", {
    description: "string",
    diskSizeGb: 0,
    family: "string",
    guestOsFeatures: [{
        type: "string",
    }],
    imageEncryptionKey: {
        kmsKeySelfLink: "string",
        kmsKeyServiceAccount: "string",
        rawKey: "string",
        rsaEncryptedKey: "string",
    },
    labels: {
        string: "string",
    },
    licenses: ["string"],
    name: "string",
    project: "string",
    rawDisk: {
        source: "string",
        containerType: "string",
        sha1: "string",
    },
    shieldedInstanceInitialState: {
        dbs: [{
            content: "string",
            fileType: "string",
        }],
        dbxs: [{
            content: "string",
            fileType: "string",
        }],
        keks: [{
            content: "string",
            fileType: "string",
        }],
        pk: {
            content: "string",
            fileType: "string",
        },
    },
    sourceDisk: "string",
    sourceDiskEncryptionKey: {
        kmsKeySelfLink: "string",
        kmsKeyServiceAccount: "string",
        rawKey: "string",
        rsaEncryptedKey: "string",
    },
    sourceImage: "string",
    sourceImageEncryptionKey: {
        kmsKeySelfLink: "string",
        kmsKeyServiceAccount: "string",
        rawKey: "string",
        rsaEncryptedKey: "string",
    },
    sourceSnapshot: "string",
    sourceSnapshotEncryptionKey: {
        kmsKeySelfLink: "string",
        kmsKeyServiceAccount: "string",
        rawKey: "string",
        rsaEncryptedKey: "string",
    },
    storageLocations: ["string"],
});

type: gcp:compute:Image
properties:
    description: string
    diskSizeGb: 0
    family: string
    guestOsFeatures:
        - type: string
    imageEncryptionKey:
        kmsKeySelfLink: string
        kmsKeyServiceAccount: string
        rawKey: string
        rsaEncryptedKey: string
    labels:
        string: string
    licenses:
        - string
    name: string
    project: string
    rawDisk:
        containerType: string
        sha1: string
        source: string
    shieldedInstanceInitialState:
        dbs:
            - content: string
              fileType: string
        dbxs:
            - content: string
              fileType: string
        keks:
            - content: string
              fileType: string
        pk:
            content: string
            fileType: string
    sourceDisk: string
    sourceDiskEncryptionKey:
        kmsKeySelfLink: string
        kmsKeyServiceAccount: string
        rawKey: string
        rsaEncryptedKey: string
    sourceImage: string
    sourceImageEncryptionKey:
        kmsKeySelfLink: string
        kmsKeyServiceAccount: string
        rawKey: string
        rsaEncryptedKey: string
    sourceSnapshot: string
    sourceSnapshotEncryptionKey:
        kmsKeySelfLink: string
        kmsKeyServiceAccount: string
        rawKey: string
        rsaEncryptedKey: string
    storageLocations:
        - string

Image Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Image resource accepts the following input properties:

Description string

An optional description of this resource. Provide this property when you create the resource.

DiskSizeGb int

Size of the image when restored onto a persistent disk (in GB).

Family string

The name of the image family to which this image belongs. You can create disks by specifying an image family instead of a specific image name. The image family always returns its latest image that is not deprecated. The name of the image family must comply with RFC1035.

GuestOsFeatures List<ImageGuestOsFeature>

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

ImageEncryptionKey ImageImageEncryptionKey

Encrypts the image using a customer-supplied encryption key. After you encrypt an image with a customer-supplied key, you must provide the same key if you use the image later (e.g. to create a disk from the image) Structure is documented below.

Labels Dictionary<string, string>

Labels to apply to this Image. Note: This field is non-authoritative, and will only manage the labels present in your configuration. Please refer to the field effective_labels for all of the labels present on the resource.

Licenses List<string>

Any applicable license URI.

Name string

Name of the resource; provided by the client when the resource is created. The name must be 1-63 characters long, and comply with RFC1035. Specifically, the name must be 1-63 characters long and match the regular expression a-z? which means the first character must be a lowercase letter, and all following characters must be a dash, lowercase letter, or digit, except the last character, which cannot be a dash.

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

RawDisk ImageRawDisk

The parameters of the raw disk image. Structure is documented below.

ShieldedInstanceInitialState ImageShieldedInstanceInitialState

Set the secure boot keys of shielded instance. Structure is documented below.

SourceDisk string

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

SourceDiskEncryptionKey ImageSourceDiskEncryptionKey

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

SourceImage string

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

SourceImageEncryptionKey ImageSourceImageEncryptionKey

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

SourceSnapshot string

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

SourceSnapshotEncryptionKey ImageSourceSnapshotEncryptionKey

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

StorageLocations List<string>

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

Description string

An optional description of this resource. Provide this property when you create the resource.

DiskSizeGb int

Size of the image when restored onto a persistent disk (in GB).

Family string

GuestOsFeatures []ImageGuestOsFeatureArgs

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

ImageEncryptionKey ImageImageEncryptionKeyArgs

Labels map[string]string

Licenses []string

Any applicable license URI.

Name string

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

RawDisk ImageRawDiskArgs

The parameters of the raw disk image. Structure is documented below.

ShieldedInstanceInitialState ImageShieldedInstanceInitialStateArgs

Set the secure boot keys of shielded instance. Structure is documented below.

SourceDisk string

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

SourceDiskEncryptionKey ImageSourceDiskEncryptionKeyArgs

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

SourceImage string

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

SourceImageEncryptionKey ImageSourceImageEncryptionKeyArgs

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

SourceSnapshot string

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

SourceSnapshotEncryptionKey ImageSourceSnapshotEncryptionKeyArgs

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

StorageLocations []string

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

description String

An optional description of this resource. Provide this property when you create the resource.

diskSizeGb Integer

Size of the image when restored onto a persistent disk (in GB).

family String

guestOsFeatures List<ImageGuestOsFeature>

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

imageEncryptionKey ImageImageEncryptionKey

labels Map<String,String>

licenses List<String>

Any applicable license URI.

name String

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

rawDisk ImageRawDisk

The parameters of the raw disk image. Structure is documented below.

shieldedInstanceInitialState ImageShieldedInstanceInitialState

Set the secure boot keys of shielded instance. Structure is documented below.

sourceDisk String

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

sourceDiskEncryptionKey ImageSourceDiskEncryptionKey

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

sourceImage String

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

sourceImageEncryptionKey ImageSourceImageEncryptionKey

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

sourceSnapshot String

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

sourceSnapshotEncryptionKey ImageSourceSnapshotEncryptionKey

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

storageLocations List<String>

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

description string

An optional description of this resource. Provide this property when you create the resource.

diskSizeGb number

Size of the image when restored onto a persistent disk (in GB).

family string

guestOsFeatures ImageGuestOsFeature[]

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

imageEncryptionKey ImageImageEncryptionKey

labels {[key: string]: string}

licenses string[]

Any applicable license URI.

name string

project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

rawDisk ImageRawDisk

The parameters of the raw disk image. Structure is documented below.

shieldedInstanceInitialState ImageShieldedInstanceInitialState

Set the secure boot keys of shielded instance. Structure is documented below.

sourceDisk string

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

sourceDiskEncryptionKey ImageSourceDiskEncryptionKey

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

sourceImage string

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

sourceImageEncryptionKey ImageSourceImageEncryptionKey

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

sourceSnapshot string

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

sourceSnapshotEncryptionKey ImageSourceSnapshotEncryptionKey

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

storageLocations string[]

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

description str

An optional description of this resource. Provide this property when you create the resource.

disk_size_gb int

Size of the image when restored onto a persistent disk (in GB).

family str

guest_os_features Sequence[ImageGuestOsFeatureArgs]

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

image_encryption_key ImageImageEncryptionKeyArgs

labels Mapping[str, str]

licenses Sequence[str]

Any applicable license URI.

name str

project str

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

raw_disk ImageRawDiskArgs

The parameters of the raw disk image. Structure is documented below.

shielded_instance_initial_state ImageShieldedInstanceInitialStateArgs

Set the secure boot keys of shielded instance. Structure is documented below.

source_disk str

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

source_disk_encryption_key ImageSourceDiskEncryptionKeyArgs

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

source_image str

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

source_image_encryption_key ImageSourceImageEncryptionKeyArgs

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

source_snapshot str

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

source_snapshot_encryption_key ImageSourceSnapshotEncryptionKeyArgs

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

storage_locations Sequence[str]

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

description String

An optional description of this resource. Provide this property when you create the resource.

diskSizeGb Number

Size of the image when restored onto a persistent disk (in GB).

family String

guestOsFeatures List<Property Map>

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

imageEncryptionKey Property Map

labels Map<String>

licenses List<String>

Any applicable license URI.

name String

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

rawDisk Property Map

The parameters of the raw disk image. Structure is documented below.

shieldedInstanceInitialState Property Map

Set the secure boot keys of shielded instance. Structure is documented below.

sourceDisk String

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

sourceDiskEncryptionKey Property Map

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

sourceImage String

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

sourceImageEncryptionKey Property Map

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

sourceSnapshot String

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

sourceSnapshotEncryptionKey Property Map

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

storageLocations List<String>

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

Outputs

All input properties are implicitly available as output properties. Additionally, the Image resource produces the following output properties:

ArchiveSizeBytes int: Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).
CreationTimestamp string: Creation timestamp in RFC3339 text format.
EffectiveLabels Dictionary<string, string>: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
Id string: The provider-assigned unique ID for this managed resource.
LabelFingerprint string: The fingerprint used for optimistic locking of this resource. Used internally during updates.
PulumiLabels Dictionary<string, string>: The combination of labels configured directly on the resource and default labels configured on the provider.
SelfLink string: The URI of the created resource.

ArchiveSizeBytes int: Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).
CreationTimestamp string: Creation timestamp in RFC3339 text format.
EffectiveLabels map[string]string: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
Id string: The provider-assigned unique ID for this managed resource.
LabelFingerprint string: The fingerprint used for optimistic locking of this resource. Used internally during updates.
PulumiLabels map[string]string: The combination of labels configured directly on the resource and default labels configured on the provider.
SelfLink string: The URI of the created resource.

archiveSizeBytes Integer: Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).
creationTimestamp String: Creation timestamp in RFC3339 text format.
effectiveLabels Map<String,String>: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id String: The provider-assigned unique ID for this managed resource.
labelFingerprint String: The fingerprint used for optimistic locking of this resource. Used internally during updates.
pulumiLabels Map<String,String>: The combination of labels configured directly on the resource and default labels configured on the provider.
selfLink String: The URI of the created resource.

archiveSizeBytes number: Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).
creationTimestamp string: Creation timestamp in RFC3339 text format.
effectiveLabels {[key: string]: string}: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id string: The provider-assigned unique ID for this managed resource.
labelFingerprint string: The fingerprint used for optimistic locking of this resource. Used internally during updates.
pulumiLabels {[key: string]: string}: The combination of labels configured directly on the resource and default labels configured on the provider.
selfLink string: The URI of the created resource.

archive_size_bytes int: Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).
creation_timestamp str: Creation timestamp in RFC3339 text format.
effective_labels Mapping[str, str]: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id str: The provider-assigned unique ID for this managed resource.
label_fingerprint str: The fingerprint used for optimistic locking of this resource. Used internally during updates.
pulumi_labels Mapping[str, str]: The combination of labels configured directly on the resource and default labels configured on the provider.
self_link str: The URI of the created resource.

archiveSizeBytes Number: Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).
creationTimestamp String: Creation timestamp in RFC3339 text format.
effectiveLabels Map<String>: All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.
id String: The provider-assigned unique ID for this managed resource.
labelFingerprint String: The fingerprint used for optimistic locking of this resource. Used internally during updates.
pulumiLabels Map<String>: The combination of labels configured directly on the resource and default labels configured on the provider.
selfLink String: The URI of the created resource.

Look up Existing Image Resource

Get an existing Image resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: ImageState, opts?: CustomResourceOptions): Image

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        archive_size_bytes: Optional[int] = None,
        creation_timestamp: Optional[str] = None,
        description: Optional[str] = None,
        disk_size_gb: Optional[int] = None,
        effective_labels: Optional[Mapping[str, str]] = None,
        family: Optional[str] = None,
        guest_os_features: Optional[Sequence[ImageGuestOsFeatureArgs]] = None,
        image_encryption_key: Optional[ImageImageEncryptionKeyArgs] = None,
        label_fingerprint: Optional[str] = None,
        labels: Optional[Mapping[str, str]] = None,
        licenses: Optional[Sequence[str]] = None,
        name: Optional[str] = None,
        project: Optional[str] = None,
        pulumi_labels: Optional[Mapping[str, str]] = None,
        raw_disk: Optional[ImageRawDiskArgs] = None,
        self_link: Optional[str] = None,
        shielded_instance_initial_state: Optional[ImageShieldedInstanceInitialStateArgs] = None,
        source_disk: Optional[str] = None,
        source_disk_encryption_key: Optional[ImageSourceDiskEncryptionKeyArgs] = None,
        source_image: Optional[str] = None,
        source_image_encryption_key: Optional[ImageSourceImageEncryptionKeyArgs] = None,
        source_snapshot: Optional[str] = None,
        source_snapshot_encryption_key: Optional[ImageSourceSnapshotEncryptionKeyArgs] = None,
        storage_locations: Optional[Sequence[str]] = None) -> Image

func GetImage(ctx *Context, name string, id IDInput, state *ImageState, opts ...ResourceOption) (*Image, error)

public static Image Get(string name, Input<string> id, ImageState? state, CustomResourceOptions? opts = null)

public static Image get(String name, Output<String> id, ImageState state, CustomResourceOptions options)

resources:  _:    type: gcp:compute:Image    get:      id: ${id}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

ArchiveSizeBytes int

Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).

CreationTimestamp string

Creation timestamp in RFC3339 text format.

Description string

An optional description of this resource. Provide this property when you create the resource.

DiskSizeGb int

Size of the image when restored onto a persistent disk (in GB).

EffectiveLabels Dictionary<string, string>

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

Family string

GuestOsFeatures List<ImageGuestOsFeature>

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

ImageEncryptionKey ImageImageEncryptionKey

LabelFingerprint string

The fingerprint used for optimistic locking of this resource. Used internally during updates.

Labels Dictionary<string, string>

Licenses List<string>

Any applicable license URI.

Name string

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

PulumiLabels Dictionary<string, string>

The combination of labels configured directly on the resource and default labels configured on the provider.

RawDisk ImageRawDisk

The parameters of the raw disk image. Structure is documented below.

SelfLink string

The URI of the created resource.

ShieldedInstanceInitialState ImageShieldedInstanceInitialState

Set the secure boot keys of shielded instance. Structure is documented below.

SourceDisk string

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

SourceDiskEncryptionKey ImageSourceDiskEncryptionKey

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

SourceImage string

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

SourceImageEncryptionKey ImageSourceImageEncryptionKey

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

SourceSnapshot string

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

SourceSnapshotEncryptionKey ImageSourceSnapshotEncryptionKey

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

StorageLocations List<string>

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

ArchiveSizeBytes int

Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).

CreationTimestamp string

Creation timestamp in RFC3339 text format.

Description string

An optional description of this resource. Provide this property when you create the resource.

DiskSizeGb int

Size of the image when restored onto a persistent disk (in GB).

EffectiveLabels map[string]string

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

Family string

GuestOsFeatures []ImageGuestOsFeatureArgs

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

ImageEncryptionKey ImageImageEncryptionKeyArgs

LabelFingerprint string

The fingerprint used for optimistic locking of this resource. Used internally during updates.

Labels map[string]string

Licenses []string

Any applicable license URI.

Name string

Project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

PulumiLabels map[string]string

The combination of labels configured directly on the resource and default labels configured on the provider.

RawDisk ImageRawDiskArgs

The parameters of the raw disk image. Structure is documented below.

SelfLink string

The URI of the created resource.

ShieldedInstanceInitialState ImageShieldedInstanceInitialStateArgs

Set the secure boot keys of shielded instance. Structure is documented below.

SourceDisk string

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

SourceDiskEncryptionKey ImageSourceDiskEncryptionKeyArgs

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

SourceImage string

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

SourceImageEncryptionKey ImageSourceImageEncryptionKeyArgs

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

SourceSnapshot string

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

SourceSnapshotEncryptionKey ImageSourceSnapshotEncryptionKeyArgs

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

StorageLocations []string

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

archiveSizeBytes Integer

Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).

creationTimestamp String

Creation timestamp in RFC3339 text format.

description String

An optional description of this resource. Provide this property when you create the resource.

diskSizeGb Integer

Size of the image when restored onto a persistent disk (in GB).

effectiveLabels Map<String,String>

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

family String

guestOsFeatures List<ImageGuestOsFeature>

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

imageEncryptionKey ImageImageEncryptionKey

labelFingerprint String

The fingerprint used for optimistic locking of this resource. Used internally during updates.

labels Map<String,String>

licenses List<String>

Any applicable license URI.

name String

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

pulumiLabels Map<String,String>

The combination of labels configured directly on the resource and default labels configured on the provider.

rawDisk ImageRawDisk

The parameters of the raw disk image. Structure is documented below.

selfLink String

The URI of the created resource.

shieldedInstanceInitialState ImageShieldedInstanceInitialState

Set the secure boot keys of shielded instance. Structure is documented below.

sourceDisk String

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

sourceDiskEncryptionKey ImageSourceDiskEncryptionKey

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

sourceImage String

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

sourceImageEncryptionKey ImageSourceImageEncryptionKey

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

sourceSnapshot String

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

sourceSnapshotEncryptionKey ImageSourceSnapshotEncryptionKey

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

storageLocations List<String>

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

archiveSizeBytes number

Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).

creationTimestamp string

Creation timestamp in RFC3339 text format.

description string

An optional description of this resource. Provide this property when you create the resource.

diskSizeGb number

Size of the image when restored onto a persistent disk (in GB).

effectiveLabels {[key: string]: string}

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

family string

guestOsFeatures ImageGuestOsFeature[]

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

imageEncryptionKey ImageImageEncryptionKey

labelFingerprint string

The fingerprint used for optimistic locking of this resource. Used internally during updates.

labels {[key: string]: string}

licenses string[]

Any applicable license URI.

name string

project string

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

pulumiLabels {[key: string]: string}

The combination of labels configured directly on the resource and default labels configured on the provider.

rawDisk ImageRawDisk

The parameters of the raw disk image. Structure is documented below.

selfLink string

The URI of the created resource.

shieldedInstanceInitialState ImageShieldedInstanceInitialState

Set the secure boot keys of shielded instance. Structure is documented below.

sourceDisk string

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

sourceDiskEncryptionKey ImageSourceDiskEncryptionKey

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

sourceImage string

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

sourceImageEncryptionKey ImageSourceImageEncryptionKey

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

sourceSnapshot string

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

sourceSnapshotEncryptionKey ImageSourceSnapshotEncryptionKey

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

storageLocations string[]

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

archive_size_bytes int

Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).

creation_timestamp str

Creation timestamp in RFC3339 text format.

description str

An optional description of this resource. Provide this property when you create the resource.

disk_size_gb int

Size of the image when restored onto a persistent disk (in GB).

effective_labels Mapping[str, str]

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

family str

guest_os_features Sequence[ImageGuestOsFeatureArgs]

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

image_encryption_key ImageImageEncryptionKeyArgs

label_fingerprint str

The fingerprint used for optimistic locking of this resource. Used internally during updates.

labels Mapping[str, str]

licenses Sequence[str]

Any applicable license URI.

name str

project str

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

pulumi_labels Mapping[str, str]

The combination of labels configured directly on the resource and default labels configured on the provider.

raw_disk ImageRawDiskArgs

The parameters of the raw disk image. Structure is documented below.

self_link str

The URI of the created resource.

shielded_instance_initial_state ImageShieldedInstanceInitialStateArgs

Set the secure boot keys of shielded instance. Structure is documented below.

source_disk str

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

source_disk_encryption_key ImageSourceDiskEncryptionKeyArgs

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

source_image str

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

source_image_encryption_key ImageSourceImageEncryptionKeyArgs

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

source_snapshot str

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

source_snapshot_encryption_key ImageSourceSnapshotEncryptionKeyArgs

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

storage_locations Sequence[str]

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

archiveSizeBytes Number

Size of the image tar.gz archive stored in Google Cloud Storage (in bytes).

creationTimestamp String

Creation timestamp in RFC3339 text format.

description String

An optional description of this resource. Provide this property when you create the resource.

diskSizeGb Number

Size of the image when restored onto a persistent disk (in GB).

effectiveLabels Map<String>

All of labels (key/value pairs) present on the resource in GCP, including the labels configured through Pulumi, other clients and services.

family String

guestOsFeatures List<Property Map>

A list of features to enable on the guest operating system. Applicable only for bootable images. Structure is documented below.

imageEncryptionKey Property Map

labelFingerprint String

The fingerprint used for optimistic locking of this resource. Used internally during updates.

labels Map<String>

licenses List<String>

Any applicable license URI.

name String

project String

The ID of the project in which the resource belongs. If it is not provided, the provider project is used.

pulumiLabels Map<String>

The combination of labels configured directly on the resource and default labels configured on the provider.

rawDisk Property Map

The parameters of the raw disk image. Structure is documented below.

selfLink String

The URI of the created resource.

shieldedInstanceInitialState Property Map

Set the secure boot keys of shielded instance. Structure is documented below.

sourceDisk String

The source disk to create this image based on. You must provide either this property or the rawDisk.source property but not both to create an image.

sourceDiskEncryptionKey Property Map

The customer-supplied encryption key of the source disk. Required if the source disk is protected by a customer-supplied encryption key. Structure is documented below.

sourceImage String

URL of the source image used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The rawDisk.source URL
The sourceDisk URL

sourceImageEncryptionKey Property Map

The customer-supplied encryption key of the source image. Required if the source image is protected by a customer-supplied encryption key. Structure is documented below.

sourceSnapshot String

URL of the source snapshot used to create this image. In order to create an image, you must provide the full or partial URL of one of the following:

The selfLink URL
This property
The sourceImage URL
The rawDisk.source URL
The sourceDisk URL

sourceSnapshotEncryptionKey Property Map

The customer-supplied encryption key of the source snapshot. Required if the source snapshot is protected by a customer-supplied encryption key. Structure is documented below.

storageLocations List<String>

Cloud Storage bucket storage location of the image (regional or multi-regional). Reference link: https://cloud.google.com/compute/docs/reference/rest/v1/images

Supporting Types

ImageGuestOsFeature, ImageGuestOsFeatureArgs

Type string: The type of supported feature. Read Enabling guest operating system features to see a list of available options. Possible values are: MULTI_IP_SUBNET, SECURE_BOOT, SEV_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS, GVNIC, IDPF, SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, SUSPEND_RESUME_COMPATIBLE, TDX_CAPABLE, SEV_LIVE_MIGRATABLE_V2.

Type string: The type of supported feature. Read Enabling guest operating system features to see a list of available options. Possible values are: MULTI_IP_SUBNET, SECURE_BOOT, SEV_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS, GVNIC, IDPF, SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, SUSPEND_RESUME_COMPATIBLE, TDX_CAPABLE, SEV_LIVE_MIGRATABLE_V2.

type String: The type of supported feature. Read Enabling guest operating system features to see a list of available options. Possible values are: MULTI_IP_SUBNET, SECURE_BOOT, SEV_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS, GVNIC, IDPF, SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, SUSPEND_RESUME_COMPATIBLE, TDX_CAPABLE, SEV_LIVE_MIGRATABLE_V2.

type string: The type of supported feature. Read Enabling guest operating system features to see a list of available options. Possible values are: MULTI_IP_SUBNET, SECURE_BOOT, SEV_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS, GVNIC, IDPF, SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, SUSPEND_RESUME_COMPATIBLE, TDX_CAPABLE, SEV_LIVE_MIGRATABLE_V2.

type str: The type of supported feature. Read Enabling guest operating system features to see a list of available options. Possible values are: MULTI_IP_SUBNET, SECURE_BOOT, SEV_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS, GVNIC, IDPF, SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, SUSPEND_RESUME_COMPATIBLE, TDX_CAPABLE, SEV_LIVE_MIGRATABLE_V2.

type String: The type of supported feature. Read Enabling guest operating system features to see a list of available options. Possible values are: MULTI_IP_SUBNET, SECURE_BOOT, SEV_CAPABLE, UEFI_COMPATIBLE, VIRTIO_SCSI_MULTIQUEUE, WINDOWS, GVNIC, IDPF, SEV_LIVE_MIGRATABLE, SEV_SNP_CAPABLE, SUSPEND_RESUME_COMPATIBLE, TDX_CAPABLE, SEV_LIVE_MIGRATABLE_V2.

ImageImageEncryptionKey, ImageImageEncryptionKeyArgs

KmsKeySelfLink string: The self link of the encryption key that is stored in Google Cloud KMS.
KmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
RawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
RsaEncryptedKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.

KmsKeySelfLink string: The self link of the encryption key that is stored in Google Cloud KMS.
KmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
RawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
RsaEncryptedKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink String: The self link of the encryption key that is stored in Google Cloud KMS.
kmsKeyServiceAccount String: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink string: The self link of the encryption key that is stored in Google Cloud KMS.
kmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.

kms_key_self_link str: The self link of the encryption key that is stored in Google Cloud KMS.
kms_key_service_account str: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
raw_key str: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsa_encrypted_key str: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink String: The self link of the encryption key that is stored in Google Cloud KMS.
kmsKeyServiceAccount String: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.

ImageRawDisk, ImageRawDiskArgs

Source string: The full Google Cloud Storage URL where disk storage is stored You must provide either this property or the sourceDisk property but not both.
ContainerType string: The format used to encode and transmit the block device, which should be TAR. This is just a container and transmission format and not a runtime format. Provided by the client when the disk image is created. Default value is TAR. Possible values are: TAR.
Sha1 string: An optional SHA1 checksum of the disk image before unpackaging. This is provided by the client when the disk image is created.

Source string: The full Google Cloud Storage URL where disk storage is stored You must provide either this property or the sourceDisk property but not both.
ContainerType string: The format used to encode and transmit the block device, which should be TAR. This is just a container and transmission format and not a runtime format. Provided by the client when the disk image is created. Default value is TAR. Possible values are: TAR.
Sha1 string: An optional SHA1 checksum of the disk image before unpackaging. This is provided by the client when the disk image is created.

source String: The full Google Cloud Storage URL where disk storage is stored You must provide either this property or the sourceDisk property but not both.
containerType String: The format used to encode and transmit the block device, which should be TAR. This is just a container and transmission format and not a runtime format. Provided by the client when the disk image is created. Default value is TAR. Possible values are: TAR.
sha1 String: An optional SHA1 checksum of the disk image before unpackaging. This is provided by the client when the disk image is created.

source string: The full Google Cloud Storage URL where disk storage is stored You must provide either this property or the sourceDisk property but not both.
containerType string: The format used to encode and transmit the block device, which should be TAR. This is just a container and transmission format and not a runtime format. Provided by the client when the disk image is created. Default value is TAR. Possible values are: TAR.
sha1 string: An optional SHA1 checksum of the disk image before unpackaging. This is provided by the client when the disk image is created.

source str: The full Google Cloud Storage URL where disk storage is stored You must provide either this property or the sourceDisk property but not both.
container_type str: The format used to encode and transmit the block device, which should be TAR. This is just a container and transmission format and not a runtime format. Provided by the client when the disk image is created. Default value is TAR. Possible values are: TAR.
sha1 str: An optional SHA1 checksum of the disk image before unpackaging. This is provided by the client when the disk image is created.

source String: The full Google Cloud Storage URL where disk storage is stored You must provide either this property or the sourceDisk property but not both.
containerType String: The format used to encode and transmit the block device, which should be TAR. This is just a container and transmission format and not a runtime format. Provided by the client when the disk image is created. Default value is TAR. Possible values are: TAR.
sha1 String: An optional SHA1 checksum of the disk image before unpackaging. This is provided by the client when the disk image is created.

ImageShieldedInstanceInitialState, ImageShieldedInstanceInitialStateArgs

Dbs List<ImageShieldedInstanceInitialStateDb>: The Key Database (db). Structure is documented below.
Dbxs List<ImageShieldedInstanceInitialStateDbx>: The forbidden key database (dbx). Structure is documented below.
Keks List<ImageShieldedInstanceInitialStateKek>: The Key Exchange Key (KEK). Structure is documented below.
Pk ImageShieldedInstanceInitialStatePk: The Platform Key (PK). Structure is documented below.

Dbs []ImageShieldedInstanceInitialStateDb: The Key Database (db). Structure is documented below.
Dbxs []ImageShieldedInstanceInitialStateDbx: The forbidden key database (dbx). Structure is documented below.
Keks []ImageShieldedInstanceInitialStateKek: The Key Exchange Key (KEK). Structure is documented below.
Pk ImageShieldedInstanceInitialStatePk: The Platform Key (PK). Structure is documented below.

dbs List<ImageShieldedInstanceInitialStateDb>: The Key Database (db). Structure is documented below.
dbxs List<ImageShieldedInstanceInitialStateDbx>: The forbidden key database (dbx). Structure is documented below.
keks List<ImageShieldedInstanceInitialStateKek>: The Key Exchange Key (KEK). Structure is documented below.
pk ImageShieldedInstanceInitialStatePk: The Platform Key (PK). Structure is documented below.

dbs ImageShieldedInstanceInitialStateDb[]: The Key Database (db). Structure is documented below.
dbxs ImageShieldedInstanceInitialStateDbx[]: The forbidden key database (dbx). Structure is documented below.
keks ImageShieldedInstanceInitialStateKek[]: The Key Exchange Key (KEK). Structure is documented below.
pk ImageShieldedInstanceInitialStatePk: The Platform Key (PK). Structure is documented below.

dbs Sequence[ImageShieldedInstanceInitialStateDb]: The Key Database (db). Structure is documented below.
dbxs Sequence[ImageShieldedInstanceInitialStateDbx]: The forbidden key database (dbx). Structure is documented below.
keks Sequence[ImageShieldedInstanceInitialStateKek]: The Key Exchange Key (KEK). Structure is documented below.
pk ImageShieldedInstanceInitialStatePk: The Platform Key (PK). Structure is documented below.

dbs List<Property Map>: The Key Database (db). Structure is documented below.
dbxs List<Property Map>: The forbidden key database (dbx). Structure is documented below.
keks List<Property Map>: The Key Exchange Key (KEK). Structure is documented below.
pk Property Map: The Platform Key (PK). Structure is documented below.

ImageShieldedInstanceInitialStateDb, ImageShieldedInstanceInitialStateDbArgs

Content string: The raw content in the secure keys file. A base64-encoded string.
FileType string: The file type of source file.

Content string: The raw content in the secure keys file. A base64-encoded string.
FileType string: The file type of source file.

content String: The raw content in the secure keys file. A base64-encoded string.
fileType String: The file type of source file.

content string: The raw content in the secure keys file. A base64-encoded string.
fileType string: The file type of source file.

content str: The raw content in the secure keys file. A base64-encoded string.
file_type str: The file type of source file.

content String: The raw content in the secure keys file. A base64-encoded string.
fileType String: The file type of source file.

ImageShieldedInstanceInitialStateDbx, ImageShieldedInstanceInitialStateDbxArgs

Content string: The raw content in the secure keys file. A base64-encoded string.
FileType string: The file type of source file.

Content string: The raw content in the secure keys file. A base64-encoded string.
FileType string: The file type of source file.

content String: The raw content in the secure keys file. A base64-encoded string.
fileType String: The file type of source file.

content string: The raw content in the secure keys file. A base64-encoded string.
fileType string: The file type of source file.

content str: The raw content in the secure keys file. A base64-encoded string.
file_type str: The file type of source file.

content String: The raw content in the secure keys file. A base64-encoded string.
fileType String: The file type of source file.

ImageShieldedInstanceInitialStateKek, ImageShieldedInstanceInitialStateKekArgs

Content string: The raw content in the secure keys file. A base64-encoded string.
FileType string: The file type of source file.

Content string: The raw content in the secure keys file. A base64-encoded string.
FileType string: The file type of source file.

content String: The raw content in the secure keys file. A base64-encoded string.
fileType String: The file type of source file.

content string: The raw content in the secure keys file. A base64-encoded string.
fileType string: The file type of source file.

content str: The raw content in the secure keys file. A base64-encoded string.
file_type str: The file type of source file.

content String: The raw content in the secure keys file. A base64-encoded string.
fileType String: The file type of source file.

ImageShieldedInstanceInitialStatePk, ImageShieldedInstanceInitialStatePkArgs

Content string: The raw content in the secure keys file. A base64-encoded string.
FileType string: The file type of source file.

Content string: The raw content in the secure keys file. A base64-encoded string.
FileType string: The file type of source file.

content String: The raw content in the secure keys file. A base64-encoded string.
fileType String: The file type of source file.

content string: The raw content in the secure keys file. A base64-encoded string.
fileType string: The file type of source file.

content str: The raw content in the secure keys file. A base64-encoded string.
file_type str: The file type of source file.

content String: The raw content in the secure keys file. A base64-encoded string.
fileType String: The file type of source file.

ImageSourceDiskEncryptionKey, ImageSourceDiskEncryptionKeyArgs

KmsKeySelfLink string: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
KmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
RawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
RsaEncryptedKey string: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

KmsKeySelfLink string: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
KmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
RawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
RsaEncryptedKey string: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink String: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kmsKeyServiceAccount String: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey String: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink string: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey string: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kms_key_self_link str: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kms_key_service_account str: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
raw_key str: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsa_encrypted_key str: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink String: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kmsKeyServiceAccount String: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey String: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

ImageSourceImageEncryptionKey, ImageSourceImageEncryptionKeyArgs

KmsKeySelfLink string: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
KmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
RawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
RsaEncryptedKey string: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

KmsKeySelfLink string: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
KmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
RawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
RsaEncryptedKey string: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink String: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kmsKeyServiceAccount String: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey String: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink string: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey string: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kms_key_self_link str: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kms_key_service_account str: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
raw_key str: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsa_encrypted_key str: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink String: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kmsKeyServiceAccount String: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey String: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

ImageSourceSnapshotEncryptionKey, ImageSourceSnapshotEncryptionKeyArgs

KmsKeySelfLink string: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
KmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
RawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
RsaEncryptedKey string: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

KmsKeySelfLink string: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
KmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
RawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
RsaEncryptedKey string: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink String: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kmsKeyServiceAccount String: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey String: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink string: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kmsKeyServiceAccount string: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey string: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey string: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kms_key_self_link str: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kms_key_service_account str: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
raw_key str: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsa_encrypted_key str: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

kmsKeySelfLink String: The self link of the encryption key used to decrypt this resource. Also called KmsKeyName in the cloud console. Your project's Compute Engine System service account (service-{{PROJECT_NUMBER}}@compute-system.iam.gserviceaccount.com) must have roles/cloudkms.cryptoKeyEncrypterDecrypter to use this feature. See https://cloud.google.com/compute/docs/disks/customer-managed-encryption#encrypt_a_new_persistent_disk_with_your_own_keys
kmsKeyServiceAccount String: The service account being used for the encryption request for the given KMS key. If absent, the Compute Engine default service account is used.
rawKey String: Specifies a 256-bit customer-supplied encryption key, encoded in RFC 4648 base64 to either encrypt or decrypt this resource. Note: This property is sensitive and will not be displayed in the plan.
rsaEncryptedKey String: Specifies an RFC 4648 base64 encoded, RSA-wrapped 2048-bit customer-supplied encryption key to either encrypt or decrypt this resource. You can provide either the rawKey or the rsaEncryptedKey. Note: This property is sensitive and will not be displayed in the plan.

Import

Image can be imported using any of these accepted formats:

projects/{{project}}/global/images/{{name}}
{{project}}/{{name}}
{{name}}

When using the pulumi import command, Image can be imported using one of the formats above. For example:

$ pulumi import gcp:compute/image:Image default projects/{{project}}/global/images/{{name}}

$ pulumi import gcp:compute/image:Image default {{project}}/{{name}}

$ pulumi import gcp:compute/image:Image default {{name}}

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository: Google Cloud (GCP) Classic pulumi/pulumi-gcp
License: Apache-2.0
Notes: This Pulumi package is based on the google-beta Terraform Provider.

Google Cloud v8.31.0 published on Thursday, May 15, 2025 by Pulumi

pulumi/pulumi-gcp

gcp.compute.Image

On this page

On this page

Example Usage

Image Basic

Image Guest Os

Image Basic Storage Location

Create Image Resource

Constructor syntax

Parameters

Constructor example

Image Resource Properties

Inputs

Outputs

Look up Existing Image Resource

Supporting Types

ImageGuestOsFeature, ImageGuestOsFeatureArgs

ImageImageEncryptionKey, ImageImageEncryptionKeyArgs

ImageRawDisk, ImageRawDiskArgs

ImageShieldedInstanceInitialState, ImageShieldedInstanceInitialStateArgs

ImageShieldedInstanceInitialStateDb, ImageShieldedInstanceInitialStateDbArgs

ImageShieldedInstanceInitialStateDbx, ImageShieldedInstanceInitialStateDbxArgs

ImageShieldedInstanceInitialStateKek, ImageShieldedInstanceInitialStateKekArgs

ImageShieldedInstanceInitialStatePk, ImageShieldedInstanceInitialStatePkArgs

ImageSourceDiskEncryptionKey, ImageSourceDiskEncryptionKeyArgs

ImageSourceImageEncryptionKey, ImageSourceImageEncryptionKeyArgs

ImageSourceSnapshotEncryptionKey, ImageSourceSnapshotEncryptionKeyArgs

Import

Package Details

On this page

On this page