diff --git a/4.x/_gen/main.libsonnet b/4.x/_gen/main.libsonnet
index 3cec478..4485723 100644
--- a/4.x/_gen/main.libsonnet
+++ b/4.x/_gen/main.libsonnet
@@ -57,6 +57,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   apigee_sharedflow: (import 'resources/apigee_sharedflow.libsonnet'),
   apigee_sharedflow_deployment: (import 'resources/apigee_sharedflow_deployment.libsonnet'),
   apigee_sync_authorization: (import 'resources/apigee_sync_authorization.libsonnet'),
+  apigee_target_server: (import 'resources/apigee_target_server.libsonnet'),
   apikeys_key: (import 'resources/apikeys_key.libsonnet'),
   app_engine_application: (import 'resources/app_engine_application.libsonnet'),
   app_engine_application_url_dispatch_rules: (import 'resources/app_engine_application_url_dispatch_rules.libsonnet'),
@@ -77,6 +78,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   beyondcorp_app_gateway: (import 'resources/beyondcorp_app_gateway.libsonnet'),
   biglake_catalog: (import 'resources/biglake_catalog.libsonnet'),
   biglake_database: (import 'resources/biglake_database.libsonnet'),
+  biglake_table: (import 'resources/biglake_table.libsonnet'),
   bigquery_analytics_hub_data_exchange: (import 'resources/bigquery_analytics_hub_data_exchange.libsonnet'),
   bigquery_analytics_hub_data_exchange_iam_binding: (import 'resources/bigquery_analytics_hub_data_exchange_iam_binding.libsonnet'),
   bigquery_analytics_hub_data_exchange_iam_member: (import 'resources/bigquery_analytics_hub_data_exchange_iam_member.libsonnet'),
@@ -358,6 +360,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   data_loss_prevention_inspect_template: (import 'resources/data_loss_prevention_inspect_template.libsonnet'),
   data_loss_prevention_job_trigger: (import 'resources/data_loss_prevention_job_trigger.libsonnet'),
   data_loss_prevention_stored_info_type: (import 'resources/data_loss_prevention_stored_info_type.libsonnet'),
+  data_pipeline_pipeline: (import 'resources/data_pipeline_pipeline.libsonnet'),
   database_migration_service_connection_profile: (import 'resources/database_migration_service_connection_profile.libsonnet'),
   dataflow_flex_template_job: (import 'resources/dataflow_flex_template_job.libsonnet'),
   dataflow_job: (import 'resources/dataflow_job.libsonnet'),
@@ -417,6 +420,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   dialogflow_cx_flow: (import 'resources/dialogflow_cx_flow.libsonnet'),
   dialogflow_cx_intent: (import 'resources/dialogflow_cx_intent.libsonnet'),
   dialogflow_cx_page: (import 'resources/dialogflow_cx_page.libsonnet'),
+  dialogflow_cx_test_case: (import 'resources/dialogflow_cx_test_case.libsonnet'),
   dialogflow_cx_version: (import 'resources/dialogflow_cx_version.libsonnet'),
   dialogflow_cx_webhook: (import 'resources/dialogflow_cx_webhook.libsonnet'),
   dialogflow_entity_type: (import 'resources/dialogflow_entity_type.libsonnet'),
@@ -753,6 +757,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   storage_default_object_access_control: (import 'resources/storage_default_object_access_control.libsonnet'),
   storage_default_object_acl: (import 'resources/storage_default_object_acl.libsonnet'),
   storage_hmac_key: (import 'resources/storage_hmac_key.libsonnet'),
+  storage_insights_report_config: (import 'resources/storage_insights_report_config.libsonnet'),
   storage_notification: (import 'resources/storage_notification.libsonnet'),
   storage_object_access_control: (import 'resources/storage_object_access_control.libsonnet'),
   storage_object_acl: (import 'resources/storage_object_acl.libsonnet'),
diff --git a/4.x/_gen/provider_google-beta.libsonnet b/4.x/_gen/provider_google-beta.libsonnet
index bbf48fc..88d412f 100644
--- a/4.x/_gen/provider_google-beta.libsonnet
+++ b/4.x/_gen/provider_google-beta.libsonnet
@@ -2,7 +2,7 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='provider', url='', help='`provider` represents the `google-beta` Terraform provider config.\n\n\n\nThis package contains functions and utilities for setting up the provider using Jsonnet code.\n'),
-  '#new':: d.fn(help='\n`google-beta.provider.new` injects a new `google-beta` Terraform `provider`\nblock into the root module document.\n\nOptionally, this inserts the provider into the\n[required_providers](https://developer.hashicorp.com/terraform/language/providers/requirements) `terraform` sub block if\nthe `src` and/or `version` parameters are set.\n\n**Args**:\n  - `access_approval_custom_endpoint` (`string`): Set the `access_approval_custom_endpoint` field on the resulting provider block. When `null`, the `access_approval_custom_endpoint` field will be omitted from the resulting object.\n  - `access_context_manager_custom_endpoint` (`string`): Set the `access_context_manager_custom_endpoint` field on the resulting provider block. When `null`, the `access_context_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `access_token` (`string`): Set the `access_token` field on the resulting provider block. When `null`, the `access_token` field will be omitted from the resulting object.\n  - `active_directory_custom_endpoint` (`string`): Set the `active_directory_custom_endpoint` field on the resulting provider block. When `null`, the `active_directory_custom_endpoint` field will be omitted from the resulting object.\n  - `alloydb_custom_endpoint` (`string`): Set the `alloydb_custom_endpoint` field on the resulting provider block. When `null`, the `alloydb_custom_endpoint` field will be omitted from the resulting object.\n  - `api_gateway_custom_endpoint` (`string`): Set the `api_gateway_custom_endpoint` field on the resulting provider block. When `null`, the `api_gateway_custom_endpoint` field will be omitted from the resulting object.\n  - `apigee_custom_endpoint` (`string`): Set the `apigee_custom_endpoint` field on the resulting provider block. When `null`, the `apigee_custom_endpoint` field will be omitted from the resulting object.\n  - `apikeys_custom_endpoint` (`string`): Set the `apikeys_custom_endpoint` field on the resulting provider block. When `null`, the `apikeys_custom_endpoint` field will be omitted from the resulting object.\n  - `app_engine_custom_endpoint` (`string`): Set the `app_engine_custom_endpoint` field on the resulting provider block. When `null`, the `app_engine_custom_endpoint` field will be omitted from the resulting object.\n  - `artifact_registry_custom_endpoint` (`string`): Set the `artifact_registry_custom_endpoint` field on the resulting provider block. When `null`, the `artifact_registry_custom_endpoint` field will be omitted from the resulting object.\n  - `assured_workloads_custom_endpoint` (`string`): Set the `assured_workloads_custom_endpoint` field on the resulting provider block. When `null`, the `assured_workloads_custom_endpoint` field will be omitted from the resulting object.\n  - `backup_dr_custom_endpoint` (`string`): Set the `backup_dr_custom_endpoint` field on the resulting provider block. When `null`, the `backup_dr_custom_endpoint` field will be omitted from the resulting object.\n  - `beyondcorp_custom_endpoint` (`string`): Set the `beyondcorp_custom_endpoint` field on the resulting provider block. When `null`, the `beyondcorp_custom_endpoint` field will be omitted from the resulting object.\n  - `big_query_custom_endpoint` (`string`): Set the `big_query_custom_endpoint` field on the resulting provider block. When `null`, the `big_query_custom_endpoint` field will be omitted from the resulting object.\n  - `biglake_custom_endpoint` (`string`): Set the `biglake_custom_endpoint` field on the resulting provider block. When `null`, the `biglake_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_analytics_hub_custom_endpoint` (`string`): Set the `bigquery_analytics_hub_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_analytics_hub_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_connection_custom_endpoint` (`string`): Set the `bigquery_connection_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_connection_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_data_transfer_custom_endpoint` (`string`): Set the `bigquery_data_transfer_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_data_transfer_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_datapolicy_custom_endpoint` (`string`): Set the `bigquery_datapolicy_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_datapolicy_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_reservation_custom_endpoint` (`string`): Set the `bigquery_reservation_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_reservation_custom_endpoint` field will be omitted from the resulting object.\n  - `bigtable_custom_endpoint` (`string`): Set the `bigtable_custom_endpoint` field on the resulting provider block. When `null`, the `bigtable_custom_endpoint` field will be omitted from the resulting object.\n  - `billing_custom_endpoint` (`string`): Set the `billing_custom_endpoint` field on the resulting provider block. When `null`, the `billing_custom_endpoint` field will be omitted from the resulting object.\n  - `billing_project` (`string`): Set the `billing_project` field on the resulting provider block. When `null`, the `billing_project` field will be omitted from the resulting object.\n  - `binary_authorization_custom_endpoint` (`string`): Set the `binary_authorization_custom_endpoint` field on the resulting provider block. When `null`, the `binary_authorization_custom_endpoint` field will be omitted from the resulting object.\n  - `certificate_manager_custom_endpoint` (`string`): Set the `certificate_manager_custom_endpoint` field on the resulting provider block. When `null`, the `certificate_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_asset_custom_endpoint` (`string`): Set the `cloud_asset_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_asset_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_billing_custom_endpoint` (`string`): Set the `cloud_billing_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_billing_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_build_custom_endpoint` (`string`): Set the `cloud_build_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_build_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_build_worker_pool_custom_endpoint` (`string`): Set the `cloud_build_worker_pool_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_build_worker_pool_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_functions_custom_endpoint` (`string`): Set the `cloud_functions_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_functions_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_identity_custom_endpoint` (`string`): Set the `cloud_identity_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_identity_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_ids_custom_endpoint` (`string`): Set the `cloud_ids_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_ids_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_iot_custom_endpoint` (`string`): Set the `cloud_iot_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_iot_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_resource_manager_custom_endpoint` (`string`): Set the `cloud_resource_manager_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_resource_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_run_custom_endpoint` (`string`): Set the `cloud_run_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_run_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_run_v2_custom_endpoint` (`string`): Set the `cloud_run_v2_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_run_v2_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_scheduler_custom_endpoint` (`string`): Set the `cloud_scheduler_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_scheduler_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_tasks_custom_endpoint` (`string`): Set the `cloud_tasks_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_tasks_custom_endpoint` field will be omitted from the resulting object.\n  - `cloudbuildv2_custom_endpoint` (`string`): Set the `cloudbuildv2_custom_endpoint` field on the resulting provider block. When `null`, the `cloudbuildv2_custom_endpoint` field will be omitted from the resulting object.\n  - `clouddeploy_custom_endpoint` (`string`): Set the `clouddeploy_custom_endpoint` field on the resulting provider block. When `null`, the `clouddeploy_custom_endpoint` field will be omitted from the resulting object.\n  - `cloudfunctions2_custom_endpoint` (`string`): Set the `cloudfunctions2_custom_endpoint` field on the resulting provider block. When `null`, the `cloudfunctions2_custom_endpoint` field will be omitted from the resulting object.\n  - `composer_custom_endpoint` (`string`): Set the `composer_custom_endpoint` field on the resulting provider block. When `null`, the `composer_custom_endpoint` field will be omitted from the resulting object.\n  - `compute_custom_endpoint` (`string`): Set the `compute_custom_endpoint` field on the resulting provider block. When `null`, the `compute_custom_endpoint` field will be omitted from the resulting object.\n  - `container_analysis_custom_endpoint` (`string`): Set the `container_analysis_custom_endpoint` field on the resulting provider block. When `null`, the `container_analysis_custom_endpoint` field will be omitted from the resulting object.\n  - `container_attached_custom_endpoint` (`string`): Set the `container_attached_custom_endpoint` field on the resulting provider block. When `null`, the `container_attached_custom_endpoint` field will be omitted from the resulting object.\n  - `container_aws_custom_endpoint` (`string`): Set the `container_aws_custom_endpoint` field on the resulting provider block. When `null`, the `container_aws_custom_endpoint` field will be omitted from the resulting object.\n  - `container_azure_custom_endpoint` (`string`): Set the `container_azure_custom_endpoint` field on the resulting provider block. When `null`, the `container_azure_custom_endpoint` field will be omitted from the resulting object.\n  - `container_custom_endpoint` (`string`): Set the `container_custom_endpoint` field on the resulting provider block. When `null`, the `container_custom_endpoint` field will be omitted from the resulting object.\n  - `core_billing_custom_endpoint` (`string`): Set the `core_billing_custom_endpoint` field on the resulting provider block. When `null`, the `core_billing_custom_endpoint` field will be omitted from the resulting object.\n  - `credentials` (`string`): Set the `credentials` field on the resulting provider block. When `null`, the `credentials` field will be omitted from the resulting object.\n  - `data_catalog_custom_endpoint` (`string`): Set the `data_catalog_custom_endpoint` field on the resulting provider block. When `null`, the `data_catalog_custom_endpoint` field will be omitted from the resulting object.\n  - `data_fusion_custom_endpoint` (`string`): Set the `data_fusion_custom_endpoint` field on the resulting provider block. When `null`, the `data_fusion_custom_endpoint` field will be omitted from the resulting object.\n  - `data_loss_prevention_custom_endpoint` (`string`): Set the `data_loss_prevention_custom_endpoint` field on the resulting provider block. When `null`, the `data_loss_prevention_custom_endpoint` field will be omitted from the resulting object.\n  - `database_migration_service_custom_endpoint` (`string`): Set the `database_migration_service_custom_endpoint` field on the resulting provider block. When `null`, the `database_migration_service_custom_endpoint` field will be omitted from the resulting object.\n  - `dataflow_custom_endpoint` (`string`): Set the `dataflow_custom_endpoint` field on the resulting provider block. When `null`, the `dataflow_custom_endpoint` field will be omitted from the resulting object.\n  - `dataform_custom_endpoint` (`string`): Set the `dataform_custom_endpoint` field on the resulting provider block. When `null`, the `dataform_custom_endpoint` field will be omitted from the resulting object.\n  - `dataplex_custom_endpoint` (`string`): Set the `dataplex_custom_endpoint` field on the resulting provider block. When `null`, the `dataplex_custom_endpoint` field will be omitted from the resulting object.\n  - `dataproc_custom_endpoint` (`string`): Set the `dataproc_custom_endpoint` field on the resulting provider block. When `null`, the `dataproc_custom_endpoint` field will be omitted from the resulting object.\n  - `dataproc_metastore_custom_endpoint` (`string`): Set the `dataproc_metastore_custom_endpoint` field on the resulting provider block. When `null`, the `dataproc_metastore_custom_endpoint` field will be omitted from the resulting object.\n  - `datastore_custom_endpoint` (`string`): Set the `datastore_custom_endpoint` field on the resulting provider block. When `null`, the `datastore_custom_endpoint` field will be omitted from the resulting object.\n  - `datastream_custom_endpoint` (`string`): Set the `datastream_custom_endpoint` field on the resulting provider block. When `null`, the `datastream_custom_endpoint` field will be omitted from the resulting object.\n  - `deployment_manager_custom_endpoint` (`string`): Set the `deployment_manager_custom_endpoint` field on the resulting provider block. When `null`, the `deployment_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `dialogflow_custom_endpoint` (`string`): Set the `dialogflow_custom_endpoint` field on the resulting provider block. When `null`, the `dialogflow_custom_endpoint` field will be omitted from the resulting object.\n  - `dialogflow_cx_custom_endpoint` (`string`): Set the `dialogflow_cx_custom_endpoint` field on the resulting provider block. When `null`, the `dialogflow_cx_custom_endpoint` field will be omitted from the resulting object.\n  - `dns_custom_endpoint` (`string`): Set the `dns_custom_endpoint` field on the resulting provider block. When `null`, the `dns_custom_endpoint` field will be omitted from the resulting object.\n  - `document_ai_custom_endpoint` (`string`): Set the `document_ai_custom_endpoint` field on the resulting provider block. When `null`, the `document_ai_custom_endpoint` field will be omitted from the resulting object.\n  - `document_ai_warehouse_custom_endpoint` (`string`): Set the `document_ai_warehouse_custom_endpoint` field on the resulting provider block. When `null`, the `document_ai_warehouse_custom_endpoint` field will be omitted from the resulting object.\n  - `essential_contacts_custom_endpoint` (`string`): Set the `essential_contacts_custom_endpoint` field on the resulting provider block. When `null`, the `essential_contacts_custom_endpoint` field will be omitted from the resulting object.\n  - `eventarc_custom_endpoint` (`string`): Set the `eventarc_custom_endpoint` field on the resulting provider block. When `null`, the `eventarc_custom_endpoint` field will be omitted from the resulting object.\n  - `filestore_custom_endpoint` (`string`): Set the `filestore_custom_endpoint` field on the resulting provider block. When `null`, the `filestore_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_custom_endpoint` (`string`): Set the `firebase_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_database_custom_endpoint` (`string`): Set the `firebase_database_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_database_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_extensions_custom_endpoint` (`string`): Set the `firebase_extensions_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_extensions_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_hosting_custom_endpoint` (`string`): Set the `firebase_hosting_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_hosting_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_storage_custom_endpoint` (`string`): Set the `firebase_storage_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_storage_custom_endpoint` field will be omitted from the resulting object.\n  - `firebaserules_custom_endpoint` (`string`): Set the `firebaserules_custom_endpoint` field on the resulting provider block. When `null`, the `firebaserules_custom_endpoint` field will be omitted from the resulting object.\n  - `firestore_custom_endpoint` (`string`): Set the `firestore_custom_endpoint` field on the resulting provider block. When `null`, the `firestore_custom_endpoint` field will be omitted from the resulting object.\n  - `game_services_custom_endpoint` (`string`): Set the `game_services_custom_endpoint` field on the resulting provider block. When `null`, the `game_services_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_backup_custom_endpoint` (`string`): Set the `gke_backup_custom_endpoint` field on the resulting provider block. When `null`, the `gke_backup_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_hub2_custom_endpoint` (`string`): Set the `gke_hub2_custom_endpoint` field on the resulting provider block. When `null`, the `gke_hub2_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_hub_custom_endpoint` (`string`): Set the `gke_hub_custom_endpoint` field on the resulting provider block. When `null`, the `gke_hub_custom_endpoint` field will be omitted from the resulting object.\n  - `gkehub_feature_custom_endpoint` (`string`): Set the `gkehub_feature_custom_endpoint` field on the resulting provider block. When `null`, the `gkehub_feature_custom_endpoint` field will be omitted from the resulting object.\n  - `gkeonprem_custom_endpoint` (`string`): Set the `gkeonprem_custom_endpoint` field on the resulting provider block. When `null`, the `gkeonprem_custom_endpoint` field will be omitted from the resulting object.\n  - `healthcare_custom_endpoint` (`string`): Set the `healthcare_custom_endpoint` field on the resulting provider block. When `null`, the `healthcare_custom_endpoint` field will be omitted from the resulting object.\n  - `iam2_custom_endpoint` (`string`): Set the `iam2_custom_endpoint` field on the resulting provider block. When `null`, the `iam2_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_beta_custom_endpoint` (`string`): Set the `iam_beta_custom_endpoint` field on the resulting provider block. When `null`, the `iam_beta_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_credentials_custom_endpoint` (`string`): Set the `iam_credentials_custom_endpoint` field on the resulting provider block. When `null`, the `iam_credentials_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_custom_endpoint` (`string`): Set the `iam_custom_endpoint` field on the resulting provider block. When `null`, the `iam_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_workforce_pool_custom_endpoint` (`string`): Set the `iam_workforce_pool_custom_endpoint` field on the resulting provider block. When `null`, the `iam_workforce_pool_custom_endpoint` field will be omitted from the resulting object.\n  - `iap_custom_endpoint` (`string`): Set the `iap_custom_endpoint` field on the resulting provider block. When `null`, the `iap_custom_endpoint` field will be omitted from the resulting object.\n  - `identity_platform_custom_endpoint` (`string`): Set the `identity_platform_custom_endpoint` field on the resulting provider block. When `null`, the `identity_platform_custom_endpoint` field will be omitted from the resulting object.\n  - `impersonate_service_account` (`string`): Set the `impersonate_service_account` field on the resulting provider block. When `null`, the `impersonate_service_account` field will be omitted from the resulting object.\n  - `impersonate_service_account_delegates` (`list`): Set the `impersonate_service_account_delegates` field on the resulting provider block. When `null`, the `impersonate_service_account_delegates` field will be omitted from the resulting object.\n  - `kms_custom_endpoint` (`string`): Set the `kms_custom_endpoint` field on the resulting provider block. When `null`, the `kms_custom_endpoint` field will be omitted from the resulting object.\n  - `logging_custom_endpoint` (`string`): Set the `logging_custom_endpoint` field on the resulting provider block. When `null`, the `logging_custom_endpoint` field will be omitted from the resulting object.\n  - `looker_custom_endpoint` (`string`): Set the `looker_custom_endpoint` field on the resulting provider block. When `null`, the `looker_custom_endpoint` field will be omitted from the resulting object.\n  - `memcache_custom_endpoint` (`string`): Set the `memcache_custom_endpoint` field on the resulting provider block. When `null`, the `memcache_custom_endpoint` field will be omitted from the resulting object.\n  - `ml_engine_custom_endpoint` (`string`): Set the `ml_engine_custom_endpoint` field on the resulting provider block. When `null`, the `ml_engine_custom_endpoint` field will be omitted from the resulting object.\n  - `monitoring_custom_endpoint` (`string`): Set the `monitoring_custom_endpoint` field on the resulting provider block. When `null`, the `monitoring_custom_endpoint` field will be omitted from the resulting object.\n  - `network_connectivity_custom_endpoint` (`string`): Set the `network_connectivity_custom_endpoint` field on the resulting provider block. When `null`, the `network_connectivity_custom_endpoint` field will be omitted from the resulting object.\n  - `network_management_custom_endpoint` (`string`): Set the `network_management_custom_endpoint` field on the resulting provider block. When `null`, the `network_management_custom_endpoint` field will be omitted from the resulting object.\n  - `network_security_custom_endpoint` (`string`): Set the `network_security_custom_endpoint` field on the resulting provider block. When `null`, the `network_security_custom_endpoint` field will be omitted from the resulting object.\n  - `network_services_custom_endpoint` (`string`): Set the `network_services_custom_endpoint` field on the resulting provider block. When `null`, the `network_services_custom_endpoint` field will be omitted from the resulting object.\n  - `notebooks_custom_endpoint` (`string`): Set the `notebooks_custom_endpoint` field on the resulting provider block. When `null`, the `notebooks_custom_endpoint` field will be omitted from the resulting object.\n  - `org_policy_custom_endpoint` (`string`): Set the `org_policy_custom_endpoint` field on the resulting provider block. When `null`, the `org_policy_custom_endpoint` field will be omitted from the resulting object.\n  - `os_config_custom_endpoint` (`string`): Set the `os_config_custom_endpoint` field on the resulting provider block. When `null`, the `os_config_custom_endpoint` field will be omitted from the resulting object.\n  - `os_login_custom_endpoint` (`string`): Set the `os_login_custom_endpoint` field on the resulting provider block. When `null`, the `os_login_custom_endpoint` field will be omitted from the resulting object.\n  - `privateca_custom_endpoint` (`string`): Set the `privateca_custom_endpoint` field on the resulting provider block. When `null`, the `privateca_custom_endpoint` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting provider block. When `null`, the `project` field will be omitted from the resulting object.\n  - `public_ca_custom_endpoint` (`string`): Set the `public_ca_custom_endpoint` field on the resulting provider block. When `null`, the `public_ca_custom_endpoint` field will be omitted from the resulting object.\n  - `pubsub_custom_endpoint` (`string`): Set the `pubsub_custom_endpoint` field on the resulting provider block. When `null`, the `pubsub_custom_endpoint` field will be omitted from the resulting object.\n  - `pubsub_lite_custom_endpoint` (`string`): Set the `pubsub_lite_custom_endpoint` field on the resulting provider block. When `null`, the `pubsub_lite_custom_endpoint` field will be omitted from the resulting object.\n  - `recaptcha_enterprise_custom_endpoint` (`string`): Set the `recaptcha_enterprise_custom_endpoint` field on the resulting provider block. When `null`, the `recaptcha_enterprise_custom_endpoint` field will be omitted from the resulting object.\n  - `redis_custom_endpoint` (`string`): Set the `redis_custom_endpoint` field on the resulting provider block. When `null`, the `redis_custom_endpoint` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting provider block. When `null`, the `region` field will be omitted from the resulting object.\n  - `request_reason` (`string`): Set the `request_reason` field on the resulting provider block. When `null`, the `request_reason` field will be omitted from the resulting object.\n  - `request_timeout` (`string`): Set the `request_timeout` field on the resulting provider block. When `null`, the `request_timeout` field will be omitted from the resulting object.\n  - `resource_manager_custom_endpoint` (`string`): Set the `resource_manager_custom_endpoint` field on the resulting provider block. When `null`, the `resource_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `resource_manager_v3_custom_endpoint` (`string`): Set the `resource_manager_v3_custom_endpoint` field on the resulting provider block. When `null`, the `resource_manager_v3_custom_endpoint` field will be omitted from the resulting object.\n  - `runtime_config_custom_endpoint` (`string`): Set the `runtime_config_custom_endpoint` field on the resulting provider block. When `null`, the `runtime_config_custom_endpoint` field will be omitted from the resulting object.\n  - `runtimeconfig_custom_endpoint` (`string`): Set the `runtimeconfig_custom_endpoint` field on the resulting provider block. When `null`, the `runtimeconfig_custom_endpoint` field will be omitted from the resulting object.\n  - `scopes` (`list`): Set the `scopes` field on the resulting provider block. When `null`, the `scopes` field will be omitted from the resulting object.\n  - `secret_manager_custom_endpoint` (`string`): Set the `secret_manager_custom_endpoint` field on the resulting provider block. When `null`, the `secret_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `security_center_custom_endpoint` (`string`): Set the `security_center_custom_endpoint` field on the resulting provider block. When `null`, the `security_center_custom_endpoint` field will be omitted from the resulting object.\n  - `security_scanner_custom_endpoint` (`string`): Set the `security_scanner_custom_endpoint` field on the resulting provider block. When `null`, the `security_scanner_custom_endpoint` field will be omitted from the resulting object.\n  - `service_directory_custom_endpoint` (`string`): Set the `service_directory_custom_endpoint` field on the resulting provider block. When `null`, the `service_directory_custom_endpoint` field will be omitted from the resulting object.\n  - `service_management_custom_endpoint` (`string`): Set the `service_management_custom_endpoint` field on the resulting provider block. When `null`, the `service_management_custom_endpoint` field will be omitted from the resulting object.\n  - `service_networking_custom_endpoint` (`string`): Set the `service_networking_custom_endpoint` field on the resulting provider block. When `null`, the `service_networking_custom_endpoint` field will be omitted from the resulting object.\n  - `service_usage_custom_endpoint` (`string`): Set the `service_usage_custom_endpoint` field on the resulting provider block. When `null`, the `service_usage_custom_endpoint` field will be omitted from the resulting object.\n  - `source_repo_custom_endpoint` (`string`): Set the `source_repo_custom_endpoint` field on the resulting provider block. When `null`, the `source_repo_custom_endpoint` field will be omitted from the resulting object.\n  - `spanner_custom_endpoint` (`string`): Set the `spanner_custom_endpoint` field on the resulting provider block. When `null`, the `spanner_custom_endpoint` field will be omitted from the resulting object.\n  - `sql_custom_endpoint` (`string`): Set the `sql_custom_endpoint` field on the resulting provider block. When `null`, the `sql_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_custom_endpoint` (`string`): Set the `storage_custom_endpoint` field on the resulting provider block. When `null`, the `storage_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_transfer_custom_endpoint` (`string`): Set the `storage_transfer_custom_endpoint` field on the resulting provider block. When `null`, the `storage_transfer_custom_endpoint` field will be omitted from the resulting object.\n  - `tags_custom_endpoint` (`string`): Set the `tags_custom_endpoint` field on the resulting provider block. When `null`, the `tags_custom_endpoint` field will be omitted from the resulting object.\n  - `tags_location_custom_endpoint` (`string`): Set the `tags_location_custom_endpoint` field on the resulting provider block. When `null`, the `tags_location_custom_endpoint` field will be omitted from the resulting object.\n  - `tpu_custom_endpoint` (`string`): Set the `tpu_custom_endpoint` field on the resulting provider block. When `null`, the `tpu_custom_endpoint` field will be omitted from the resulting object.\n  - `user_project_override` (`bool`): Set the `user_project_override` field on the resulting provider block. When `null`, the `user_project_override` field will be omitted from the resulting object.\n  - `vertex_ai_custom_endpoint` (`string`): Set the `vertex_ai_custom_endpoint` field on the resulting provider block. When `null`, the `vertex_ai_custom_endpoint` field will be omitted from the resulting object.\n  - `vmwareengine_custom_endpoint` (`string`): Set the `vmwareengine_custom_endpoint` field on the resulting provider block. When `null`, the `vmwareengine_custom_endpoint` field will be omitted from the resulting object.\n  - `vpc_access_custom_endpoint` (`string`): Set the `vpc_access_custom_endpoint` field on the resulting provider block. When `null`, the `vpc_access_custom_endpoint` field will be omitted from the resulting object.\n  - `workflows_custom_endpoint` (`string`): Set the `workflows_custom_endpoint` field on the resulting provider block. When `null`, the `workflows_custom_endpoint` field will be omitted from the resulting object.\n  - `workstations_custom_endpoint` (`string`): Set the `workstations_custom_endpoint` field on the resulting provider block. When `null`, the `workstations_custom_endpoint` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting provider block. When `null`, the `zone` field will be omitted from the resulting object.\n  - `batching` (`list[obj]`): Set the `batching` field on the resulting provider block. When `null`, the `batching` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.provider.batching.new](#fn-googlebetabatchingnew) constructor.\n  - `alias` (`string`): The provider `alias` to set for this instance of the provider block. When `null`, the `alias`\n  field will be omitted from the resulting provider block.\n  - `src` (`string`): The provider `source` to set on the resulting `required_providers` block. If `src` or `version` is\n  set and is not `null`, a `required_providers` block and entry for the provider will be injected into the document.\n  - `version` (`string`): The provider `version` to set on the resulting `required_providers` block. If `src` or\n  `version` is set and is not `null`, a `required_providers` block and entry for the provider will be injected into the\n  document.\n\n\n**Returns**:\n- A mixin object that injects the new provider (and optionally, `required_providers` block) into the root Terraform configuration.\n', args=[]),
+  '#new':: d.fn(help='\n`google-beta.provider.new` injects a new `google-beta` Terraform `provider`\nblock into the root module document.\n\nOptionally, this inserts the provider into the\n[required_providers](https://developer.hashicorp.com/terraform/language/providers/requirements) `terraform` sub block if\nthe `src` and/or `version` parameters are set.\n\n**Args**:\n  - `access_approval_custom_endpoint` (`string`): Set the `access_approval_custom_endpoint` field on the resulting provider block. When `null`, the `access_approval_custom_endpoint` field will be omitted from the resulting object.\n  - `access_context_manager_custom_endpoint` (`string`): Set the `access_context_manager_custom_endpoint` field on the resulting provider block. When `null`, the `access_context_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `access_token` (`string`): Set the `access_token` field on the resulting provider block. When `null`, the `access_token` field will be omitted from the resulting object.\n  - `active_directory_custom_endpoint` (`string`): Set the `active_directory_custom_endpoint` field on the resulting provider block. When `null`, the `active_directory_custom_endpoint` field will be omitted from the resulting object.\n  - `alloydb_custom_endpoint` (`string`): Set the `alloydb_custom_endpoint` field on the resulting provider block. When `null`, the `alloydb_custom_endpoint` field will be omitted from the resulting object.\n  - `api_gateway_custom_endpoint` (`string`): Set the `api_gateway_custom_endpoint` field on the resulting provider block. When `null`, the `api_gateway_custom_endpoint` field will be omitted from the resulting object.\n  - `apigee_custom_endpoint` (`string`): Set the `apigee_custom_endpoint` field on the resulting provider block. When `null`, the `apigee_custom_endpoint` field will be omitted from the resulting object.\n  - `apikeys_custom_endpoint` (`string`): Set the `apikeys_custom_endpoint` field on the resulting provider block. When `null`, the `apikeys_custom_endpoint` field will be omitted from the resulting object.\n  - `app_engine_custom_endpoint` (`string`): Set the `app_engine_custom_endpoint` field on the resulting provider block. When `null`, the `app_engine_custom_endpoint` field will be omitted from the resulting object.\n  - `artifact_registry_custom_endpoint` (`string`): Set the `artifact_registry_custom_endpoint` field on the resulting provider block. When `null`, the `artifact_registry_custom_endpoint` field will be omitted from the resulting object.\n  - `assured_workloads_custom_endpoint` (`string`): Set the `assured_workloads_custom_endpoint` field on the resulting provider block. When `null`, the `assured_workloads_custom_endpoint` field will be omitted from the resulting object.\n  - `backup_dr_custom_endpoint` (`string`): Set the `backup_dr_custom_endpoint` field on the resulting provider block. When `null`, the `backup_dr_custom_endpoint` field will be omitted from the resulting object.\n  - `beyondcorp_custom_endpoint` (`string`): Set the `beyondcorp_custom_endpoint` field on the resulting provider block. When `null`, the `beyondcorp_custom_endpoint` field will be omitted from the resulting object.\n  - `big_query_custom_endpoint` (`string`): Set the `big_query_custom_endpoint` field on the resulting provider block. When `null`, the `big_query_custom_endpoint` field will be omitted from the resulting object.\n  - `biglake_custom_endpoint` (`string`): Set the `biglake_custom_endpoint` field on the resulting provider block. When `null`, the `biglake_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_analytics_hub_custom_endpoint` (`string`): Set the `bigquery_analytics_hub_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_analytics_hub_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_connection_custom_endpoint` (`string`): Set the `bigquery_connection_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_connection_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_data_transfer_custom_endpoint` (`string`): Set the `bigquery_data_transfer_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_data_transfer_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_datapolicy_custom_endpoint` (`string`): Set the `bigquery_datapolicy_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_datapolicy_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_reservation_custom_endpoint` (`string`): Set the `bigquery_reservation_custom_endpoint` field on the resulting provider block. When `null`, the `bigquery_reservation_custom_endpoint` field will be omitted from the resulting object.\n  - `bigtable_custom_endpoint` (`string`): Set the `bigtable_custom_endpoint` field on the resulting provider block. When `null`, the `bigtable_custom_endpoint` field will be omitted from the resulting object.\n  - `billing_custom_endpoint` (`string`): Set the `billing_custom_endpoint` field on the resulting provider block. When `null`, the `billing_custom_endpoint` field will be omitted from the resulting object.\n  - `billing_project` (`string`): Set the `billing_project` field on the resulting provider block. When `null`, the `billing_project` field will be omitted from the resulting object.\n  - `binary_authorization_custom_endpoint` (`string`): Set the `binary_authorization_custom_endpoint` field on the resulting provider block. When `null`, the `binary_authorization_custom_endpoint` field will be omitted from the resulting object.\n  - `certificate_manager_custom_endpoint` (`string`): Set the `certificate_manager_custom_endpoint` field on the resulting provider block. When `null`, the `certificate_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_asset_custom_endpoint` (`string`): Set the `cloud_asset_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_asset_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_billing_custom_endpoint` (`string`): Set the `cloud_billing_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_billing_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_build_custom_endpoint` (`string`): Set the `cloud_build_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_build_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_build_worker_pool_custom_endpoint` (`string`): Set the `cloud_build_worker_pool_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_build_worker_pool_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_functions_custom_endpoint` (`string`): Set the `cloud_functions_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_functions_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_identity_custom_endpoint` (`string`): Set the `cloud_identity_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_identity_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_ids_custom_endpoint` (`string`): Set the `cloud_ids_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_ids_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_iot_custom_endpoint` (`string`): Set the `cloud_iot_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_iot_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_resource_manager_custom_endpoint` (`string`): Set the `cloud_resource_manager_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_resource_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_run_custom_endpoint` (`string`): Set the `cloud_run_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_run_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_run_v2_custom_endpoint` (`string`): Set the `cloud_run_v2_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_run_v2_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_scheduler_custom_endpoint` (`string`): Set the `cloud_scheduler_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_scheduler_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_tasks_custom_endpoint` (`string`): Set the `cloud_tasks_custom_endpoint` field on the resulting provider block. When `null`, the `cloud_tasks_custom_endpoint` field will be omitted from the resulting object.\n  - `cloudbuildv2_custom_endpoint` (`string`): Set the `cloudbuildv2_custom_endpoint` field on the resulting provider block. When `null`, the `cloudbuildv2_custom_endpoint` field will be omitted from the resulting object.\n  - `clouddeploy_custom_endpoint` (`string`): Set the `clouddeploy_custom_endpoint` field on the resulting provider block. When `null`, the `clouddeploy_custom_endpoint` field will be omitted from the resulting object.\n  - `cloudfunctions2_custom_endpoint` (`string`): Set the `cloudfunctions2_custom_endpoint` field on the resulting provider block. When `null`, the `cloudfunctions2_custom_endpoint` field will be omitted from the resulting object.\n  - `composer_custom_endpoint` (`string`): Set the `composer_custom_endpoint` field on the resulting provider block. When `null`, the `composer_custom_endpoint` field will be omitted from the resulting object.\n  - `compute_custom_endpoint` (`string`): Set the `compute_custom_endpoint` field on the resulting provider block. When `null`, the `compute_custom_endpoint` field will be omitted from the resulting object.\n  - `container_analysis_custom_endpoint` (`string`): Set the `container_analysis_custom_endpoint` field on the resulting provider block. When `null`, the `container_analysis_custom_endpoint` field will be omitted from the resulting object.\n  - `container_attached_custom_endpoint` (`string`): Set the `container_attached_custom_endpoint` field on the resulting provider block. When `null`, the `container_attached_custom_endpoint` field will be omitted from the resulting object.\n  - `container_aws_custom_endpoint` (`string`): Set the `container_aws_custom_endpoint` field on the resulting provider block. When `null`, the `container_aws_custom_endpoint` field will be omitted from the resulting object.\n  - `container_azure_custom_endpoint` (`string`): Set the `container_azure_custom_endpoint` field on the resulting provider block. When `null`, the `container_azure_custom_endpoint` field will be omitted from the resulting object.\n  - `container_custom_endpoint` (`string`): Set the `container_custom_endpoint` field on the resulting provider block. When `null`, the `container_custom_endpoint` field will be omitted from the resulting object.\n  - `core_billing_custom_endpoint` (`string`): Set the `core_billing_custom_endpoint` field on the resulting provider block. When `null`, the `core_billing_custom_endpoint` field will be omitted from the resulting object.\n  - `credentials` (`string`): Set the `credentials` field on the resulting provider block. When `null`, the `credentials` field will be omitted from the resulting object.\n  - `data_catalog_custom_endpoint` (`string`): Set the `data_catalog_custom_endpoint` field on the resulting provider block. When `null`, the `data_catalog_custom_endpoint` field will be omitted from the resulting object.\n  - `data_fusion_custom_endpoint` (`string`): Set the `data_fusion_custom_endpoint` field on the resulting provider block. When `null`, the `data_fusion_custom_endpoint` field will be omitted from the resulting object.\n  - `data_loss_prevention_custom_endpoint` (`string`): Set the `data_loss_prevention_custom_endpoint` field on the resulting provider block. When `null`, the `data_loss_prevention_custom_endpoint` field will be omitted from the resulting object.\n  - `data_pipeline_custom_endpoint` (`string`): Set the `data_pipeline_custom_endpoint` field on the resulting provider block. When `null`, the `data_pipeline_custom_endpoint` field will be omitted from the resulting object.\n  - `database_migration_service_custom_endpoint` (`string`): Set the `database_migration_service_custom_endpoint` field on the resulting provider block. When `null`, the `database_migration_service_custom_endpoint` field will be omitted from the resulting object.\n  - `dataflow_custom_endpoint` (`string`): Set the `dataflow_custom_endpoint` field on the resulting provider block. When `null`, the `dataflow_custom_endpoint` field will be omitted from the resulting object.\n  - `dataform_custom_endpoint` (`string`): Set the `dataform_custom_endpoint` field on the resulting provider block. When `null`, the `dataform_custom_endpoint` field will be omitted from the resulting object.\n  - `dataplex_custom_endpoint` (`string`): Set the `dataplex_custom_endpoint` field on the resulting provider block. When `null`, the `dataplex_custom_endpoint` field will be omitted from the resulting object.\n  - `dataproc_custom_endpoint` (`string`): Set the `dataproc_custom_endpoint` field on the resulting provider block. When `null`, the `dataproc_custom_endpoint` field will be omitted from the resulting object.\n  - `dataproc_metastore_custom_endpoint` (`string`): Set the `dataproc_metastore_custom_endpoint` field on the resulting provider block. When `null`, the `dataproc_metastore_custom_endpoint` field will be omitted from the resulting object.\n  - `datastore_custom_endpoint` (`string`): Set the `datastore_custom_endpoint` field on the resulting provider block. When `null`, the `datastore_custom_endpoint` field will be omitted from the resulting object.\n  - `datastream_custom_endpoint` (`string`): Set the `datastream_custom_endpoint` field on the resulting provider block. When `null`, the `datastream_custom_endpoint` field will be omitted from the resulting object.\n  - `deployment_manager_custom_endpoint` (`string`): Set the `deployment_manager_custom_endpoint` field on the resulting provider block. When `null`, the `deployment_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `dialogflow_custom_endpoint` (`string`): Set the `dialogflow_custom_endpoint` field on the resulting provider block. When `null`, the `dialogflow_custom_endpoint` field will be omitted from the resulting object.\n  - `dialogflow_cx_custom_endpoint` (`string`): Set the `dialogflow_cx_custom_endpoint` field on the resulting provider block. When `null`, the `dialogflow_cx_custom_endpoint` field will be omitted from the resulting object.\n  - `dns_custom_endpoint` (`string`): Set the `dns_custom_endpoint` field on the resulting provider block. When `null`, the `dns_custom_endpoint` field will be omitted from the resulting object.\n  - `document_ai_custom_endpoint` (`string`): Set the `document_ai_custom_endpoint` field on the resulting provider block. When `null`, the `document_ai_custom_endpoint` field will be omitted from the resulting object.\n  - `document_ai_warehouse_custom_endpoint` (`string`): Set the `document_ai_warehouse_custom_endpoint` field on the resulting provider block. When `null`, the `document_ai_warehouse_custom_endpoint` field will be omitted from the resulting object.\n  - `essential_contacts_custom_endpoint` (`string`): Set the `essential_contacts_custom_endpoint` field on the resulting provider block. When `null`, the `essential_contacts_custom_endpoint` field will be omitted from the resulting object.\n  - `eventarc_custom_endpoint` (`string`): Set the `eventarc_custom_endpoint` field on the resulting provider block. When `null`, the `eventarc_custom_endpoint` field will be omitted from the resulting object.\n  - `filestore_custom_endpoint` (`string`): Set the `filestore_custom_endpoint` field on the resulting provider block. When `null`, the `filestore_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_custom_endpoint` (`string`): Set the `firebase_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_database_custom_endpoint` (`string`): Set the `firebase_database_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_database_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_extensions_custom_endpoint` (`string`): Set the `firebase_extensions_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_extensions_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_hosting_custom_endpoint` (`string`): Set the `firebase_hosting_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_hosting_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_storage_custom_endpoint` (`string`): Set the `firebase_storage_custom_endpoint` field on the resulting provider block. When `null`, the `firebase_storage_custom_endpoint` field will be omitted from the resulting object.\n  - `firebaserules_custom_endpoint` (`string`): Set the `firebaserules_custom_endpoint` field on the resulting provider block. When `null`, the `firebaserules_custom_endpoint` field will be omitted from the resulting object.\n  - `firestore_custom_endpoint` (`string`): Set the `firestore_custom_endpoint` field on the resulting provider block. When `null`, the `firestore_custom_endpoint` field will be omitted from the resulting object.\n  - `game_services_custom_endpoint` (`string`): Set the `game_services_custom_endpoint` field on the resulting provider block. When `null`, the `game_services_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_backup_custom_endpoint` (`string`): Set the `gke_backup_custom_endpoint` field on the resulting provider block. When `null`, the `gke_backup_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_hub2_custom_endpoint` (`string`): Set the `gke_hub2_custom_endpoint` field on the resulting provider block. When `null`, the `gke_hub2_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_hub_custom_endpoint` (`string`): Set the `gke_hub_custom_endpoint` field on the resulting provider block. When `null`, the `gke_hub_custom_endpoint` field will be omitted from the resulting object.\n  - `gkehub_feature_custom_endpoint` (`string`): Set the `gkehub_feature_custom_endpoint` field on the resulting provider block. When `null`, the `gkehub_feature_custom_endpoint` field will be omitted from the resulting object.\n  - `gkeonprem_custom_endpoint` (`string`): Set the `gkeonprem_custom_endpoint` field on the resulting provider block. When `null`, the `gkeonprem_custom_endpoint` field will be omitted from the resulting object.\n  - `healthcare_custom_endpoint` (`string`): Set the `healthcare_custom_endpoint` field on the resulting provider block. When `null`, the `healthcare_custom_endpoint` field will be omitted from the resulting object.\n  - `iam2_custom_endpoint` (`string`): Set the `iam2_custom_endpoint` field on the resulting provider block. When `null`, the `iam2_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_beta_custom_endpoint` (`string`): Set the `iam_beta_custom_endpoint` field on the resulting provider block. When `null`, the `iam_beta_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_credentials_custom_endpoint` (`string`): Set the `iam_credentials_custom_endpoint` field on the resulting provider block. When `null`, the `iam_credentials_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_custom_endpoint` (`string`): Set the `iam_custom_endpoint` field on the resulting provider block. When `null`, the `iam_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_workforce_pool_custom_endpoint` (`string`): Set the `iam_workforce_pool_custom_endpoint` field on the resulting provider block. When `null`, the `iam_workforce_pool_custom_endpoint` field will be omitted from the resulting object.\n  - `iap_custom_endpoint` (`string`): Set the `iap_custom_endpoint` field on the resulting provider block. When `null`, the `iap_custom_endpoint` field will be omitted from the resulting object.\n  - `identity_platform_custom_endpoint` (`string`): Set the `identity_platform_custom_endpoint` field on the resulting provider block. When `null`, the `identity_platform_custom_endpoint` field will be omitted from the resulting object.\n  - `impersonate_service_account` (`string`): Set the `impersonate_service_account` field on the resulting provider block. When `null`, the `impersonate_service_account` field will be omitted from the resulting object.\n  - `impersonate_service_account_delegates` (`list`): Set the `impersonate_service_account_delegates` field on the resulting provider block. When `null`, the `impersonate_service_account_delegates` field will be omitted from the resulting object.\n  - `kms_custom_endpoint` (`string`): Set the `kms_custom_endpoint` field on the resulting provider block. When `null`, the `kms_custom_endpoint` field will be omitted from the resulting object.\n  - `logging_custom_endpoint` (`string`): Set the `logging_custom_endpoint` field on the resulting provider block. When `null`, the `logging_custom_endpoint` field will be omitted from the resulting object.\n  - `looker_custom_endpoint` (`string`): Set the `looker_custom_endpoint` field on the resulting provider block. When `null`, the `looker_custom_endpoint` field will be omitted from the resulting object.\n  - `memcache_custom_endpoint` (`string`): Set the `memcache_custom_endpoint` field on the resulting provider block. When `null`, the `memcache_custom_endpoint` field will be omitted from the resulting object.\n  - `ml_engine_custom_endpoint` (`string`): Set the `ml_engine_custom_endpoint` field on the resulting provider block. When `null`, the `ml_engine_custom_endpoint` field will be omitted from the resulting object.\n  - `monitoring_custom_endpoint` (`string`): Set the `monitoring_custom_endpoint` field on the resulting provider block. When `null`, the `monitoring_custom_endpoint` field will be omitted from the resulting object.\n  - `network_connectivity_custom_endpoint` (`string`): Set the `network_connectivity_custom_endpoint` field on the resulting provider block. When `null`, the `network_connectivity_custom_endpoint` field will be omitted from the resulting object.\n  - `network_management_custom_endpoint` (`string`): Set the `network_management_custom_endpoint` field on the resulting provider block. When `null`, the `network_management_custom_endpoint` field will be omitted from the resulting object.\n  - `network_security_custom_endpoint` (`string`): Set the `network_security_custom_endpoint` field on the resulting provider block. When `null`, the `network_security_custom_endpoint` field will be omitted from the resulting object.\n  - `network_services_custom_endpoint` (`string`): Set the `network_services_custom_endpoint` field on the resulting provider block. When `null`, the `network_services_custom_endpoint` field will be omitted from the resulting object.\n  - `notebooks_custom_endpoint` (`string`): Set the `notebooks_custom_endpoint` field on the resulting provider block. When `null`, the `notebooks_custom_endpoint` field will be omitted from the resulting object.\n  - `org_policy_custom_endpoint` (`string`): Set the `org_policy_custom_endpoint` field on the resulting provider block. When `null`, the `org_policy_custom_endpoint` field will be omitted from the resulting object.\n  - `os_config_custom_endpoint` (`string`): Set the `os_config_custom_endpoint` field on the resulting provider block. When `null`, the `os_config_custom_endpoint` field will be omitted from the resulting object.\n  - `os_login_custom_endpoint` (`string`): Set the `os_login_custom_endpoint` field on the resulting provider block. When `null`, the `os_login_custom_endpoint` field will be omitted from the resulting object.\n  - `privateca_custom_endpoint` (`string`): Set the `privateca_custom_endpoint` field on the resulting provider block. When `null`, the `privateca_custom_endpoint` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting provider block. When `null`, the `project` field will be omitted from the resulting object.\n  - `public_ca_custom_endpoint` (`string`): Set the `public_ca_custom_endpoint` field on the resulting provider block. When `null`, the `public_ca_custom_endpoint` field will be omitted from the resulting object.\n  - `pubsub_custom_endpoint` (`string`): Set the `pubsub_custom_endpoint` field on the resulting provider block. When `null`, the `pubsub_custom_endpoint` field will be omitted from the resulting object.\n  - `pubsub_lite_custom_endpoint` (`string`): Set the `pubsub_lite_custom_endpoint` field on the resulting provider block. When `null`, the `pubsub_lite_custom_endpoint` field will be omitted from the resulting object.\n  - `recaptcha_enterprise_custom_endpoint` (`string`): Set the `recaptcha_enterprise_custom_endpoint` field on the resulting provider block. When `null`, the `recaptcha_enterprise_custom_endpoint` field will be omitted from the resulting object.\n  - `redis_custom_endpoint` (`string`): Set the `redis_custom_endpoint` field on the resulting provider block. When `null`, the `redis_custom_endpoint` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting provider block. When `null`, the `region` field will be omitted from the resulting object.\n  - `request_reason` (`string`): Set the `request_reason` field on the resulting provider block. When `null`, the `request_reason` field will be omitted from the resulting object.\n  - `request_timeout` (`string`): Set the `request_timeout` field on the resulting provider block. When `null`, the `request_timeout` field will be omitted from the resulting object.\n  - `resource_manager_custom_endpoint` (`string`): Set the `resource_manager_custom_endpoint` field on the resulting provider block. When `null`, the `resource_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `resource_manager_v3_custom_endpoint` (`string`): Set the `resource_manager_v3_custom_endpoint` field on the resulting provider block. When `null`, the `resource_manager_v3_custom_endpoint` field will be omitted from the resulting object.\n  - `runtime_config_custom_endpoint` (`string`): Set the `runtime_config_custom_endpoint` field on the resulting provider block. When `null`, the `runtime_config_custom_endpoint` field will be omitted from the resulting object.\n  - `runtimeconfig_custom_endpoint` (`string`): Set the `runtimeconfig_custom_endpoint` field on the resulting provider block. When `null`, the `runtimeconfig_custom_endpoint` field will be omitted from the resulting object.\n  - `scopes` (`list`): Set the `scopes` field on the resulting provider block. When `null`, the `scopes` field will be omitted from the resulting object.\n  - `secret_manager_custom_endpoint` (`string`): Set the `secret_manager_custom_endpoint` field on the resulting provider block. When `null`, the `secret_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `security_center_custom_endpoint` (`string`): Set the `security_center_custom_endpoint` field on the resulting provider block. When `null`, the `security_center_custom_endpoint` field will be omitted from the resulting object.\n  - `security_scanner_custom_endpoint` (`string`): Set the `security_scanner_custom_endpoint` field on the resulting provider block. When `null`, the `security_scanner_custom_endpoint` field will be omitted from the resulting object.\n  - `service_directory_custom_endpoint` (`string`): Set the `service_directory_custom_endpoint` field on the resulting provider block. When `null`, the `service_directory_custom_endpoint` field will be omitted from the resulting object.\n  - `service_management_custom_endpoint` (`string`): Set the `service_management_custom_endpoint` field on the resulting provider block. When `null`, the `service_management_custom_endpoint` field will be omitted from the resulting object.\n  - `service_networking_custom_endpoint` (`string`): Set the `service_networking_custom_endpoint` field on the resulting provider block. When `null`, the `service_networking_custom_endpoint` field will be omitted from the resulting object.\n  - `service_usage_custom_endpoint` (`string`): Set the `service_usage_custom_endpoint` field on the resulting provider block. When `null`, the `service_usage_custom_endpoint` field will be omitted from the resulting object.\n  - `source_repo_custom_endpoint` (`string`): Set the `source_repo_custom_endpoint` field on the resulting provider block. When `null`, the `source_repo_custom_endpoint` field will be omitted from the resulting object.\n  - `spanner_custom_endpoint` (`string`): Set the `spanner_custom_endpoint` field on the resulting provider block. When `null`, the `spanner_custom_endpoint` field will be omitted from the resulting object.\n  - `sql_custom_endpoint` (`string`): Set the `sql_custom_endpoint` field on the resulting provider block. When `null`, the `sql_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_custom_endpoint` (`string`): Set the `storage_custom_endpoint` field on the resulting provider block. When `null`, the `storage_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_insights_custom_endpoint` (`string`): Set the `storage_insights_custom_endpoint` field on the resulting provider block. When `null`, the `storage_insights_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_transfer_custom_endpoint` (`string`): Set the `storage_transfer_custom_endpoint` field on the resulting provider block. When `null`, the `storage_transfer_custom_endpoint` field will be omitted from the resulting object.\n  - `tags_custom_endpoint` (`string`): Set the `tags_custom_endpoint` field on the resulting provider block. When `null`, the `tags_custom_endpoint` field will be omitted from the resulting object.\n  - `tags_location_custom_endpoint` (`string`): Set the `tags_location_custom_endpoint` field on the resulting provider block. When `null`, the `tags_location_custom_endpoint` field will be omitted from the resulting object.\n  - `tpu_custom_endpoint` (`string`): Set the `tpu_custom_endpoint` field on the resulting provider block. When `null`, the `tpu_custom_endpoint` field will be omitted from the resulting object.\n  - `user_project_override` (`bool`): Set the `user_project_override` field on the resulting provider block. When `null`, the `user_project_override` field will be omitted from the resulting object.\n  - `vertex_ai_custom_endpoint` (`string`): Set the `vertex_ai_custom_endpoint` field on the resulting provider block. When `null`, the `vertex_ai_custom_endpoint` field will be omitted from the resulting object.\n  - `vmwareengine_custom_endpoint` (`string`): Set the `vmwareengine_custom_endpoint` field on the resulting provider block. When `null`, the `vmwareengine_custom_endpoint` field will be omitted from the resulting object.\n  - `vpc_access_custom_endpoint` (`string`): Set the `vpc_access_custom_endpoint` field on the resulting provider block. When `null`, the `vpc_access_custom_endpoint` field will be omitted from the resulting object.\n  - `workflows_custom_endpoint` (`string`): Set the `workflows_custom_endpoint` field on the resulting provider block. When `null`, the `workflows_custom_endpoint` field will be omitted from the resulting object.\n  - `workstations_custom_endpoint` (`string`): Set the `workstations_custom_endpoint` field on the resulting provider block. When `null`, the `workstations_custom_endpoint` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting provider block. When `null`, the `zone` field will be omitted from the resulting object.\n  - `batching` (`list[obj]`): Set the `batching` field on the resulting provider block. When `null`, the `batching` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.provider.batching.new](#fn-googlebetabatchingnew) constructor.\n  - `alias` (`string`): The provider `alias` to set for this instance of the provider block. When `null`, the `alias`\n  field will be omitted from the resulting provider block.\n  - `src` (`string`): The provider `source` to set on the resulting `required_providers` block. If `src` or `version` is\n  set and is not `null`, a `required_providers` block and entry for the provider will be injected into the document.\n  - `version` (`string`): The provider `version` to set on the resulting `required_providers` block. If `src` or\n  `version` is set and is not `null`, a `required_providers` block and entry for the provider will be injected into the\n  document.\n\n\n**Returns**:\n- A mixin object that injects the new provider (and optionally, `required_providers` block) into the root Terraform configuration.\n', args=[]),
   new(
     access_approval_custom_endpoint=null,
     access_context_manager_custom_endpoint=null,
@@ -58,6 +58,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     data_catalog_custom_endpoint=null,
     data_fusion_custom_endpoint=null,
     data_loss_prevention_custom_endpoint=null,
+    data_pipeline_custom_endpoint=null,
     database_migration_service_custom_endpoint=null,
     dataflow_custom_endpoint=null,
     dataform_custom_endpoint=null,
@@ -138,6 +139,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     spanner_custom_endpoint=null,
     sql_custom_endpoint=null,
     storage_custom_endpoint=null,
+    storage_insights_custom_endpoint=null,
     storage_transfer_custom_endpoint=null,
     tags_custom_endpoint=null,
     tags_location_custom_endpoint=null,
@@ -212,6 +214,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       data_catalog_custom_endpoint=data_catalog_custom_endpoint,
       data_fusion_custom_endpoint=data_fusion_custom_endpoint,
       data_loss_prevention_custom_endpoint=data_loss_prevention_custom_endpoint,
+      data_pipeline_custom_endpoint=data_pipeline_custom_endpoint,
       database_migration_service_custom_endpoint=database_migration_service_custom_endpoint,
       dataflow_custom_endpoint=dataflow_custom_endpoint,
       dataform_custom_endpoint=dataform_custom_endpoint,
@@ -292,6 +295,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       spanner_custom_endpoint=spanner_custom_endpoint,
       sql_custom_endpoint=sql_custom_endpoint,
       storage_custom_endpoint=storage_custom_endpoint,
+      storage_insights_custom_endpoint=storage_insights_custom_endpoint,
       storage_transfer_custom_endpoint=storage_transfer_custom_endpoint,
       tags_custom_endpoint=tags_custom_endpoint,
       tags_location_custom_endpoint=tags_location_custom_endpoint,
@@ -305,7 +309,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       zone=zone
     )
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.provider.` constructs a new object with attributes and blocks configured for the `google-beta`\nTerraform `provider`.\n\nUnlike [google-beta.provider.new](#fn-googlebetanew), this function will not inject the `provider`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withProvider](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withprovider) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `access_approval_custom_endpoint` (`string`): Set the `access_approval_custom_endpoint` field on the resulting object. When `null`, the `access_approval_custom_endpoint` field will be omitted from the resulting object.\n  - `access_context_manager_custom_endpoint` (`string`): Set the `access_context_manager_custom_endpoint` field on the resulting object. When `null`, the `access_context_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `access_token` (`string`): Set the `access_token` field on the resulting object. When `null`, the `access_token` field will be omitted from the resulting object.\n  - `active_directory_custom_endpoint` (`string`): Set the `active_directory_custom_endpoint` field on the resulting object. When `null`, the `active_directory_custom_endpoint` field will be omitted from the resulting object.\n  - `alloydb_custom_endpoint` (`string`): Set the `alloydb_custom_endpoint` field on the resulting object. When `null`, the `alloydb_custom_endpoint` field will be omitted from the resulting object.\n  - `api_gateway_custom_endpoint` (`string`): Set the `api_gateway_custom_endpoint` field on the resulting object. When `null`, the `api_gateway_custom_endpoint` field will be omitted from the resulting object.\n  - `apigee_custom_endpoint` (`string`): Set the `apigee_custom_endpoint` field on the resulting object. When `null`, the `apigee_custom_endpoint` field will be omitted from the resulting object.\n  - `apikeys_custom_endpoint` (`string`): Set the `apikeys_custom_endpoint` field on the resulting object. When `null`, the `apikeys_custom_endpoint` field will be omitted from the resulting object.\n  - `app_engine_custom_endpoint` (`string`): Set the `app_engine_custom_endpoint` field on the resulting object. When `null`, the `app_engine_custom_endpoint` field will be omitted from the resulting object.\n  - `artifact_registry_custom_endpoint` (`string`): Set the `artifact_registry_custom_endpoint` field on the resulting object. When `null`, the `artifact_registry_custom_endpoint` field will be omitted from the resulting object.\n  - `assured_workloads_custom_endpoint` (`string`): Set the `assured_workloads_custom_endpoint` field on the resulting object. When `null`, the `assured_workloads_custom_endpoint` field will be omitted from the resulting object.\n  - `backup_dr_custom_endpoint` (`string`): Set the `backup_dr_custom_endpoint` field on the resulting object. When `null`, the `backup_dr_custom_endpoint` field will be omitted from the resulting object.\n  - `beyondcorp_custom_endpoint` (`string`): Set the `beyondcorp_custom_endpoint` field on the resulting object. When `null`, the `beyondcorp_custom_endpoint` field will be omitted from the resulting object.\n  - `big_query_custom_endpoint` (`string`): Set the `big_query_custom_endpoint` field on the resulting object. When `null`, the `big_query_custom_endpoint` field will be omitted from the resulting object.\n  - `biglake_custom_endpoint` (`string`): Set the `biglake_custom_endpoint` field on the resulting object. When `null`, the `biglake_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_analytics_hub_custom_endpoint` (`string`): Set the `bigquery_analytics_hub_custom_endpoint` field on the resulting object. When `null`, the `bigquery_analytics_hub_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_connection_custom_endpoint` (`string`): Set the `bigquery_connection_custom_endpoint` field on the resulting object. When `null`, the `bigquery_connection_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_data_transfer_custom_endpoint` (`string`): Set the `bigquery_data_transfer_custom_endpoint` field on the resulting object. When `null`, the `bigquery_data_transfer_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_datapolicy_custom_endpoint` (`string`): Set the `bigquery_datapolicy_custom_endpoint` field on the resulting object. When `null`, the `bigquery_datapolicy_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_reservation_custom_endpoint` (`string`): Set the `bigquery_reservation_custom_endpoint` field on the resulting object. When `null`, the `bigquery_reservation_custom_endpoint` field will be omitted from the resulting object.\n  - `bigtable_custom_endpoint` (`string`): Set the `bigtable_custom_endpoint` field on the resulting object. When `null`, the `bigtable_custom_endpoint` field will be omitted from the resulting object.\n  - `billing_custom_endpoint` (`string`): Set the `billing_custom_endpoint` field on the resulting object. When `null`, the `billing_custom_endpoint` field will be omitted from the resulting object.\n  - `billing_project` (`string`): Set the `billing_project` field on the resulting object. When `null`, the `billing_project` field will be omitted from the resulting object.\n  - `binary_authorization_custom_endpoint` (`string`): Set the `binary_authorization_custom_endpoint` field on the resulting object. When `null`, the `binary_authorization_custom_endpoint` field will be omitted from the resulting object.\n  - `certificate_manager_custom_endpoint` (`string`): Set the `certificate_manager_custom_endpoint` field on the resulting object. When `null`, the `certificate_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_asset_custom_endpoint` (`string`): Set the `cloud_asset_custom_endpoint` field on the resulting object. When `null`, the `cloud_asset_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_billing_custom_endpoint` (`string`): Set the `cloud_billing_custom_endpoint` field on the resulting object. When `null`, the `cloud_billing_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_build_custom_endpoint` (`string`): Set the `cloud_build_custom_endpoint` field on the resulting object. When `null`, the `cloud_build_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_build_worker_pool_custom_endpoint` (`string`): Set the `cloud_build_worker_pool_custom_endpoint` field on the resulting object. When `null`, the `cloud_build_worker_pool_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_functions_custom_endpoint` (`string`): Set the `cloud_functions_custom_endpoint` field on the resulting object. When `null`, the `cloud_functions_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_identity_custom_endpoint` (`string`): Set the `cloud_identity_custom_endpoint` field on the resulting object. When `null`, the `cloud_identity_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_ids_custom_endpoint` (`string`): Set the `cloud_ids_custom_endpoint` field on the resulting object. When `null`, the `cloud_ids_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_iot_custom_endpoint` (`string`): Set the `cloud_iot_custom_endpoint` field on the resulting object. When `null`, the `cloud_iot_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_resource_manager_custom_endpoint` (`string`): Set the `cloud_resource_manager_custom_endpoint` field on the resulting object. When `null`, the `cloud_resource_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_run_custom_endpoint` (`string`): Set the `cloud_run_custom_endpoint` field on the resulting object. When `null`, the `cloud_run_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_run_v2_custom_endpoint` (`string`): Set the `cloud_run_v2_custom_endpoint` field on the resulting object. When `null`, the `cloud_run_v2_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_scheduler_custom_endpoint` (`string`): Set the `cloud_scheduler_custom_endpoint` field on the resulting object. When `null`, the `cloud_scheduler_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_tasks_custom_endpoint` (`string`): Set the `cloud_tasks_custom_endpoint` field on the resulting object. When `null`, the `cloud_tasks_custom_endpoint` field will be omitted from the resulting object.\n  - `cloudbuildv2_custom_endpoint` (`string`): Set the `cloudbuildv2_custom_endpoint` field on the resulting object. When `null`, the `cloudbuildv2_custom_endpoint` field will be omitted from the resulting object.\n  - `clouddeploy_custom_endpoint` (`string`): Set the `clouddeploy_custom_endpoint` field on the resulting object. When `null`, the `clouddeploy_custom_endpoint` field will be omitted from the resulting object.\n  - `cloudfunctions2_custom_endpoint` (`string`): Set the `cloudfunctions2_custom_endpoint` field on the resulting object. When `null`, the `cloudfunctions2_custom_endpoint` field will be omitted from the resulting object.\n  - `composer_custom_endpoint` (`string`): Set the `composer_custom_endpoint` field on the resulting object. When `null`, the `composer_custom_endpoint` field will be omitted from the resulting object.\n  - `compute_custom_endpoint` (`string`): Set the `compute_custom_endpoint` field on the resulting object. When `null`, the `compute_custom_endpoint` field will be omitted from the resulting object.\n  - `container_analysis_custom_endpoint` (`string`): Set the `container_analysis_custom_endpoint` field on the resulting object. When `null`, the `container_analysis_custom_endpoint` field will be omitted from the resulting object.\n  - `container_attached_custom_endpoint` (`string`): Set the `container_attached_custom_endpoint` field on the resulting object. When `null`, the `container_attached_custom_endpoint` field will be omitted from the resulting object.\n  - `container_aws_custom_endpoint` (`string`): Set the `container_aws_custom_endpoint` field on the resulting object. When `null`, the `container_aws_custom_endpoint` field will be omitted from the resulting object.\n  - `container_azure_custom_endpoint` (`string`): Set the `container_azure_custom_endpoint` field on the resulting object. When `null`, the `container_azure_custom_endpoint` field will be omitted from the resulting object.\n  - `container_custom_endpoint` (`string`): Set the `container_custom_endpoint` field on the resulting object. When `null`, the `container_custom_endpoint` field will be omitted from the resulting object.\n  - `core_billing_custom_endpoint` (`string`): Set the `core_billing_custom_endpoint` field on the resulting object. When `null`, the `core_billing_custom_endpoint` field will be omitted from the resulting object.\n  - `credentials` (`string`): Set the `credentials` field on the resulting object. When `null`, the `credentials` field will be omitted from the resulting object.\n  - `data_catalog_custom_endpoint` (`string`): Set the `data_catalog_custom_endpoint` field on the resulting object. When `null`, the `data_catalog_custom_endpoint` field will be omitted from the resulting object.\n  - `data_fusion_custom_endpoint` (`string`): Set the `data_fusion_custom_endpoint` field on the resulting object. When `null`, the `data_fusion_custom_endpoint` field will be omitted from the resulting object.\n  - `data_loss_prevention_custom_endpoint` (`string`): Set the `data_loss_prevention_custom_endpoint` field on the resulting object. When `null`, the `data_loss_prevention_custom_endpoint` field will be omitted from the resulting object.\n  - `database_migration_service_custom_endpoint` (`string`): Set the `database_migration_service_custom_endpoint` field on the resulting object. When `null`, the `database_migration_service_custom_endpoint` field will be omitted from the resulting object.\n  - `dataflow_custom_endpoint` (`string`): Set the `dataflow_custom_endpoint` field on the resulting object. When `null`, the `dataflow_custom_endpoint` field will be omitted from the resulting object.\n  - `dataform_custom_endpoint` (`string`): Set the `dataform_custom_endpoint` field on the resulting object. When `null`, the `dataform_custom_endpoint` field will be omitted from the resulting object.\n  - `dataplex_custom_endpoint` (`string`): Set the `dataplex_custom_endpoint` field on the resulting object. When `null`, the `dataplex_custom_endpoint` field will be omitted from the resulting object.\n  - `dataproc_custom_endpoint` (`string`): Set the `dataproc_custom_endpoint` field on the resulting object. When `null`, the `dataproc_custom_endpoint` field will be omitted from the resulting object.\n  - `dataproc_metastore_custom_endpoint` (`string`): Set the `dataproc_metastore_custom_endpoint` field on the resulting object. When `null`, the `dataproc_metastore_custom_endpoint` field will be omitted from the resulting object.\n  - `datastore_custom_endpoint` (`string`): Set the `datastore_custom_endpoint` field on the resulting object. When `null`, the `datastore_custom_endpoint` field will be omitted from the resulting object.\n  - `datastream_custom_endpoint` (`string`): Set the `datastream_custom_endpoint` field on the resulting object. When `null`, the `datastream_custom_endpoint` field will be omitted from the resulting object.\n  - `deployment_manager_custom_endpoint` (`string`): Set the `deployment_manager_custom_endpoint` field on the resulting object. When `null`, the `deployment_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `dialogflow_custom_endpoint` (`string`): Set the `dialogflow_custom_endpoint` field on the resulting object. When `null`, the `dialogflow_custom_endpoint` field will be omitted from the resulting object.\n  - `dialogflow_cx_custom_endpoint` (`string`): Set the `dialogflow_cx_custom_endpoint` field on the resulting object. When `null`, the `dialogflow_cx_custom_endpoint` field will be omitted from the resulting object.\n  - `dns_custom_endpoint` (`string`): Set the `dns_custom_endpoint` field on the resulting object. When `null`, the `dns_custom_endpoint` field will be omitted from the resulting object.\n  - `document_ai_custom_endpoint` (`string`): Set the `document_ai_custom_endpoint` field on the resulting object. When `null`, the `document_ai_custom_endpoint` field will be omitted from the resulting object.\n  - `document_ai_warehouse_custom_endpoint` (`string`): Set the `document_ai_warehouse_custom_endpoint` field on the resulting object. When `null`, the `document_ai_warehouse_custom_endpoint` field will be omitted from the resulting object.\n  - `essential_contacts_custom_endpoint` (`string`): Set the `essential_contacts_custom_endpoint` field on the resulting object. When `null`, the `essential_contacts_custom_endpoint` field will be omitted from the resulting object.\n  - `eventarc_custom_endpoint` (`string`): Set the `eventarc_custom_endpoint` field on the resulting object. When `null`, the `eventarc_custom_endpoint` field will be omitted from the resulting object.\n  - `filestore_custom_endpoint` (`string`): Set the `filestore_custom_endpoint` field on the resulting object. When `null`, the `filestore_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_custom_endpoint` (`string`): Set the `firebase_custom_endpoint` field on the resulting object. When `null`, the `firebase_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_database_custom_endpoint` (`string`): Set the `firebase_database_custom_endpoint` field on the resulting object. When `null`, the `firebase_database_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_extensions_custom_endpoint` (`string`): Set the `firebase_extensions_custom_endpoint` field on the resulting object. When `null`, the `firebase_extensions_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_hosting_custom_endpoint` (`string`): Set the `firebase_hosting_custom_endpoint` field on the resulting object. When `null`, the `firebase_hosting_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_storage_custom_endpoint` (`string`): Set the `firebase_storage_custom_endpoint` field on the resulting object. When `null`, the `firebase_storage_custom_endpoint` field will be omitted from the resulting object.\n  - `firebaserules_custom_endpoint` (`string`): Set the `firebaserules_custom_endpoint` field on the resulting object. When `null`, the `firebaserules_custom_endpoint` field will be omitted from the resulting object.\n  - `firestore_custom_endpoint` (`string`): Set the `firestore_custom_endpoint` field on the resulting object. When `null`, the `firestore_custom_endpoint` field will be omitted from the resulting object.\n  - `game_services_custom_endpoint` (`string`): Set the `game_services_custom_endpoint` field on the resulting object. When `null`, the `game_services_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_backup_custom_endpoint` (`string`): Set the `gke_backup_custom_endpoint` field on the resulting object. When `null`, the `gke_backup_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_hub2_custom_endpoint` (`string`): Set the `gke_hub2_custom_endpoint` field on the resulting object. When `null`, the `gke_hub2_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_hub_custom_endpoint` (`string`): Set the `gke_hub_custom_endpoint` field on the resulting object. When `null`, the `gke_hub_custom_endpoint` field will be omitted from the resulting object.\n  - `gkehub_feature_custom_endpoint` (`string`): Set the `gkehub_feature_custom_endpoint` field on the resulting object. When `null`, the `gkehub_feature_custom_endpoint` field will be omitted from the resulting object.\n  - `gkeonprem_custom_endpoint` (`string`): Set the `gkeonprem_custom_endpoint` field on the resulting object. When `null`, the `gkeonprem_custom_endpoint` field will be omitted from the resulting object.\n  - `healthcare_custom_endpoint` (`string`): Set the `healthcare_custom_endpoint` field on the resulting object. When `null`, the `healthcare_custom_endpoint` field will be omitted from the resulting object.\n  - `iam2_custom_endpoint` (`string`): Set the `iam2_custom_endpoint` field on the resulting object. When `null`, the `iam2_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_beta_custom_endpoint` (`string`): Set the `iam_beta_custom_endpoint` field on the resulting object. When `null`, the `iam_beta_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_credentials_custom_endpoint` (`string`): Set the `iam_credentials_custom_endpoint` field on the resulting object. When `null`, the `iam_credentials_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_custom_endpoint` (`string`): Set the `iam_custom_endpoint` field on the resulting object. When `null`, the `iam_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_workforce_pool_custom_endpoint` (`string`): Set the `iam_workforce_pool_custom_endpoint` field on the resulting object. When `null`, the `iam_workforce_pool_custom_endpoint` field will be omitted from the resulting object.\n  - `iap_custom_endpoint` (`string`): Set the `iap_custom_endpoint` field on the resulting object. When `null`, the `iap_custom_endpoint` field will be omitted from the resulting object.\n  - `identity_platform_custom_endpoint` (`string`): Set the `identity_platform_custom_endpoint` field on the resulting object. When `null`, the `identity_platform_custom_endpoint` field will be omitted from the resulting object.\n  - `impersonate_service_account` (`string`): Set the `impersonate_service_account` field on the resulting object. When `null`, the `impersonate_service_account` field will be omitted from the resulting object.\n  - `impersonate_service_account_delegates` (`list`): Set the `impersonate_service_account_delegates` field on the resulting object. When `null`, the `impersonate_service_account_delegates` field will be omitted from the resulting object.\n  - `kms_custom_endpoint` (`string`): Set the `kms_custom_endpoint` field on the resulting object. When `null`, the `kms_custom_endpoint` field will be omitted from the resulting object.\n  - `logging_custom_endpoint` (`string`): Set the `logging_custom_endpoint` field on the resulting object. When `null`, the `logging_custom_endpoint` field will be omitted from the resulting object.\n  - `looker_custom_endpoint` (`string`): Set the `looker_custom_endpoint` field on the resulting object. When `null`, the `looker_custom_endpoint` field will be omitted from the resulting object.\n  - `memcache_custom_endpoint` (`string`): Set the `memcache_custom_endpoint` field on the resulting object. When `null`, the `memcache_custom_endpoint` field will be omitted from the resulting object.\n  - `ml_engine_custom_endpoint` (`string`): Set the `ml_engine_custom_endpoint` field on the resulting object. When `null`, the `ml_engine_custom_endpoint` field will be omitted from the resulting object.\n  - `monitoring_custom_endpoint` (`string`): Set the `monitoring_custom_endpoint` field on the resulting object. When `null`, the `monitoring_custom_endpoint` field will be omitted from the resulting object.\n  - `network_connectivity_custom_endpoint` (`string`): Set the `network_connectivity_custom_endpoint` field on the resulting object. When `null`, the `network_connectivity_custom_endpoint` field will be omitted from the resulting object.\n  - `network_management_custom_endpoint` (`string`): Set the `network_management_custom_endpoint` field on the resulting object. When `null`, the `network_management_custom_endpoint` field will be omitted from the resulting object.\n  - `network_security_custom_endpoint` (`string`): Set the `network_security_custom_endpoint` field on the resulting object. When `null`, the `network_security_custom_endpoint` field will be omitted from the resulting object.\n  - `network_services_custom_endpoint` (`string`): Set the `network_services_custom_endpoint` field on the resulting object. When `null`, the `network_services_custom_endpoint` field will be omitted from the resulting object.\n  - `notebooks_custom_endpoint` (`string`): Set the `notebooks_custom_endpoint` field on the resulting object. When `null`, the `notebooks_custom_endpoint` field will be omitted from the resulting object.\n  - `org_policy_custom_endpoint` (`string`): Set the `org_policy_custom_endpoint` field on the resulting object. When `null`, the `org_policy_custom_endpoint` field will be omitted from the resulting object.\n  - `os_config_custom_endpoint` (`string`): Set the `os_config_custom_endpoint` field on the resulting object. When `null`, the `os_config_custom_endpoint` field will be omitted from the resulting object.\n  - `os_login_custom_endpoint` (`string`): Set the `os_login_custom_endpoint` field on the resulting object. When `null`, the `os_login_custom_endpoint` field will be omitted from the resulting object.\n  - `privateca_custom_endpoint` (`string`): Set the `privateca_custom_endpoint` field on the resulting object. When `null`, the `privateca_custom_endpoint` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `public_ca_custom_endpoint` (`string`): Set the `public_ca_custom_endpoint` field on the resulting object. When `null`, the `public_ca_custom_endpoint` field will be omitted from the resulting object.\n  - `pubsub_custom_endpoint` (`string`): Set the `pubsub_custom_endpoint` field on the resulting object. When `null`, the `pubsub_custom_endpoint` field will be omitted from the resulting object.\n  - `pubsub_lite_custom_endpoint` (`string`): Set the `pubsub_lite_custom_endpoint` field on the resulting object. When `null`, the `pubsub_lite_custom_endpoint` field will be omitted from the resulting object.\n  - `recaptcha_enterprise_custom_endpoint` (`string`): Set the `recaptcha_enterprise_custom_endpoint` field on the resulting object. When `null`, the `recaptcha_enterprise_custom_endpoint` field will be omitted from the resulting object.\n  - `redis_custom_endpoint` (`string`): Set the `redis_custom_endpoint` field on the resulting object. When `null`, the `redis_custom_endpoint` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n  - `request_reason` (`string`): Set the `request_reason` field on the resulting object. When `null`, the `request_reason` field will be omitted from the resulting object.\n  - `request_timeout` (`string`): Set the `request_timeout` field on the resulting object. When `null`, the `request_timeout` field will be omitted from the resulting object.\n  - `resource_manager_custom_endpoint` (`string`): Set the `resource_manager_custom_endpoint` field on the resulting object. When `null`, the `resource_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `resource_manager_v3_custom_endpoint` (`string`): Set the `resource_manager_v3_custom_endpoint` field on the resulting object. When `null`, the `resource_manager_v3_custom_endpoint` field will be omitted from the resulting object.\n  - `runtime_config_custom_endpoint` (`string`): Set the `runtime_config_custom_endpoint` field on the resulting object. When `null`, the `runtime_config_custom_endpoint` field will be omitted from the resulting object.\n  - `runtimeconfig_custom_endpoint` (`string`): Set the `runtimeconfig_custom_endpoint` field on the resulting object. When `null`, the `runtimeconfig_custom_endpoint` field will be omitted from the resulting object.\n  - `scopes` (`list`): Set the `scopes` field on the resulting object. When `null`, the `scopes` field will be omitted from the resulting object.\n  - `secret_manager_custom_endpoint` (`string`): Set the `secret_manager_custom_endpoint` field on the resulting object. When `null`, the `secret_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `security_center_custom_endpoint` (`string`): Set the `security_center_custom_endpoint` field on the resulting object. When `null`, the `security_center_custom_endpoint` field will be omitted from the resulting object.\n  - `security_scanner_custom_endpoint` (`string`): Set the `security_scanner_custom_endpoint` field on the resulting object. When `null`, the `security_scanner_custom_endpoint` field will be omitted from the resulting object.\n  - `service_directory_custom_endpoint` (`string`): Set the `service_directory_custom_endpoint` field on the resulting object. When `null`, the `service_directory_custom_endpoint` field will be omitted from the resulting object.\n  - `service_management_custom_endpoint` (`string`): Set the `service_management_custom_endpoint` field on the resulting object. When `null`, the `service_management_custom_endpoint` field will be omitted from the resulting object.\n  - `service_networking_custom_endpoint` (`string`): Set the `service_networking_custom_endpoint` field on the resulting object. When `null`, the `service_networking_custom_endpoint` field will be omitted from the resulting object.\n  - `service_usage_custom_endpoint` (`string`): Set the `service_usage_custom_endpoint` field on the resulting object. When `null`, the `service_usage_custom_endpoint` field will be omitted from the resulting object.\n  - `source_repo_custom_endpoint` (`string`): Set the `source_repo_custom_endpoint` field on the resulting object. When `null`, the `source_repo_custom_endpoint` field will be omitted from the resulting object.\n  - `spanner_custom_endpoint` (`string`): Set the `spanner_custom_endpoint` field on the resulting object. When `null`, the `spanner_custom_endpoint` field will be omitted from the resulting object.\n  - `sql_custom_endpoint` (`string`): Set the `sql_custom_endpoint` field on the resulting object. When `null`, the `sql_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_custom_endpoint` (`string`): Set the `storage_custom_endpoint` field on the resulting object. When `null`, the `storage_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_transfer_custom_endpoint` (`string`): Set the `storage_transfer_custom_endpoint` field on the resulting object. When `null`, the `storage_transfer_custom_endpoint` field will be omitted from the resulting object.\n  - `tags_custom_endpoint` (`string`): Set the `tags_custom_endpoint` field on the resulting object. When `null`, the `tags_custom_endpoint` field will be omitted from the resulting object.\n  - `tags_location_custom_endpoint` (`string`): Set the `tags_location_custom_endpoint` field on the resulting object. When `null`, the `tags_location_custom_endpoint` field will be omitted from the resulting object.\n  - `tpu_custom_endpoint` (`string`): Set the `tpu_custom_endpoint` field on the resulting object. When `null`, the `tpu_custom_endpoint` field will be omitted from the resulting object.\n  - `user_project_override` (`bool`): Set the `user_project_override` field on the resulting object. When `null`, the `user_project_override` field will be omitted from the resulting object.\n  - `vertex_ai_custom_endpoint` (`string`): Set the `vertex_ai_custom_endpoint` field on the resulting object. When `null`, the `vertex_ai_custom_endpoint` field will be omitted from the resulting object.\n  - `vmwareengine_custom_endpoint` (`string`): Set the `vmwareengine_custom_endpoint` field on the resulting object. When `null`, the `vmwareengine_custom_endpoint` field will be omitted from the resulting object.\n  - `vpc_access_custom_endpoint` (`string`): Set the `vpc_access_custom_endpoint` field on the resulting object. When `null`, the `vpc_access_custom_endpoint` field will be omitted from the resulting object.\n  - `workflows_custom_endpoint` (`string`): Set the `workflows_custom_endpoint` field on the resulting object. When `null`, the `workflows_custom_endpoint` field will be omitted from the resulting object.\n  - `workstations_custom_endpoint` (`string`): Set the `workstations_custom_endpoint` field on the resulting object. When `null`, the `workstations_custom_endpoint` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.\n  - `batching` (`list[obj]`): Set the `batching` field on the resulting object. When `null`, the `batching` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.provider.batching.new](#fn-googlebetabatchingnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withProvider](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withprovider) to construct a new `google-beta` provider\n  configuration into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.provider.` constructs a new object with attributes and blocks configured for the `google-beta`\nTerraform `provider`.\n\nUnlike [google-beta.provider.new](#fn-googlebetanew), this function will not inject the `provider`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withProvider](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withprovider) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `access_approval_custom_endpoint` (`string`): Set the `access_approval_custom_endpoint` field on the resulting object. When `null`, the `access_approval_custom_endpoint` field will be omitted from the resulting object.\n  - `access_context_manager_custom_endpoint` (`string`): Set the `access_context_manager_custom_endpoint` field on the resulting object. When `null`, the `access_context_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `access_token` (`string`): Set the `access_token` field on the resulting object. When `null`, the `access_token` field will be omitted from the resulting object.\n  - `active_directory_custom_endpoint` (`string`): Set the `active_directory_custom_endpoint` field on the resulting object. When `null`, the `active_directory_custom_endpoint` field will be omitted from the resulting object.\n  - `alloydb_custom_endpoint` (`string`): Set the `alloydb_custom_endpoint` field on the resulting object. When `null`, the `alloydb_custom_endpoint` field will be omitted from the resulting object.\n  - `api_gateway_custom_endpoint` (`string`): Set the `api_gateway_custom_endpoint` field on the resulting object. When `null`, the `api_gateway_custom_endpoint` field will be omitted from the resulting object.\n  - `apigee_custom_endpoint` (`string`): Set the `apigee_custom_endpoint` field on the resulting object. When `null`, the `apigee_custom_endpoint` field will be omitted from the resulting object.\n  - `apikeys_custom_endpoint` (`string`): Set the `apikeys_custom_endpoint` field on the resulting object. When `null`, the `apikeys_custom_endpoint` field will be omitted from the resulting object.\n  - `app_engine_custom_endpoint` (`string`): Set the `app_engine_custom_endpoint` field on the resulting object. When `null`, the `app_engine_custom_endpoint` field will be omitted from the resulting object.\n  - `artifact_registry_custom_endpoint` (`string`): Set the `artifact_registry_custom_endpoint` field on the resulting object. When `null`, the `artifact_registry_custom_endpoint` field will be omitted from the resulting object.\n  - `assured_workloads_custom_endpoint` (`string`): Set the `assured_workloads_custom_endpoint` field on the resulting object. When `null`, the `assured_workloads_custom_endpoint` field will be omitted from the resulting object.\n  - `backup_dr_custom_endpoint` (`string`): Set the `backup_dr_custom_endpoint` field on the resulting object. When `null`, the `backup_dr_custom_endpoint` field will be omitted from the resulting object.\n  - `beyondcorp_custom_endpoint` (`string`): Set the `beyondcorp_custom_endpoint` field on the resulting object. When `null`, the `beyondcorp_custom_endpoint` field will be omitted from the resulting object.\n  - `big_query_custom_endpoint` (`string`): Set the `big_query_custom_endpoint` field on the resulting object. When `null`, the `big_query_custom_endpoint` field will be omitted from the resulting object.\n  - `biglake_custom_endpoint` (`string`): Set the `biglake_custom_endpoint` field on the resulting object. When `null`, the `biglake_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_analytics_hub_custom_endpoint` (`string`): Set the `bigquery_analytics_hub_custom_endpoint` field on the resulting object. When `null`, the `bigquery_analytics_hub_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_connection_custom_endpoint` (`string`): Set the `bigquery_connection_custom_endpoint` field on the resulting object. When `null`, the `bigquery_connection_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_data_transfer_custom_endpoint` (`string`): Set the `bigquery_data_transfer_custom_endpoint` field on the resulting object. When `null`, the `bigquery_data_transfer_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_datapolicy_custom_endpoint` (`string`): Set the `bigquery_datapolicy_custom_endpoint` field on the resulting object. When `null`, the `bigquery_datapolicy_custom_endpoint` field will be omitted from the resulting object.\n  - `bigquery_reservation_custom_endpoint` (`string`): Set the `bigquery_reservation_custom_endpoint` field on the resulting object. When `null`, the `bigquery_reservation_custom_endpoint` field will be omitted from the resulting object.\n  - `bigtable_custom_endpoint` (`string`): Set the `bigtable_custom_endpoint` field on the resulting object. When `null`, the `bigtable_custom_endpoint` field will be omitted from the resulting object.\n  - `billing_custom_endpoint` (`string`): Set the `billing_custom_endpoint` field on the resulting object. When `null`, the `billing_custom_endpoint` field will be omitted from the resulting object.\n  - `billing_project` (`string`): Set the `billing_project` field on the resulting object. When `null`, the `billing_project` field will be omitted from the resulting object.\n  - `binary_authorization_custom_endpoint` (`string`): Set the `binary_authorization_custom_endpoint` field on the resulting object. When `null`, the `binary_authorization_custom_endpoint` field will be omitted from the resulting object.\n  - `certificate_manager_custom_endpoint` (`string`): Set the `certificate_manager_custom_endpoint` field on the resulting object. When `null`, the `certificate_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_asset_custom_endpoint` (`string`): Set the `cloud_asset_custom_endpoint` field on the resulting object. When `null`, the `cloud_asset_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_billing_custom_endpoint` (`string`): Set the `cloud_billing_custom_endpoint` field on the resulting object. When `null`, the `cloud_billing_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_build_custom_endpoint` (`string`): Set the `cloud_build_custom_endpoint` field on the resulting object. When `null`, the `cloud_build_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_build_worker_pool_custom_endpoint` (`string`): Set the `cloud_build_worker_pool_custom_endpoint` field on the resulting object. When `null`, the `cloud_build_worker_pool_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_functions_custom_endpoint` (`string`): Set the `cloud_functions_custom_endpoint` field on the resulting object. When `null`, the `cloud_functions_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_identity_custom_endpoint` (`string`): Set the `cloud_identity_custom_endpoint` field on the resulting object. When `null`, the `cloud_identity_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_ids_custom_endpoint` (`string`): Set the `cloud_ids_custom_endpoint` field on the resulting object. When `null`, the `cloud_ids_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_iot_custom_endpoint` (`string`): Set the `cloud_iot_custom_endpoint` field on the resulting object. When `null`, the `cloud_iot_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_resource_manager_custom_endpoint` (`string`): Set the `cloud_resource_manager_custom_endpoint` field on the resulting object. When `null`, the `cloud_resource_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_run_custom_endpoint` (`string`): Set the `cloud_run_custom_endpoint` field on the resulting object. When `null`, the `cloud_run_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_run_v2_custom_endpoint` (`string`): Set the `cloud_run_v2_custom_endpoint` field on the resulting object. When `null`, the `cloud_run_v2_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_scheduler_custom_endpoint` (`string`): Set the `cloud_scheduler_custom_endpoint` field on the resulting object. When `null`, the `cloud_scheduler_custom_endpoint` field will be omitted from the resulting object.\n  - `cloud_tasks_custom_endpoint` (`string`): Set the `cloud_tasks_custom_endpoint` field on the resulting object. When `null`, the `cloud_tasks_custom_endpoint` field will be omitted from the resulting object.\n  - `cloudbuildv2_custom_endpoint` (`string`): Set the `cloudbuildv2_custom_endpoint` field on the resulting object. When `null`, the `cloudbuildv2_custom_endpoint` field will be omitted from the resulting object.\n  - `clouddeploy_custom_endpoint` (`string`): Set the `clouddeploy_custom_endpoint` field on the resulting object. When `null`, the `clouddeploy_custom_endpoint` field will be omitted from the resulting object.\n  - `cloudfunctions2_custom_endpoint` (`string`): Set the `cloudfunctions2_custom_endpoint` field on the resulting object. When `null`, the `cloudfunctions2_custom_endpoint` field will be omitted from the resulting object.\n  - `composer_custom_endpoint` (`string`): Set the `composer_custom_endpoint` field on the resulting object. When `null`, the `composer_custom_endpoint` field will be omitted from the resulting object.\n  - `compute_custom_endpoint` (`string`): Set the `compute_custom_endpoint` field on the resulting object. When `null`, the `compute_custom_endpoint` field will be omitted from the resulting object.\n  - `container_analysis_custom_endpoint` (`string`): Set the `container_analysis_custom_endpoint` field on the resulting object. When `null`, the `container_analysis_custom_endpoint` field will be omitted from the resulting object.\n  - `container_attached_custom_endpoint` (`string`): Set the `container_attached_custom_endpoint` field on the resulting object. When `null`, the `container_attached_custom_endpoint` field will be omitted from the resulting object.\n  - `container_aws_custom_endpoint` (`string`): Set the `container_aws_custom_endpoint` field on the resulting object. When `null`, the `container_aws_custom_endpoint` field will be omitted from the resulting object.\n  - `container_azure_custom_endpoint` (`string`): Set the `container_azure_custom_endpoint` field on the resulting object. When `null`, the `container_azure_custom_endpoint` field will be omitted from the resulting object.\n  - `container_custom_endpoint` (`string`): Set the `container_custom_endpoint` field on the resulting object. When `null`, the `container_custom_endpoint` field will be omitted from the resulting object.\n  - `core_billing_custom_endpoint` (`string`): Set the `core_billing_custom_endpoint` field on the resulting object. When `null`, the `core_billing_custom_endpoint` field will be omitted from the resulting object.\n  - `credentials` (`string`): Set the `credentials` field on the resulting object. When `null`, the `credentials` field will be omitted from the resulting object.\n  - `data_catalog_custom_endpoint` (`string`): Set the `data_catalog_custom_endpoint` field on the resulting object. When `null`, the `data_catalog_custom_endpoint` field will be omitted from the resulting object.\n  - `data_fusion_custom_endpoint` (`string`): Set the `data_fusion_custom_endpoint` field on the resulting object. When `null`, the `data_fusion_custom_endpoint` field will be omitted from the resulting object.\n  - `data_loss_prevention_custom_endpoint` (`string`): Set the `data_loss_prevention_custom_endpoint` field on the resulting object. When `null`, the `data_loss_prevention_custom_endpoint` field will be omitted from the resulting object.\n  - `data_pipeline_custom_endpoint` (`string`): Set the `data_pipeline_custom_endpoint` field on the resulting object. When `null`, the `data_pipeline_custom_endpoint` field will be omitted from the resulting object.\n  - `database_migration_service_custom_endpoint` (`string`): Set the `database_migration_service_custom_endpoint` field on the resulting object. When `null`, the `database_migration_service_custom_endpoint` field will be omitted from the resulting object.\n  - `dataflow_custom_endpoint` (`string`): Set the `dataflow_custom_endpoint` field on the resulting object. When `null`, the `dataflow_custom_endpoint` field will be omitted from the resulting object.\n  - `dataform_custom_endpoint` (`string`): Set the `dataform_custom_endpoint` field on the resulting object. When `null`, the `dataform_custom_endpoint` field will be omitted from the resulting object.\n  - `dataplex_custom_endpoint` (`string`): Set the `dataplex_custom_endpoint` field on the resulting object. When `null`, the `dataplex_custom_endpoint` field will be omitted from the resulting object.\n  - `dataproc_custom_endpoint` (`string`): Set the `dataproc_custom_endpoint` field on the resulting object. When `null`, the `dataproc_custom_endpoint` field will be omitted from the resulting object.\n  - `dataproc_metastore_custom_endpoint` (`string`): Set the `dataproc_metastore_custom_endpoint` field on the resulting object. When `null`, the `dataproc_metastore_custom_endpoint` field will be omitted from the resulting object.\n  - `datastore_custom_endpoint` (`string`): Set the `datastore_custom_endpoint` field on the resulting object. When `null`, the `datastore_custom_endpoint` field will be omitted from the resulting object.\n  - `datastream_custom_endpoint` (`string`): Set the `datastream_custom_endpoint` field on the resulting object. When `null`, the `datastream_custom_endpoint` field will be omitted from the resulting object.\n  - `deployment_manager_custom_endpoint` (`string`): Set the `deployment_manager_custom_endpoint` field on the resulting object. When `null`, the `deployment_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `dialogflow_custom_endpoint` (`string`): Set the `dialogflow_custom_endpoint` field on the resulting object. When `null`, the `dialogflow_custom_endpoint` field will be omitted from the resulting object.\n  - `dialogflow_cx_custom_endpoint` (`string`): Set the `dialogflow_cx_custom_endpoint` field on the resulting object. When `null`, the `dialogflow_cx_custom_endpoint` field will be omitted from the resulting object.\n  - `dns_custom_endpoint` (`string`): Set the `dns_custom_endpoint` field on the resulting object. When `null`, the `dns_custom_endpoint` field will be omitted from the resulting object.\n  - `document_ai_custom_endpoint` (`string`): Set the `document_ai_custom_endpoint` field on the resulting object. When `null`, the `document_ai_custom_endpoint` field will be omitted from the resulting object.\n  - `document_ai_warehouse_custom_endpoint` (`string`): Set the `document_ai_warehouse_custom_endpoint` field on the resulting object. When `null`, the `document_ai_warehouse_custom_endpoint` field will be omitted from the resulting object.\n  - `essential_contacts_custom_endpoint` (`string`): Set the `essential_contacts_custom_endpoint` field on the resulting object. When `null`, the `essential_contacts_custom_endpoint` field will be omitted from the resulting object.\n  - `eventarc_custom_endpoint` (`string`): Set the `eventarc_custom_endpoint` field on the resulting object. When `null`, the `eventarc_custom_endpoint` field will be omitted from the resulting object.\n  - `filestore_custom_endpoint` (`string`): Set the `filestore_custom_endpoint` field on the resulting object. When `null`, the `filestore_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_custom_endpoint` (`string`): Set the `firebase_custom_endpoint` field on the resulting object. When `null`, the `firebase_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_database_custom_endpoint` (`string`): Set the `firebase_database_custom_endpoint` field on the resulting object. When `null`, the `firebase_database_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_extensions_custom_endpoint` (`string`): Set the `firebase_extensions_custom_endpoint` field on the resulting object. When `null`, the `firebase_extensions_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_hosting_custom_endpoint` (`string`): Set the `firebase_hosting_custom_endpoint` field on the resulting object. When `null`, the `firebase_hosting_custom_endpoint` field will be omitted from the resulting object.\n  - `firebase_storage_custom_endpoint` (`string`): Set the `firebase_storage_custom_endpoint` field on the resulting object. When `null`, the `firebase_storage_custom_endpoint` field will be omitted from the resulting object.\n  - `firebaserules_custom_endpoint` (`string`): Set the `firebaserules_custom_endpoint` field on the resulting object. When `null`, the `firebaserules_custom_endpoint` field will be omitted from the resulting object.\n  - `firestore_custom_endpoint` (`string`): Set the `firestore_custom_endpoint` field on the resulting object. When `null`, the `firestore_custom_endpoint` field will be omitted from the resulting object.\n  - `game_services_custom_endpoint` (`string`): Set the `game_services_custom_endpoint` field on the resulting object. When `null`, the `game_services_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_backup_custom_endpoint` (`string`): Set the `gke_backup_custom_endpoint` field on the resulting object. When `null`, the `gke_backup_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_hub2_custom_endpoint` (`string`): Set the `gke_hub2_custom_endpoint` field on the resulting object. When `null`, the `gke_hub2_custom_endpoint` field will be omitted from the resulting object.\n  - `gke_hub_custom_endpoint` (`string`): Set the `gke_hub_custom_endpoint` field on the resulting object. When `null`, the `gke_hub_custom_endpoint` field will be omitted from the resulting object.\n  - `gkehub_feature_custom_endpoint` (`string`): Set the `gkehub_feature_custom_endpoint` field on the resulting object. When `null`, the `gkehub_feature_custom_endpoint` field will be omitted from the resulting object.\n  - `gkeonprem_custom_endpoint` (`string`): Set the `gkeonprem_custom_endpoint` field on the resulting object. When `null`, the `gkeonprem_custom_endpoint` field will be omitted from the resulting object.\n  - `healthcare_custom_endpoint` (`string`): Set the `healthcare_custom_endpoint` field on the resulting object. When `null`, the `healthcare_custom_endpoint` field will be omitted from the resulting object.\n  - `iam2_custom_endpoint` (`string`): Set the `iam2_custom_endpoint` field on the resulting object. When `null`, the `iam2_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_beta_custom_endpoint` (`string`): Set the `iam_beta_custom_endpoint` field on the resulting object. When `null`, the `iam_beta_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_credentials_custom_endpoint` (`string`): Set the `iam_credentials_custom_endpoint` field on the resulting object. When `null`, the `iam_credentials_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_custom_endpoint` (`string`): Set the `iam_custom_endpoint` field on the resulting object. When `null`, the `iam_custom_endpoint` field will be omitted from the resulting object.\n  - `iam_workforce_pool_custom_endpoint` (`string`): Set the `iam_workforce_pool_custom_endpoint` field on the resulting object. When `null`, the `iam_workforce_pool_custom_endpoint` field will be omitted from the resulting object.\n  - `iap_custom_endpoint` (`string`): Set the `iap_custom_endpoint` field on the resulting object. When `null`, the `iap_custom_endpoint` field will be omitted from the resulting object.\n  - `identity_platform_custom_endpoint` (`string`): Set the `identity_platform_custom_endpoint` field on the resulting object. When `null`, the `identity_platform_custom_endpoint` field will be omitted from the resulting object.\n  - `impersonate_service_account` (`string`): Set the `impersonate_service_account` field on the resulting object. When `null`, the `impersonate_service_account` field will be omitted from the resulting object.\n  - `impersonate_service_account_delegates` (`list`): Set the `impersonate_service_account_delegates` field on the resulting object. When `null`, the `impersonate_service_account_delegates` field will be omitted from the resulting object.\n  - `kms_custom_endpoint` (`string`): Set the `kms_custom_endpoint` field on the resulting object. When `null`, the `kms_custom_endpoint` field will be omitted from the resulting object.\n  - `logging_custom_endpoint` (`string`): Set the `logging_custom_endpoint` field on the resulting object. When `null`, the `logging_custom_endpoint` field will be omitted from the resulting object.\n  - `looker_custom_endpoint` (`string`): Set the `looker_custom_endpoint` field on the resulting object. When `null`, the `looker_custom_endpoint` field will be omitted from the resulting object.\n  - `memcache_custom_endpoint` (`string`): Set the `memcache_custom_endpoint` field on the resulting object. When `null`, the `memcache_custom_endpoint` field will be omitted from the resulting object.\n  - `ml_engine_custom_endpoint` (`string`): Set the `ml_engine_custom_endpoint` field on the resulting object. When `null`, the `ml_engine_custom_endpoint` field will be omitted from the resulting object.\n  - `monitoring_custom_endpoint` (`string`): Set the `monitoring_custom_endpoint` field on the resulting object. When `null`, the `monitoring_custom_endpoint` field will be omitted from the resulting object.\n  - `network_connectivity_custom_endpoint` (`string`): Set the `network_connectivity_custom_endpoint` field on the resulting object. When `null`, the `network_connectivity_custom_endpoint` field will be omitted from the resulting object.\n  - `network_management_custom_endpoint` (`string`): Set the `network_management_custom_endpoint` field on the resulting object. When `null`, the `network_management_custom_endpoint` field will be omitted from the resulting object.\n  - `network_security_custom_endpoint` (`string`): Set the `network_security_custom_endpoint` field on the resulting object. When `null`, the `network_security_custom_endpoint` field will be omitted from the resulting object.\n  - `network_services_custom_endpoint` (`string`): Set the `network_services_custom_endpoint` field on the resulting object. When `null`, the `network_services_custom_endpoint` field will be omitted from the resulting object.\n  - `notebooks_custom_endpoint` (`string`): Set the `notebooks_custom_endpoint` field on the resulting object. When `null`, the `notebooks_custom_endpoint` field will be omitted from the resulting object.\n  - `org_policy_custom_endpoint` (`string`): Set the `org_policy_custom_endpoint` field on the resulting object. When `null`, the `org_policy_custom_endpoint` field will be omitted from the resulting object.\n  - `os_config_custom_endpoint` (`string`): Set the `os_config_custom_endpoint` field on the resulting object. When `null`, the `os_config_custom_endpoint` field will be omitted from the resulting object.\n  - `os_login_custom_endpoint` (`string`): Set the `os_login_custom_endpoint` field on the resulting object. When `null`, the `os_login_custom_endpoint` field will be omitted from the resulting object.\n  - `privateca_custom_endpoint` (`string`): Set the `privateca_custom_endpoint` field on the resulting object. When `null`, the `privateca_custom_endpoint` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `public_ca_custom_endpoint` (`string`): Set the `public_ca_custom_endpoint` field on the resulting object. When `null`, the `public_ca_custom_endpoint` field will be omitted from the resulting object.\n  - `pubsub_custom_endpoint` (`string`): Set the `pubsub_custom_endpoint` field on the resulting object. When `null`, the `pubsub_custom_endpoint` field will be omitted from the resulting object.\n  - `pubsub_lite_custom_endpoint` (`string`): Set the `pubsub_lite_custom_endpoint` field on the resulting object. When `null`, the `pubsub_lite_custom_endpoint` field will be omitted from the resulting object.\n  - `recaptcha_enterprise_custom_endpoint` (`string`): Set the `recaptcha_enterprise_custom_endpoint` field on the resulting object. When `null`, the `recaptcha_enterprise_custom_endpoint` field will be omitted from the resulting object.\n  - `redis_custom_endpoint` (`string`): Set the `redis_custom_endpoint` field on the resulting object. When `null`, the `redis_custom_endpoint` field will be omitted from the resulting object.\n  - `region` (`string`): Set the `region` field on the resulting object. When `null`, the `region` field will be omitted from the resulting object.\n  - `request_reason` (`string`): Set the `request_reason` field on the resulting object. When `null`, the `request_reason` field will be omitted from the resulting object.\n  - `request_timeout` (`string`): Set the `request_timeout` field on the resulting object. When `null`, the `request_timeout` field will be omitted from the resulting object.\n  - `resource_manager_custom_endpoint` (`string`): Set the `resource_manager_custom_endpoint` field on the resulting object. When `null`, the `resource_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `resource_manager_v3_custom_endpoint` (`string`): Set the `resource_manager_v3_custom_endpoint` field on the resulting object. When `null`, the `resource_manager_v3_custom_endpoint` field will be omitted from the resulting object.\n  - `runtime_config_custom_endpoint` (`string`): Set the `runtime_config_custom_endpoint` field on the resulting object. When `null`, the `runtime_config_custom_endpoint` field will be omitted from the resulting object.\n  - `runtimeconfig_custom_endpoint` (`string`): Set the `runtimeconfig_custom_endpoint` field on the resulting object. When `null`, the `runtimeconfig_custom_endpoint` field will be omitted from the resulting object.\n  - `scopes` (`list`): Set the `scopes` field on the resulting object. When `null`, the `scopes` field will be omitted from the resulting object.\n  - `secret_manager_custom_endpoint` (`string`): Set the `secret_manager_custom_endpoint` field on the resulting object. When `null`, the `secret_manager_custom_endpoint` field will be omitted from the resulting object.\n  - `security_center_custom_endpoint` (`string`): Set the `security_center_custom_endpoint` field on the resulting object. When `null`, the `security_center_custom_endpoint` field will be omitted from the resulting object.\n  - `security_scanner_custom_endpoint` (`string`): Set the `security_scanner_custom_endpoint` field on the resulting object. When `null`, the `security_scanner_custom_endpoint` field will be omitted from the resulting object.\n  - `service_directory_custom_endpoint` (`string`): Set the `service_directory_custom_endpoint` field on the resulting object. When `null`, the `service_directory_custom_endpoint` field will be omitted from the resulting object.\n  - `service_management_custom_endpoint` (`string`): Set the `service_management_custom_endpoint` field on the resulting object. When `null`, the `service_management_custom_endpoint` field will be omitted from the resulting object.\n  - `service_networking_custom_endpoint` (`string`): Set the `service_networking_custom_endpoint` field on the resulting object. When `null`, the `service_networking_custom_endpoint` field will be omitted from the resulting object.\n  - `service_usage_custom_endpoint` (`string`): Set the `service_usage_custom_endpoint` field on the resulting object. When `null`, the `service_usage_custom_endpoint` field will be omitted from the resulting object.\n  - `source_repo_custom_endpoint` (`string`): Set the `source_repo_custom_endpoint` field on the resulting object. When `null`, the `source_repo_custom_endpoint` field will be omitted from the resulting object.\n  - `spanner_custom_endpoint` (`string`): Set the `spanner_custom_endpoint` field on the resulting object. When `null`, the `spanner_custom_endpoint` field will be omitted from the resulting object.\n  - `sql_custom_endpoint` (`string`): Set the `sql_custom_endpoint` field on the resulting object. When `null`, the `sql_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_custom_endpoint` (`string`): Set the `storage_custom_endpoint` field on the resulting object. When `null`, the `storage_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_insights_custom_endpoint` (`string`): Set the `storage_insights_custom_endpoint` field on the resulting object. When `null`, the `storage_insights_custom_endpoint` field will be omitted from the resulting object.\n  - `storage_transfer_custom_endpoint` (`string`): Set the `storage_transfer_custom_endpoint` field on the resulting object. When `null`, the `storage_transfer_custom_endpoint` field will be omitted from the resulting object.\n  - `tags_custom_endpoint` (`string`): Set the `tags_custom_endpoint` field on the resulting object. When `null`, the `tags_custom_endpoint` field will be omitted from the resulting object.\n  - `tags_location_custom_endpoint` (`string`): Set the `tags_location_custom_endpoint` field on the resulting object. When `null`, the `tags_location_custom_endpoint` field will be omitted from the resulting object.\n  - `tpu_custom_endpoint` (`string`): Set the `tpu_custom_endpoint` field on the resulting object. When `null`, the `tpu_custom_endpoint` field will be omitted from the resulting object.\n  - `user_project_override` (`bool`): Set the `user_project_override` field on the resulting object. When `null`, the `user_project_override` field will be omitted from the resulting object.\n  - `vertex_ai_custom_endpoint` (`string`): Set the `vertex_ai_custom_endpoint` field on the resulting object. When `null`, the `vertex_ai_custom_endpoint` field will be omitted from the resulting object.\n  - `vmwareengine_custom_endpoint` (`string`): Set the `vmwareengine_custom_endpoint` field on the resulting object. When `null`, the `vmwareengine_custom_endpoint` field will be omitted from the resulting object.\n  - `vpc_access_custom_endpoint` (`string`): Set the `vpc_access_custom_endpoint` field on the resulting object. When `null`, the `vpc_access_custom_endpoint` field will be omitted from the resulting object.\n  - `workflows_custom_endpoint` (`string`): Set the `workflows_custom_endpoint` field on the resulting object. When `null`, the `workflows_custom_endpoint` field will be omitted from the resulting object.\n  - `workstations_custom_endpoint` (`string`): Set the `workstations_custom_endpoint` field on the resulting object. When `null`, the `workstations_custom_endpoint` field will be omitted from the resulting object.\n  - `zone` (`string`): Set the `zone` field on the resulting object. When `null`, the `zone` field will be omitted from the resulting object.\n  - `batching` (`list[obj]`): Set the `batching` field on the resulting object. When `null`, the `batching` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.provider.batching.new](#fn-googlebetabatchingnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withProvider](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withprovider) to construct a new `google-beta` provider\n  configuration into the root Terraform configuration.\n', args=[]),
   newAttrs(
     access_approval_custom_endpoint=null,
     access_context_manager_custom_endpoint=null,
@@ -361,6 +365,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     data_catalog_custom_endpoint=null,
     data_fusion_custom_endpoint=null,
     data_loss_prevention_custom_endpoint=null,
+    data_pipeline_custom_endpoint=null,
     database_migration_service_custom_endpoint=null,
     dataflow_custom_endpoint=null,
     dataform_custom_endpoint=null,
@@ -441,6 +446,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     spanner_custom_endpoint=null,
     sql_custom_endpoint=null,
     storage_custom_endpoint=null,
+    storage_insights_custom_endpoint=null,
     storage_transfer_custom_endpoint=null,
     tags_custom_endpoint=null,
     tags_location_custom_endpoint=null,
@@ -507,6 +513,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     data_catalog_custom_endpoint: data_catalog_custom_endpoint,
     data_fusion_custom_endpoint: data_fusion_custom_endpoint,
     data_loss_prevention_custom_endpoint: data_loss_prevention_custom_endpoint,
+    data_pipeline_custom_endpoint: data_pipeline_custom_endpoint,
     database_migration_service_custom_endpoint: database_migration_service_custom_endpoint,
     dataflow_custom_endpoint: dataflow_custom_endpoint,
     dataform_custom_endpoint: dataform_custom_endpoint,
@@ -587,6 +594,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     spanner_custom_endpoint: spanner_custom_endpoint,
     sql_custom_endpoint: sql_custom_endpoint,
     storage_custom_endpoint: storage_custom_endpoint,
+    storage_insights_custom_endpoint: storage_insights_custom_endpoint,
     storage_transfer_custom_endpoint: storage_transfer_custom_endpoint,
     tags_custom_endpoint: tags_custom_endpoint,
     tags_location_custom_endpoint: tags_location_custom_endpoint,
diff --git a/4.x/_gen/resources/apigee_target_server.libsonnet b/4.x/_gen/resources/apigee_target_server.libsonnet
new file mode 100644
index 0000000..2406e28
--- /dev/null
+++ b/4.x/_gen/resources/apigee_target_server.libsonnet
@@ -0,0 +1,212 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_apigee_target_server', url='', help='`google_apigee_target_server` represents the `google-beta_google_apigee_target_server` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.google_apigee_target_server.new` injects a new `google-beta_google_apigee_target_server` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_apigee_target_server.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_apigee_target_server` using the reference:\n\n    $._ref.google-beta_google_apigee_target_server.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_apigee_target_server.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): A human-readable description of this TargetServer. When `null`, the `description` field will be omitted from the resulting object.\n  - `env_id` (`string`): The Apigee environment group associated with the Apigee environment,\nin the format \u0026#39;organizations/{{org_name}}/environments/{{env_name}}\u0026#39;.\n  - `host` (`string`): The host name this target connects to. Value must be a valid hostname as described by RFC-1123.\n  - `is_enabled` (`bool`): Enabling/disabling a TargetServer is useful when TargetServers are used in load balancing configurations, and one or more TargetServers need to taken out of rotation periodically. Defaults to true. When `null`, the `is_enabled` field will be omitted from the resulting object.\n  - `name` (`string`): The resource id of this reference. Values must match the regular expression [\\w\\s-.]\u0026#43;.\n  - `port` (`number`): The port number this target connects to on the given host. Value must be between 1 and 65535, inclusive.\n  - `protocol` (`string`): Immutable. The protocol used by this TargetServer. Possible values: [\u0026#34;HTTP\u0026#34;, \u0026#34;HTTP2\u0026#34;, \u0026#34;GRPC_TARGET\u0026#34;, \u0026#34;GRPC\u0026#34;, \u0026#34;EXTERNAL_CALLOUT\u0026#34;] When `null`, the `protocol` field will be omitted from the resulting object.\n  - `s_sl_info` (`list[obj]`): Specifies TLS configuration info for this TargetServer. The JSON name is sSLInfo for legacy/backwards compatibility reasons -- Edge originally supported SSL, and the name is still used for TLS configuration. When `null`, the `s_sl_info` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.s_sl_info.new](#fn-s_sl_infonew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    env_id,
+    host,
+    name,
+    port,
+    description=null,
+    is_enabled=null,
+    protocol=null,
+    s_sl_info=null,
+    timeouts=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_apigee_target_server',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      description=description,
+      env_id=env_id,
+      host=host,
+      is_enabled=is_enabled,
+      name=name,
+      port=port,
+      protocol=protocol,
+      s_sl_info=s_sl_info,
+      timeouts=timeouts
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_apigee_target_server.newAttrs` constructs a new object with attributes and blocks configured for the `google_apigee_target_server`\nTerraform resource.\n\nUnlike [google-beta.google_apigee_target_server.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): A human-readable description of this TargetServer. When `null`, the `description` field will be omitted from the resulting object.\n  - `env_id` (`string`): The Apigee environment group associated with the Apigee environment,\nin the format 'organizations/{{org_name}}/environments/{{env_name}}'.\n  - `host` (`string`): The host name this target connects to. Value must be a valid hostname as described by RFC-1123.\n  - `is_enabled` (`bool`): Enabling/disabling a TargetServer is useful when TargetServers are used in load balancing configurations, and one or more TargetServers need to taken out of rotation periodically. Defaults to true. When `null`, the `is_enabled` field will be omitted from the resulting object.\n  - `name` (`string`): The resource id of this reference. Values must match the regular expression [\\w\\s-.]+.\n  - `port` (`number`): The port number this target connects to on the given host. Value must be between 1 and 65535, inclusive.\n  - `protocol` (`string`): Immutable. The protocol used by this TargetServer. Possible values: ["HTTP", "HTTP2", "GRPC_TARGET", "GRPC", "EXTERNAL_CALLOUT"] When `null`, the `protocol` field will be omitted from the resulting object.\n  - `s_sl_info` (`list[obj]`): Specifies TLS configuration info for this TargetServer. The JSON name is sSLInfo for legacy/backwards compatibility reasons -- Edge originally supported SSL, and the name is still used for TLS configuration. When `null`, the `s_sl_info` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.s_sl_info.new](#fn-s_sl_infonew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_apigee_target_server` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    env_id,
+    host,
+    name,
+    port,
+    description=null,
+    is_enabled=null,
+    protocol=null,
+    s_sl_info=null,
+    timeouts=null
+  ):: std.prune(a={
+    description: description,
+    env_id: env_id,
+    host: host,
+    is_enabled: is_enabled,
+    name: name,
+    port: port,
+    protocol: protocol,
+    s_sl_info: s_sl_info,
+    timeouts: timeouts,
+  }),
+  s_sl_info:: {
+    common_name:: {
+      '#new':: d.fn(help='\n`google-beta.google_apigee_target_server.s_sl_info.common_name.new` constructs a new object with attributes and blocks configured for the `common_name`\nTerraform sub block.\n\n\n\n**Args**:\n  - `value` (`string`): The TLS Common Name string of the certificate. When `null`, the `value` field will be omitted from the resulting object.\n  - `wildcard_match` (`bool`): Indicates whether the cert should be matched against as a wildcard cert. When `null`, the `wildcard_match` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `common_name` sub block.\n', args=[]),
+      new(
+        value=null,
+        wildcard_match=null
+      ):: std.prune(a={
+        value: value,
+        wildcard_match: wildcard_match,
+      }),
+    },
+    '#new':: d.fn(help='\n`google-beta.google_apigee_target_server.s_sl_info.new` constructs a new object with attributes and blocks configured for the `s_sl_info`\nTerraform sub block.\n\n\n\n**Args**:\n  - `ciphers` (`list`): The SSL/TLS cipher suites to be used. For programmable proxies, it must be one of the cipher suite names listed in: http://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#ciphersuites. For configurable proxies, it must follow the configuration specified in: https://commondatastorage.googleapis.com/chromium-boringssl-docs/ssl.h.html#Cipher-suite-configuration. This setting has no effect for configurable proxies when negotiating TLS 1.3. When `null`, the `ciphers` field will be omitted from the resulting object.\n  - `client_auth_enabled` (`bool`): Enables two-way TLS. When `null`, the `client_auth_enabled` field will be omitted from the resulting object.\n  - `enabled` (`bool`): Enables TLS. If false, neither one-way nor two-way TLS will be enabled.\n  - `ignore_validation_errors` (`bool`): If true, Edge ignores TLS certificate errors. Valid when configuring TLS for target servers and target endpoints, and when configuring virtual hosts that use 2-way TLS. When used with a target endpoint/target server, if the backend system uses SNI and returns a cert with a subject Distinguished Name (DN) that does not match the hostname, there is no way to ignore the error and the connection fails. When `null`, the `ignore_validation_errors` field will be omitted from the resulting object.\n  - `key_alias` (`string`): Required if clientAuthEnabled is true. The resource ID for the alias containing the private key and cert. When `null`, the `key_alias` field will be omitted from the resulting object.\n  - `key_store` (`string`): Required if clientAuthEnabled is true. The resource ID of the keystore. When `null`, the `key_store` field will be omitted from the resulting object.\n  - `protocols` (`list`): The TLS versioins to be used. When `null`, the `protocols` field will be omitted from the resulting object.\n  - `trust_store` (`string`): The resource ID of the truststore. When `null`, the `trust_store` field will be omitted from the resulting object.\n  - `common_name` (`list[obj]`): The TLS Common Name of the certificate. When `null`, the `common_name` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.s_sl_info.common_name.new](#fn-s_sl_infocommon_namenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `s_sl_info` sub block.\n', args=[]),
+    new(
+      enabled,
+      ciphers=null,
+      client_auth_enabled=null,
+      common_name=null,
+      ignore_validation_errors=null,
+      key_alias=null,
+      key_store=null,
+      protocols=null,
+      trust_store=null
+    ):: std.prune(a={
+      ciphers: ciphers,
+      client_auth_enabled: client_auth_enabled,
+      common_name: common_name,
+      enabled: enabled,
+      ignore_validation_errors: ignore_validation_errors,
+      key_alias: key_alias,
+      key_store: key_store,
+      protocols: protocols,
+      trust_store: trust_store,
+    }),
+  },
+  timeouts:: {
+    '#new':: d.fn(help='\n`google-beta.google_apigee_target_server.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
+    new(
+      create=null,
+      delete=null,
+      update=null
+    ):: std.prune(a={
+      create: create,
+      delete: delete,
+      update: update,
+    }),
+  },
+  '#withDescription':: d.fn(help='`google-beta.string.withDescription` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the description field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `description` field.\n', args=[]),
+  withDescription(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          description: value,
+        },
+      },
+    },
+  },
+  '#withEnvId':: d.fn(help='`google-beta.string.withEnvId` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the env_id field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `env_id` field.\n', args=[]),
+  withEnvId(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          env_id: value,
+        },
+      },
+    },
+  },
+  '#withHost':: d.fn(help='`google-beta.string.withHost` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the host field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `host` field.\n', args=[]),
+  withHost(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          host: value,
+        },
+      },
+    },
+  },
+  '#withIsEnabled':: d.fn(help='`google-beta.bool.withIsEnabled` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the is_enabled field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `is_enabled` field.\n', args=[]),
+  withIsEnabled(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          is_enabled: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withPort':: d.fn(help='`google-beta.number.withPort` constructs a mixin object that can be merged into the `number`\nTerraform resource block to set or update the port field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`number`): The value to set for the `port` field.\n', args=[]),
+  withPort(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          port: value,
+        },
+      },
+    },
+  },
+  '#withProtocol':: d.fn(help='`google-beta.string.withProtocol` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the protocol field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `protocol` field.\n', args=[]),
+  withProtocol(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          protocol: value,
+        },
+      },
+    },
+  },
+  '#withSSlInfo':: d.fn(help='`google-beta.list[obj].withSSlInfo` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the s_sl_info field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withSSlInfoMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `s_sl_info` field.\n', args=[]),
+  withSSlInfo(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          s_sl_info: value,
+        },
+      },
+    },
+  },
+  '#withSSlInfoMixin':: d.fn(help='`google-beta.list[obj].withSSlInfoMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the s_sl_info field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withSSlInfo](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `s_sl_info` field.\n', args=[]),
+  withSSlInfoMixin(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          s_sl_info+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withTimeouts':: d.fn(help='`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeouts(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          timeouts: value,
+        },
+      },
+    },
+  },
+  '#withTimeoutsMixin':: d.fn(help='`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will merge the passed in value to the existing map. If you wish\nto instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeoutsMixin(resourceLabel, value): {
+    resource+: {
+      google_apigee_target_server+: {
+        [resourceLabel]+: {
+          timeouts+: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/biglake_table.libsonnet b/4.x/_gen/resources/biglake_table.libsonnet
new file mode 100644
index 0000000..7fd8c2b
--- /dev/null
+++ b/4.x/_gen/resources/biglake_table.libsonnet
@@ -0,0 +1,146 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_biglake_table', url='', help='`google_biglake_table` represents the `google-beta_google_biglake_table` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  hive_options:: {
+    '#new':: d.fn(help='\n`google-beta.google_biglake_table.hive_options.new` constructs a new object with attributes and blocks configured for the `hive_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `parameters` (`obj`): Stores user supplied Hive table parameters. An object containing a\nlist of "key": value pairs.\nExample: { "name": "wrench", "mass": "1.3kg", "count": "3" }. When `null`, the `parameters` field will be omitted from the resulting object.\n  - `table_type` (`string`): Hive table type. For example, MANAGED_TABLE, EXTERNAL_TABLE. When `null`, the `table_type` field will be omitted from the resulting object.\n  - `storage_descriptor` (`list[obj]`): Stores physical storage information on the data. When `null`, the `storage_descriptor` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.hive_options.storage_descriptor.new](#fn-hive_optionsstorage_descriptornew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `hive_options` sub block.\n', args=[]),
+    new(
+      parameters=null,
+      storage_descriptor=null,
+      table_type=null
+    ):: std.prune(a={
+      parameters: parameters,
+      storage_descriptor: storage_descriptor,
+      table_type: table_type,
+    }),
+    storage_descriptor:: {
+      '#new':: d.fn(help='\n`google-beta.google_biglake_table.hive_options.storage_descriptor.new` constructs a new object with attributes and blocks configured for the `storage_descriptor`\nTerraform sub block.\n\n\n\n**Args**:\n  - `input_format` (`string`): The fully qualified Java class name of the input format. When `null`, the `input_format` field will be omitted from the resulting object.\n  - `location_uri` (`string`): Cloud Storage folder URI where the table data is stored, starting with "gs://". When `null`, the `location_uri` field will be omitted from the resulting object.\n  - `output_format` (`string`): The fully qualified Java class name of the output format. When `null`, the `output_format` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `storage_descriptor` sub block.\n', args=[]),
+      new(
+        input_format=null,
+        location_uri=null,
+        output_format=null
+      ):: std.prune(a={
+        input_format: input_format,
+        location_uri: location_uri,
+        output_format: output_format,
+      }),
+    },
+  },
+  '#new':: d.fn(help="\n`google-beta.google_biglake_table.new` injects a new `google-beta_google_biglake_table` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_biglake_table.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_biglake_table` using the reference:\n\n    $._ref.google-beta_google_biglake_table.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_biglake_table.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `database` (`string`): The id of the parent database. When `null`, the `database` field will be omitted from the resulting object.\n  - `name` (`string`): Output only. The name of the Table. Format:\nprojects/{project_id_or_number}/locations/{locationId}/catalogs/{catalogId}/databases/{databaseId}/tables/{tableId}\n  - `type` (`string`): The database type. Possible values: [\u0026#34;HIVE\u0026#34;] When `null`, the `type` field will be omitted from the resulting object.\n  - `hive_options` (`list[obj]`): Options of a Hive table. When `null`, the `hive_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.hive_options.new](#fn-hive_optionsnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    name,
+    database=null,
+    hive_options=null,
+    timeouts=null,
+    type=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_biglake_table',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      database=database,
+      hive_options=hive_options,
+      name=name,
+      timeouts=timeouts,
+      type=type
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_biglake_table.newAttrs` constructs a new object with attributes and blocks configured for the `google_biglake_table`\nTerraform resource.\n\nUnlike [google-beta.google_biglake_table.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `database` (`string`): The id of the parent database. When `null`, the `database` field will be omitted from the resulting object.\n  - `name` (`string`): Output only. The name of the Table. Format:\nprojects/{project_id_or_number}/locations/{locationId}/catalogs/{catalogId}/databases/{databaseId}/tables/{tableId}\n  - `type` (`string`): The database type. Possible values: ["HIVE"] When `null`, the `type` field will be omitted from the resulting object.\n  - `hive_options` (`list[obj]`): Options of a Hive table. When `null`, the `hive_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.hive_options.new](#fn-hive_optionsnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_biglake_table` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    database=null,
+    hive_options=null,
+    timeouts=null,
+    type=null
+  ):: std.prune(a={
+    database: database,
+    hive_options: hive_options,
+    name: name,
+    timeouts: timeouts,
+    type: type,
+  }),
+  timeouts:: {
+    '#new':: d.fn(help='\n`google-beta.google_biglake_table.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
+    new(
+      create=null,
+      delete=null,
+      update=null
+    ):: std.prune(a={
+      create: create,
+      delete: delete,
+      update: update,
+    }),
+  },
+  '#withDatabase':: d.fn(help='`google-beta.string.withDatabase` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the database field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `database` field.\n', args=[]),
+  withDatabase(resourceLabel, value): {
+    resource+: {
+      google_biglake_table+: {
+        [resourceLabel]+: {
+          database: value,
+        },
+      },
+    },
+  },
+  '#withHiveOptions':: d.fn(help='`google-beta.list[obj].withHiveOptions` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the hive_options field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withHiveOptionsMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `hive_options` field.\n', args=[]),
+  withHiveOptions(resourceLabel, value): {
+    resource+: {
+      google_biglake_table+: {
+        [resourceLabel]+: {
+          hive_options: value,
+        },
+      },
+    },
+  },
+  '#withHiveOptionsMixin':: d.fn(help='`google-beta.list[obj].withHiveOptionsMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the hive_options field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withHiveOptions](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `hive_options` field.\n', args=[]),
+  withHiveOptionsMixin(resourceLabel, value): {
+    resource+: {
+      google_biglake_table+: {
+        [resourceLabel]+: {
+          hive_options+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(resourceLabel, value): {
+    resource+: {
+      google_biglake_table+: {
+        [resourceLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withTimeouts':: d.fn(help='`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeouts(resourceLabel, value): {
+    resource+: {
+      google_biglake_table+: {
+        [resourceLabel]+: {
+          timeouts: value,
+        },
+      },
+    },
+  },
+  '#withTimeoutsMixin':: d.fn(help='`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will merge the passed in value to the existing map. If you wish\nto instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeoutsMixin(resourceLabel, value): {
+    resource+: {
+      google_biglake_table+: {
+        [resourceLabel]+: {
+          timeouts+: value,
+        },
+      },
+    },
+  },
+  '#withType':: d.fn(help='`google-beta.string.withType` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the type field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `type` field.\n', args=[]),
+  withType(resourceLabel, value): {
+    resource+: {
+      google_biglake_table+: {
+        [resourceLabel]+: {
+          type: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/bigquery_table.libsonnet b/4.x/_gen/resources/bigquery_table.libsonnet
index db64319..16fced8 100644
--- a/4.x/_gen/resources/bigquery_table.libsonnet
+++ b/4.x/_gen/resources/bigquery_table.libsonnet
@@ -119,18 +119,20 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     },
   },
   materialized_view:: {
-    '#new':: d.fn(help='\n`google-beta.google_bigquery_table.materialized_view.new` constructs a new object with attributes and blocks configured for the `materialized_view`\nTerraform sub block.\n\n\n\n**Args**:\n  - `enable_refresh` (`bool`): Specifies if BigQuery should automatically refresh materialized view when the base table is updated. The default is true. When `null`, the `enable_refresh` field will be omitted from the resulting object.\n  - `query` (`string`): A query whose result is persisted.\n  - `refresh_interval_ms` (`number`): Specifies maximum frequency at which this materialized view will be refreshed. The default is 1800000 When `null`, the `refresh_interval_ms` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `materialized_view` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_bigquery_table.materialized_view.new` constructs a new object with attributes and blocks configured for the `materialized_view`\nTerraform sub block.\n\n\n\n**Args**:\n  - `allow_non_incremental_definition` (`bool`): Allow non incremental materialized view definition. The default value is false. When `null`, the `allow_non_incremental_definition` field will be omitted from the resulting object.\n  - `enable_refresh` (`bool`): Specifies if BigQuery should automatically refresh materialized view when the base table is updated. The default is true. When `null`, the `enable_refresh` field will be omitted from the resulting object.\n  - `query` (`string`): A query whose result is persisted.\n  - `refresh_interval_ms` (`number`): Specifies maximum frequency at which this materialized view will be refreshed. The default is 1800000 When `null`, the `refresh_interval_ms` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `materialized_view` sub block.\n', args=[]),
     new(
       query,
+      allow_non_incremental_definition=null,
       enable_refresh=null,
       refresh_interval_ms=null
     ):: std.prune(a={
+      allow_non_incremental_definition: allow_non_incremental_definition,
       enable_refresh: enable_refresh,
       query: query,
       refresh_interval_ms: refresh_interval_ms,
     }),
   },
-  '#new':: d.fn(help="\n`google-beta.google_bigquery_table.new` injects a new `google-beta_google_bigquery_table` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_bigquery_table.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_bigquery_table` using the reference:\n\n    $._ref.google-beta_google_bigquery_table.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_bigquery_table.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `clustering` (`list`): Specifies column names to use for data clustering. Up to four top-level columns are allowed, and should be specified in descending priority order. When `null`, the `clustering` field will be omitted from the resulting object.\n  - `dataset_id` (`string`): The dataset ID to create the table in. Changing this forces a new resource to be created.\n  - `deletion_protection` (`bool`): Whether or not to allow Terraform to destroy the instance. Unless this field is set to false in Terraform state, a terraform destroy or terraform apply that would delete the instance will fail. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): The field description. When `null`, the `description` field will be omitted from the resulting object.\n  - `expiration_time` (`number`): The time when this table expires, in milliseconds since the epoch. If not present, the table will persist indefinitely. Expired tables will be deleted and their storage reclaimed. When `null`, the `expiration_time` field will be omitted from the resulting object.\n  - `friendly_name` (`string`): A descriptive name for the table. When `null`, the `friendly_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): A mapping of labels to assign to the resource. When `null`, the `labels` field will be omitted from the resulting object.\n  - `max_staleness` (`string`): The maximum staleness of data that could be returned when the table (or stale MV) is queried. Staleness encoded as a string encoding of sql IntervalValue type. When `null`, the `max_staleness` field will be omitted from the resulting object.\n  - `project` (`string`): The ID of the project in which the resource belongs. When `null`, the `project` field will be omitted from the resulting object.\n  - `schema` (`string`): A JSON schema for the table. When `null`, the `schema` field will be omitted from the resulting object.\n  - `table_id` (`string`): A unique ID for the resource. Changing this forces a new resource to be created.\n  - `encryption_configuration` (`list[obj]`): Specifies how the table should be encrypted. If left blank, the table will be encrypted with a Google-managed key; that process is transparent to the user. When `null`, the `encryption_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.encryption_configuration.new](#fn-encryption_configurationnew) constructor.\n  - `external_data_configuration` (`list[obj]`): Describes the data format, location, and other properties of a table stored outside of BigQuery. By defining these properties, the data source can then be queried as if it were a standard BigQuery table. When `null`, the `external_data_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.new](#fn-external_data_configurationnew) constructor.\n  - `materialized_view` (`list[obj]`): If specified, configures this table as a materialized view. When `null`, the `materialized_view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.materialized_view.new](#fn-materialized_viewnew) constructor.\n  - `range_partitioning` (`list[obj]`): If specified, configures range-based partitioning for this table. When `null`, the `range_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.range_partitioning.new](#fn-range_partitioningnew) constructor.\n  - `time_partitioning` (`list[obj]`): If specified, configures time-based partitioning for this table. When `null`, the `time_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.time_partitioning.new](#fn-time_partitioningnew) constructor.\n  - `view` (`list[obj]`): If specified, configures this table as a view. When `null`, the `view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.view.new](#fn-viewnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_bigquery_table.new` injects a new `google-beta_google_bigquery_table` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_bigquery_table.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_bigquery_table` using the reference:\n\n    $._ref.google-beta_google_bigquery_table.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_bigquery_table.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `clustering` (`list`): Specifies column names to use for data clustering. Up to four top-level columns are allowed, and should be specified in descending priority order. When `null`, the `clustering` field will be omitted from the resulting object.\n  - `dataset_id` (`string`): The dataset ID to create the table in. Changing this forces a new resource to be created.\n  - `deletion_protection` (`bool`): Whether or not to allow Terraform to destroy the instance. Unless this field is set to false in Terraform state, a terraform destroy or terraform apply that would delete the instance will fail. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): The field description. When `null`, the `description` field will be omitted from the resulting object.\n  - `expiration_time` (`number`): The time when this table expires, in milliseconds since the epoch. If not present, the table will persist indefinitely. Expired tables will be deleted and their storage reclaimed. When `null`, the `expiration_time` field will be omitted from the resulting object.\n  - `friendly_name` (`string`): A descriptive name for the table. When `null`, the `friendly_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): A mapping of labels to assign to the resource. When `null`, the `labels` field will be omitted from the resulting object.\n  - `max_staleness` (`string`): The maximum staleness of data that could be returned when the table (or stale MV) is queried. Staleness encoded as a string encoding of sql IntervalValue type. When `null`, the `max_staleness` field will be omitted from the resulting object.\n  - `project` (`string`): The ID of the project in which the resource belongs. When `null`, the `project` field will be omitted from the resulting object.\n  - `schema` (`string`): A JSON schema for the table. When `null`, the `schema` field will be omitted from the resulting object.\n  - `table_id` (`string`): A unique ID for the resource. Changing this forces a new resource to be created.\n  - `encryption_configuration` (`list[obj]`): Specifies how the table should be encrypted. If left blank, the table will be encrypted with a Google-managed key; that process is transparent to the user. When `null`, the `encryption_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.encryption_configuration.new](#fn-encryption_configurationnew) constructor.\n  - `external_data_configuration` (`list[obj]`): Describes the data format, location, and other properties of a table stored outside of BigQuery. By defining these properties, the data source can then be queried as if it were a standard BigQuery table. When `null`, the `external_data_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.new](#fn-external_data_configurationnew) constructor.\n  - `materialized_view` (`list[obj]`): If specified, configures this table as a materialized view. When `null`, the `materialized_view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.materialized_view.new](#fn-materialized_viewnew) constructor.\n  - `range_partitioning` (`list[obj]`): If specified, configures range-based partitioning for this table. When `null`, the `range_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.range_partitioning.new](#fn-range_partitioningnew) constructor.\n  - `table_constraints` (`list[obj]`): Defines the primary key and foreign keys. When `null`, the `table_constraints` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.new](#fn-table_constraintsnew) constructor.\n  - `time_partitioning` (`list[obj]`): If specified, configures time-based partitioning for this table. When `null`, the `time_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.time_partitioning.new](#fn-time_partitioningnew) constructor.\n  - `view` (`list[obj]`): If specified, configures this table as a view. When `null`, the `view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.view.new](#fn-viewnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     dataset_id,
@@ -148,6 +150,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     project=null,
     range_partitioning=null,
     schema=null,
+    table_constraints=null,
     time_partitioning=null,
     view=null,
     _meta={}
@@ -169,13 +172,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       project=project,
       range_partitioning=range_partitioning,
       schema=schema,
+      table_constraints=table_constraints,
       table_id=table_id,
       time_partitioning=time_partitioning,
       view=view
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_bigquery_table.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_table`\nTerraform resource.\n\nUnlike [google-beta.google_bigquery_table.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `clustering` (`list`): Specifies column names to use for data clustering. Up to four top-level columns are allowed, and should be specified in descending priority order. When `null`, the `clustering` field will be omitted from the resulting object.\n  - `dataset_id` (`string`): The dataset ID to create the table in. Changing this forces a new resource to be created.\n  - `deletion_protection` (`bool`): Whether or not to allow Terraform to destroy the instance. Unless this field is set to false in Terraform state, a terraform destroy or terraform apply that would delete the instance will fail. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): The field description. When `null`, the `description` field will be omitted from the resulting object.\n  - `expiration_time` (`number`): The time when this table expires, in milliseconds since the epoch. If not present, the table will persist indefinitely. Expired tables will be deleted and their storage reclaimed. When `null`, the `expiration_time` field will be omitted from the resulting object.\n  - `friendly_name` (`string`): A descriptive name for the table. When `null`, the `friendly_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): A mapping of labels to assign to the resource. When `null`, the `labels` field will be omitted from the resulting object.\n  - `max_staleness` (`string`): The maximum staleness of data that could be returned when the table (or stale MV) is queried. Staleness encoded as a string encoding of sql IntervalValue type. When `null`, the `max_staleness` field will be omitted from the resulting object.\n  - `project` (`string`): The ID of the project in which the resource belongs. When `null`, the `project` field will be omitted from the resulting object.\n  - `schema` (`string`): A JSON schema for the table. When `null`, the `schema` field will be omitted from the resulting object.\n  - `table_id` (`string`): A unique ID for the resource. Changing this forces a new resource to be created.\n  - `encryption_configuration` (`list[obj]`): Specifies how the table should be encrypted. If left blank, the table will be encrypted with a Google-managed key; that process is transparent to the user. When `null`, the `encryption_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.encryption_configuration.new](#fn-encryption_configurationnew) constructor.\n  - `external_data_configuration` (`list[obj]`): Describes the data format, location, and other properties of a table stored outside of BigQuery. By defining these properties, the data source can then be queried as if it were a standard BigQuery table. When `null`, the `external_data_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.new](#fn-external_data_configurationnew) constructor.\n  - `materialized_view` (`list[obj]`): If specified, configures this table as a materialized view. When `null`, the `materialized_view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.materialized_view.new](#fn-materialized_viewnew) constructor.\n  - `range_partitioning` (`list[obj]`): If specified, configures range-based partitioning for this table. When `null`, the `range_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.range_partitioning.new](#fn-range_partitioningnew) constructor.\n  - `time_partitioning` (`list[obj]`): If specified, configures time-based partitioning for this table. When `null`, the `time_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.time_partitioning.new](#fn-time_partitioningnew) constructor.\n  - `view` (`list[obj]`): If specified, configures this table as a view. When `null`, the `view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.view.new](#fn-viewnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_bigquery_table` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_bigquery_table.newAttrs` constructs a new object with attributes and blocks configured for the `google_bigquery_table`\nTerraform resource.\n\nUnlike [google-beta.google_bigquery_table.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `clustering` (`list`): Specifies column names to use for data clustering. Up to four top-level columns are allowed, and should be specified in descending priority order. When `null`, the `clustering` field will be omitted from the resulting object.\n  - `dataset_id` (`string`): The dataset ID to create the table in. Changing this forces a new resource to be created.\n  - `deletion_protection` (`bool`): Whether or not to allow Terraform to destroy the instance. Unless this field is set to false in Terraform state, a terraform destroy or terraform apply that would delete the instance will fail. When `null`, the `deletion_protection` field will be omitted from the resulting object.\n  - `description` (`string`): The field description. When `null`, the `description` field will be omitted from the resulting object.\n  - `expiration_time` (`number`): The time when this table expires, in milliseconds since the epoch. If not present, the table will persist indefinitely. Expired tables will be deleted and their storage reclaimed. When `null`, the `expiration_time` field will be omitted from the resulting object.\n  - `friendly_name` (`string`): A descriptive name for the table. When `null`, the `friendly_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): A mapping of labels to assign to the resource. When `null`, the `labels` field will be omitted from the resulting object.\n  - `max_staleness` (`string`): The maximum staleness of data that could be returned when the table (or stale MV) is queried. Staleness encoded as a string encoding of sql IntervalValue type. When `null`, the `max_staleness` field will be omitted from the resulting object.\n  - `project` (`string`): The ID of the project in which the resource belongs. When `null`, the `project` field will be omitted from the resulting object.\n  - `schema` (`string`): A JSON schema for the table. When `null`, the `schema` field will be omitted from the resulting object.\n  - `table_id` (`string`): A unique ID for the resource. Changing this forces a new resource to be created.\n  - `encryption_configuration` (`list[obj]`): Specifies how the table should be encrypted. If left blank, the table will be encrypted with a Google-managed key; that process is transparent to the user. When `null`, the `encryption_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.encryption_configuration.new](#fn-encryption_configurationnew) constructor.\n  - `external_data_configuration` (`list[obj]`): Describes the data format, location, and other properties of a table stored outside of BigQuery. By defining these properties, the data source can then be queried as if it were a standard BigQuery table. When `null`, the `external_data_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.new](#fn-external_data_configurationnew) constructor.\n  - `materialized_view` (`list[obj]`): If specified, configures this table as a materialized view. When `null`, the `materialized_view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.materialized_view.new](#fn-materialized_viewnew) constructor.\n  - `range_partitioning` (`list[obj]`): If specified, configures range-based partitioning for this table. When `null`, the `range_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.range_partitioning.new](#fn-range_partitioningnew) constructor.\n  - `table_constraints` (`list[obj]`): Defines the primary key and foreign keys. When `null`, the `table_constraints` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.new](#fn-table_constraintsnew) constructor.\n  - `time_partitioning` (`list[obj]`): If specified, configures time-based partitioning for this table. When `null`, the `time_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.time_partitioning.new](#fn-time_partitioningnew) constructor.\n  - `view` (`list[obj]`): If specified, configures this table as a view. When `null`, the `view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.view.new](#fn-viewnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_bigquery_table` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     dataset_id,
     table_id,
@@ -192,6 +196,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     project=null,
     range_partitioning=null,
     schema=null,
+    table_constraints=null,
     time_partitioning=null,
     view=null
   ):: std.prune(a={
@@ -209,6 +214,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     project: project,
     range_partitioning: range_partitioning,
     schema: schema,
+    table_constraints: table_constraints,
     table_id: table_id,
     time_partitioning: time_partitioning,
     view: view,
@@ -235,6 +241,58 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       }),
     },
   },
+  table_constraints:: {
+    foreign_keys:: {
+      column_references:: {
+        '#new':: d.fn(help='\n`google-beta.google_bigquery_table.table_constraints.foreign_keys.column_references.new` constructs a new object with attributes and blocks configured for the `column_references`\nTerraform sub block.\n\n\n\n**Args**:\n  - `referenced_column` (`string`): The column in the primary key that are referenced by the referencingColumn.\n  - `referencing_column` (`string`): The column that composes the foreign key.\n\n**Returns**:\n  - An attribute object that represents the `column_references` sub block.\n', args=[]),
+        new(
+          referenced_column,
+          referencing_column
+        ):: std.prune(a={
+          referenced_column: referenced_column,
+          referencing_column: referencing_column,
+        }),
+      },
+      '#new':: d.fn(help='\n`google-beta.google_bigquery_table.table_constraints.foreign_keys.new` constructs a new object with attributes and blocks configured for the `foreign_keys`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): Set only if the foreign key constraint is named. When `null`, the `name` field will be omitted from the resulting object.\n  - `column_references` (`list[obj]`): The pair of the foreign key column and primary key column. When `null`, the `column_references` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.foreign_keys.column_references.new](#fn-table_constraintstable_constraintscolumn_referencesnew) constructor.\n  - `referenced_table` (`list[obj]`): The table that holds the primary key and is referenced by this foreign key. When `null`, the `referenced_table` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.foreign_keys.referenced_table.new](#fn-table_constraintstable_constraintsreferenced_tablenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `foreign_keys` sub block.\n', args=[]),
+      new(
+        column_references=null,
+        name=null,
+        referenced_table=null
+      ):: std.prune(a={
+        column_references: column_references,
+        name: name,
+        referenced_table: referenced_table,
+      }),
+      referenced_table:: {
+        '#new':: d.fn(help='\n`google-beta.google_bigquery_table.table_constraints.foreign_keys.referenced_table.new` constructs a new object with attributes and blocks configured for the `referenced_table`\nTerraform sub block.\n\n\n\n**Args**:\n  - `dataset_id` (`string`): The ID of the dataset containing this table.\n  - `project_id` (`string`): The ID of the project containing this table.\n  - `table_id` (`string`): The ID of the table. The ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_). The maximum length is 1,024 characters. Certain operations allow suffixing of the table ID with a partition decorator, such as sample_table$20190123.\n\n**Returns**:\n  - An attribute object that represents the `referenced_table` sub block.\n', args=[]),
+        new(
+          dataset_id,
+          project_id,
+          table_id
+        ):: std.prune(a={
+          dataset_id: dataset_id,
+          project_id: project_id,
+          table_id: table_id,
+        }),
+      },
+    },
+    '#new':: d.fn(help='\n`google-beta.google_bigquery_table.table_constraints.new` constructs a new object with attributes and blocks configured for the `table_constraints`\nTerraform sub block.\n\n\n\n**Args**:\n  - `foreign_keys` (`list[obj]`): Present only if the table has a foreign key. The foreign key is not enforced. When `null`, the `foreign_keys` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.foreign_keys.new](#fn-table_constraintsforeign_keysnew) constructor.\n  - `primary_key` (`list[obj]`): Represents a primary key constraint on a table's columns. Present only if the table has a primary key. The primary key is not enforced. When `null`, the `primary_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.primary_key.new](#fn-table_constraintsprimary_keynew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `table_constraints` sub block.\n', args=[]),
+    new(
+      foreign_keys=null,
+      primary_key=null
+    ):: std.prune(a={
+      foreign_keys: foreign_keys,
+      primary_key: primary_key,
+    }),
+    primary_key:: {
+      '#new':: d.fn(help='\n`google-beta.google_bigquery_table.table_constraints.primary_key.new` constructs a new object with attributes and blocks configured for the `primary_key`\nTerraform sub block.\n\n\n\n**Args**:\n  - `columns` (`list`): The columns that are composed of the primary key constraint.\n\n**Returns**:\n  - An attribute object that represents the `primary_key` sub block.\n', args=[]),
+      new(
+        columns
+      ):: std.prune(a={
+        columns: columns,
+      }),
+    },
+  },
   time_partitioning:: {
     '#new':: d.fn(help='\n`google-beta.google_bigquery_table.time_partitioning.new` constructs a new object with attributes and blocks configured for the `time_partitioning`\nTerraform sub block.\n\n\n\n**Args**:\n  - `expiration_ms` (`number`): Number of milliseconds for which to keep the storage for a partition. When `null`, the `expiration_ms` field will be omitted from the resulting object.\n  - `field` (`string`): The field used to determine how to create a time-based partition. If time-based partitioning is enabled without this value, the table is partitioned based on the load time. When `null`, the `field` field will be omitted from the resulting object.\n  - `require_partition_filter` (`bool`): If set to true, queries over this table require a partition filter that can be used for partition elimination to be specified. When `null`, the `require_partition_filter` field will be omitted from the resulting object.\n  - `type` (`string`): The supported types are DAY, HOUR, MONTH, and YEAR, which will generate one partition per day, hour, month, and year, respectively.\n\n**Returns**:\n  - An attribute object that represents the `time_partitioning` sub block.\n', args=[]),
     new(
@@ -439,6 +497,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withTableConstraints':: d.fn(help='`google-beta.list[obj].withTableConstraints` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the table_constraints field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withTableConstraintsMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `table_constraints` field.\n', args=[]),
+  withTableConstraints(resourceLabel, value): {
+    resource+: {
+      google_bigquery_table+: {
+        [resourceLabel]+: {
+          table_constraints: value,
+        },
+      },
+    },
+  },
+  '#withTableConstraintsMixin':: d.fn(help='`google-beta.list[obj].withTableConstraintsMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the table_constraints field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withTableConstraints](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `table_constraints` field.\n', args=[]),
+  withTableConstraintsMixin(resourceLabel, value): {
+    resource+: {
+      google_bigquery_table+: {
+        [resourceLabel]+: {
+          table_constraints+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withTableId':: d.fn(help='`google-beta.string.withTableId` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the table_id field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `table_id` field.\n', args=[]),
   withTableId(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/compute_instance.libsonnet b/4.x/_gen/resources/compute_instance.libsonnet
index 6aada59..eb2f332 100644
--- a/4.x/_gen/resources/compute_instance.libsonnet
+++ b/4.x/_gen/resources/compute_instance.libsonnet
@@ -113,11 +113,13 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         public_ptr_domain_name: public_ptr_domain_name,
       }),
     },
-    '#new':: d.fn(help='\n`google-beta.google_compute_instance.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `network` (`string`): The name or self_link of the network attached to this interface. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address assigned to the instance. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name or self_link of the subnetwork attached to this interface. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The project in which the subnetwork belongs. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `access_config` (`list[obj]`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. When `null`, the `access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance.network_interface.access_config.new](#fn-network_interfaceaccess_confignew) constructor.\n  - `alias_ip_range` (`list[obj]`): An array of alias IP ranges for this network interface. When `null`, the `alias_ip_range` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance.network_interface.alias_ip_range.new](#fn-network_interfacealias_ip_rangenew) constructor.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_compute_instance.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.\n  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.\n  - `network` (`string`): The name or self_link of the network attached to this interface. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address assigned to the instance. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name or self_link of the subnetwork attached to this interface. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The project in which the subnetwork belongs. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `access_config` (`list[obj]`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. When `null`, the `access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance.network_interface.access_config.new](#fn-network_interfaceaccess_confignew) constructor.\n  - `alias_ip_range` (`list[obj]`): An array of alias IP ranges for this network interface. When `null`, the `alias_ip_range` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance.network_interface.alias_ip_range.new](#fn-network_interfacealias_ip_rangenew) constructor.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
     new(
       access_config=null,
       alias_ip_range=null,
+      internal_ipv6_prefix_length=null,
       ipv6_access_config=null,
+      ipv6_address=null,
       network=null,
       network_ip=null,
       nic_type=null,
@@ -128,7 +130,9 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ):: std.prune(a={
       access_config: access_config,
       alias_ip_range: alias_ip_range,
+      internal_ipv6_prefix_length: internal_ipv6_prefix_length,
       ipv6_access_config: ipv6_access_config,
+      ipv6_address: ipv6_address,
       network: network,
       network_ip: network_ip,
       nic_type: nic_type,
diff --git a/4.x/_gen/resources/compute_instance_from_machine_image.libsonnet b/4.x/_gen/resources/compute_instance_from_machine_image.libsonnet
index b15cb14..4f2556a 100644
--- a/4.x/_gen/resources/compute_instance_from_machine_image.libsonnet
+++ b/4.x/_gen/resources/compute_instance_from_machine_image.libsonnet
@@ -39,11 +39,13 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         public_ptr_domain_name: public_ptr_domain_name,
       }),
     },
-    '#new':: d.fn(help='\n`google-beta.google_compute_instance_from_machine_image.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `access_config` (`list`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. When `null`, the `access_config` field will be omitted from the resulting object.\n  - `alias_ip_range` (`list`): An array of alias IP ranges for this network interface. When `null`, the `alias_ip_range` field will be omitted from the resulting object.\n  - `network` (`string`): The name or self_link of the network attached to this interface. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address assigned to the instance. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name or self_link of the subnetwork attached to this interface. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The project in which the subnetwork belongs. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_from_machine_image.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_compute_instance_from_machine_image.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `access_config` (`list`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. When `null`, the `access_config` field will be omitted from the resulting object.\n  - `alias_ip_range` (`list`): An array of alias IP ranges for this network interface. When `null`, the `alias_ip_range` field will be omitted from the resulting object.\n  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.\n  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.\n  - `network` (`string`): The name or self_link of the network attached to this interface. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address assigned to the instance. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name or self_link of the subnetwork attached to this interface. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The project in which the subnetwork belongs. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_from_machine_image.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
     new(
       access_config=null,
       alias_ip_range=null,
+      internal_ipv6_prefix_length=null,
       ipv6_access_config=null,
+      ipv6_address=null,
       network=null,
       network_ip=null,
       nic_type=null,
@@ -54,7 +56,9 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ):: std.prune(a={
       access_config: access_config,
       alias_ip_range: alias_ip_range,
+      internal_ipv6_prefix_length: internal_ipv6_prefix_length,
       ipv6_access_config: ipv6_access_config,
+      ipv6_address: ipv6_address,
       network: network,
       network_ip: network_ip,
       nic_type: nic_type,
diff --git a/4.x/_gen/resources/compute_instance_from_template.libsonnet b/4.x/_gen/resources/compute_instance_from_template.libsonnet
index 05e5cd2..aaf9817 100644
--- a/4.x/_gen/resources/compute_instance_from_template.libsonnet
+++ b/4.x/_gen/resources/compute_instance_from_template.libsonnet
@@ -75,11 +75,13 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         public_ptr_domain_name: public_ptr_domain_name,
       }),
     },
-    '#new':: d.fn(help='\n`google-beta.google_compute_instance_from_template.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `access_config` (`list`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. When `null`, the `access_config` field will be omitted from the resulting object.\n  - `alias_ip_range` (`list`): An array of alias IP ranges for this network interface. When `null`, the `alias_ip_range` field will be omitted from the resulting object.\n  - `network` (`string`): The name or self_link of the network attached to this interface. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address assigned to the instance. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name or self_link of the subnetwork attached to this interface. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The project in which the subnetwork belongs. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_from_template.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_compute_instance_from_template.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `access_config` (`list`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. When `null`, the `access_config` field will be omitted from the resulting object.\n  - `alias_ip_range` (`list`): An array of alias IP ranges for this network interface. When `null`, the `alias_ip_range` field will be omitted from the resulting object.\n  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.\n  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.\n  - `network` (`string`): The name or self_link of the network attached to this interface. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address assigned to the instance. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name or self_link of the subnetwork attached to this interface. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The project in which the subnetwork belongs. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_from_template.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
     new(
       access_config=null,
       alias_ip_range=null,
+      internal_ipv6_prefix_length=null,
       ipv6_access_config=null,
+      ipv6_address=null,
       network=null,
       network_ip=null,
       nic_type=null,
@@ -90,7 +92,9 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ):: std.prune(a={
       access_config: access_config,
       alias_ip_range: alias_ip_range,
+      internal_ipv6_prefix_length: internal_ipv6_prefix_length,
       ipv6_access_config: ipv6_access_config,
+      ipv6_address: ipv6_address,
       network: network,
       network_ip: network_ip,
       nic_type: nic_type,
diff --git a/4.x/_gen/resources/compute_instance_template.libsonnet b/4.x/_gen/resources/compute_instance_template.libsonnet
index 7e9937f..eb7032b 100644
--- a/4.x/_gen/resources/compute_instance_template.libsonnet
+++ b/4.x/_gen/resources/compute_instance_template.libsonnet
@@ -131,11 +131,13 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         network_tier: network_tier,
       }),
     },
-    '#new':: d.fn(help='\n`google-beta.google_compute_instance_template.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `network` (`string`): The name or self_link of the network to attach this interface to. Use network attribute for Legacy or Auto subnetted networks and subnetwork for custom subnetted networks. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_attachment` (`string`): The URL of the network attachment that this interface should connect to in the following format: projects/{projectNumber}/regions/{region_name}/networkAttachments/{network_attachment_name}. When `null`, the `network_attachment` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address to assign to the instance. If empty, the address will be automatically assigned. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name of the subnetwork to attach this interface to. The subnetwork must exist in the same region this instance will be created in. Either network or subnetwork must be provided. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The ID of the project in which the subnetwork belongs. If it is not provided, the provider project is used. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `access_config` (`list[obj]`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. Omit to ensure that the instance is not accessible from the Internet (this means that ssh provisioners will not work unless you are running Terraform can send traffic to the instance's network (e.g. via tunnel or because it is running on another cloud instance on that network). This block can be repeated multiple times. When `null`, the `access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_template.network_interface.access_config.new](#fn-network_interfaceaccess_confignew) constructor.\n  - `alias_ip_range` (`list[obj]`): An array of alias IP ranges for this network interface. Can only be specified for network interfaces on subnet-mode networks. When `null`, the `alias_ip_range` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_template.network_interface.alias_ip_range.new](#fn-network_interfacealias_ip_rangenew) constructor.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_template.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_compute_instance_template.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.\n  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.\n  - `network` (`string`): The name or self_link of the network to attach this interface to. Use network attribute for Legacy or Auto subnetted networks and subnetwork for custom subnetted networks. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_attachment` (`string`): The URL of the network attachment that this interface should connect to in the following format: projects/{projectNumber}/regions/{region_name}/networkAttachments/{network_attachment_name}. When `null`, the `network_attachment` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address to assign to the instance. If empty, the address will be automatically assigned. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name of the subnetwork to attach this interface to. The subnetwork must exist in the same region this instance will be created in. Either network or subnetwork must be provided. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The ID of the project in which the subnetwork belongs. If it is not provided, the provider project is used. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `access_config` (`list[obj]`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. Omit to ensure that the instance is not accessible from the Internet (this means that ssh provisioners will not work unless you are running Terraform can send traffic to the instance's network (e.g. via tunnel or because it is running on another cloud instance on that network). This block can be repeated multiple times. When `null`, the `access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_template.network_interface.access_config.new](#fn-network_interfaceaccess_confignew) constructor.\n  - `alias_ip_range` (`list[obj]`): An array of alias IP ranges for this network interface. Can only be specified for network interfaces on subnet-mode networks. When `null`, the `alias_ip_range` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_template.network_interface.alias_ip_range.new](#fn-network_interfacealias_ip_rangenew) constructor.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_instance_template.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
     new(
       access_config=null,
       alias_ip_range=null,
+      internal_ipv6_prefix_length=null,
       ipv6_access_config=null,
+      ipv6_address=null,
       network=null,
       network_attachment=null,
       network_ip=null,
@@ -147,7 +149,9 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ):: std.prune(a={
       access_config: access_config,
       alias_ip_range: alias_ip_range,
+      internal_ipv6_prefix_length: internal_ipv6_prefix_length,
       ipv6_access_config: ipv6_access_config,
+      ipv6_address: ipv6_address,
       network: network,
       network_attachment: network_attachment,
       network_ip: network_ip,
diff --git a/4.x/_gen/resources/compute_region_instance_template.libsonnet b/4.x/_gen/resources/compute_region_instance_template.libsonnet
index b13b828..d7ebae6 100644
--- a/4.x/_gen/resources/compute_region_instance_template.libsonnet
+++ b/4.x/_gen/resources/compute_region_instance_template.libsonnet
@@ -131,11 +131,13 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         network_tier: network_tier,
       }),
     },
-    '#new':: d.fn(help='\n`google-beta.google_compute_region_instance_template.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `network` (`string`): The name or self_link of the network to attach this interface to. Use network attribute for Legacy or Auto subnetted networks and subnetwork for custom subnetted networks. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address to assign to the instance. If empty, the address will be automatically assigned. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name of the subnetwork to attach this interface to. The subnetwork must exist in the same region this instance will be created in. Either network or subnetwork must be provided. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The ID of the project in which the subnetwork belongs. If it is not provided, the provider project is used. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `access_config` (`list[obj]`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. Omit to ensure that the instance is not accessible from the Internet (this means that ssh provisioners will not work unless you are running Terraform can send traffic to the instance's network (e.g. via tunnel or because it is running on another cloud instance on that network). This block can be repeated multiple times. When `null`, the `access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_instance_template.network_interface.access_config.new](#fn-network_interfaceaccess_confignew) constructor.\n  - `alias_ip_range` (`list[obj]`): An array of alias IP ranges for this network interface. Can only be specified for network interfaces on subnet-mode networks. When `null`, the `alias_ip_range` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_instance_template.network_interface.alias_ip_range.new](#fn-network_interfacealias_ip_rangenew) constructor.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_instance_template.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_compute_region_instance_template.network_interface.new` constructs a new object with attributes and blocks configured for the `network_interface`\nTerraform sub block.\n\n\n\n**Args**:\n  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.\n  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.\n  - `network` (`string`): The name or self_link of the network to attach this interface to. Use network attribute for Legacy or Auto subnetted networks and subnetwork for custom subnetted networks. When `null`, the `network` field will be omitted from the resulting object.\n  - `network_ip` (`string`): The private IP address to assign to the instance. If empty, the address will be automatically assigned. When `null`, the `network_ip` field will be omitted from the resulting object.\n  - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.\n  - `queue_count` (`number`): The networking queue count that's specified by users for the network interface. Both Rx and Tx queues will be set to this number. It will be empty if not specified. When `null`, the `queue_count` field will be omitted from the resulting object.\n  - `stack_type` (`string`): The stack type for this network interface to identify whether the IPv6 feature is enabled or not. If not specified, IPV4_ONLY will be used. When `null`, the `stack_type` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): The name of the subnetwork to attach this interface to. The subnetwork must exist in the same region this instance will be created in. Either network or subnetwork must be provided. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `subnetwork_project` (`string`): The ID of the project in which the subnetwork belongs. If it is not provided, the provider project is used. When `null`, the `subnetwork_project` field will be omitted from the resulting object.\n  - `access_config` (`list[obj]`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. Omit to ensure that the instance is not accessible from the Internet (this means that ssh provisioners will not work unless you are running Terraform can send traffic to the instance's network (e.g. via tunnel or because it is running on another cloud instance on that network). This block can be repeated multiple times. When `null`, the `access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_instance_template.network_interface.access_config.new](#fn-network_interfaceaccess_confignew) constructor.\n  - `alias_ip_range` (`list[obj]`): An array of alias IP ranges for this network interface. Can only be specified for network interfaces on subnet-mode networks. When `null`, the `alias_ip_range` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_instance_template.network_interface.alias_ip_range.new](#fn-network_interfacealias_ip_rangenew) constructor.\n  - `ipv6_access_config` (`list[obj]`): An array of IPv6 access configurations for this interface. Currently, only one IPv6 access config, DIRECT_IPV6, is supported. If there is no ipv6AccessConfig specified, then this instance will have no external IPv6 Internet access. When `null`, the `ipv6_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_compute_region_instance_template.network_interface.ipv6_access_config.new](#fn-network_interfaceipv6_access_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `network_interface` sub block.\n', args=[]),
     new(
       access_config=null,
       alias_ip_range=null,
+      internal_ipv6_prefix_length=null,
       ipv6_access_config=null,
+      ipv6_address=null,
       network=null,
       network_ip=null,
       nic_type=null,
@@ -146,7 +148,9 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ):: std.prune(a={
       access_config: access_config,
       alias_ip_range: alias_ip_range,
+      internal_ipv6_prefix_length: internal_ipv6_prefix_length,
       ipv6_access_config: ipv6_access_config,
+      ipv6_address: ipv6_address,
       network: network,
       network_ip: network_ip,
       nic_type: nic_type,
diff --git a/4.x/_gen/resources/container_attached_cluster.libsonnet b/4.x/_gen/resources/container_attached_cluster.libsonnet
index b45ba59..9236cb3 100644
--- a/4.x/_gen/resources/container_attached_cluster.libsonnet
+++ b/4.x/_gen/resources/container_attached_cluster.libsonnet
@@ -10,6 +10,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       admin_users: admin_users,
     }),
   },
+  binary_authorization:: {
+    '#new':: d.fn(help='\n`google-beta.google_container_attached_cluster.binary_authorization.new` constructs a new object with attributes and blocks configured for the `binary_authorization`\nTerraform sub block.\n\n\n\n**Args**:\n  - `evaluation_mode` (`string`): Configure Binary Authorization evaluation mode. Possible values: ["DISABLED", "PROJECT_SINGLETON_POLICY_ENFORCE"] When `null`, the `evaluation_mode` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `binary_authorization` sub block.\n', args=[]),
+    new(
+      evaluation_mode=null
+    ):: std.prune(a={
+      evaluation_mode: evaluation_mode,
+    }),
+  },
   fleet:: {
     '#new':: d.fn(help='\n`google-beta.google_container_attached_cluster.fleet.new` constructs a new object with attributes and blocks configured for the `fleet`\nTerraform sub block.\n\n\n\n**Args**:\n  - `project` (`string`): The number of the Fleet host project where this cluster will be registered.\n\n**Returns**:\n  - An attribute object that represents the `fleet` sub block.\n', args=[]),
     new(
@@ -50,7 +58,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       managed_prometheus_config: managed_prometheus_config,
     }),
   },
-  '#new':: d.fn(help="\n`google-beta.google_container_attached_cluster.new` injects a new `google-beta_google_container_attached_cluster` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_container_attached_cluster.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_container_attached_cluster` using the reference:\n\n    $._ref.google-beta_google_container_attached_cluster.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_container_attached_cluster.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `annotations` (`obj`): Optional. Annotations on the cluster. This field has the same\nrestrictions as Kubernetes annotations. The total size of all keys and\nvalues combined is limited to 256k. Key can have 2 segments: prefix (optional)\nand name (required), separated by a slash (/). Prefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `deletion_policy` (`string`): Policy to determine what flags to send on delete. When `null`, the `deletion_policy` field will be omitted from the resulting object.\n  - `description` (`string`): A human readable description of this attached cluster. Cannot be longer\nthan 255 UTF-8 encoded bytes. When `null`, the `description` field will be omitted from the resulting object.\n  - `distribution` (`string`): The Kubernetes distribution of the underlying attached cluster. Supported values:\n\u0026#34;eks\u0026#34;, \u0026#34;aks\u0026#34;.\n  - `location` (`string`): The location for the resource\n  - `name` (`string`): The name of this resource.\n  - `platform_version` (`string`): The platform version for the cluster (e.g. \u0026#39;1.23.0-gke.1\u0026#39;).\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `authorization` (`list[obj]`): Configuration related to the cluster RBAC settings. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.authorization.new](#fn-authorizationnew) constructor.\n  - `fleet` (`list[obj]`): Fleet configuration. When `null`, the `fleet` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.fleet.new](#fn-fleetnew) constructor.\n  - `logging_config` (`list[obj]`): Logging configuration. When `null`, the `logging_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.logging_config.new](#fn-logging_confignew) constructor.\n  - `monitoring_config` (`list[obj]`): Monitoring configuration. When `null`, the `monitoring_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.monitoring_config.new](#fn-monitoring_confignew) constructor.\n  - `oidc_config` (`list[obj]`): OIDC discovery information of the target cluster.\n\nKubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster\nAPI server. This fields indicates how GCP services\nvalidate KSA tokens in order to allow system workloads (such as GKE Connect\nand telemetry agents) to authenticate back to GCP.\n\nBoth clusters with public and private issuer URLs are supported.\nClusters with public issuers only need to specify the \u0026#39;issuer_url\u0026#39; field\nwhile clusters with private issuers need to provide both\n\u0026#39;issuer_url\u0026#39; and \u0026#39;jwks\u0026#39;. When `null`, the `oidc_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.oidc_config.new](#fn-oidc_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_container_attached_cluster.new` injects a new `google-beta_google_container_attached_cluster` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_container_attached_cluster.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_container_attached_cluster` using the reference:\n\n    $._ref.google-beta_google_container_attached_cluster.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_container_attached_cluster.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `annotations` (`obj`): Optional. Annotations on the cluster. This field has the same\nrestrictions as Kubernetes annotations. The total size of all keys and\nvalues combined is limited to 256k. Key can have 2 segments: prefix (optional)\nand name (required), separated by a slash (/). Prefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `deletion_policy` (`string`): Policy to determine what flags to send on delete. When `null`, the `deletion_policy` field will be omitted from the resulting object.\n  - `description` (`string`): A human readable description of this attached cluster. Cannot be longer\nthan 255 UTF-8 encoded bytes. When `null`, the `description` field will be omitted from the resulting object.\n  - `distribution` (`string`): The Kubernetes distribution of the underlying attached cluster. Supported values:\n\u0026#34;eks\u0026#34;, \u0026#34;aks\u0026#34;.\n  - `location` (`string`): The location for the resource\n  - `name` (`string`): The name of this resource.\n  - `platform_version` (`string`): The platform version for the cluster (e.g. \u0026#39;1.23.0-gke.1\u0026#39;).\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `authorization` (`list[obj]`): Configuration related to the cluster RBAC settings. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.authorization.new](#fn-authorizationnew) constructor.\n  - `binary_authorization` (`list[obj]`): Binary Authorization configuration. When `null`, the `binary_authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.binary_authorization.new](#fn-binary_authorizationnew) constructor.\n  - `fleet` (`list[obj]`): Fleet configuration. When `null`, the `fleet` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.fleet.new](#fn-fleetnew) constructor.\n  - `logging_config` (`list[obj]`): Logging configuration. When `null`, the `logging_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.logging_config.new](#fn-logging_confignew) constructor.\n  - `monitoring_config` (`list[obj]`): Monitoring configuration. When `null`, the `monitoring_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.monitoring_config.new](#fn-monitoring_confignew) constructor.\n  - `oidc_config` (`list[obj]`): OIDC discovery information of the target cluster.\n\nKubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster\nAPI server. This fields indicates how GCP services\nvalidate KSA tokens in order to allow system workloads (such as GKE Connect\nand telemetry agents) to authenticate back to GCP.\n\nBoth clusters with public and private issuer URLs are supported.\nClusters with public issuers only need to specify the \u0026#39;issuer_url\u0026#39; field\nwhile clusters with private issuers need to provide both\n\u0026#39;issuer_url\u0026#39; and \u0026#39;jwks\u0026#39;. When `null`, the `oidc_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.oidc_config.new](#fn-oidc_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     distribution,
@@ -59,6 +67,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     platform_version,
     annotations=null,
     authorization=null,
+    binary_authorization=null,
     deletion_policy=null,
     description=null,
     fleet=null,
@@ -74,6 +83,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     attrs=self.newAttrs(
       annotations=annotations,
       authorization=authorization,
+      binary_authorization=binary_authorization,
       deletion_policy=deletion_policy,
       description=description,
       distribution=distribution,
@@ -89,7 +99,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_container_attached_cluster.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_attached_cluster`\nTerraform resource.\n\nUnlike [google-beta.google_container_attached_cluster.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `annotations` (`obj`): Optional. Annotations on the cluster. This field has the same\nrestrictions as Kubernetes annotations. The total size of all keys and\nvalues combined is limited to 256k. Key can have 2 segments: prefix (optional)\nand name (required), separated by a slash (/). Prefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `deletion_policy` (`string`): Policy to determine what flags to send on delete. When `null`, the `deletion_policy` field will be omitted from the resulting object.\n  - `description` (`string`): A human readable description of this attached cluster. Cannot be longer\nthan 255 UTF-8 encoded bytes. When `null`, the `description` field will be omitted from the resulting object.\n  - `distribution` (`string`): The Kubernetes distribution of the underlying attached cluster. Supported values:\n"eks", "aks".\n  - `location` (`string`): The location for the resource\n  - `name` (`string`): The name of this resource.\n  - `platform_version` (`string`): The platform version for the cluster (e.g. '1.23.0-gke.1').\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `authorization` (`list[obj]`): Configuration related to the cluster RBAC settings. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.authorization.new](#fn-authorizationnew) constructor.\n  - `fleet` (`list[obj]`): Fleet configuration. When `null`, the `fleet` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.fleet.new](#fn-fleetnew) constructor.\n  - `logging_config` (`list[obj]`): Logging configuration. When `null`, the `logging_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.logging_config.new](#fn-logging_confignew) constructor.\n  - `monitoring_config` (`list[obj]`): Monitoring configuration. When `null`, the `monitoring_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.monitoring_config.new](#fn-monitoring_confignew) constructor.\n  - `oidc_config` (`list[obj]`): OIDC discovery information of the target cluster.\n\nKubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster\nAPI server. This fields indicates how GCP services\nvalidate KSA tokens in order to allow system workloads (such as GKE Connect\nand telemetry agents) to authenticate back to GCP.\n\nBoth clusters with public and private issuer URLs are supported.\nClusters with public issuers only need to specify the 'issuer_url' field\nwhile clusters with private issuers need to provide both\n'issuer_url' and 'jwks'. When `null`, the `oidc_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.oidc_config.new](#fn-oidc_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_container_attached_cluster` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_container_attached_cluster.newAttrs` constructs a new object with attributes and blocks configured for the `google_container_attached_cluster`\nTerraform resource.\n\nUnlike [google-beta.google_container_attached_cluster.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `annotations` (`obj`): Optional. Annotations on the cluster. This field has the same\nrestrictions as Kubernetes annotations. The total size of all keys and\nvalues combined is limited to 256k. Key can have 2 segments: prefix (optional)\nand name (required), separated by a slash (/). Prefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `deletion_policy` (`string`): Policy to determine what flags to send on delete. When `null`, the `deletion_policy` field will be omitted from the resulting object.\n  - `description` (`string`): A human readable description of this attached cluster. Cannot be longer\nthan 255 UTF-8 encoded bytes. When `null`, the `description` field will be omitted from the resulting object.\n  - `distribution` (`string`): The Kubernetes distribution of the underlying attached cluster. Supported values:\n"eks", "aks".\n  - `location` (`string`): The location for the resource\n  - `name` (`string`): The name of this resource.\n  - `platform_version` (`string`): The platform version for the cluster (e.g. '1.23.0-gke.1').\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `authorization` (`list[obj]`): Configuration related to the cluster RBAC settings. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.authorization.new](#fn-authorizationnew) constructor.\n  - `binary_authorization` (`list[obj]`): Binary Authorization configuration. When `null`, the `binary_authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.binary_authorization.new](#fn-binary_authorizationnew) constructor.\n  - `fleet` (`list[obj]`): Fleet configuration. When `null`, the `fleet` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.fleet.new](#fn-fleetnew) constructor.\n  - `logging_config` (`list[obj]`): Logging configuration. When `null`, the `logging_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.logging_config.new](#fn-logging_confignew) constructor.\n  - `monitoring_config` (`list[obj]`): Monitoring configuration. When `null`, the `monitoring_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.monitoring_config.new](#fn-monitoring_confignew) constructor.\n  - `oidc_config` (`list[obj]`): OIDC discovery information of the target cluster.\n\nKubernetes Service Account (KSA) tokens are JWT tokens signed by the cluster\nAPI server. This fields indicates how GCP services\nvalidate KSA tokens in order to allow system workloads (such as GKE Connect\nand telemetry agents) to authenticate back to GCP.\n\nBoth clusters with public and private issuer URLs are supported.\nClusters with public issuers only need to specify the 'issuer_url' field\nwhile clusters with private issuers need to provide both\n'issuer_url' and 'jwks'. When `null`, the `oidc_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.oidc_config.new](#fn-oidc_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_container_attached_cluster` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     distribution,
     location,
@@ -97,6 +107,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     platform_version,
     annotations=null,
     authorization=null,
+    binary_authorization=null,
     deletion_policy=null,
     description=null,
     fleet=null,
@@ -108,6 +119,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
   ):: std.prune(a={
     annotations: annotations,
     authorization: authorization,
+    binary_authorization: binary_authorization,
     deletion_policy: deletion_policy,
     description: description,
     distribution: distribution,
@@ -173,6 +185,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withBinaryAuthorization':: d.fn(help='`google-beta.list[obj].withBinaryAuthorization` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the binary_authorization field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withBinaryAuthorizationMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `binary_authorization` field.\n', args=[]),
+  withBinaryAuthorization(resourceLabel, value): {
+    resource+: {
+      google_container_attached_cluster+: {
+        [resourceLabel]+: {
+          binary_authorization: value,
+        },
+      },
+    },
+  },
+  '#withBinaryAuthorizationMixin':: d.fn(help='`google-beta.list[obj].withBinaryAuthorizationMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the binary_authorization field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withBinaryAuthorization](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `binary_authorization` field.\n', args=[]),
+  withBinaryAuthorizationMixin(resourceLabel, value): {
+    resource+: {
+      google_container_attached_cluster+: {
+        [resourceLabel]+: {
+          binary_authorization+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withDeletionPolicy':: d.fn(help='`google-beta.string.withDeletionPolicy` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the deletion_policy field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `deletion_policy` field.\n', args=[]),
   withDeletionPolicy(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/container_cluster.libsonnet b/4.x/_gen/resources/container_cluster.libsonnet
index 92f225b..e2c4980 100644
--- a/4.x/_gen/resources/container_cluster.libsonnet
+++ b/4.x/_gen/resources/container_cluster.libsonnet
@@ -103,7 +103,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
         disabled: disabled,
       }),
     },
-    '#new':: d.fn(help='\n`google-beta.google_container_cluster.addons_config.new` constructs a new object with attributes and blocks configured for the `addons_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `cloudrun_config` (`list[obj]`): The status of the CloudRun addon. It is disabled by default. Set disabled = false to enable. When `null`, the `cloudrun_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.cloudrun_config.new](#fn-addons_configcloudrun_confignew) constructor.\n  - `config_connector_config` (`list[obj]`): The of the Config Connector addon. When `null`, the `config_connector_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.config_connector_config.new](#fn-addons_configconfig_connector_confignew) constructor.\n  - `dns_cache_config` (`list[obj]`): The status of the NodeLocal DNSCache addon. It is disabled by default. Set enabled = true to enable. When `null`, the `dns_cache_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.dns_cache_config.new](#fn-addons_configdns_cache_confignew) constructor.\n  - `gce_persistent_disk_csi_driver_config` (`list[obj]`): Whether this cluster should enable the Google Compute Engine Persistent Disk Container Storage Interface (CSI) Driver. Defaults to enabled; set disabled = true to disable. When `null`, the `gce_persistent_disk_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gce_persistent_disk_csi_driver_config.new](#fn-addons_configgce_persistent_disk_csi_driver_confignew) constructor.\n  - `gcp_filestore_csi_driver_config` (`list[obj]`): The status of the Filestore CSI driver addon, which allows the usage of filestore instance as volumes. Defaults to disabled; set enabled = true to enable. When `null`, the `gcp_filestore_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gcp_filestore_csi_driver_config.new](#fn-addons_configgcp_filestore_csi_driver_confignew) constructor.\n  - `gcs_fuse_csi_driver_config` (`list[obj]`): The status of the GCS Fuse CSI driver addon, which allows the usage of gcs bucket as volumes. Defaults to disabled; set enabled = true to enable. When `null`, the `gcs_fuse_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gcs_fuse_csi_driver_config.new](#fn-addons_configgcs_fuse_csi_driver_confignew) constructor.\n  - `gke_backup_agent_config` (`list[obj]`): The status of the Backup for GKE Agent addon. It is disabled by default. Set enabled = true to enable. When `null`, the `gke_backup_agent_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gke_backup_agent_config.new](#fn-addons_configgke_backup_agent_confignew) constructor.\n  - `horizontal_pod_autoscaling` (`list[obj]`): The status of the Horizontal Pod Autoscaling addon, which increases or decreases the number of replica pods a replication controller has based on the resource usage of the existing pods. It ensures that a Heapster pod is running in the cluster, which is also used by the Cloud Monitoring service. It is enabled by default; set disabled = true to disable. When `null`, the `horizontal_pod_autoscaling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.horizontal_pod_autoscaling.new](#fn-addons_confighorizontal_pod_autoscalingnew) constructor.\n  - `http_load_balancing` (`list[obj]`): The status of the HTTP (L7) load balancing controller addon, which makes it easy to set up HTTP load balancers for services in a cluster. It is enabled by default; set disabled = true to disable. When `null`, the `http_load_balancing` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.http_load_balancing.new](#fn-addons_confighttp_load_balancingnew) constructor.\n  - `istio_config` (`list[obj]`): The status of the Istio addon. When `null`, the `istio_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.istio_config.new](#fn-addons_configistio_confignew) constructor.\n  - `kalm_config` (`list[obj]`): Configuration for the KALM addon, which manages the lifecycle of k8s. It is disabled by default; Set enabled = true to enable. When `null`, the `kalm_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.kalm_config.new](#fn-addons_configkalm_confignew) constructor.\n  - `network_policy_config` (`list[obj]`): Whether we should enable the network policy addon for the master. This must be enabled in order to enable network policy for the nodes. To enable this, you must also define a network_policy block, otherwise nothing will happen. It can only be disabled if the nodes already do not have network policies enabled. Defaults to disabled; set disabled = false to enable. When `null`, the `network_policy_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.network_policy_config.new](#fn-addons_confignetwork_policy_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `addons_config` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_container_cluster.addons_config.new` constructs a new object with attributes and blocks configured for the `addons_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `cloudrun_config` (`list[obj]`): The status of the CloudRun addon. It is disabled by default. Set disabled = false to enable. When `null`, the `cloudrun_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.cloudrun_config.new](#fn-addons_configcloudrun_confignew) constructor.\n  - `config_connector_config` (`list[obj]`): The of the Config Connector addon. When `null`, the `config_connector_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.config_connector_config.new](#fn-addons_configconfig_connector_confignew) constructor.\n  - `dns_cache_config` (`list[obj]`): The status of the NodeLocal DNSCache addon. It is disabled by default. Set enabled = true to enable. When `null`, the `dns_cache_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.dns_cache_config.new](#fn-addons_configdns_cache_confignew) constructor.\n  - `gce_persistent_disk_csi_driver_config` (`list[obj]`): Whether this cluster should enable the Google Compute Engine Persistent Disk Container Storage Interface (CSI) Driver. Set enabled = true to enable. The Compute Engine persistent disk CSI Driver is enabled by default on newly created clusters for the following versions: Linux clusters: GKE version 1.18.10-gke.2100 or later, or 1.19.3-gke.2100 or later. When `null`, the `gce_persistent_disk_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gce_persistent_disk_csi_driver_config.new](#fn-addons_configgce_persistent_disk_csi_driver_confignew) constructor.\n  - `gcp_filestore_csi_driver_config` (`list[obj]`): The status of the Filestore CSI driver addon, which allows the usage of filestore instance as volumes. Defaults to disabled; set enabled = true to enable. When `null`, the `gcp_filestore_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gcp_filestore_csi_driver_config.new](#fn-addons_configgcp_filestore_csi_driver_confignew) constructor.\n  - `gcs_fuse_csi_driver_config` (`list[obj]`): The status of the GCS Fuse CSI driver addon, which allows the usage of gcs bucket as volumes. Defaults to disabled; set enabled = true to enable. When `null`, the `gcs_fuse_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gcs_fuse_csi_driver_config.new](#fn-addons_configgcs_fuse_csi_driver_confignew) constructor.\n  - `gke_backup_agent_config` (`list[obj]`): The status of the Backup for GKE Agent addon. It is disabled by default. Set enabled = true to enable. When `null`, the `gke_backup_agent_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gke_backup_agent_config.new](#fn-addons_configgke_backup_agent_confignew) constructor.\n  - `horizontal_pod_autoscaling` (`list[obj]`): The status of the Horizontal Pod Autoscaling addon, which increases or decreases the number of replica pods a replication controller has based on the resource usage of the existing pods. It ensures that a Heapster pod is running in the cluster, which is also used by the Cloud Monitoring service. It is enabled by default; set disabled = true to disable. When `null`, the `horizontal_pod_autoscaling` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.horizontal_pod_autoscaling.new](#fn-addons_confighorizontal_pod_autoscalingnew) constructor.\n  - `http_load_balancing` (`list[obj]`): The status of the HTTP (L7) load balancing controller addon, which makes it easy to set up HTTP load balancers for services in a cluster. It is enabled by default; set disabled = true to disable. When `null`, the `http_load_balancing` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.http_load_balancing.new](#fn-addons_confighttp_load_balancingnew) constructor.\n  - `istio_config` (`list[obj]`): The status of the Istio addon. When `null`, the `istio_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.istio_config.new](#fn-addons_configistio_confignew) constructor.\n  - `kalm_config` (`list[obj]`): Configuration for the KALM addon, which manages the lifecycle of k8s. It is disabled by default; Set enabled = true to enable. When `null`, the `kalm_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.kalm_config.new](#fn-addons_configkalm_confignew) constructor.\n  - `network_policy_config` (`list[obj]`): Whether we should enable the network policy addon for the master. This must be enabled in order to enable network policy for the nodes. To enable this, you must also define a network_policy block, otherwise nothing will happen. It can only be disabled if the nodes already do not have network policies enabled. Defaults to disabled; set disabled = false to enable. When `null`, the `network_policy_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.network_policy_config.new](#fn-addons_confignetwork_policy_confignew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `addons_config` sub block.\n', args=[]),
     new(
       cloudrun_config=null,
       config_connector_config=null,
diff --git a/4.x/_gen/resources/data_pipeline_pipeline.libsonnet b/4.x/_gen/resources/data_pipeline_pipeline.libsonnet
new file mode 100644
index 0000000..936a12b
--- /dev/null
+++ b/4.x/_gen/resources/data_pipeline_pipeline.libsonnet
@@ -0,0 +1,378 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_data_pipeline_pipeline', url='', help='`google_data_pipeline_pipeline` represents the `google-beta_google_data_pipeline_pipeline` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.google_data_pipeline_pipeline.new` injects a new `google-beta_google_data_pipeline_pipeline` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_data_pipeline_pipeline.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_data_pipeline_pipeline` using the reference:\n\n    $._ref.google-beta_google_data_pipeline_pipeline.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_data_pipeline_pipeline.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `display_name` (`string`): The display name of the pipeline. It can contain only letters ([A-Za-z]), numbers ([0-9]), hyphens (-), and underscores (_). When `null`, the `display_name` field will be omitted from the resulting object.\n  - `name` (`string`): \u0026#34;The pipeline name. For example\u0026#39;: \u0026#39;projects/PROJECT_ID/locations/LOCATION_ID/pipelines/PIPELINE_ID.\u0026#34;\n\u0026#34;- PROJECT_ID can contain letters ([A-Za-z]), numbers ([0-9]), hyphens (-), colons (:), and periods (.). For more information, see Identifying projects.\u0026#34;\n\u0026#34;LOCATION_ID is the canonical ID for the pipeline\u0026#39;s location. The list of available locations can be obtained by calling google.cloud.location.Locations.ListLocations. Note that the Data Pipelines service is not available in all regions. It depends on Cloud Scheduler, an App Engine application, so it\u0026#39;s only available in App Engine regions.\u0026#34;\n\u0026#34;PIPELINE_ID is the ID of the pipeline. Must be unique for the selected project and location.\u0026#34;\n  - `pipeline_sources` (`obj`): The sources of the pipeline (for example, Dataplex). The keys and values are set by the corresponding sources during pipeline creation.\nAn object containing a list of \u0026#34;key\u0026#34;: value pairs. Example: { \u0026#34;name\u0026#34;: \u0026#34;wrench\u0026#34;, \u0026#34;mass\u0026#34;: \u0026#34;1.3kg\u0026#34;, \u0026#34;count\u0026#34;: \u0026#34;3\u0026#34; }. When `null`, the `pipeline_sources` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region When `null`, the `region` field will be omitted from the resulting object.\n  - `scheduler_service_account_email` (`string`): Optional. A service account email to be used with the Cloud Scheduler job. If not specified, the default compute engine service account will be used. When `null`, the `scheduler_service_account_email` field will be omitted from the resulting object.\n  - `state` (`string`): The state of the pipeline. When the pipeline is created, the state is set to \u0026#39;PIPELINE_STATE_ACTIVE\u0026#39; by default. State changes can be requested by setting the state to stopping, paused, or resuming. State cannot be changed through pipelines.patch requests.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#state Possible values: [\u0026#34;STATE_UNSPECIFIED\u0026#34;, \u0026#34;STATE_RESUMING\u0026#34;, \u0026#34;STATE_ACTIVE\u0026#34;, \u0026#34;STATE_STOPPING\u0026#34;, \u0026#34;STATE_ARCHIVED\u0026#34;, \u0026#34;STATE_PAUSED\u0026#34;]\n  - `type` (`string`): The type of the pipeline. This field affects the scheduling of the pipeline and the type of metrics to show for the pipeline.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#pipelinetype Possible values: [\u0026#34;PIPELINE_TYPE_UNSPECIFIED\u0026#34;, \u0026#34;PIPELINE_TYPE_BATCH\u0026#34;, \u0026#34;PIPELINE_TYPE_STREAMING\u0026#34;]\n  - `schedule_info` (`list[obj]`): Internal scheduling information for a pipeline. If this information is provided, periodic jobs will be created per the schedule. If not, users are responsible for creating jobs externally.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#schedulespec When `null`, the `schedule_info` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.schedule_info.new](#fn-schedule_infonew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.timeouts.new](#fn-timeoutsnew) constructor.\n  - `workload` (`list[obj]`): Workload information for creating new jobs.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#workload When `null`, the `workload` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.new](#fn-workloadnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    name,
+    state,
+    type,
+    display_name=null,
+    pipeline_sources=null,
+    project=null,
+    region=null,
+    schedule_info=null,
+    scheduler_service_account_email=null,
+    timeouts=null,
+    workload=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_data_pipeline_pipeline',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      display_name=display_name,
+      name=name,
+      pipeline_sources=pipeline_sources,
+      project=project,
+      region=region,
+      schedule_info=schedule_info,
+      scheduler_service_account_email=scheduler_service_account_email,
+      state=state,
+      timeouts=timeouts,
+      type=type,
+      workload=workload
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_pipeline_pipeline`\nTerraform resource.\n\nUnlike [google-beta.google_data_pipeline_pipeline.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `display_name` (`string`): The display name of the pipeline. It can contain only letters ([A-Za-z]), numbers ([0-9]), hyphens (-), and underscores (_). When `null`, the `display_name` field will be omitted from the resulting object.\n  - `name` (`string`): "The pipeline name. For example': 'projects/PROJECT_ID/locations/LOCATION_ID/pipelines/PIPELINE_ID."\n"- PROJECT_ID can contain letters ([A-Za-z]), numbers ([0-9]), hyphens (-), colons (:), and periods (.). For more information, see Identifying projects."\n"LOCATION_ID is the canonical ID for the pipeline's location. The list of available locations can be obtained by calling google.cloud.location.Locations.ListLocations. Note that the Data Pipelines service is not available in all regions. It depends on Cloud Scheduler, an App Engine application, so it's only available in App Engine regions."\n"PIPELINE_ID is the ID of the pipeline. Must be unique for the selected project and location."\n  - `pipeline_sources` (`obj`): The sources of the pipeline (for example, Dataplex). The keys and values are set by the corresponding sources during pipeline creation.\nAn object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. When `null`, the `pipeline_sources` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): A reference to the region When `null`, the `region` field will be omitted from the resulting object.\n  - `scheduler_service_account_email` (`string`): Optional. A service account email to be used with the Cloud Scheduler job. If not specified, the default compute engine service account will be used. When `null`, the `scheduler_service_account_email` field will be omitted from the resulting object.\n  - `state` (`string`): The state of the pipeline. When the pipeline is created, the state is set to 'PIPELINE_STATE_ACTIVE' by default. State changes can be requested by setting the state to stopping, paused, or resuming. State cannot be changed through pipelines.patch requests.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#state Possible values: ["STATE_UNSPECIFIED", "STATE_RESUMING", "STATE_ACTIVE", "STATE_STOPPING", "STATE_ARCHIVED", "STATE_PAUSED"]\n  - `type` (`string`): The type of the pipeline. This field affects the scheduling of the pipeline and the type of metrics to show for the pipeline.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#pipelinetype Possible values: ["PIPELINE_TYPE_UNSPECIFIED", "PIPELINE_TYPE_BATCH", "PIPELINE_TYPE_STREAMING"]\n  - `schedule_info` (`list[obj]`): Internal scheduling information for a pipeline. If this information is provided, periodic jobs will be created per the schedule. If not, users are responsible for creating jobs externally.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#schedulespec When `null`, the `schedule_info` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.schedule_info.new](#fn-schedule_infonew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.timeouts.new](#fn-timeoutsnew) constructor.\n  - `workload` (`list[obj]`): Workload information for creating new jobs.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#workload When `null`, the `workload` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.new](#fn-workloadnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_data_pipeline_pipeline` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    name,
+    state,
+    type,
+    display_name=null,
+    pipeline_sources=null,
+    project=null,
+    region=null,
+    schedule_info=null,
+    scheduler_service_account_email=null,
+    timeouts=null,
+    workload=null
+  ):: std.prune(a={
+    display_name: display_name,
+    name: name,
+    pipeline_sources: pipeline_sources,
+    project: project,
+    region: region,
+    schedule_info: schedule_info,
+    scheduler_service_account_email: scheduler_service_account_email,
+    state: state,
+    timeouts: timeouts,
+    type: type,
+    workload: workload,
+  }),
+  schedule_info:: {
+    '#new':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.schedule_info.new` constructs a new object with attributes and blocks configured for the `schedule_info`\nTerraform sub block.\n\n\n\n**Args**:\n  - `schedule` (`string`): Unix-cron format of the schedule. This information is retrieved from the linked Cloud Scheduler. When `null`, the `schedule` field will be omitted from the resulting object.\n  - `time_zone` (`string`): Timezone ID. This matches the timezone IDs used by the Cloud Scheduler API. If empty, UTC time is assumed. When `null`, the `time_zone` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `schedule_info` sub block.\n', args=[]),
+    new(
+      schedule=null,
+      time_zone=null
+    ):: std.prune(a={
+      schedule: schedule,
+      time_zone: time_zone,
+    }),
+  },
+  timeouts:: {
+    '#new':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
+    new(
+      create=null,
+      delete=null,
+      update=null
+    ):: std.prune(a={
+      create: create,
+      delete: delete,
+      update: update,
+    }),
+  },
+  '#withDisplayName':: d.fn(help='`google-beta.string.withDisplayName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the display_name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `display_name` field.\n', args=[]),
+  withDisplayName(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          display_name: value,
+        },
+      },
+    },
+  },
+  '#withName':: d.fn(help='`google-beta.string.withName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `name` field.\n', args=[]),
+  withName(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          name: value,
+        },
+      },
+    },
+  },
+  '#withPipelineSources':: d.fn(help='`google-beta.obj.withPipelineSources` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the pipeline_sources field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `pipeline_sources` field.\n', args=[]),
+  withPipelineSources(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          pipeline_sources: value,
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the region field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
+  withRegion(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          region: value,
+        },
+      },
+    },
+  },
+  '#withScheduleInfo':: d.fn(help='`google-beta.list[obj].withScheduleInfo` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the schedule_info field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withScheduleInfoMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `schedule_info` field.\n', args=[]),
+  withScheduleInfo(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          schedule_info: value,
+        },
+      },
+    },
+  },
+  '#withScheduleInfoMixin':: d.fn(help='`google-beta.list[obj].withScheduleInfoMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the schedule_info field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withScheduleInfo](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `schedule_info` field.\n', args=[]),
+  withScheduleInfoMixin(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          schedule_info+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withSchedulerServiceAccountEmail':: d.fn(help='`google-beta.string.withSchedulerServiceAccountEmail` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the scheduler_service_account_email field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `scheduler_service_account_email` field.\n', args=[]),
+  withSchedulerServiceAccountEmail(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          scheduler_service_account_email: value,
+        },
+      },
+    },
+  },
+  '#withState':: d.fn(help='`google-beta.string.withState` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the state field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `state` field.\n', args=[]),
+  withState(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          state: value,
+        },
+      },
+    },
+  },
+  '#withTimeouts':: d.fn(help='`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeouts(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          timeouts: value,
+        },
+      },
+    },
+  },
+  '#withTimeoutsMixin':: d.fn(help='`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will merge the passed in value to the existing map. If you wish\nto instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeoutsMixin(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          timeouts+: value,
+        },
+      },
+    },
+  },
+  '#withType':: d.fn(help='`google-beta.string.withType` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the type field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `type` field.\n', args=[]),
+  withType(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          type: value,
+        },
+      },
+    },
+  },
+  '#withWorkload':: d.fn(help='`google-beta.list[obj].withWorkload` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the workload field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withWorkloadMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `workload` field.\n', args=[]),
+  withWorkload(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          workload: value,
+        },
+      },
+    },
+  },
+  '#withWorkloadMixin':: d.fn(help='`google-beta.list[obj].withWorkloadMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the workload field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withWorkload](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `workload` field.\n', args=[]),
+  withWorkloadMixin(resourceLabel, value): {
+    resource+: {
+      google_data_pipeline_pipeline+: {
+        [resourceLabel]+: {
+          workload+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  workload:: {
+    dataflow_flex_template_request:: {
+      launch_parameter:: {
+        environment:: {
+          '#new':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.launch_parameter.environment.new` constructs a new object with attributes and blocks configured for the `environment`\nTerraform sub block.\n\n\n\n**Args**:\n  - `additional_experiments` (`list`): Additional experiment flags for the job. When `null`, the `additional_experiments` field will be omitted from the resulting object.\n  - `additional_user_labels` (`obj`): Additional user labels to be specified for the job. Keys and values should follow the restrictions specified in the labeling restrictions page. An object containing a list of key/value pairs.\n'Example: { "name": "wrench", "mass": "1kg", "count": "3" }.'\n'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `additional_user_labels` field will be omitted from the resulting object.\n  - `enable_streaming_engine` (`bool`): Whether to enable Streaming Engine for the job. When `null`, the `enable_streaming_engine` field will be omitted from the resulting object.\n  - `flexrs_goal` (`string`): Set FlexRS goal for the job. https://cloud.google.com/dataflow/docs/guides/flexrs\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#FlexResourceSchedulingGoal Possible values: ["FLEXRS_UNSPECIFIED", "FLEXRS_SPEED_OPTIMIZED", "FLEXRS_COST_OPTIMIZED"] When `null`, the `flexrs_goal` field will be omitted from the resulting object.\n  - `ip_configuration` (`string`): Configuration for VM IPs.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#WorkerIPAddressConfiguration Possible values: ["WORKER_IP_UNSPECIFIED", "WORKER_IP_PUBLIC", "WORKER_IP_PRIVATE"] When `null`, the `ip_configuration` field will be omitted from the resulting object.\n  - `kms_key_name` (`string`): 'Name for the Cloud KMS key for the job. The key format is: projects//locations//keyRings//cryptoKeys/' When `null`, the `kms_key_name` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to use for the job. Defaults to the value from the template if not specified. When `null`, the `machine_type` field will be omitted from the resulting object.\n  - `max_workers` (`number`): The maximum number of Compute Engine instances to be made available to your pipeline during execution, from 1 to 1000. When `null`, the `max_workers` field will be omitted from the resulting object.\n  - `network` (`string`): Network to which VMs will be assigned. If empty or unspecified, the service will use the network "default". When `null`, the `network` field will be omitted from the resulting object.\n  - `num_workers` (`number`): The initial number of Compute Engine instances for the job. When `null`, the `num_workers` field will be omitted from the resulting object.\n  - `service_account_email` (`string`): The email address of the service account to run the job as. When `null`, the `service_account_email` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): Subnetwork to which VMs will be assigned, if desired. You can specify a subnetwork using either a complete URL or an abbreviated path. Expected to be of the form "https://www.googleapis.com/compute/v1/projects/HOST_PROJECT_ID/regions/REGION/subnetworks/SUBNETWORK" or "regions/REGION/subnetworks/SUBNETWORK". If the subnetwork is located in a Shared VPC network, you must use the complete URL. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `temp_location` (`string`): The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `temp_location` field will be omitted from the resulting object.\n  - `worker_region` (`string`): The Compute Engine region (https://cloud.google.com/compute/docs/regions-zones/regions-zones) in which worker processing should occur, e.g. "us-west1". Mutually exclusive with workerZone. If neither workerRegion nor workerZone is specified, default to the control plane's region. When `null`, the `worker_region` field will be omitted from the resulting object.\n  - `worker_zone` (`string`): The Compute Engine zone (https://cloud.google.com/compute/docs/regions-zones/regions-zones) in which worker processing should occur, e.g. "us-west1-a". Mutually exclusive with workerRegion. If neither workerRegion nor workerZone is specified, a zone in the control plane's region is chosen based on available capacity. If both workerZone and zone are set, workerZone takes precedence. When `null`, the `worker_zone` field will be omitted from the resulting object.\n  - `zone` (`string`): The Compute Engine availability zone for launching worker instances to run your pipeline. In the future, workerZone will take precedence. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `environment` sub block.\n', args=[]),
+          new(
+            additional_experiments=null,
+            additional_user_labels=null,
+            enable_streaming_engine=null,
+            flexrs_goal=null,
+            ip_configuration=null,
+            kms_key_name=null,
+            machine_type=null,
+            max_workers=null,
+            network=null,
+            num_workers=null,
+            service_account_email=null,
+            subnetwork=null,
+            temp_location=null,
+            worker_region=null,
+            worker_zone=null,
+            zone=null
+          ):: std.prune(a={
+            additional_experiments: additional_experiments,
+            additional_user_labels: additional_user_labels,
+            enable_streaming_engine: enable_streaming_engine,
+            flexrs_goal: flexrs_goal,
+            ip_configuration: ip_configuration,
+            kms_key_name: kms_key_name,
+            machine_type: machine_type,
+            max_workers: max_workers,
+            network: network,
+            num_workers: num_workers,
+            service_account_email: service_account_email,
+            subnetwork: subnetwork,
+            temp_location: temp_location,
+            worker_region: worker_region,
+            worker_zone: worker_zone,
+            zone: zone,
+          }),
+        },
+        '#new':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.launch_parameter.new` constructs a new object with attributes and blocks configured for the `launch_parameter`\nTerraform sub block.\n\n\n\n**Args**:\n  - `container_spec_gcs_path` (`string`): Cloud Storage path to a file with a JSON-serialized ContainerSpec as content. When `null`, the `container_spec_gcs_path` field will be omitted from the resulting object.\n  - `job_name` (`string`): The job name to use for the created job. For an update job request, the job name should be the same as the existing running job.\n  - `launch_options` (`obj`): Launch options for this Flex Template job. This is a common set of options across languages and templates. This should not be used to pass job parameters.\n'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `launch_options` field will be omitted from the resulting object.\n  - `parameters` (`obj`): 'The parameters for the Flex Template. Example: {"numWorkers":"5"}'\n'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `parameters` field will be omitted from the resulting object.\n  - `transform_name_mappings` (`obj`): 'Use this to pass transform name mappings for streaming update jobs. Example: {"oldTransformName":"newTransformName",...}'\n'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `transform_name_mappings` field will be omitted from the resulting object.\n  - `update` (`bool`): Set this to true if you are sending a request to update a running streaming job. When set, the job name should be the same as the running job. When `null`, the `update` field will be omitted from the resulting object.\n  - `environment` (`list[obj]`): The runtime environment for the Flex Template job.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#FlexTemplateRuntimeEnvironment When `null`, the `environment` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.launch_parameter.environment.new](#fn-workloadworkloaddataflow_flex_template_requestenvironmentnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `launch_parameter` sub block.\n', args=[]),
+        new(
+          job_name,
+          container_spec_gcs_path=null,
+          environment=null,
+          launch_options=null,
+          parameters=null,
+          transform_name_mappings=null,
+          update=null
+        ):: std.prune(a={
+          container_spec_gcs_path: container_spec_gcs_path,
+          environment: environment,
+          job_name: job_name,
+          launch_options: launch_options,
+          parameters: parameters,
+          transform_name_mappings: transform_name_mappings,
+          update: update,
+        }),
+      },
+      '#new':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.new` constructs a new object with attributes and blocks configured for the `dataflow_flex_template_request`\nTerraform sub block.\n\n\n\n**Args**:\n  - `location` (`string`): The regional endpoint to which to direct the request. For example, us-central1, us-west1.\n  - `project_id` (`string`): The ID of the Cloud Platform project that the job belongs to.\n  - `validate_only` (`bool`): If true, the request is validated but not actually executed. Defaults to false. When `null`, the `validate_only` field will be omitted from the resulting object.\n  - `launch_parameter` (`list[obj]`): Parameter to launch a job from a Flex Template.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#launchflextemplateparameter When `null`, the `launch_parameter` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.launch_parameter.new](#fn-workloadworkloadlaunch_parameternew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `dataflow_flex_template_request` sub block.\n', args=[]),
+      new(
+        location,
+        project_id,
+        launch_parameter=null,
+        validate_only=null
+      ):: std.prune(a={
+        launch_parameter: launch_parameter,
+        location: location,
+        project_id: project_id,
+        validate_only: validate_only,
+      }),
+    },
+    dataflow_launch_template_request:: {
+      launch_parameters:: {
+        environment:: {
+          '#new':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.launch_parameters.environment.new` constructs a new object with attributes and blocks configured for the `environment`\nTerraform sub block.\n\n\n\n**Args**:\n  - `additional_experiments` (`list`): Additional experiment flags for the job. When `null`, the `additional_experiments` field will be omitted from the resulting object.\n  - `additional_user_labels` (`obj`): Additional user labels to be specified for the job. Keys and values should follow the restrictions specified in the labeling restrictions page. An object containing a list of key/value pairs.\n'Example: { "name": "wrench", "mass": "1kg", "count": "3" }.'\n'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `additional_user_labels` field will be omitted from the resulting object.\n  - `bypass_temp_dir_validation` (`bool`): Whether to bypass the safety checks for the job's temporary directory. Use with caution. When `null`, the `bypass_temp_dir_validation` field will be omitted from the resulting object.\n  - `enable_streaming_engine` (`bool`): Whether to enable Streaming Engine for the job. When `null`, the `enable_streaming_engine` field will be omitted from the resulting object.\n  - `ip_configuration` (`string`): Configuration for VM IPs.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#WorkerIPAddressConfiguration Possible values: ["WORKER_IP_UNSPECIFIED", "WORKER_IP_PUBLIC", "WORKER_IP_PRIVATE"] When `null`, the `ip_configuration` field will be omitted from the resulting object.\n  - `kms_key_name` (`string`): 'Name for the Cloud KMS key for the job. The key format is: projects//locations//keyRings//cryptoKeys/' When `null`, the `kms_key_name` field will be omitted from the resulting object.\n  - `machine_type` (`string`): The machine type to use for the job. Defaults to the value from the template if not specified. When `null`, the `machine_type` field will be omitted from the resulting object.\n  - `max_workers` (`number`): The maximum number of Compute Engine instances to be made available to your pipeline during execution, from 1 to 1000. When `null`, the `max_workers` field will be omitted from the resulting object.\n  - `network` (`string`): Network to which VMs will be assigned. If empty or unspecified, the service will use the network "default". When `null`, the `network` field will be omitted from the resulting object.\n  - `num_workers` (`number`): The initial number of Compute Engine instances for the job. When `null`, the `num_workers` field will be omitted from the resulting object.\n  - `service_account_email` (`string`): The email address of the service account to run the job as. When `null`, the `service_account_email` field will be omitted from the resulting object.\n  - `subnetwork` (`string`): Subnetwork to which VMs will be assigned, if desired. You can specify a subnetwork using either a complete URL or an abbreviated path. Expected to be of the form "https://www.googleapis.com/compute/v1/projects/HOST_PROJECT_ID/regions/REGION/subnetworks/SUBNETWORK" or "regions/REGION/subnetworks/SUBNETWORK". If the subnetwork is located in a Shared VPC network, you must use the complete URL. When `null`, the `subnetwork` field will be omitted from the resulting object.\n  - `temp_location` (`string`): The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `temp_location` field will be omitted from the resulting object.\n  - `worker_region` (`string`): The Compute Engine region (https://cloud.google.com/compute/docs/regions-zones/regions-zones) in which worker processing should occur, e.g. "us-west1". Mutually exclusive with workerZone. If neither workerRegion nor workerZone is specified, default to the control plane's region. When `null`, the `worker_region` field will be omitted from the resulting object.\n  - `worker_zone` (`string`): The Compute Engine zone (https://cloud.google.com/compute/docs/regions-zones/regions-zones) in which worker processing should occur, e.g. "us-west1-a". Mutually exclusive with workerRegion. If neither workerRegion nor workerZone is specified, a zone in the control plane's region is chosen based on available capacity. If both workerZone and zone are set, workerZone takes precedence. When `null`, the `worker_zone` field will be omitted from the resulting object.\n  - `zone` (`string`): The Compute Engine availability zone for launching worker instances to run your pipeline. In the future, workerZone will take precedence. When `null`, the `zone` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `environment` sub block.\n', args=[]),
+          new(
+            additional_experiments=null,
+            additional_user_labels=null,
+            bypass_temp_dir_validation=null,
+            enable_streaming_engine=null,
+            ip_configuration=null,
+            kms_key_name=null,
+            machine_type=null,
+            max_workers=null,
+            network=null,
+            num_workers=null,
+            service_account_email=null,
+            subnetwork=null,
+            temp_location=null,
+            worker_region=null,
+            worker_zone=null,
+            zone=null
+          ):: std.prune(a={
+            additional_experiments: additional_experiments,
+            additional_user_labels: additional_user_labels,
+            bypass_temp_dir_validation: bypass_temp_dir_validation,
+            enable_streaming_engine: enable_streaming_engine,
+            ip_configuration: ip_configuration,
+            kms_key_name: kms_key_name,
+            machine_type: machine_type,
+            max_workers: max_workers,
+            network: network,
+            num_workers: num_workers,
+            service_account_email: service_account_email,
+            subnetwork: subnetwork,
+            temp_location: temp_location,
+            worker_region: worker_region,
+            worker_zone: worker_zone,
+            zone: zone,
+          }),
+        },
+        '#new':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.launch_parameters.new` constructs a new object with attributes and blocks configured for the `launch_parameters`\nTerraform sub block.\n\n\n\n**Args**:\n  - `job_name` (`string`): The job name to use for the created job.\n  - `parameters` (`obj`): The runtime parameters to pass to the job.\n'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `parameters` field will be omitted from the resulting object.\n  - `transform_name_mapping` (`obj`): Map of transform name prefixes of the job to be replaced to the corresponding name prefixes of the new job. Only applicable when updating a pipeline.\n'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `transform_name_mapping` field will be omitted from the resulting object.\n  - `update` (`bool`): If set, replace the existing pipeline with the name specified by jobName with this pipeline, preserving state. When `null`, the `update` field will be omitted from the resulting object.\n  - `environment` (`list[obj]`): The runtime environment for the job.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#RuntimeEnvironment When `null`, the `environment` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.launch_parameters.environment.new](#fn-workloadworkloaddataflow_launch_template_requestenvironmentnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `launch_parameters` sub block.\n', args=[]),
+        new(
+          job_name,
+          environment=null,
+          parameters=null,
+          transform_name_mapping=null,
+          update=null
+        ):: std.prune(a={
+          environment: environment,
+          job_name: job_name,
+          parameters: parameters,
+          transform_name_mapping: transform_name_mapping,
+          update: update,
+        }),
+      },
+      '#new':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.new` constructs a new object with attributes and blocks configured for the `dataflow_launch_template_request`\nTerraform sub block.\n\n\n\n**Args**:\n  - `gcs_path` (`string`): A Cloud Storage path to the template from which to create the job. Must be a valid Cloud Storage URL, beginning with 'gs://'. When `null`, the `gcs_path` field will be omitted from the resulting object.\n  - `location` (`string`): The regional endpoint to which to direct the request. When `null`, the `location` field will be omitted from the resulting object.\n  - `project_id` (`string`): The ID of the Cloud Platform project that the job belongs to.\n  - `validate_only` (`bool`): Set the `validate_only` field on the resulting object. When `null`, the `validate_only` field will be omitted from the resulting object.\n  - `launch_parameters` (`list[obj]`): The parameters of the template to launch. This should be part of the body of the POST request.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#launchtemplateparameters When `null`, the `launch_parameters` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.launch_parameters.new](#fn-workloadworkloadlaunch_parametersnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `dataflow_launch_template_request` sub block.\n', args=[]),
+      new(
+        project_id,
+        gcs_path=null,
+        launch_parameters=null,
+        location=null,
+        validate_only=null
+      ):: std.prune(a={
+        gcs_path: gcs_path,
+        launch_parameters: launch_parameters,
+        location: location,
+        project_id: project_id,
+        validate_only: validate_only,
+      }),
+    },
+    '#new':: d.fn(help='\n`google-beta.google_data_pipeline_pipeline.workload.new` constructs a new object with attributes and blocks configured for the `workload`\nTerraform sub block.\n\n\n\n**Args**:\n  - `dataflow_flex_template_request` (`list[obj]`): Template information and additional parameters needed to launch a Dataflow job using the flex launch API.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#launchflextemplaterequest When `null`, the `dataflow_flex_template_request` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.new](#fn-workloaddataflow_flex_template_requestnew) constructor.\n  - `dataflow_launch_template_request` (`list[obj]`): Template information and additional parameters needed to launch a Dataflow job using the standard launch API.\nhttps://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#launchtemplaterequest When `null`, the `dataflow_launch_template_request` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.new](#fn-workloaddataflow_launch_template_requestnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `workload` sub block.\n', args=[]),
+    new(
+      dataflow_flex_template_request=null,
+      dataflow_launch_template_request=null
+    ):: std.prune(a={
+      dataflow_flex_template_request: dataflow_flex_template_request,
+      dataflow_launch_template_request: dataflow_launch_template_request,
+    }),
+  },
+}
diff --git a/4.x/_gen/resources/dialogflow_cx_test_case.libsonnet b/4.x/_gen/resources/dialogflow_cx_test_case.libsonnet
new file mode 100644
index 0000000..3668c89
--- /dev/null
+++ b/4.x/_gen/resources/dialogflow_cx_test_case.libsonnet
@@ -0,0 +1,274 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_dialogflow_cx_test_case', url='', help='`google_dialogflow_cx_test_case` represents the `google-beta_google_dialogflow_cx_test_case` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  '#new':: d.fn(help="\n`google-beta.google_dialogflow_cx_test_case.new` injects a new `google-beta_google_dialogflow_cx_test_case` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_dialogflow_cx_test_case.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_dialogflow_cx_test_case` using the reference:\n\n    $._ref.google-beta_google_dialogflow_cx_test_case.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_dialogflow_cx_test_case.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `display_name` (`string`): The human-readable name of the test case, unique within the agent. Limit of 200 characters.\n  - `notes` (`string`): Additional freeform notes about the test case. Limit of 400 characters. When `null`, the `notes` field will be omitted from the resulting object.\n  - `parent` (`string`): The agent to create the test case for.\nFormat: projects/\u0026lt;Project ID\u0026gt;/locations/\u0026lt;Location ID\u0026gt;/agents/\u0026lt;Agent ID\u0026gt;. When `null`, the `parent` field will be omitted from the resulting object.\n  - `tags` (`list`): Tags are short descriptions that users may apply to test cases for organizational and filtering purposes.\nEach tag should start with \u0026#34;#\u0026#34; and has a limit of 30 characters When `null`, the `tags` field will be omitted from the resulting object.\n  - `test_case_conversation_turns` (`list[obj]`): The conversation turns uttered when the test case was created, in chronological order. These include the canonical set of agent utterances that should occur when the agent is working properly. When `null`, the `test_case_conversation_turns` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.new](#fn-test_case_conversation_turnsnew) constructor.\n  - `test_config` (`list[obj]`): Config for the test case. When `null`, the `test_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_config.new](#fn-test_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    display_name,
+    notes=null,
+    parent=null,
+    tags=null,
+    test_case_conversation_turns=null,
+    test_config=null,
+    timeouts=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_dialogflow_cx_test_case',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      display_name=display_name,
+      notes=notes,
+      parent=parent,
+      tags=tags,
+      test_case_conversation_turns=test_case_conversation_turns,
+      test_config=test_config,
+      timeouts=timeouts
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.newAttrs` constructs a new object with attributes and blocks configured for the `google_dialogflow_cx_test_case`\nTerraform resource.\n\nUnlike [google-beta.google_dialogflow_cx_test_case.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `display_name` (`string`): The human-readable name of the test case, unique within the agent. Limit of 200 characters.\n  - `notes` (`string`): Additional freeform notes about the test case. Limit of 400 characters. When `null`, the `notes` field will be omitted from the resulting object.\n  - `parent` (`string`): The agent to create the test case for.\nFormat: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>. When `null`, the `parent` field will be omitted from the resulting object.\n  - `tags` (`list`): Tags are short descriptions that users may apply to test cases for organizational and filtering purposes.\nEach tag should start with "#" and has a limit of 30 characters When `null`, the `tags` field will be omitted from the resulting object.\n  - `test_case_conversation_turns` (`list[obj]`): The conversation turns uttered when the test case was created, in chronological order. These include the canonical set of agent utterances that should occur when the agent is working properly. When `null`, the `test_case_conversation_turns` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.new](#fn-test_case_conversation_turnsnew) constructor.\n  - `test_config` (`list[obj]`): Config for the test case. When `null`, the `test_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_config.new](#fn-test_confignew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_dialogflow_cx_test_case` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    display_name,
+    notes=null,
+    parent=null,
+    tags=null,
+    test_case_conversation_turns=null,
+    test_config=null,
+    timeouts=null
+  ):: std.prune(a={
+    display_name: display_name,
+    notes: notes,
+    parent: parent,
+    tags: tags,
+    test_case_conversation_turns: test_case_conversation_turns,
+    test_config: test_config,
+    timeouts: timeouts,
+  }),
+  test_case_conversation_turns:: {
+    '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.new` constructs a new object with attributes and blocks configured for the `test_case_conversation_turns`\nTerraform sub block.\n\n\n\n**Args**:\n  - `user_input` (`list[obj]`): The user input. When `null`, the `user_input` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.new](#fn-test_case_conversation_turnsuser_inputnew) constructor.\n  - `virtual_agent_output` (`list[obj]`): The virtual agent output. When `null`, the `virtual_agent_output` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.new](#fn-test_case_conversation_turnsvirtual_agent_outputnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `test_case_conversation_turns` sub block.\n', args=[]),
+    new(
+      user_input=null,
+      virtual_agent_output=null
+    ):: std.prune(a={
+      user_input: user_input,
+      virtual_agent_output: virtual_agent_output,
+    }),
+    user_input:: {
+      input:: {
+        dtmf:: {
+          '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.dtmf.new` constructs a new object with attributes and blocks configured for the `dtmf`\nTerraform sub block.\n\n\n\n**Args**:\n  - `digits` (`string`): The dtmf digits. When `null`, the `digits` field will be omitted from the resulting object.\n  - `finish_digit` (`string`): The finish digit (if any). When `null`, the `finish_digit` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `dtmf` sub block.\n', args=[]),
+          new(
+            digits=null,
+            finish_digit=null
+          ):: std.prune(a={
+            digits: digits,
+            finish_digit: finish_digit,
+          }),
+        },
+        event:: {
+          '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.event.new` constructs a new object with attributes and blocks configured for the `event`\nTerraform sub block.\n\n\n\n**Args**:\n  - `event` (`string`): Name of the event.\n\n**Returns**:\n  - An attribute object that represents the `event` sub block.\n', args=[]),
+          new(
+            event
+          ):: std.prune(a={
+            event: event,
+          }),
+        },
+        '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.new` constructs a new object with attributes and blocks configured for the `input`\nTerraform sub block.\n\n\n\n**Args**:\n  - `language_code` (`string`): The language of the input. See [Language Support](https://cloud.google.com/dialogflow/cx/docs/reference/language) for a list of the currently supported language codes.\nNote that queries in the same session do not necessarily need to specify the same language. When `null`, the `language_code` field will be omitted from the resulting object.\n  - `dtmf` (`list[obj]`): The DTMF event to be handled. When `null`, the `dtmf` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.dtmf.new](#fn-test_case_conversation_turnstest_case_conversation_turnsuser_inputdtmfnew) constructor.\n  - `event` (`list[obj]`): The event to be triggered. When `null`, the `event` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.event.new](#fn-test_case_conversation_turnstest_case_conversation_turnsuser_inputeventnew) constructor.\n  - `text` (`list[obj]`): The natural language text to be processed. When `null`, the `text` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.text.new](#fn-test_case_conversation_turnstest_case_conversation_turnsuser_inputtextnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `input` sub block.\n', args=[]),
+        new(
+          dtmf=null,
+          event=null,
+          language_code=null,
+          text=null
+        ):: std.prune(a={
+          dtmf: dtmf,
+          event: event,
+          language_code: language_code,
+          text: text,
+        }),
+        text:: {
+          '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.text.new` constructs a new object with attributes and blocks configured for the `text`\nTerraform sub block.\n\n\n\n**Args**:\n  - `text` (`string`): The natural language text to be processed. Text length must not exceed 256 characters.\n\n**Returns**:\n  - An attribute object that represents the `text` sub block.\n', args=[]),
+          new(
+            text
+          ):: std.prune(a={
+            text: text,
+          }),
+        },
+      },
+      '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.new` constructs a new object with attributes and blocks configured for the `user_input`\nTerraform sub block.\n\n\n\n**Args**:\n  - `enable_sentiment_analysis` (`bool`): Whether sentiment analysis is enabled. When `null`, the `enable_sentiment_analysis` field will be omitted from the resulting object.\n  - `injected_parameters` (`string`): Parameters that need to be injected into the conversation during intent detection. When `null`, the `injected_parameters` field will be omitted from the resulting object.\n  - `is_webhook_enabled` (`bool`): If webhooks should be allowed to trigger in response to the user utterance. Often if parameters are injected, webhooks should not be enabled. When `null`, the `is_webhook_enabled` field will be omitted from the resulting object.\n  - `input` (`list[obj]`): User input. Supports text input, event input, dtmf input in the test case. When `null`, the `input` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.new](#fn-test_case_conversation_turnstest_case_conversation_turnsinputnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `user_input` sub block.\n', args=[]),
+      new(
+        enable_sentiment_analysis=null,
+        injected_parameters=null,
+        input=null,
+        is_webhook_enabled=null
+      ):: std.prune(a={
+        enable_sentiment_analysis: enable_sentiment_analysis,
+        injected_parameters: injected_parameters,
+        input: input,
+        is_webhook_enabled: is_webhook_enabled,
+      }),
+    },
+    virtual_agent_output:: {
+      current_page:: {
+        '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.current_page.new` constructs a new object with attributes and blocks configured for the `current_page`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): The unique identifier of the page.\nFormat: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>/flows/<Flow ID>/pages/<Page ID>. When `null`, the `name` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `current_page` sub block.\n', args=[]),
+        new(
+          name=null
+        ):: std.prune(a={
+          name: name,
+        }),
+      },
+      '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.new` constructs a new object with attributes and blocks configured for the `virtual_agent_output`\nTerraform sub block.\n\n\n\n**Args**:\n  - `session_parameters` (`string`): The session parameters available to the bot at this point. When `null`, the `session_parameters` field will be omitted from the resulting object.\n  - `current_page` (`list[obj]`): The [Page](https://cloud.google.com/dialogflow/cx/docs/reference/rest/v3/projects.locations.agents.flows.pages#Page) on which the utterance was spoken. When `null`, the `current_page` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.current_page.new](#fn-test_case_conversation_turnstest_case_conversation_turnscurrent_pagenew) constructor.\n  - `text_responses` (`list[obj]`): The text responses from the agent for the turn. When `null`, the `text_responses` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.text_responses.new](#fn-test_case_conversation_turnstest_case_conversation_turnstext_responsesnew) constructor.\n  - `triggered_intent` (`list[obj]`): The [Intent](https://cloud.google.com/dialogflow/cx/docs/reference/rest/v3/projects.locations.agents.intents#Intent) that triggered the response. When `null`, the `triggered_intent` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.triggered_intent.new](#fn-test_case_conversation_turnstest_case_conversation_turnstriggered_intentnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `virtual_agent_output` sub block.\n', args=[]),
+      new(
+        current_page=null,
+        session_parameters=null,
+        text_responses=null,
+        triggered_intent=null
+      ):: std.prune(a={
+        current_page: current_page,
+        session_parameters: session_parameters,
+        text_responses: text_responses,
+        triggered_intent: triggered_intent,
+      }),
+      text_responses:: {
+        '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.text_responses.new` constructs a new object with attributes and blocks configured for the `text_responses`\nTerraform sub block.\n\n\n\n**Args**:\n  - `text` (`list`): A collection of text responses. When `null`, the `text` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `text_responses` sub block.\n', args=[]),
+        new(
+          text=null
+        ):: std.prune(a={
+          text: text,
+        }),
+      },
+      triggered_intent:: {
+        '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.triggered_intent.new` constructs a new object with attributes and blocks configured for the `triggered_intent`\nTerraform sub block.\n\n\n\n**Args**:\n  - `name` (`string`): The unique identifier of the intent.\nFormat: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>/intents/<Intent ID>. When `null`, the `name` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `triggered_intent` sub block.\n', args=[]),
+        new(
+          name=null
+        ):: std.prune(a={
+          name: name,
+        }),
+      },
+    },
+  },
+  test_config:: {
+    '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.test_config.new` constructs a new object with attributes and blocks configured for the `test_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `flow` (`string`): Flow name to start the test case with.\nFormat: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>/flows/<Flow ID>.\nOnly one of flow and page should be set to indicate the starting point of the test case. If neither is set, the test case will start with start page on the default start flow. When `null`, the `flow` field will be omitted from the resulting object.\n  - `page` (`string`): The page to start the test case with.\nFormat: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>/flows/<Flow ID>/pages/<Page ID>.\nOnly one of flow and page should be set to indicate the starting point of the test case. If neither is set, the test case will start with start page on the default start flow. When `null`, the `page` field will be omitted from the resulting object.\n  - `tracking_parameters` (`list`): Session parameters to be compared when calculating differences. When `null`, the `tracking_parameters` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `test_config` sub block.\n', args=[]),
+    new(
+      flow=null,
+      page=null,
+      tracking_parameters=null
+    ):: std.prune(a={
+      flow: flow,
+      page: page,
+      tracking_parameters: tracking_parameters,
+    }),
+  },
+  timeouts:: {
+    '#new':: d.fn(help='\n`google-beta.google_dialogflow_cx_test_case.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
+    new(
+      create=null,
+      delete=null,
+      update=null
+    ):: std.prune(a={
+      create: create,
+      delete: delete,
+      update: update,
+    }),
+  },
+  '#withDisplayName':: d.fn(help='`google-beta.string.withDisplayName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the display_name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `display_name` field.\n', args=[]),
+  withDisplayName(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          display_name: value,
+        },
+      },
+    },
+  },
+  '#withNotes':: d.fn(help='`google-beta.string.withNotes` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the notes field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `notes` field.\n', args=[]),
+  withNotes(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          notes: value,
+        },
+      },
+    },
+  },
+  '#withParent':: d.fn(help='`google-beta.string.withParent` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the parent field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `parent` field.\n', args=[]),
+  withParent(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          parent: value,
+        },
+      },
+    },
+  },
+  '#withTags':: d.fn(help='`google-beta.list.withTags` constructs a mixin object that can be merged into the `list`\nTerraform resource block to set or update the tags field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list`): The value to set for the `tags` field.\n', args=[]),
+  withTags(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          tags: value,
+        },
+      },
+    },
+  },
+  '#withTestCaseConversationTurns':: d.fn(help='`google-beta.list[obj].withTestCaseConversationTurns` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the test_case_conversation_turns field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withTestCaseConversationTurnsMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `test_case_conversation_turns` field.\n', args=[]),
+  withTestCaseConversationTurns(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          test_case_conversation_turns: value,
+        },
+      },
+    },
+  },
+  '#withTestCaseConversationTurnsMixin':: d.fn(help='`google-beta.list[obj].withTestCaseConversationTurnsMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the test_case_conversation_turns field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withTestCaseConversationTurns](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `test_case_conversation_turns` field.\n', args=[]),
+  withTestCaseConversationTurnsMixin(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          test_case_conversation_turns+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withTestConfig':: d.fn(help='`google-beta.list[obj].withTestConfig` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the test_config field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withTestConfigMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `test_config` field.\n', args=[]),
+  withTestConfig(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          test_config: value,
+        },
+      },
+    },
+  },
+  '#withTestConfigMixin':: d.fn(help='`google-beta.list[obj].withTestConfigMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the test_config field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withTestConfig](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `test_config` field.\n', args=[]),
+  withTestConfigMixin(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          test_config+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withTimeouts':: d.fn(help='`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeouts(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          timeouts: value,
+        },
+      },
+    },
+  },
+  '#withTimeoutsMixin':: d.fn(help='`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will merge the passed in value to the existing map. If you wish\nto instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeoutsMixin(resourceLabel, value): {
+    resource+: {
+      google_dialogflow_cx_test_case+: {
+        [resourceLabel]+: {
+          timeouts+: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/firestore_database.libsonnet b/4.x/_gen/resources/firestore_database.libsonnet
index 821041b..28e2792 100644
--- a/4.x/_gen/resources/firestore_database.libsonnet
+++ b/4.x/_gen/resources/firestore_database.libsonnet
@@ -2,7 +2,7 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_firestore_database', url='', help='`google_firestore_database` represents the `google-beta_google_firestore_database` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
-  '#new':: d.fn(help="\n`google-beta.google_firestore_database.new` injects a new `google-beta_google_firestore_database` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_firestore_database.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_firestore_database` using the reference:\n\n    $._ref.google-beta_google_firestore_database.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_firestore_database.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `app_engine_integration_mode` (`string`): The App Engine integration mode to use for this database. Possible values: [\u0026#34;ENABLED\u0026#34;, \u0026#34;DISABLED\u0026#34;] When `null`, the `app_engine_integration_mode` field will be omitted from the resulting object.\n  - `concurrency_mode` (`string`): The concurrency control mode to use for this database. Possible values: [\u0026#34;OPTIMISTIC\u0026#34;, \u0026#34;PESSIMISTIC\u0026#34;, \u0026#34;OPTIMISTIC_WITH_ENTITY_GROUPS\u0026#34;] When `null`, the `concurrency_mode` field will be omitted from the resulting object.\n  - `location_id` (`string`): The location of the database. Available databases are listed at\nhttps://cloud.google.com/firestore/docs/locations.\n  - `name` (`string`): The ID to use for the database, which will become the final\ncomponent of the database\u0026#39;s resource name. This value should be 4-63\ncharacters. Valid characters are /[a-z][0-9]-/ with first character\na letter and the last a letter or a number. Must not be\nUUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.\n\u0026#34;(default)\u0026#34; database id is also valid.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `type` (`string`): The type of the database.\nSee https://cloud.google.com/datastore/docs/firestore-or-datastore\nfor information about how to choose. Possible values: [\u0026#34;FIRESTORE_NATIVE\u0026#34;, \u0026#34;DATASTORE_MODE\u0026#34;]\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_firestore_database.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_firestore_database.new` injects a new `google-beta_google_firestore_database` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_firestore_database.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_firestore_database` using the reference:\n\n    $._ref.google-beta_google_firestore_database.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_firestore_database.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `app_engine_integration_mode` (`string`): The App Engine integration mode to use for this database. Possible values: [\u0026#34;ENABLED\u0026#34;, \u0026#34;DISABLED\u0026#34;] When `null`, the `app_engine_integration_mode` field will be omitted from the resulting object.\n  - `concurrency_mode` (`string`): The concurrency control mode to use for this database. Possible values: [\u0026#34;OPTIMISTIC\u0026#34;, \u0026#34;PESSIMISTIC\u0026#34;, \u0026#34;OPTIMISTIC_WITH_ENTITY_GROUPS\u0026#34;] When `null`, the `concurrency_mode` field will be omitted from the resulting object.\n  - `location_id` (`string`): The location of the database. Available databases are listed at\nhttps://cloud.google.com/firestore/docs/locations.\n  - `name` (`string`): The ID to use for the database, which will become the final\ncomponent of the database\u0026#39;s resource name. This value should be 4-63\ncharacters. Valid characters are /[a-z][0-9]-/ with first character\na letter and the last a letter or a number. Must not be\nUUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.\n\u0026#34;(default)\u0026#34; database id is also valid.\n  - `point_in_time_recovery_enablement` (`string`): Whether to enable the PITR feature on this database.\nIf \u0026#39;POINT_IN_TIME_RECOVERY_ENABLED\u0026#39; is selected, reads are supported on selected versions of the data from within the past 7 days.\nversionRetentionPeriod and earliestVersionTime can be used to determine the supported versions. These include reads against any timestamp within the past hour\nand reads against 1-minute snapshots beyond 1 hour and within 7 days.\nIf \u0026#39;POINT_IN_TIME_RECOVERY_DISABLED\u0026#39; is selected, reads are supported on any version of the data from within the past 1 hour. Default value: \u0026#34;POINT_IN_TIME_RECOVERY_DISABLED\u0026#34; Possible values: [\u0026#34;POINT_IN_TIME_RECOVERY_ENABLED\u0026#34;, \u0026#34;POINT_IN_TIME_RECOVERY_DISABLED\u0026#34;] When `null`, the `point_in_time_recovery_enablement` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `type` (`string`): The type of the database.\nSee https://cloud.google.com/datastore/docs/firestore-or-datastore\nfor information about how to choose. Possible values: [\u0026#34;FIRESTORE_NATIVE\u0026#34;, \u0026#34;DATASTORE_MODE\u0026#34;]\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_firestore_database.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     location_id,
@@ -10,6 +10,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     type,
     app_engine_integration_mode=null,
     concurrency_mode=null,
+    point_in_time_recovery_enablement=null,
     project=null,
     timeouts=null,
     _meta={}
@@ -21,19 +22,21 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       concurrency_mode=concurrency_mode,
       location_id=location_id,
       name=name,
+      point_in_time_recovery_enablement=point_in_time_recovery_enablement,
       project=project,
       timeouts=timeouts,
       type=type
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_firestore_database.newAttrs` constructs a new object with attributes and blocks configured for the `google_firestore_database`\nTerraform resource.\n\nUnlike [google-beta.google_firestore_database.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `app_engine_integration_mode` (`string`): The App Engine integration mode to use for this database. Possible values: ["ENABLED", "DISABLED"] When `null`, the `app_engine_integration_mode` field will be omitted from the resulting object.\n  - `concurrency_mode` (`string`): The concurrency control mode to use for this database. Possible values: ["OPTIMISTIC", "PESSIMISTIC", "OPTIMISTIC_WITH_ENTITY_GROUPS"] When `null`, the `concurrency_mode` field will be omitted from the resulting object.\n  - `location_id` (`string`): The location of the database. Available databases are listed at\nhttps://cloud.google.com/firestore/docs/locations.\n  - `name` (`string`): The ID to use for the database, which will become the final\ncomponent of the database's resource name. This value should be 4-63\ncharacters. Valid characters are /[a-z][0-9]-/ with first character\na letter and the last a letter or a number. Must not be\nUUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.\n"(default)" database id is also valid.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `type` (`string`): The type of the database.\nSee https://cloud.google.com/datastore/docs/firestore-or-datastore\nfor information about how to choose. Possible values: ["FIRESTORE_NATIVE", "DATASTORE_MODE"]\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_firestore_database.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_firestore_database` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_firestore_database.newAttrs` constructs a new object with attributes and blocks configured for the `google_firestore_database`\nTerraform resource.\n\nUnlike [google-beta.google_firestore_database.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `app_engine_integration_mode` (`string`): The App Engine integration mode to use for this database. Possible values: ["ENABLED", "DISABLED"] When `null`, the `app_engine_integration_mode` field will be omitted from the resulting object.\n  - `concurrency_mode` (`string`): The concurrency control mode to use for this database. Possible values: ["OPTIMISTIC", "PESSIMISTIC", "OPTIMISTIC_WITH_ENTITY_GROUPS"] When `null`, the `concurrency_mode` field will be omitted from the resulting object.\n  - `location_id` (`string`): The location of the database. Available databases are listed at\nhttps://cloud.google.com/firestore/docs/locations.\n  - `name` (`string`): The ID to use for the database, which will become the final\ncomponent of the database's resource name. This value should be 4-63\ncharacters. Valid characters are /[a-z][0-9]-/ with first character\na letter and the last a letter or a number. Must not be\nUUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.\n"(default)" database id is also valid.\n  - `point_in_time_recovery_enablement` (`string`): Whether to enable the PITR feature on this database.\nIf 'POINT_IN_TIME_RECOVERY_ENABLED' is selected, reads are supported on selected versions of the data from within the past 7 days.\nversionRetentionPeriod and earliestVersionTime can be used to determine the supported versions. These include reads against any timestamp within the past hour\nand reads against 1-minute snapshots beyond 1 hour and within 7 days.\nIf 'POINT_IN_TIME_RECOVERY_DISABLED' is selected, reads are supported on any version of the data from within the past 1 hour. Default value: "POINT_IN_TIME_RECOVERY_DISABLED" Possible values: ["POINT_IN_TIME_RECOVERY_ENABLED", "POINT_IN_TIME_RECOVERY_DISABLED"] When `null`, the `point_in_time_recovery_enablement` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `type` (`string`): The type of the database.\nSee https://cloud.google.com/datastore/docs/firestore-or-datastore\nfor information about how to choose. Possible values: ["FIRESTORE_NATIVE", "DATASTORE_MODE"]\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_firestore_database.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_firestore_database` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     location_id,
     name,
     type,
     app_engine_integration_mode=null,
     concurrency_mode=null,
+    point_in_time_recovery_enablement=null,
     project=null,
     timeouts=null
   ):: std.prune(a={
@@ -41,6 +44,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     concurrency_mode: concurrency_mode,
     location_id: location_id,
     name: name,
+    point_in_time_recovery_enablement: point_in_time_recovery_enablement,
     project: project,
     timeouts: timeouts,
     type: type,
@@ -97,6 +101,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withPointInTimeRecoveryEnablement':: d.fn(help='`google-beta.string.withPointInTimeRecoveryEnablement` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the point_in_time_recovery_enablement field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `point_in_time_recovery_enablement` field.\n', args=[]),
+  withPointInTimeRecoveryEnablement(resourceLabel, value): {
+    resource+: {
+      google_firestore_database+: {
+        [resourceLabel]+: {
+          point_in_time_recovery_enablement: value,
+        },
+      },
+    },
+  },
   '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
   withProject(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/gke_hub_membership_binding.libsonnet b/4.x/_gen/resources/gke_hub_membership_binding.libsonnet
index 4bd3022..08809af 100644
--- a/4.x/_gen/resources/gke_hub_membership_binding.libsonnet
+++ b/4.x/_gen/resources/gke_hub_membership_binding.libsonnet
@@ -2,13 +2,14 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_gke_hub_membership_binding', url='', help='`google_gke_hub_membership_binding` represents the `google-beta_google_gke_hub_membership_binding` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
-  '#new':: d.fn(help="\n`google-beta.google_gke_hub_membership_binding.new` injects a new `google-beta_google_gke_hub_membership_binding` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gke_hub_membership_binding.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gke_hub_membership_binding` using the reference:\n\n    $._ref.google-beta_google_gke_hub_membership_binding.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gke_hub_membership_binding.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `location` (`string`): Location of the membership\n  - `membership_binding_id` (`string`): The client-provided identifier of the membership binding.\n  - `membership_id` (`string`): Id of the membership\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope` (`string`): A Workspace resource name in the format\n\u0026#39;projects/*/locations/*/scopes/*\u0026#39;.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_membership_binding.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_gke_hub_membership_binding.new` injects a new `google-beta_google_gke_hub_membership_binding` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gke_hub_membership_binding.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gke_hub_membership_binding` using the reference:\n\n    $._ref.google-beta_google_gke_hub_membership_binding.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gke_hub_membership_binding.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `labels` (`obj`): Labels for this Membership binding. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): Location of the membership\n  - `membership_binding_id` (`string`): The client-provided identifier of the membership binding.\n  - `membership_id` (`string`): Id of the membership\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope` (`string`): A Workspace resource name in the format\n\u0026#39;projects/*/locations/*/scopes/*\u0026#39;.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_membership_binding.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     location,
     membership_binding_id,
     membership_id,
     scope,
+    labels=null,
     project=null,
     timeouts=null,
     _meta={}
@@ -16,6 +17,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     type='google_gke_hub_membership_binding',
     label=resourceLabel,
     attrs=self.newAttrs(
+      labels=labels,
       location=location,
       membership_binding_id=membership_binding_id,
       membership_id=membership_id,
@@ -25,15 +27,17 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_gke_hub_membership_binding.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_hub_membership_binding`\nTerraform resource.\n\nUnlike [google-beta.google_gke_hub_membership_binding.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `location` (`string`): Location of the membership\n  - `membership_binding_id` (`string`): The client-provided identifier of the membership binding.\n  - `membership_id` (`string`): Id of the membership\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope` (`string`): A Workspace resource name in the format\n'projects/*/locations/*/scopes/*'.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_membership_binding.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gke_hub_membership_binding` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_gke_hub_membership_binding.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_hub_membership_binding`\nTerraform resource.\n\nUnlike [google-beta.google_gke_hub_membership_binding.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `labels` (`obj`): Labels for this Membership binding. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): Location of the membership\n  - `membership_binding_id` (`string`): The client-provided identifier of the membership binding.\n  - `membership_id` (`string`): Id of the membership\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope` (`string`): A Workspace resource name in the format\n'projects/*/locations/*/scopes/*'.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_membership_binding.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gke_hub_membership_binding` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     location,
     membership_binding_id,
     membership_id,
     scope,
+    labels=null,
     project=null,
     timeouts=null
   ):: std.prune(a={
+    labels: labels,
     location: location,
     membership_binding_id: membership_binding_id,
     membership_id: membership_id,
@@ -53,6 +57,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       update: update,
     }),
   },
+  '#withLabels':: d.fn(help='`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the labels field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `labels` field.\n', args=[]),
+  withLabels(resourceLabel, value): {
+    resource+: {
+      google_gke_hub_membership_binding+: {
+        [resourceLabel]+: {
+          labels: value,
+        },
+      },
+    },
+  },
   '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the location field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
   withLocation(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/gke_hub_namespace.libsonnet b/4.x/_gen/resources/gke_hub_namespace.libsonnet
index 5fe151d..cf7eefd 100644
--- a/4.x/_gen/resources/gke_hub_namespace.libsonnet
+++ b/4.x/_gen/resources/gke_hub_namespace.libsonnet
@@ -2,12 +2,14 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_gke_hub_namespace', url='', help='`google_gke_hub_namespace` represents the `google-beta_google_gke_hub_namespace` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
-  '#new':: d.fn(help="\n`google-beta.google_gke_hub_namespace.new` injects a new `google-beta_google_gke_hub_namespace` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gke_hub_namespace.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gke_hub_namespace` using the reference:\n\n    $._ref.google-beta_google_gke_hub_namespace.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gke_hub_namespace.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope` (`string`): The name of the Scope instance.\n  - `scope_id` (`string`): Id of the scope\n  - `scope_namespace_id` (`string`): The client-provided identifier of the namespace.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_namespace.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_gke_hub_namespace.new` injects a new `google-beta_google_gke_hub_namespace` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gke_hub_namespace.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gke_hub_namespace` using the reference:\n\n    $._ref.google-beta_google_gke_hub_namespace.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gke_hub_namespace.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `labels` (`obj`): Labels for this Namespace. When `null`, the `labels` field will be omitted from the resulting object.\n  - `namespace_labels` (`obj`): Namespace-level cluster namespace labels. These labels are applied\nto the related namespace of the member clusters bound to the parent\nScope. Scope-level labels (\u0026#39;namespace_labels\u0026#39; in the Fleet Scope\nresource) take precedence over Namespace-level labels if they share\na key. Keys and values must be Kubernetes-conformant. When `null`, the `namespace_labels` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope` (`string`): The name of the Scope instance.\n  - `scope_id` (`string`): Id of the scope\n  - `scope_namespace_id` (`string`): The client-provided identifier of the namespace.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_namespace.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     scope,
     scope_id,
     scope_namespace_id,
+    labels=null,
+    namespace_labels=null,
     project=null,
     timeouts=null,
     _meta={}
@@ -15,6 +17,8 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     type='google_gke_hub_namespace',
     label=resourceLabel,
     attrs=self.newAttrs(
+      labels=labels,
+      namespace_labels=namespace_labels,
       project=project,
       scope=scope,
       scope_id=scope_id,
@@ -23,14 +27,18 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_gke_hub_namespace.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_hub_namespace`\nTerraform resource.\n\nUnlike [google-beta.google_gke_hub_namespace.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope` (`string`): The name of the Scope instance.\n  - `scope_id` (`string`): Id of the scope\n  - `scope_namespace_id` (`string`): The client-provided identifier of the namespace.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_namespace.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gke_hub_namespace` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_gke_hub_namespace.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_hub_namespace`\nTerraform resource.\n\nUnlike [google-beta.google_gke_hub_namespace.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `labels` (`obj`): Labels for this Namespace. When `null`, the `labels` field will be omitted from the resulting object.\n  - `namespace_labels` (`obj`): Namespace-level cluster namespace labels. These labels are applied\nto the related namespace of the member clusters bound to the parent\nScope. Scope-level labels ('namespace_labels' in the Fleet Scope\nresource) take precedence over Namespace-level labels if they share\na key. Keys and values must be Kubernetes-conformant. When `null`, the `namespace_labels` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope` (`string`): The name of the Scope instance.\n  - `scope_id` (`string`): Id of the scope\n  - `scope_namespace_id` (`string`): The client-provided identifier of the namespace.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_namespace.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gke_hub_namespace` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     scope,
     scope_id,
     scope_namespace_id,
+    labels=null,
+    namespace_labels=null,
     project=null,
     timeouts=null
   ):: std.prune(a={
+    labels: labels,
+    namespace_labels: namespace_labels,
     project: project,
     scope: scope,
     scope_id: scope_id,
@@ -38,15 +46,37 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     timeouts: timeouts,
   }),
   timeouts:: {
-    '#new':: d.fn(help='\n`google-beta.google_gke_hub_namespace.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_gke_hub_namespace.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
     new(
       create=null,
-      delete=null
+      delete=null,
+      update=null
     ):: std.prune(a={
       create: create,
       delete: delete,
+      update: update,
     }),
   },
+  '#withLabels':: d.fn(help='`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the labels field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `labels` field.\n', args=[]),
+  withLabels(resourceLabel, value): {
+    resource+: {
+      google_gke_hub_namespace+: {
+        [resourceLabel]+: {
+          labels: value,
+        },
+      },
+    },
+  },
+  '#withNamespaceLabels':: d.fn(help='`google-beta.obj.withNamespaceLabels` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the namespace_labels field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `namespace_labels` field.\n', args=[]),
+  withNamespaceLabels(resourceLabel, value): {
+    resource+: {
+      google_gke_hub_namespace+: {
+        [resourceLabel]+: {
+          namespace_labels: value,
+        },
+      },
+    },
+  },
   '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
   withProject(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/gke_hub_scope.libsonnet b/4.x/_gen/resources/gke_hub_scope.libsonnet
index 345453e..4b2986c 100644
--- a/4.x/_gen/resources/gke_hub_scope.libsonnet
+++ b/4.x/_gen/resources/gke_hub_scope.libsonnet
@@ -2,39 +2,59 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_gke_hub_scope', url='', help='`google_gke_hub_scope` represents the `google-beta_google_gke_hub_scope` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
-  '#new':: d.fn(help="\n`google-beta.google_gke_hub_scope.new` injects a new `google-beta_google_gke_hub_scope` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gke_hub_scope.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gke_hub_scope` using the reference:\n\n    $._ref.google-beta_google_gke_hub_scope.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gke_hub_scope.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope_id` (`string`): The client-provided identifier of the scope.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_scope.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_gke_hub_scope.new` injects a new `google-beta_google_gke_hub_scope` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gke_hub_scope.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gke_hub_scope` using the reference:\n\n    $._ref.google-beta_google_gke_hub_scope.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gke_hub_scope.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `labels` (`obj`): Labels for this Scope. When `null`, the `labels` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope_id` (`string`): The client-provided identifier of the scope.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_scope.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     scope_id,
+    labels=null,
     project=null,
     timeouts=null,
     _meta={}
   ):: tf.withResource(
     type='google_gke_hub_scope',
     label=resourceLabel,
-    attrs=self.newAttrs(project=project, scope_id=scope_id, timeouts=timeouts),
+    attrs=self.newAttrs(
+      labels=labels,
+      project=project,
+      scope_id=scope_id,
+      timeouts=timeouts
+    ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_gke_hub_scope.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_hub_scope`\nTerraform resource.\n\nUnlike [google-beta.google_gke_hub_scope.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope_id` (`string`): The client-provided identifier of the scope.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_scope.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gke_hub_scope` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_gke_hub_scope.newAttrs` constructs a new object with attributes and blocks configured for the `google_gke_hub_scope`\nTerraform resource.\n\nUnlike [google-beta.google_gke_hub_scope.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `labels` (`obj`): Labels for this Scope. When `null`, the `labels` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `scope_id` (`string`): The client-provided identifier of the scope.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_scope.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gke_hub_scope` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     scope_id,
+    labels=null,
     project=null,
     timeouts=null
   ):: std.prune(a={
+    labels: labels,
     project: project,
     scope_id: scope_id,
     timeouts: timeouts,
   }),
   timeouts:: {
-    '#new':: d.fn(help='\n`google-beta.google_gke_hub_scope.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
+    '#new':: d.fn(help='\n`google-beta.google_gke_hub_scope.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
     new(
       create=null,
-      delete=null
+      delete=null,
+      update=null
     ):: std.prune(a={
       create: create,
       delete: delete,
+      update: update,
     }),
   },
+  '#withLabels':: d.fn(help='`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the labels field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `labels` field.\n', args=[]),
+  withLabels(resourceLabel, value): {
+    resource+: {
+      google_gke_hub_scope+: {
+        [resourceLabel]+: {
+          labels: value,
+        },
+      },
+    },
+  },
   '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
   withProject(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/gkeonprem_bare_metal_cluster.libsonnet b/4.x/_gen/resources/gkeonprem_bare_metal_cluster.libsonnet
index a2c3c03..8ee41f9 100644
--- a/4.x/_gen/resources/gkeonprem_bare_metal_cluster.libsonnet
+++ b/4.x/_gen/resources/gkeonprem_bare_metal_cluster.libsonnet
@@ -2,6 +2,14 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_gkeonprem_bare_metal_cluster', url='', help='`google_gkeonprem_bare_metal_cluster` represents the `google-beta_google_gkeonprem_bare_metal_cluster` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  binary_authorization:: {
+    '#new':: d.fn(help='\n`google-beta.google_gkeonprem_bare_metal_cluster.binary_authorization.new` constructs a new object with attributes and blocks configured for the `binary_authorization`\nTerraform sub block.\n\n\n\n**Args**:\n  - `evaluation_mode` (`string`): Mode of operation for binauthz policy evaluation. If unspecified,\ndefaults to DISABLED. Possible values: ["DISABLED", "PROJECT_SINGLETON_POLICY_ENFORCE"] When `null`, the `evaluation_mode` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `binary_authorization` sub block.\n', args=[]),
+    new(
+      evaluation_mode=null
+    ):: std.prune(a={
+      evaluation_mode: evaluation_mode,
+    }),
+  },
   cluster_operations:: {
     '#new':: d.fn(help='\n`google-beta.google_gkeonprem_bare_metal_cluster.cluster_operations.new` constructs a new object with attributes and blocks configured for the `cluster_operations`\nTerraform sub block.\n\n\n\n**Args**:\n  - `enable_application_logs` (`bool`): Whether collection of application logs/metrics should be enabled (in addition to system logs/metrics). When `null`, the `enable_application_logs` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `cluster_operations` sub block.\n', args=[]),
     new(
@@ -330,7 +338,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       }),
     },
   },
-  '#new':: d.fn(help="\n`google-beta.google_gkeonprem_bare_metal_cluster.new` injects a new `google-beta_google_gkeonprem_bare_metal_cluster` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gkeonprem_bare_metal_cluster.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gkeonprem_bare_metal_cluster` using the reference:\n\n    $._ref.google-beta_google_gkeonprem_bare_metal_cluster.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gkeonprem_bare_metal_cluster.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `admin_cluster_membership` (`string`): The Admin Cluster this Bare Metal User Cluster belongs to.\nThis is the full resource name of the Admin Cluster\u0026#39;s hub membership.\n  - `annotations` (`obj`): Annotations on the Bare Metal User Cluster.\nThis field has the same restrictions as Kubernetes annotations.\nThe total size of all keys and values combined is limited to 256k.\nKey can have 2 segments: prefix (optional) and name (required),\nseparated by a slash (/).\nPrefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `bare_metal_version` (`string`): A human readable description of this Bare Metal User Cluster.\n  - `description` (`string`): A human readable description of this Bare Metal User Cluster. When `null`, the `description` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the resource.\n  - `name` (`string`): The bare metal cluster name.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `cluster_operations` (`list[obj]`): Specifies the User Cluster\u0026#39;s observability infrastructure. When `null`, the `cluster_operations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.cluster_operations.new](#fn-cluster_operationsnew) constructor.\n  - `control_plane` (`list[obj]`): Specifies the control plane configuration. When `null`, the `control_plane` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.control_plane.new](#fn-control_planenew) constructor.\n  - `load_balancer` (`list[obj]`): Specifies the load balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.load_balancer.new](#fn-load_balancernew) constructor.\n  - `maintenance_config` (`list[obj]`): Specifies the workload node configurations. When `null`, the `maintenance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.maintenance_config.new](#fn-maintenance_confignew) constructor.\n  - `network_config` (`list[obj]`): Network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.network_config.new](#fn-network_confignew) constructor.\n  - `node_access_config` (`list[obj]`): Specifies the node access related settings for the bare metal user cluster. When `null`, the `node_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.node_access_config.new](#fn-node_access_confignew) constructor.\n  - `node_config` (`list[obj]`): Specifies the workload node configurations. When `null`, the `node_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.node_config.new](#fn-node_confignew) constructor.\n  - `os_environment_config` (`list[obj]`): OS environment related configurations. When `null`, the `os_environment_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.os_environment_config.new](#fn-os_environment_confignew) constructor.\n  - `proxy` (`list[obj]`): Specifies the cluster proxy configuration. When `null`, the `proxy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.proxy.new](#fn-proxynew) constructor.\n  - `security_config` (`list[obj]`): Specifies the security related settings for the Bare Metal User Cluster. When `null`, the `security_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.security_config.new](#fn-security_confignew) constructor.\n  - `storage` (`list[obj]`): Specifies the cluster storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.storage.new](#fn-storagenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_gkeonprem_bare_metal_cluster.new` injects a new `google-beta_google_gkeonprem_bare_metal_cluster` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gkeonprem_bare_metal_cluster.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gkeonprem_bare_metal_cluster` using the reference:\n\n    $._ref.google-beta_google_gkeonprem_bare_metal_cluster.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gkeonprem_bare_metal_cluster.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `admin_cluster_membership` (`string`): The Admin Cluster this Bare Metal User Cluster belongs to.\nThis is the full resource name of the Admin Cluster\u0026#39;s hub membership.\n  - `annotations` (`obj`): Annotations on the Bare Metal User Cluster.\nThis field has the same restrictions as Kubernetes annotations.\nThe total size of all keys and values combined is limited to 256k.\nKey can have 2 segments: prefix (optional) and name (required),\nseparated by a slash (/).\nPrefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `bare_metal_version` (`string`): A human readable description of this Bare Metal User Cluster.\n  - `description` (`string`): A human readable description of this Bare Metal User Cluster. When `null`, the `description` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the resource.\n  - `name` (`string`): The bare metal cluster name.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `binary_authorization` (`list[obj]`): Binary Authorization related configurations. When `null`, the `binary_authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.binary_authorization.new](#fn-binary_authorizationnew) constructor.\n  - `cluster_operations` (`list[obj]`): Specifies the User Cluster\u0026#39;s observability infrastructure. When `null`, the `cluster_operations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.cluster_operations.new](#fn-cluster_operationsnew) constructor.\n  - `control_plane` (`list[obj]`): Specifies the control plane configuration. When `null`, the `control_plane` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.control_plane.new](#fn-control_planenew) constructor.\n  - `load_balancer` (`list[obj]`): Specifies the load balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.load_balancer.new](#fn-load_balancernew) constructor.\n  - `maintenance_config` (`list[obj]`): Specifies the workload node configurations. When `null`, the `maintenance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.maintenance_config.new](#fn-maintenance_confignew) constructor.\n  - `network_config` (`list[obj]`): Network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.network_config.new](#fn-network_confignew) constructor.\n  - `node_access_config` (`list[obj]`): Specifies the node access related settings for the bare metal user cluster. When `null`, the `node_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.node_access_config.new](#fn-node_access_confignew) constructor.\n  - `node_config` (`list[obj]`): Specifies the workload node configurations. When `null`, the `node_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.node_config.new](#fn-node_confignew) constructor.\n  - `os_environment_config` (`list[obj]`): OS environment related configurations. When `null`, the `os_environment_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.os_environment_config.new](#fn-os_environment_confignew) constructor.\n  - `proxy` (`list[obj]`): Specifies the cluster proxy configuration. When `null`, the `proxy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.proxy.new](#fn-proxynew) constructor.\n  - `security_config` (`list[obj]`): Specifies the security related settings for the Bare Metal User Cluster. When `null`, the `security_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.security_config.new](#fn-security_confignew) constructor.\n  - `storage` (`list[obj]`): Specifies the cluster storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.storage.new](#fn-storagenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n  - `upgrade_policy` (`list[obj]`): The cluster upgrade policy. When `null`, the `upgrade_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.upgrade_policy.new](#fn-upgrade_policynew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     admin_cluster_membership,
@@ -338,6 +346,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     location,
     name,
     annotations=null,
+    binary_authorization=null,
     cluster_operations=null,
     control_plane=null,
     description=null,
@@ -352,6 +361,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     security_config=null,
     storage=null,
     timeouts=null,
+    upgrade_policy=null,
     _meta={}
   ):: tf.withResource(
     type='google_gkeonprem_bare_metal_cluster',
@@ -360,6 +370,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       admin_cluster_membership=admin_cluster_membership,
       annotations=annotations,
       bare_metal_version=bare_metal_version,
+      binary_authorization=binary_authorization,
       cluster_operations=cluster_operations,
       control_plane=control_plane,
       description=description,
@@ -375,17 +386,19 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       proxy=proxy,
       security_config=security_config,
       storage=storage,
-      timeouts=timeouts
+      timeouts=timeouts,
+      upgrade_policy=upgrade_policy
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_gkeonprem_bare_metal_cluster.newAttrs` constructs a new object with attributes and blocks configured for the `google_gkeonprem_bare_metal_cluster`\nTerraform resource.\n\nUnlike [google-beta.google_gkeonprem_bare_metal_cluster.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `admin_cluster_membership` (`string`): The Admin Cluster this Bare Metal User Cluster belongs to.\nThis is the full resource name of the Admin Cluster's hub membership.\n  - `annotations` (`obj`): Annotations on the Bare Metal User Cluster.\nThis field has the same restrictions as Kubernetes annotations.\nThe total size of all keys and values combined is limited to 256k.\nKey can have 2 segments: prefix (optional) and name (required),\nseparated by a slash (/).\nPrefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `bare_metal_version` (`string`): A human readable description of this Bare Metal User Cluster.\n  - `description` (`string`): A human readable description of this Bare Metal User Cluster. When `null`, the `description` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the resource.\n  - `name` (`string`): The bare metal cluster name.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `cluster_operations` (`list[obj]`): Specifies the User Cluster's observability infrastructure. When `null`, the `cluster_operations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.cluster_operations.new](#fn-cluster_operationsnew) constructor.\n  - `control_plane` (`list[obj]`): Specifies the control plane configuration. When `null`, the `control_plane` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.control_plane.new](#fn-control_planenew) constructor.\n  - `load_balancer` (`list[obj]`): Specifies the load balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.load_balancer.new](#fn-load_balancernew) constructor.\n  - `maintenance_config` (`list[obj]`): Specifies the workload node configurations. When `null`, the `maintenance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.maintenance_config.new](#fn-maintenance_confignew) constructor.\n  - `network_config` (`list[obj]`): Network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.network_config.new](#fn-network_confignew) constructor.\n  - `node_access_config` (`list[obj]`): Specifies the node access related settings for the bare metal user cluster. When `null`, the `node_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.node_access_config.new](#fn-node_access_confignew) constructor.\n  - `node_config` (`list[obj]`): Specifies the workload node configurations. When `null`, the `node_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.node_config.new](#fn-node_confignew) constructor.\n  - `os_environment_config` (`list[obj]`): OS environment related configurations. When `null`, the `os_environment_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.os_environment_config.new](#fn-os_environment_confignew) constructor.\n  - `proxy` (`list[obj]`): Specifies the cluster proxy configuration. When `null`, the `proxy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.proxy.new](#fn-proxynew) constructor.\n  - `security_config` (`list[obj]`): Specifies the security related settings for the Bare Metal User Cluster. When `null`, the `security_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.security_config.new](#fn-security_confignew) constructor.\n  - `storage` (`list[obj]`): Specifies the cluster storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.storage.new](#fn-storagenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gkeonprem_bare_metal_cluster` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_gkeonprem_bare_metal_cluster.newAttrs` constructs a new object with attributes and blocks configured for the `google_gkeonprem_bare_metal_cluster`\nTerraform resource.\n\nUnlike [google-beta.google_gkeonprem_bare_metal_cluster.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `admin_cluster_membership` (`string`): The Admin Cluster this Bare Metal User Cluster belongs to.\nThis is the full resource name of the Admin Cluster's hub membership.\n  - `annotations` (`obj`): Annotations on the Bare Metal User Cluster.\nThis field has the same restrictions as Kubernetes annotations.\nThe total size of all keys and values combined is limited to 256k.\nKey can have 2 segments: prefix (optional) and name (required),\nseparated by a slash (/).\nPrefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `bare_metal_version` (`string`): A human readable description of this Bare Metal User Cluster.\n  - `description` (`string`): A human readable description of this Bare Metal User Cluster. When `null`, the `description` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the resource.\n  - `name` (`string`): The bare metal cluster name.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `binary_authorization` (`list[obj]`): Binary Authorization related configurations. When `null`, the `binary_authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.binary_authorization.new](#fn-binary_authorizationnew) constructor.\n  - `cluster_operations` (`list[obj]`): Specifies the User Cluster's observability infrastructure. When `null`, the `cluster_operations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.cluster_operations.new](#fn-cluster_operationsnew) constructor.\n  - `control_plane` (`list[obj]`): Specifies the control plane configuration. When `null`, the `control_plane` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.control_plane.new](#fn-control_planenew) constructor.\n  - `load_balancer` (`list[obj]`): Specifies the load balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.load_balancer.new](#fn-load_balancernew) constructor.\n  - `maintenance_config` (`list[obj]`): Specifies the workload node configurations. When `null`, the `maintenance_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.maintenance_config.new](#fn-maintenance_confignew) constructor.\n  - `network_config` (`list[obj]`): Network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.network_config.new](#fn-network_confignew) constructor.\n  - `node_access_config` (`list[obj]`): Specifies the node access related settings for the bare metal user cluster. When `null`, the `node_access_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.node_access_config.new](#fn-node_access_confignew) constructor.\n  - `node_config` (`list[obj]`): Specifies the workload node configurations. When `null`, the `node_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.node_config.new](#fn-node_confignew) constructor.\n  - `os_environment_config` (`list[obj]`): OS environment related configurations. When `null`, the `os_environment_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.os_environment_config.new](#fn-os_environment_confignew) constructor.\n  - `proxy` (`list[obj]`): Specifies the cluster proxy configuration. When `null`, the `proxy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.proxy.new](#fn-proxynew) constructor.\n  - `security_config` (`list[obj]`): Specifies the security related settings for the Bare Metal User Cluster. When `null`, the `security_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.security_config.new](#fn-security_confignew) constructor.\n  - `storage` (`list[obj]`): Specifies the cluster storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.storage.new](#fn-storagenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n  - `upgrade_policy` (`list[obj]`): The cluster upgrade policy. When `null`, the `upgrade_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.upgrade_policy.new](#fn-upgrade_policynew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gkeonprem_bare_metal_cluster` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     admin_cluster_membership,
     bare_metal_version,
     location,
     name,
     annotations=null,
+    binary_authorization=null,
     cluster_operations=null,
     control_plane=null,
     description=null,
@@ -399,11 +412,13 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     proxy=null,
     security_config=null,
     storage=null,
-    timeouts=null
+    timeouts=null,
+    upgrade_policy=null
   ):: std.prune(a={
     admin_cluster_membership: admin_cluster_membership,
     annotations: annotations,
     bare_metal_version: bare_metal_version,
+    binary_authorization: binary_authorization,
     cluster_operations: cluster_operations,
     control_plane: control_plane,
     description: description,
@@ -420,6 +435,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     security_config: security_config,
     storage: storage,
     timeouts: timeouts,
+    upgrade_policy: upgrade_policy,
   }),
   node_access_config:: {
     '#new':: d.fn(help='\n`google-beta.google_gkeonprem_bare_metal_cluster.node_access_config.new` constructs a new object with attributes and blocks configured for the `node_access_config`\nTerraform sub block.\n\n\n\n**Args**:\n  - `login_user` (`string`): LoginUser is the user name used to access node machines.\nIt defaults to "root" if not set. When `null`, the `login_user` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `node_access_config` sub block.\n', args=[]),
@@ -533,6 +549,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       update: update,
     }),
   },
+  upgrade_policy:: {
+    '#new':: d.fn(help='\n`google-beta.google_gkeonprem_bare_metal_cluster.upgrade_policy.new` constructs a new object with attributes and blocks configured for the `upgrade_policy`\nTerraform sub block.\n\n\n\n**Args**:\n  - `policy` (`string`): Specifies which upgrade policy to use. Possible values: ["SERIAL", "CONCURRENT"] When `null`, the `policy` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `upgrade_policy` sub block.\n', args=[]),
+    new(
+      policy=null
+    ):: std.prune(a={
+      policy: policy,
+    }),
+  },
   '#withAdminClusterMembership':: d.fn(help='`google-beta.string.withAdminClusterMembership` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the admin_cluster_membership field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `admin_cluster_membership` field.\n', args=[]),
   withAdminClusterMembership(resourceLabel, value): {
     resource+: {
@@ -563,6 +587,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withBinaryAuthorization':: d.fn(help='`google-beta.list[obj].withBinaryAuthorization` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the binary_authorization field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withBinaryAuthorizationMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `binary_authorization` field.\n', args=[]),
+  withBinaryAuthorization(resourceLabel, value): {
+    resource+: {
+      google_gkeonprem_bare_metal_cluster+: {
+        [resourceLabel]+: {
+          binary_authorization: value,
+        },
+      },
+    },
+  },
+  '#withBinaryAuthorizationMixin':: d.fn(help='`google-beta.list[obj].withBinaryAuthorizationMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the binary_authorization field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withBinaryAuthorization](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `binary_authorization` field.\n', args=[]),
+  withBinaryAuthorizationMixin(resourceLabel, value): {
+    resource+: {
+      google_gkeonprem_bare_metal_cluster+: {
+        [resourceLabel]+: {
+          binary_authorization+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withClusterOperations':: d.fn(help='`google-beta.list[obj].withClusterOperations` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the cluster_operations field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withClusterOperationsMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `cluster_operations` field.\n', args=[]),
   withClusterOperations(resourceLabel, value): {
     resource+: {
@@ -843,4 +887,24 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withUpgradePolicy':: d.fn(help='`google-beta.list[obj].withUpgradePolicy` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the upgrade_policy field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withUpgradePolicyMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `upgrade_policy` field.\n', args=[]),
+  withUpgradePolicy(resourceLabel, value): {
+    resource+: {
+      google_gkeonprem_bare_metal_cluster+: {
+        [resourceLabel]+: {
+          upgrade_policy: value,
+        },
+      },
+    },
+  },
+  '#withUpgradePolicyMixin':: d.fn(help='`google-beta.list[obj].withUpgradePolicyMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the upgrade_policy field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withUpgradePolicy](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `upgrade_policy` field.\n', args=[]),
+  withUpgradePolicyMixin(resourceLabel, value): {
+    resource+: {
+      google_gkeonprem_bare_metal_cluster+: {
+        [resourceLabel]+: {
+          upgrade_policy+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
 }
diff --git a/4.x/_gen/resources/gkeonprem_vmware_cluster.libsonnet b/4.x/_gen/resources/gkeonprem_vmware_cluster.libsonnet
index ecb9458..45efcca 100644
--- a/4.x/_gen/resources/gkeonprem_vmware_cluster.libsonnet
+++ b/4.x/_gen/resources/gkeonprem_vmware_cluster.libsonnet
@@ -238,7 +238,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       }),
     },
   },
-  '#new':: d.fn(help="\n`google-beta.google_gkeonprem_vmware_cluster.new` injects a new `google-beta_google_gkeonprem_vmware_cluster` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gkeonprem_vmware_cluster.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gkeonprem_vmware_cluster` using the reference:\n\n    $._ref.google-beta_google_gkeonprem_vmware_cluster.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gkeonprem_vmware_cluster.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `admin_cluster_membership` (`string`): The admin cluster this VMware User Cluster belongs to.\nThis is the full resource name of the admin cluster\u0026#39;s hub membership.\nIn the future, references to other resource types might be allowed if\nadmin clusters are modeled as their own resources.\n  - `annotations` (`obj`): Annotations on the VMware User Cluster.\nThis field has the same restrictions as Kubernetes annotations.\nThe total size of all keys and values combined is limited to 256k.\nKey can have 2 segments: prefix (optional) and name (required),\nseparated by a slash (/).\nPrefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `description` (`string`): A human readable description of this VMware User Cluster. When `null`, the `description` field will be omitted from the resulting object.\n  - `enable_control_plane_v2` (`bool`): Enable control plane V2. Default to false. When `null`, the `enable_control_plane_v2` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the resource.\n  - `name` (`string`): The VMware cluster name.\n  - `on_prem_version` (`string`): The Anthos clusters on the VMware version for your user cluster.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `vm_tracking_enabled` (`bool`): Enable VM tracking. When `null`, the `vm_tracking_enabled` field will be omitted from the resulting object.\n  - `anti_affinity_groups` (`list[obj]`): AAGConfig specifies whether to spread VMware User Cluster nodes across at\nleast three physical hosts in the datacenter. When `null`, the `anti_affinity_groups` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.anti_affinity_groups.new](#fn-anti_affinity_groupsnew) constructor.\n  - `authorization` (`list[obj]`): RBAC policy that will be applied and managed by GKE On-Prem. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.authorization.new](#fn-authorizationnew) constructor.\n  - `auto_repair_config` (`list[obj]`): Configuration for auto repairing. When `null`, the `auto_repair_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.auto_repair_config.new](#fn-auto_repair_confignew) constructor.\n  - `control_plane_node` (`list[obj]`): VMware User Cluster control plane nodes must have either 1 or 3 replicas. When `null`, the `control_plane_node` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.control_plane_node.new](#fn-control_plane_nodenew) constructor.\n  - `dataplane_v2` (`list[obj]`): VmwareDataplaneV2Config specifies configuration for Dataplane V2. When `null`, the `dataplane_v2` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.dataplane_v2.new](#fn-dataplane_v2new) constructor.\n  - `load_balancer` (`list[obj]`): Load Balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.load_balancer.new](#fn-load_balancernew) constructor.\n  - `network_config` (`list[obj]`): The VMware User Cluster network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.network_config.new](#fn-network_confignew) constructor.\n  - `storage` (`list[obj]`): Storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.storage.new](#fn-storagenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_gkeonprem_vmware_cluster.new` injects a new `google-beta_google_gkeonprem_vmware_cluster` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_gkeonprem_vmware_cluster.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_gkeonprem_vmware_cluster` using the reference:\n\n    $._ref.google-beta_google_gkeonprem_vmware_cluster.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_gkeonprem_vmware_cluster.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `admin_cluster_membership` (`string`): The admin cluster this VMware User Cluster belongs to.\nThis is the full resource name of the admin cluster\u0026#39;s hub membership.\nIn the future, references to other resource types might be allowed if\nadmin clusters are modeled as their own resources.\n  - `annotations` (`obj`): Annotations on the VMware User Cluster.\nThis field has the same restrictions as Kubernetes annotations.\nThe total size of all keys and values combined is limited to 256k.\nKey can have 2 segments: prefix (optional) and name (required),\nseparated by a slash (/).\nPrefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `description` (`string`): A human readable description of this VMware User Cluster. When `null`, the `description` field will be omitted from the resulting object.\n  - `enable_control_plane_v2` (`bool`): Enable control plane V2. Default to false. When `null`, the `enable_control_plane_v2` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the resource.\n  - `name` (`string`): The VMware cluster name.\n  - `on_prem_version` (`string`): The Anthos clusters on the VMware version for your user cluster.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `vm_tracking_enabled` (`bool`): Enable VM tracking. When `null`, the `vm_tracking_enabled` field will be omitted from the resulting object.\n  - `anti_affinity_groups` (`list[obj]`): AAGConfig specifies whether to spread VMware User Cluster nodes across at\nleast three physical hosts in the datacenter. When `null`, the `anti_affinity_groups` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.anti_affinity_groups.new](#fn-anti_affinity_groupsnew) constructor.\n  - `authorization` (`list[obj]`): RBAC policy that will be applied and managed by GKE On-Prem. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.authorization.new](#fn-authorizationnew) constructor.\n  - `auto_repair_config` (`list[obj]`): Configuration for auto repairing. When `null`, the `auto_repair_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.auto_repair_config.new](#fn-auto_repair_confignew) constructor.\n  - `control_plane_node` (`list[obj]`): VMware User Cluster control plane nodes must have either 1 or 3 replicas. When `null`, the `control_plane_node` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.control_plane_node.new](#fn-control_plane_nodenew) constructor.\n  - `dataplane_v2` (`list[obj]`): VmwareDataplaneV2Config specifies configuration for Dataplane V2. When `null`, the `dataplane_v2` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.dataplane_v2.new](#fn-dataplane_v2new) constructor.\n  - `load_balancer` (`list[obj]`): Load Balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.load_balancer.new](#fn-load_balancernew) constructor.\n  - `network_config` (`list[obj]`): The VMware User Cluster network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.network_config.new](#fn-network_confignew) constructor.\n  - `storage` (`list[obj]`): Storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.storage.new](#fn-storagenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n  - `upgrade_policy` (`list[obj]`): Specifies upgrade policy for the cluster. When `null`, the `upgrade_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.upgrade_policy.new](#fn-upgrade_policynew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     admin_cluster_membership,
@@ -258,6 +258,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     project=null,
     storage=null,
     timeouts=null,
+    upgrade_policy=null,
     vm_tracking_enabled=null,
     _meta={}
   ):: tf.withResource(
@@ -281,11 +282,12 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       project=project,
       storage=storage,
       timeouts=timeouts,
+      upgrade_policy=upgrade_policy,
       vm_tracking_enabled=vm_tracking_enabled
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_gkeonprem_vmware_cluster.newAttrs` constructs a new object with attributes and blocks configured for the `google_gkeonprem_vmware_cluster`\nTerraform resource.\n\nUnlike [google-beta.google_gkeonprem_vmware_cluster.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `admin_cluster_membership` (`string`): The admin cluster this VMware User Cluster belongs to.\nThis is the full resource name of the admin cluster's hub membership.\nIn the future, references to other resource types might be allowed if\nadmin clusters are modeled as their own resources.\n  - `annotations` (`obj`): Annotations on the VMware User Cluster.\nThis field has the same restrictions as Kubernetes annotations.\nThe total size of all keys and values combined is limited to 256k.\nKey can have 2 segments: prefix (optional) and name (required),\nseparated by a slash (/).\nPrefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `description` (`string`): A human readable description of this VMware User Cluster. When `null`, the `description` field will be omitted from the resulting object.\n  - `enable_control_plane_v2` (`bool`): Enable control plane V2. Default to false. When `null`, the `enable_control_plane_v2` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the resource.\n  - `name` (`string`): The VMware cluster name.\n  - `on_prem_version` (`string`): The Anthos clusters on the VMware version for your user cluster.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `vm_tracking_enabled` (`bool`): Enable VM tracking. When `null`, the `vm_tracking_enabled` field will be omitted from the resulting object.\n  - `anti_affinity_groups` (`list[obj]`): AAGConfig specifies whether to spread VMware User Cluster nodes across at\nleast three physical hosts in the datacenter. When `null`, the `anti_affinity_groups` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.anti_affinity_groups.new](#fn-anti_affinity_groupsnew) constructor.\n  - `authorization` (`list[obj]`): RBAC policy that will be applied and managed by GKE On-Prem. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.authorization.new](#fn-authorizationnew) constructor.\n  - `auto_repair_config` (`list[obj]`): Configuration for auto repairing. When `null`, the `auto_repair_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.auto_repair_config.new](#fn-auto_repair_confignew) constructor.\n  - `control_plane_node` (`list[obj]`): VMware User Cluster control plane nodes must have either 1 or 3 replicas. When `null`, the `control_plane_node` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.control_plane_node.new](#fn-control_plane_nodenew) constructor.\n  - `dataplane_v2` (`list[obj]`): VmwareDataplaneV2Config specifies configuration for Dataplane V2. When `null`, the `dataplane_v2` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.dataplane_v2.new](#fn-dataplane_v2new) constructor.\n  - `load_balancer` (`list[obj]`): Load Balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.load_balancer.new](#fn-load_balancernew) constructor.\n  - `network_config` (`list[obj]`): The VMware User Cluster network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.network_config.new](#fn-network_confignew) constructor.\n  - `storage` (`list[obj]`): Storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.storage.new](#fn-storagenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gkeonprem_vmware_cluster` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_gkeonprem_vmware_cluster.newAttrs` constructs a new object with attributes and blocks configured for the `google_gkeonprem_vmware_cluster`\nTerraform resource.\n\nUnlike [google-beta.google_gkeonprem_vmware_cluster.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `admin_cluster_membership` (`string`): The admin cluster this VMware User Cluster belongs to.\nThis is the full resource name of the admin cluster's hub membership.\nIn the future, references to other resource types might be allowed if\nadmin clusters are modeled as their own resources.\n  - `annotations` (`obj`): Annotations on the VMware User Cluster.\nThis field has the same restrictions as Kubernetes annotations.\nThe total size of all keys and values combined is limited to 256k.\nKey can have 2 segments: prefix (optional) and name (required),\nseparated by a slash (/).\nPrefix must be a DNS subdomain.\nName must be 63 characters or less, begin and end with alphanumerics,\nwith dashes (-), underscores (_), dots (.), and alphanumerics between. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `description` (`string`): A human readable description of this VMware User Cluster. When `null`, the `description` field will be omitted from the resulting object.\n  - `enable_control_plane_v2` (`bool`): Enable control plane V2. Default to false. When `null`, the `enable_control_plane_v2` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the resource.\n  - `name` (`string`): The VMware cluster name.\n  - `on_prem_version` (`string`): The Anthos clusters on the VMware version for your user cluster.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `vm_tracking_enabled` (`bool`): Enable VM tracking. When `null`, the `vm_tracking_enabled` field will be omitted from the resulting object.\n  - `anti_affinity_groups` (`list[obj]`): AAGConfig specifies whether to spread VMware User Cluster nodes across at\nleast three physical hosts in the datacenter. When `null`, the `anti_affinity_groups` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.anti_affinity_groups.new](#fn-anti_affinity_groupsnew) constructor.\n  - `authorization` (`list[obj]`): RBAC policy that will be applied and managed by GKE On-Prem. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.authorization.new](#fn-authorizationnew) constructor.\n  - `auto_repair_config` (`list[obj]`): Configuration for auto repairing. When `null`, the `auto_repair_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.auto_repair_config.new](#fn-auto_repair_confignew) constructor.\n  - `control_plane_node` (`list[obj]`): VMware User Cluster control plane nodes must have either 1 or 3 replicas. When `null`, the `control_plane_node` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.control_plane_node.new](#fn-control_plane_nodenew) constructor.\n  - `dataplane_v2` (`list[obj]`): VmwareDataplaneV2Config specifies configuration for Dataplane V2. When `null`, the `dataplane_v2` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.dataplane_v2.new](#fn-dataplane_v2new) constructor.\n  - `load_balancer` (`list[obj]`): Load Balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.load_balancer.new](#fn-load_balancernew) constructor.\n  - `network_config` (`list[obj]`): The VMware User Cluster network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.network_config.new](#fn-network_confignew) constructor.\n  - `storage` (`list[obj]`): Storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.storage.new](#fn-storagenew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.timeouts.new](#fn-timeoutsnew) constructor.\n  - `upgrade_policy` (`list[obj]`): Specifies upgrade policy for the cluster. When `null`, the `upgrade_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.upgrade_policy.new](#fn-upgrade_policynew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gkeonprem_vmware_cluster` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     admin_cluster_membership,
     location,
@@ -304,6 +306,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     project=null,
     storage=null,
     timeouts=null,
+    upgrade_policy=null,
     vm_tracking_enabled=null
   ):: std.prune(a={
     admin_cluster_membership: admin_cluster_membership,
@@ -323,6 +326,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     project: project,
     storage: storage,
     timeouts: timeouts,
+    upgrade_policy: upgrade_policy,
     vm_tracking_enabled: vm_tracking_enabled,
   }),
   storage:: {
@@ -345,6 +349,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       update: update,
     }),
   },
+  upgrade_policy:: {
+    '#new':: d.fn(help='\n`google-beta.google_gkeonprem_vmware_cluster.upgrade_policy.new` constructs a new object with attributes and blocks configured for the `upgrade_policy`\nTerraform sub block.\n\n\n\n**Args**:\n  - `control_plane_only` (`bool`): Controls whether the upgrade applies to the control plane only. When `null`, the `control_plane_only` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `upgrade_policy` sub block.\n', args=[]),
+    new(
+      control_plane_only=null
+    ):: std.prune(a={
+      control_plane_only: control_plane_only,
+    }),
+  },
   '#withAdminClusterMembership':: d.fn(help='`google-beta.string.withAdminClusterMembership` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the admin_cluster_membership field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `admin_cluster_membership` field.\n', args=[]),
   withAdminClusterMembership(resourceLabel, value): {
     resource+: {
@@ -605,6 +617,26 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withUpgradePolicy':: d.fn(help='`google-beta.list[obj].withUpgradePolicy` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the upgrade_policy field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withUpgradePolicyMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `upgrade_policy` field.\n', args=[]),
+  withUpgradePolicy(resourceLabel, value): {
+    resource+: {
+      google_gkeonprem_vmware_cluster+: {
+        [resourceLabel]+: {
+          upgrade_policy: value,
+        },
+      },
+    },
+  },
+  '#withUpgradePolicyMixin':: d.fn(help='`google-beta.list[obj].withUpgradePolicyMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the upgrade_policy field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withUpgradePolicy](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `upgrade_policy` field.\n', args=[]),
+  withUpgradePolicyMixin(resourceLabel, value): {
+    resource+: {
+      google_gkeonprem_vmware_cluster+: {
+        [resourceLabel]+: {
+          upgrade_policy+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
   '#withVmTrackingEnabled':: d.fn(help='`google-beta.bool.withVmTrackingEnabled` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the vm_tracking_enabled field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `vm_tracking_enabled` field.\n', args=[]),
   withVmTrackingEnabled(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/secret_manager_secret.libsonnet b/4.x/_gen/resources/secret_manager_secret.libsonnet
index 70c0650..d83d51d 100644
--- a/4.x/_gen/resources/secret_manager_secret.libsonnet
+++ b/4.x/_gen/resources/secret_manager_secret.libsonnet
@@ -62,11 +62,29 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     version_aliases: version_aliases,
   }),
   replication:: {
-    '#new':: d.fn(help='\n`google-beta.google_secret_manager_secret.replication.new` constructs a new object with attributes and blocks configured for the `replication`\nTerraform sub block.\n\n\n\n**Args**:\n  - `automatic` (`bool`): The Secret will automatically be replicated without any restrictions. When `null`, the `automatic` field will be omitted from the resulting object.\n  - `user_managed` (`list[obj]`): The Secret will be replicated to the regions specified by the user. When `null`, the `user_managed` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret.replication.user_managed.new](#fn-replicationuser_managednew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `replication` sub block.\n', args=[]),
+    auto:: {
+      customer_managed_encryption:: {
+        '#new':: d.fn(help='\n`google-beta.google_secret_manager_secret.replication.auto.customer_managed_encryption.new` constructs a new object with attributes and blocks configured for the `customer_managed_encryption`\nTerraform sub block.\n\n\n\n**Args**:\n  - `kms_key_name` (`string`): The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.\n\n**Returns**:\n  - An attribute object that represents the `customer_managed_encryption` sub block.\n', args=[]),
+        new(
+          kms_key_name
+        ):: std.prune(a={
+          kms_key_name: kms_key_name,
+        }),
+      },
+      '#new':: d.fn(help='\n`google-beta.google_secret_manager_secret.replication.auto.new` constructs a new object with attributes and blocks configured for the `auto`\nTerraform sub block.\n\n\n\n**Args**:\n  - `customer_managed_encryption` (`list[obj]`): The customer-managed encryption configuration of the Secret.\nIf no configuration is provided, Google-managed default\nencryption is used. When `null`, the `customer_managed_encryption` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret.replication.auto.customer_managed_encryption.new](#fn-replicationreplicationcustomer_managed_encryptionnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `auto` sub block.\n', args=[]),
+      new(
+        customer_managed_encryption=null
+      ):: std.prune(a={
+        customer_managed_encryption: customer_managed_encryption,
+      }),
+    },
+    '#new':: d.fn(help='\n`google-beta.google_secret_manager_secret.replication.new` constructs a new object with attributes and blocks configured for the `replication`\nTerraform sub block.\n\n\n\n**Args**:\n  - `automatic` (`bool`): The Secret will automatically be replicated without any restrictions. When `null`, the `automatic` field will be omitted from the resulting object.\n  - `auto` (`list[obj]`): The Secret will automatically be replicated without any restrictions. When `null`, the `auto` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret.replication.auto.new](#fn-replicationautonew) constructor.\n  - `user_managed` (`list[obj]`): The Secret will be replicated to the regions specified by the user. When `null`, the `user_managed` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret.replication.user_managed.new](#fn-replicationuser_managednew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `replication` sub block.\n', args=[]),
     new(
+      auto=null,
       automatic=null,
       user_managed=null
     ):: std.prune(a={
+      auto: auto,
       automatic: automatic,
       user_managed: user_managed,
     }),
diff --git a/4.x/_gen/resources/secret_manager_secret_version.libsonnet b/4.x/_gen/resources/secret_manager_secret_version.libsonnet
index 468d3eb..89ec060 100644
--- a/4.x/_gen/resources/secret_manager_secret_version.libsonnet
+++ b/4.x/_gen/resources/secret_manager_secret_version.libsonnet
@@ -2,11 +2,12 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_secret_manager_secret_version', url='', help='`google_secret_manager_secret_version` represents the `google-beta_google_secret_manager_secret_version` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
-  '#new':: d.fn(help="\n`google-beta.google_secret_manager_secret_version.new` injects a new `google-beta_google_secret_manager_secret_version` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_secret_manager_secret_version.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_secret_manager_secret_version` using the reference:\n\n    $._ref.google-beta_google_secret_manager_secret_version.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_secret_manager_secret_version.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `enabled` (`bool`): The current state of the SecretVersion. When `null`, the `enabled` field will be omitted from the resulting object.\n  - `secret` (`string`): Secret Manager secret resource\n  - `secret_data` (`string`): The secret data. Must be no larger than 64KiB.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret_version.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_secret_manager_secret_version.new` injects a new `google-beta_google_secret_manager_secret_version` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_secret_manager_secret_version.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_secret_manager_secret_version` using the reference:\n\n    $._ref.google-beta_google_secret_manager_secret_version.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_secret_manager_secret_version.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `deletion_policy` (`string`): The deletion policy for the secret version. Setting \u0026#39;ABANDON\u0026#39; allows the resource\nto be abandoned rather than deleted. Setting \u0026#39;DISABLE\u0026#39; allows the resource to be\ndisabled rather than deleted. Default is \u0026#39;DELETE\u0026#39;. Possible values are:\n  * DELETE\n  * DISABLE\n  * ABANDON When `null`, the `deletion_policy` field will be omitted from the resulting object.\n  - `enabled` (`bool`): The current state of the SecretVersion. When `null`, the `enabled` field will be omitted from the resulting object.\n  - `secret` (`string`): Secret Manager secret resource\n  - `secret_data` (`string`): The secret data. Must be no larger than 64KiB.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret_version.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     secret,
     secret_data,
+    deletion_policy=null,
     enabled=null,
     timeouts=null,
     _meta={}
@@ -14,6 +15,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     type='google_secret_manager_secret_version',
     label=resourceLabel,
     attrs=self.newAttrs(
+      deletion_policy=deletion_policy,
       enabled=enabled,
       secret=secret,
       secret_data=secret_data,
@@ -21,13 +23,15 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_secret_manager_secret_version.newAttrs` constructs a new object with attributes and blocks configured for the `google_secret_manager_secret_version`\nTerraform resource.\n\nUnlike [google-beta.google_secret_manager_secret_version.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `enabled` (`bool`): The current state of the SecretVersion. When `null`, the `enabled` field will be omitted from the resulting object.\n  - `secret` (`string`): Secret Manager secret resource\n  - `secret_data` (`string`): The secret data. Must be no larger than 64KiB.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret_version.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_secret_manager_secret_version` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_secret_manager_secret_version.newAttrs` constructs a new object with attributes and blocks configured for the `google_secret_manager_secret_version`\nTerraform resource.\n\nUnlike [google-beta.google_secret_manager_secret_version.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `deletion_policy` (`string`): The deletion policy for the secret version. Setting 'ABANDON' allows the resource\nto be abandoned rather than deleted. Setting 'DISABLE' allows the resource to be\ndisabled rather than deleted. Default is 'DELETE'. Possible values are:\n  * DELETE\n  * DISABLE\n  * ABANDON When `null`, the `deletion_policy` field will be omitted from the resulting object.\n  - `enabled` (`bool`): The current state of the SecretVersion. When `null`, the `enabled` field will be omitted from the resulting object.\n  - `secret` (`string`): Secret Manager secret resource\n  - `secret_data` (`string`): The secret data. Must be no larger than 64KiB.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret_version.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_secret_manager_secret_version` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     secret,
     secret_data,
+    deletion_policy=null,
     enabled=null,
     timeouts=null
   ):: std.prune(a={
+    deletion_policy: deletion_policy,
     enabled: enabled,
     secret: secret,
     secret_data: secret_data,
@@ -43,6 +47,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       delete: delete,
     }),
   },
+  '#withDeletionPolicy':: d.fn(help='`google-beta.string.withDeletionPolicy` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the deletion_policy field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `deletion_policy` field.\n', args=[]),
+  withDeletionPolicy(resourceLabel, value): {
+    resource+: {
+      google_secret_manager_secret_version+: {
+        [resourceLabel]+: {
+          deletion_policy: value,
+        },
+      },
+    },
+  },
   '#withEnabled':: d.fn(help='`google-beta.bool.withEnabled` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the enabled field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `enabled` field.\n', args=[]),
   withEnabled(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/storage_insights_report_config.libsonnet b/4.x/_gen/resources/storage_insights_report_config.libsonnet
new file mode 100644
index 0000000..0f7c321
--- /dev/null
+++ b/4.x/_gen/resources/storage_insights_report_config.libsonnet
@@ -0,0 +1,248 @@
+local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
+local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
+{
+  '#':: d.pkg(name='google_storage_insights_report_config', url='', help='`google_storage_insights_report_config` represents the `google-beta_google_storage_insights_report_config` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
+  csv_options:: {
+    '#new':: d.fn(help='\n`google-beta.google_storage_insights_report_config.csv_options.new` constructs a new object with attributes and blocks configured for the `csv_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `delimiter` (`string`): The delimiter used to separate the fields in the inventory report CSV file. When `null`, the `delimiter` field will be omitted from the resulting object.\n  - `header_required` (`bool`): The boolean that indicates whether or not headers are included in the inventory report CSV file. When `null`, the `header_required` field will be omitted from the resulting object.\n  - `record_separator` (`string`): The character used to separate the records in the inventory report CSV file. When `null`, the `record_separator` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `csv_options` sub block.\n', args=[]),
+    new(
+      delimiter=null,
+      header_required=null,
+      record_separator=null
+    ):: std.prune(a={
+      delimiter: delimiter,
+      header_required: header_required,
+      record_separator: record_separator,
+    }),
+  },
+  frequency_options:: {
+    end_date:: {
+      '#new':: d.fn(help='\n`google-beta.google_storage_insights_report_config.frequency_options.end_date.new` constructs a new object with attributes and blocks configured for the `end_date`\nTerraform sub block.\n\n\n\n**Args**:\n  - `day` (`number`): The day of the month to stop generating inventory reports.\n  - `month` (`number`): The month to stop generating inventory reports.\n  - `year` (`number`): The year to stop generating inventory reports\n\n**Returns**:\n  - An attribute object that represents the `end_date` sub block.\n', args=[]),
+      new(
+        day,
+        month,
+        year
+      ):: std.prune(a={
+        day: day,
+        month: month,
+        year: year,
+      }),
+    },
+    '#new':: d.fn(help='\n`google-beta.google_storage_insights_report_config.frequency_options.new` constructs a new object with attributes and blocks configured for the `frequency_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `frequency` (`string`): The frequency in which inventory reports are generated. Values are DAILY or WEEKLY. Possible values: ["DAILY", "WEEKLY"]\n  - `end_date` (`list[obj]`): The date to stop generating inventory reports. For example, {"day": 15, "month": 9, "year": 2022}. When `null`, the `end_date` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.frequency_options.end_date.new](#fn-frequency_optionsend_datenew) constructor.\n  - `start_date` (`list[obj]`): The date to start generating inventory reports. For example, {"day": 15, "month": 8, "year": 2022}. When `null`, the `start_date` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.frequency_options.start_date.new](#fn-frequency_optionsstart_datenew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `frequency_options` sub block.\n', args=[]),
+    new(
+      frequency,
+      end_date=null,
+      start_date=null
+    ):: std.prune(a={
+      end_date: end_date,
+      frequency: frequency,
+      start_date: start_date,
+    }),
+    start_date:: {
+      '#new':: d.fn(help='\n`google-beta.google_storage_insights_report_config.frequency_options.start_date.new` constructs a new object with attributes and blocks configured for the `start_date`\nTerraform sub block.\n\n\n\n**Args**:\n  - `day` (`number`): The day of the month to start generating inventory reports.\n  - `month` (`number`): The month to start generating inventory reports.\n  - `year` (`number`): The year to start generating inventory reports\n\n**Returns**:\n  - An attribute object that represents the `start_date` sub block.\n', args=[]),
+      new(
+        day,
+        month,
+        year
+      ):: std.prune(a={
+        day: day,
+        month: month,
+        year: year,
+      }),
+    },
+  },
+  '#new':: d.fn(help="\n`google-beta.google_storage_insights_report_config.new` injects a new `google-beta_google_storage_insights_report_config` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_storage_insights_report_config.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_storage_insights_report_config` using the reference:\n\n    $._ref.google-beta_google_storage_insights_report_config.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_storage_insights_report_config.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `display_name` (`string`): The editable display name of the inventory report configuration. Has a limit of 256 characters. Can be empty. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the ReportConfig. The source and destination buckets specified in the ReportConfig\nmust be in the same location.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `csv_options` (`list[obj]`): Options for configuring the format of the inventory report CSV file. When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.csv_options.new](#fn-csv_optionsnew) constructor.\n  - `frequency_options` (`list[obj]`): Options for configuring how inventory reports are generated. When `null`, the `frequency_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.frequency_options.new](#fn-frequency_optionsnew) constructor.\n  - `object_metadata_report_options` (`list[obj]`): Options for including metadata in an inventory report. When `null`, the `object_metadata_report_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.object_metadata_report_options.new](#fn-object_metadata_report_optionsnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  new(
+    resourceLabel,
+    location,
+    csv_options=null,
+    display_name=null,
+    frequency_options=null,
+    object_metadata_report_options=null,
+    project=null,
+    timeouts=null,
+    _meta={}
+  ):: tf.withResource(
+    type='google_storage_insights_report_config',
+    label=resourceLabel,
+    attrs=self.newAttrs(
+      csv_options=csv_options,
+      display_name=display_name,
+      frequency_options=frequency_options,
+      location=location,
+      object_metadata_report_options=object_metadata_report_options,
+      project=project,
+      timeouts=timeouts
+    ),
+    _meta=_meta
+  ),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_storage_insights_report_config.newAttrs` constructs a new object with attributes and blocks configured for the `google_storage_insights_report_config`\nTerraform resource.\n\nUnlike [google-beta.google_storage_insights_report_config.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `display_name` (`string`): The editable display name of the inventory report configuration. Has a limit of 256 characters. Can be empty. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `location` (`string`): The location of the ReportConfig. The source and destination buckets specified in the ReportConfig\nmust be in the same location.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `csv_options` (`list[obj]`): Options for configuring the format of the inventory report CSV file. When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.csv_options.new](#fn-csv_optionsnew) constructor.\n  - `frequency_options` (`list[obj]`): Options for configuring how inventory reports are generated. When `null`, the `frequency_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.frequency_options.new](#fn-frequency_optionsnew) constructor.\n  - `object_metadata_report_options` (`list[obj]`): Options for including metadata in an inventory report. When `null`, the `object_metadata_report_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.object_metadata_report_options.new](#fn-object_metadata_report_optionsnew) constructor.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_storage_insights_report_config` resource into the root Terraform configuration.\n', args=[]),
+  newAttrs(
+    location,
+    csv_options=null,
+    display_name=null,
+    frequency_options=null,
+    object_metadata_report_options=null,
+    project=null,
+    timeouts=null
+  ):: std.prune(a={
+    csv_options: csv_options,
+    display_name: display_name,
+    frequency_options: frequency_options,
+    location: location,
+    object_metadata_report_options: object_metadata_report_options,
+    project: project,
+    timeouts: timeouts,
+  }),
+  object_metadata_report_options:: {
+    '#new':: d.fn(help='\n`google-beta.google_storage_insights_report_config.object_metadata_report_options.new` constructs a new object with attributes and blocks configured for the `object_metadata_report_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `metadata_fields` (`list`): The metadata fields included in an inventory report.\n  - `storage_destination_options` (`list[obj]`): Options for where the inventory reports are stored. When `null`, the `storage_destination_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.object_metadata_report_options.storage_destination_options.new](#fn-object_metadata_report_optionsstorage_destination_optionsnew) constructor.\n  - `storage_filters` (`list[obj]`): A nested object resource When `null`, the `storage_filters` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.object_metadata_report_options.storage_filters.new](#fn-object_metadata_report_optionsstorage_filtersnew) constructor.\n\n**Returns**:\n  - An attribute object that represents the `object_metadata_report_options` sub block.\n', args=[]),
+    new(
+      metadata_fields,
+      storage_destination_options=null,
+      storage_filters=null
+    ):: std.prune(a={
+      metadata_fields: metadata_fields,
+      storage_destination_options: storage_destination_options,
+      storage_filters: storage_filters,
+    }),
+    storage_destination_options:: {
+      '#new':: d.fn(help='\n`google-beta.google_storage_insights_report_config.object_metadata_report_options.storage_destination_options.new` constructs a new object with attributes and blocks configured for the `storage_destination_options`\nTerraform sub block.\n\n\n\n**Args**:\n  - `bucket` (`string`): The destination bucket that stores the generated inventory reports.\n  - `destination_path` (`string`): The path within the destination bucket to store generated inventory reports. When `null`, the `destination_path` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `storage_destination_options` sub block.\n', args=[]),
+      new(
+        bucket,
+        destination_path=null
+      ):: std.prune(a={
+        bucket: bucket,
+        destination_path: destination_path,
+      }),
+    },
+    storage_filters:: {
+      '#new':: d.fn(help='\n`google-beta.google_storage_insights_report_config.object_metadata_report_options.storage_filters.new` constructs a new object with attributes and blocks configured for the `storage_filters`\nTerraform sub block.\n\n\n\n**Args**:\n  - `bucket` (`string`): The filter to use when specifying which bucket to generate inventory reports for. When `null`, the `bucket` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `storage_filters` sub block.\n', args=[]),
+      new(
+        bucket=null
+      ):: std.prune(a={
+        bucket: bucket,
+      }),
+    },
+  },
+  timeouts:: {
+    '#new':: d.fn(help='\n`google-beta.google_storage_insights_report_config.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`\nTerraform sub block.\n\n\n\n**Args**:\n  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.\n  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.\n  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.\n\n**Returns**:\n  - An attribute object that represents the `timeouts` sub block.\n', args=[]),
+    new(
+      create=null,
+      delete=null,
+      update=null
+    ):: std.prune(a={
+      create: create,
+      delete: delete,
+      update: update,
+    }),
+  },
+  '#withCsvOptions':: d.fn(help='`google-beta.list[obj].withCsvOptions` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the csv_options field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withCsvOptionsMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `csv_options` field.\n', args=[]),
+  withCsvOptions(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          csv_options: value,
+        },
+      },
+    },
+  },
+  '#withCsvOptionsMixin':: d.fn(help='`google-beta.list[obj].withCsvOptionsMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the csv_options field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withCsvOptions](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `csv_options` field.\n', args=[]),
+  withCsvOptionsMixin(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          csv_options+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withDisplayName':: d.fn(help='`google-beta.string.withDisplayName` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the display_name field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `display_name` field.\n', args=[]),
+  withDisplayName(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          display_name: value,
+        },
+      },
+    },
+  },
+  '#withFrequencyOptions':: d.fn(help='`google-beta.list[obj].withFrequencyOptions` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the frequency_options field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withFrequencyOptionsMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `frequency_options` field.\n', args=[]),
+  withFrequencyOptions(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          frequency_options: value,
+        },
+      },
+    },
+  },
+  '#withFrequencyOptionsMixin':: d.fn(help='`google-beta.list[obj].withFrequencyOptionsMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the frequency_options field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withFrequencyOptions](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `frequency_options` field.\n', args=[]),
+  withFrequencyOptionsMixin(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          frequency_options+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withLocation':: d.fn(help='`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the location field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `location` field.\n', args=[]),
+  withLocation(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          location: value,
+        },
+      },
+    },
+  },
+  '#withObjectMetadataReportOptions':: d.fn(help='`google-beta.list[obj].withObjectMetadataReportOptions` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the object_metadata_report_options field.\n\nThis function will replace the array with the passed in `value`. If you wish to instead append the\npassed in value to the existing array, use the [google-beta.list[obj].withObjectMetadataReportOptionsMixin](TODO) function.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `object_metadata_report_options` field.\n', args=[]),
+  withObjectMetadataReportOptions(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          object_metadata_report_options: value,
+        },
+      },
+    },
+  },
+  '#withObjectMetadataReportOptionsMixin':: d.fn(help='`google-beta.list[obj].withObjectMetadataReportOptionsMixin` constructs a mixin object that can be merged into the `list[obj]`\nTerraform resource block to set or update the object_metadata_report_options field.\n\nThis function will append the passed in array or object to the existing array. If you wish\nto instead replace the array with the passed in `value`, use the [google-beta.list[obj].withObjectMetadataReportOptions](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`list[obj]`): The value to set for the `object_metadata_report_options` field.\n', args=[]),
+  withObjectMetadataReportOptionsMixin(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          object_metadata_report_options+: if std.isArray(v=value) then value else [value],
+        },
+      },
+    },
+  },
+  '#withProject':: d.fn(help='`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the project field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `project` field.\n', args=[]),
+  withProject(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          project: value,
+        },
+      },
+    },
+  },
+  '#withTimeouts':: d.fn(help='`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will replace the map with the passed in `value`. If you wish to instead merge the\npassed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeouts(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          timeouts: value,
+        },
+      },
+    },
+  },
+  '#withTimeoutsMixin':: d.fn(help='`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the timeouts field.\n\nThis function will merge the passed in value to the existing map. If you wish\nto instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)\nfunction.\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `timeouts` field.\n', args=[]),
+  withTimeoutsMixin(resourceLabel, value): {
+    resource+: {
+      google_storage_insights_report_config+: {
+        [resourceLabel]+: {
+          timeouts+: value,
+        },
+      },
+    },
+  },
+}
diff --git a/4.x/_gen/resources/vertex_ai_index_endpoint.libsonnet b/4.x/_gen/resources/vertex_ai_index_endpoint.libsonnet
index f1a2cc1..bc98c69 100644
--- a/4.x/_gen/resources/vertex_ai_index_endpoint.libsonnet
+++ b/4.x/_gen/resources/vertex_ai_index_endpoint.libsonnet
@@ -2,7 +2,7 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_vertex_ai_index_endpoint', url='', help='`google_vertex_ai_index_endpoint` represents the `google-beta_google_vertex_ai_index_endpoint` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
-  '#new':: d.fn(help="\n`google-beta.google_vertex_ai_index_endpoint.new` injects a new `google-beta_google_vertex_ai_index_endpoint` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_vertex_ai_index_endpoint.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_vertex_ai_index_endpoint` using the reference:\n\n    $._ref.google-beta_google_vertex_ai_index_endpoint.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_vertex_ai_index_endpoint.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): The description of the Index. When `null`, the `description` field will be omitted from the resulting object.\n  - `display_name` (`string`): The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.\n  - `labels` (`obj`): The labels with user-defined metadata to organize your Indexes. When `null`, the `labels` field will be omitted from the resulting object.\n  - `network` (`string`): The full name of the Google Compute Engine [network](https://cloud.google.com//compute/docs/networks-and-firewalls#networks) to which the index endpoint should be peered.\nPrivate services access must already be configured for the network. If left unspecified, the index endpoint is not peered with any network.\n[Format](https://cloud.google.com/compute/docs/reference/rest/v1/networks/insert): \u0026#39;projects/{project}/global/networks/{network}\u0026#39;.\nWhere \u0026#39;{project}\u0026#39; is a project number, as in \u0026#39;12345\u0026#39;, and \u0026#39;{network}\u0026#39; is network name. When `null`, the `network` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region of the index endpoint. eg us-central1 When `null`, the `region` field will be omitted from the resulting object.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_vertex_ai_index_endpoint.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_vertex_ai_index_endpoint.new` injects a new `google-beta_google_vertex_ai_index_endpoint` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_vertex_ai_index_endpoint.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_vertex_ai_index_endpoint` using the reference:\n\n    $._ref.google-beta_google_vertex_ai_index_endpoint.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_vertex_ai_index_endpoint.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `description` (`string`): The description of the Index. When `null`, the `description` field will be omitted from the resulting object.\n  - `display_name` (`string`): The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.\n  - `labels` (`obj`): The labels with user-defined metadata to organize your Indexes. When `null`, the `labels` field will be omitted from the resulting object.\n  - `network` (`string`): The full name of the Google Compute Engine [network](https://cloud.google.com//compute/docs/networks-and-firewalls#networks) to which the index endpoint should be peered.\nPrivate services access must already be configured for the network. If left unspecified, the index endpoint is not peered with any network.\n[Format](https://cloud.google.com/compute/docs/reference/rest/v1/networks/insert): \u0026#39;projects/{project}/global/networks/{network}\u0026#39;.\nWhere \u0026#39;{project}\u0026#39; is a project number, as in \u0026#39;12345\u0026#39;, and \u0026#39;{network}\u0026#39; is network name. When `null`, the `network` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `public_endpoint_enabled` (`bool`): If true, the deployed index will be accessible through public endpoint. When `null`, the `public_endpoint_enabled` field will be omitted from the resulting object.\n  - `region` (`string`): The region of the index endpoint. eg us-central1 When `null`, the `region` field will be omitted from the resulting object.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_vertex_ai_index_endpoint.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     display_name,
@@ -10,6 +10,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     labels=null,
     network=null,
     project=null,
+    public_endpoint_enabled=null,
     region=null,
     timeouts=null,
     _meta={}
@@ -22,18 +23,20 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       labels=labels,
       network=network,
       project=project,
+      public_endpoint_enabled=public_endpoint_enabled,
       region=region,
       timeouts=timeouts
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_vertex_ai_index_endpoint.newAttrs` constructs a new object with attributes and blocks configured for the `google_vertex_ai_index_endpoint`\nTerraform resource.\n\nUnlike [google-beta.google_vertex_ai_index_endpoint.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): The description of the Index. When `null`, the `description` field will be omitted from the resulting object.\n  - `display_name` (`string`): The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.\n  - `labels` (`obj`): The labels with user-defined metadata to organize your Indexes. When `null`, the `labels` field will be omitted from the resulting object.\n  - `network` (`string`): The full name of the Google Compute Engine [network](https://cloud.google.com//compute/docs/networks-and-firewalls#networks) to which the index endpoint should be peered.\nPrivate services access must already be configured for the network. If left unspecified, the index endpoint is not peered with any network.\n[Format](https://cloud.google.com/compute/docs/reference/rest/v1/networks/insert): 'projects/{project}/global/networks/{network}'.\nWhere '{project}' is a project number, as in '12345', and '{network}' is network name. When `null`, the `network` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `region` (`string`): The region of the index endpoint. eg us-central1 When `null`, the `region` field will be omitted from the resulting object.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_vertex_ai_index_endpoint.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_vertex_ai_index_endpoint` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_vertex_ai_index_endpoint.newAttrs` constructs a new object with attributes and blocks configured for the `google_vertex_ai_index_endpoint`\nTerraform resource.\n\nUnlike [google-beta.google_vertex_ai_index_endpoint.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `description` (`string`): The description of the Index. When `null`, the `description` field will be omitted from the resulting object.\n  - `display_name` (`string`): The display name of the Index. The name can be up to 128 characters long and can consist of any UTF-8 characters.\n  - `labels` (`obj`): The labels with user-defined metadata to organize your Indexes. When `null`, the `labels` field will be omitted from the resulting object.\n  - `network` (`string`): The full name of the Google Compute Engine [network](https://cloud.google.com//compute/docs/networks-and-firewalls#networks) to which the index endpoint should be peered.\nPrivate services access must already be configured for the network. If left unspecified, the index endpoint is not peered with any network.\n[Format](https://cloud.google.com/compute/docs/reference/rest/v1/networks/insert): 'projects/{project}/global/networks/{network}'.\nWhere '{project}' is a project number, as in '12345', and '{network}' is network name. When `null`, the `network` field will be omitted from the resulting object.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `public_endpoint_enabled` (`bool`): If true, the deployed index will be accessible through public endpoint. When `null`, the `public_endpoint_enabled` field will be omitted from the resulting object.\n  - `region` (`string`): The region of the index endpoint. eg us-central1 When `null`, the `region` field will be omitted from the resulting object.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_vertex_ai_index_endpoint.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_vertex_ai_index_endpoint` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     display_name,
     description=null,
     labels=null,
     network=null,
     project=null,
+    public_endpoint_enabled=null,
     region=null,
     timeouts=null
   ):: std.prune(a={
@@ -42,6 +45,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     labels: labels,
     network: network,
     project: project,
+    public_endpoint_enabled: public_endpoint_enabled,
     region: region,
     timeouts: timeouts,
   }),
@@ -107,6 +111,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withPublicEndpointEnabled':: d.fn(help='`google-beta.bool.withPublicEndpointEnabled` constructs a mixin object that can be merged into the `bool`\nTerraform resource block to set or update the public_endpoint_enabled field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`bool`): The value to set for the `public_endpoint_enabled` field.\n', args=[]),
+  withPublicEndpointEnabled(resourceLabel, value): {
+    resource+: {
+      google_vertex_ai_index_endpoint+: {
+        [resourceLabel]+: {
+          public_endpoint_enabled: value,
+        },
+      },
+    },
+  },
   '#withRegion':: d.fn(help='`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`\nTerraform resource block to set or update the region field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`string`): The value to set for the `region` field.\n', args=[]),
   withRegion(resourceLabel, value): {
     resource+: {
diff --git a/4.x/_gen/resources/workstations_workstation.libsonnet b/4.x/_gen/resources/workstations_workstation.libsonnet
index 8a5d2aa..58259b5 100644
--- a/4.x/_gen/resources/workstations_workstation.libsonnet
+++ b/4.x/_gen/resources/workstations_workstation.libsonnet
@@ -2,7 +2,7 @@ local tf = (import 'github.com/tf-libsonnet/core/main.libsonnet');
 local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
 {
   '#':: d.pkg(name='google_workstations_workstation', url='', help='`google_workstations_workstation` represents the `google-beta_google_workstations_workstation` Terraform resource.\n\n\n\nThis package contains functions and utilities for setting up the resource using Jsonnet code.\n'),
-  '#new':: d.fn(help="\n`google-beta.google_workstations_workstation.new` injects a new `google-beta_google_workstations_workstation` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_workstations_workstation.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_workstations_workstation` using the reference:\n\n    $._ref.google-beta_google_workstations_workstation.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_workstations_workstation.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location where the workstation parent resources reside.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.\n  - `workstation_config_id` (`string`): The ID of the parent workstation cluster config.\n  - `workstation_id` (`string`): ID to use for the workstation.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
+  '#new':: d.fn(help="\n`google-beta.google_workstations_workstation.new` injects a new `google-beta_google_workstations_workstation` Terraform `resource`\nblock into the root module document.\n\nAdditionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the\nresource. For example, if you added a new instance to the root using:\n\n    # arguments omitted for brevity\n    google-beta.google_workstations_workstation.new('some_id')\n\nYou can get the reference to the `id` field of the created `google-beta.google_workstations_workstation` using the reference:\n\n    $._ref.google-beta_google_workstations_workstation.some_id.get('id')\n\nThis is the same as directly entering `\"${ google-beta_google_workstations_workstation.some_id.id }\"` as the value.\n\nNOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,\nor `$` to refer to the root object. Instead, make an explicit outer object using `local`.\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block.\n  - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `env` (`obj`): \u0026#39;Client-specified environment variables passed to the workstation container\u0026#39;s entrypoint.\u0026#39; When `null`, the `env` field will be omitted from the resulting object.\n  - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location where the workstation parent resources reside.\n  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.\n  - `workstation_config_id` (`string`): The ID of the parent workstation cluster config.\n  - `workstation_id` (`string`): ID to use for the workstation.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n- A mixin object that injects the new resource into the root Terraform configuration.\n", args=[]),
   new(
     resourceLabel,
     location,
@@ -11,6 +11,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     workstation_id,
     annotations=null,
     display_name=null,
+    env=null,
     labels=null,
     project=null,
     timeouts=null,
@@ -21,6 +22,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     attrs=self.newAttrs(
       annotations=annotations,
       display_name=display_name,
+      env=env,
       labels=labels,
       location=location,
       project=project,
@@ -31,7 +33,7 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     ),
     _meta=_meta
   ),
-  '#newAttrs':: d.fn(help='\n`google-beta.google_workstations_workstation.newAttrs` constructs a new object with attributes and blocks configured for the `google_workstations_workstation`\nTerraform resource.\n\nUnlike [google-beta.google_workstations_workstation.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location where the workstation parent resources reside.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.\n  - `workstation_config_id` (`string`): The ID of the parent workstation cluster config.\n  - `workstation_id` (`string`): ID to use for the workstation.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_workstations_workstation` resource into the root Terraform configuration.\n', args=[]),
+  '#newAttrs':: d.fn(help='\n`google-beta.google_workstations_workstation.newAttrs` constructs a new object with attributes and blocks configured for the `google_workstations_workstation`\nTerraform resource.\n\nUnlike [google-beta.google_workstations_workstation.new](#fn-new), this function will not inject the `resource`\nblock into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the\n[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.\n\nThis is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to\ninjecting into a complete block.\n\n**Args**:\n  - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.\n  - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.\n  - `env` (`obj`): 'Client-specified environment variables passed to the workstation container's entrypoint.' When `null`, the `env` field will be omitted from the resulting object.\n  - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.\n  - `location` (`string`): The location where the workstation parent resources reside.\n  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.\n  - `workstation_cluster_id` (`string`): The ID of the parent workstation cluster.\n  - `workstation_config_id` (`string`): The ID of the parent workstation cluster config.\n  - `workstation_id` (`string`): ID to use for the workstation.\n  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_workstations_workstation.timeouts.new](#fn-timeoutsnew) constructor.\n\n**Returns**:\n  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_workstations_workstation` resource into the root Terraform configuration.\n', args=[]),
   newAttrs(
     location,
     workstation_cluster_id,
@@ -39,12 +41,14 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
     workstation_id,
     annotations=null,
     display_name=null,
+    env=null,
     labels=null,
     project=null,
     timeouts=null
   ):: std.prune(a={
     annotations: annotations,
     display_name: display_name,
+    env: env,
     labels: labels,
     location: location,
     project: project,
@@ -85,6 +89,16 @@ local d = (import 'github.com/jsonnet-libs/docsonnet/doc-util/main.libsonnet');
       },
     },
   },
+  '#withEnv':: d.fn(help='`google-beta.obj.withEnv` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the env field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `env` field.\n', args=[]),
+  withEnv(resourceLabel, value): {
+    resource+: {
+      google_workstations_workstation+: {
+        [resourceLabel]+: {
+          env: value,
+        },
+      },
+    },
+  },
   '#withLabels':: d.fn(help='`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`\nTerraform resource block to set or update the labels field.\n\n\n\n**Args**:\n  - `resourceLabel` (`string`): The name label of the block to update.\n  - `value` (`obj`): The value to set for the `labels` field.\n', args=[]),
   withLabels(resourceLabel, value): {
     resource+: {
diff --git a/docs/4.x/README.md b/docs/4.x/README.md
index 6ffec7b..d2f2319 100644
--- a/docs/4.x/README.md
+++ b/docs/4.x/README.md
@@ -67,6 +67,7 @@ project.
 * [google_apigee_sharedflow](google_apigee_sharedflow.md)
 * [google_apigee_sharedflow_deployment](google_apigee_sharedflow_deployment.md)
 * [google_apigee_sync_authorization](google_apigee_sync_authorization.md)
+* [google_apigee_target_server](google_apigee_target_server.md)
 * [google_apikeys_key](google_apikeys_key.md)
 * [google_app_engine_application](google_app_engine_application.md)
 * [google_app_engine_application_url_dispatch_rules](google_app_engine_application_url_dispatch_rules.md)
@@ -87,6 +88,7 @@ project.
 * [google_beyondcorp_app_gateway](google_beyondcorp_app_gateway.md)
 * [google_biglake_catalog](google_biglake_catalog.md)
 * [google_biglake_database](google_biglake_database.md)
+* [google_biglake_table](google_biglake_table.md)
 * [google_bigquery_analytics_hub_data_exchange](google_bigquery_analytics_hub_data_exchange.md)
 * [google_bigquery_analytics_hub_data_exchange_iam_binding](google_bigquery_analytics_hub_data_exchange_iam_binding.md)
 * [google_bigquery_analytics_hub_data_exchange_iam_member](google_bigquery_analytics_hub_data_exchange_iam_member.md)
@@ -368,6 +370,7 @@ project.
 * [google_data_loss_prevention_inspect_template](google_data_loss_prevention_inspect_template.md)
 * [google_data_loss_prevention_job_trigger](google_data_loss_prevention_job_trigger.md)
 * [google_data_loss_prevention_stored_info_type](google_data_loss_prevention_stored_info_type.md)
+* [google_data_pipeline_pipeline](google_data_pipeline_pipeline.md)
 * [google_database_migration_service_connection_profile](google_database_migration_service_connection_profile.md)
 * [google_dataflow_flex_template_job](google_dataflow_flex_template_job.md)
 * [google_dataflow_job](google_dataflow_job.md)
@@ -427,6 +430,7 @@ project.
 * [google_dialogflow_cx_flow](google_dialogflow_cx_flow.md)
 * [google_dialogflow_cx_intent](google_dialogflow_cx_intent.md)
 * [google_dialogflow_cx_page](google_dialogflow_cx_page.md)
+* [google_dialogflow_cx_test_case](google_dialogflow_cx_test_case.md)
 * [google_dialogflow_cx_version](google_dialogflow_cx_version.md)
 * [google_dialogflow_cx_webhook](google_dialogflow_cx_webhook.md)
 * [google_dialogflow_entity_type](google_dialogflow_entity_type.md)
@@ -763,6 +767,7 @@ project.
 * [google_storage_default_object_access_control](google_storage_default_object_access_control.md)
 * [google_storage_default_object_acl](google_storage_default_object_acl.md)
 * [google_storage_hmac_key](google_storage_hmac_key.md)
+* [google_storage_insights_report_config](google_storage_insights_report_config.md)
 * [google_storage_notification](google_storage_notification.md)
 * [google_storage_object_access_control](google_storage_object_access_control.md)
 * [google_storage_object_acl](google_storage_object_acl.md)
diff --git a/docs/4.x/google_apigee_target_server.md b/docs/4.x/google_apigee_target_server.md
new file mode 100644
index 0000000..5be3f82
--- /dev/null
+++ b/docs/4.x/google_apigee_target_server.md
@@ -0,0 +1,375 @@
+---
+permalink: /google_apigee_target_server/
+---
+
+# google_apigee_target_server
+
+`google_apigee_target_server` represents the `google-beta_google_apigee_target_server` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDescription()`](#fn-withdescription)
+* [`fn withEnvId()`](#fn-withenvid)
+* [`fn withHost()`](#fn-withhost)
+* [`fn withIsEnabled()`](#fn-withisenabled)
+* [`fn withName()`](#fn-withname)
+* [`fn withPort()`](#fn-withport)
+* [`fn withProtocol()`](#fn-withprotocol)
+* [`fn withSSlInfo()`](#fn-withsslinfo)
+* [`fn withSSlInfoMixin()`](#fn-withsslinfomixin)
+* [`fn withTimeouts()`](#fn-withtimeouts)
+* [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
+* [`obj s_sl_info`](#obj-s_sl_info)
+  * [`fn new()`](#fn-s_sl_infonew)
+  * [`obj s_sl_info.common_name`](#obj-s_sl_infocommon_name)
+    * [`fn new()`](#fn-s_sl_infocommon_namenew)
+* [`obj timeouts`](#obj-timeouts)
+  * [`fn new()`](#fn-timeoutsnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.google_apigee_target_server.new` injects a new `google-beta_google_apigee_target_server` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.google_apigee_target_server.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.google_apigee_target_server` using the reference:
+
+    $._ref.google-beta_google_apigee_target_server.some_id.get('id')
+
+This is the same as directly entering `"${ google-beta_google_apigee_target_server.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `description` (`string`): A human-readable description of this TargetServer. When `null`, the `description` field will be omitted from the resulting object.
+  - `env_id` (`string`): The Apigee environment group associated with the Apigee environment,
+in the format 'organizations/{{org_name}}/environments/{{env_name}}'.
+  - `host` (`string`): The host name this target connects to. Value must be a valid hostname as described by RFC-1123.
+  - `is_enabled` (`bool`): Enabling/disabling a TargetServer is useful when TargetServers are used in load balancing configurations, and one or more TargetServers need to taken out of rotation periodically. Defaults to true. When `null`, the `is_enabled` field will be omitted from the resulting object.
+  - `name` (`string`): The resource id of this reference. Values must match the regular expression [\w\s-.]+.
+  - `port` (`number`): The port number this target connects to on the given host. Value must be between 1 and 65535, inclusive.
+  - `protocol` (`string`): Immutable. The protocol used by this TargetServer. Possible values: ["HTTP", "HTTP2", "GRPC_TARGET", "GRPC", "EXTERNAL_CALLOUT"] When `null`, the `protocol` field will be omitted from the resulting object.
+  - `s_sl_info` (`list[obj]`): Specifies TLS configuration info for this TargetServer. The JSON name is sSLInfo for legacy/backwards compatibility reasons -- Edge originally supported SSL, and the name is still used for TLS configuration. When `null`, the `s_sl_info` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.s_sl_info.new](#fn-s_sl_infonew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.google_apigee_target_server.newAttrs` constructs a new object with attributes and blocks configured for the `google_apigee_target_server`
+Terraform resource.
+
+Unlike [google-beta.google_apigee_target_server.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `description` (`string`): A human-readable description of this TargetServer. When `null`, the `description` field will be omitted from the resulting object.
+  - `env_id` (`string`): The Apigee environment group associated with the Apigee environment,
+in the format 'organizations/{{org_name}}/environments/{{env_name}}'.
+  - `host` (`string`): The host name this target connects to. Value must be a valid hostname as described by RFC-1123.
+  - `is_enabled` (`bool`): Enabling/disabling a TargetServer is useful when TargetServers are used in load balancing configurations, and one or more TargetServers need to taken out of rotation periodically. Defaults to true. When `null`, the `is_enabled` field will be omitted from the resulting object.
+  - `name` (`string`): The resource id of this reference. Values must match the regular expression [\w\s-.]+.
+  - `port` (`number`): The port number this target connects to on the given host. Value must be between 1 and 65535, inclusive.
+  - `protocol` (`string`): Immutable. The protocol used by this TargetServer. Possible values: ["HTTP", "HTTP2", "GRPC_TARGET", "GRPC", "EXTERNAL_CALLOUT"] When `null`, the `protocol` field will be omitted from the resulting object.
+  - `s_sl_info` (`list[obj]`): Specifies TLS configuration info for this TargetServer. The JSON name is sSLInfo for legacy/backwards compatibility reasons -- Edge originally supported SSL, and the name is still used for TLS configuration. When `null`, the `s_sl_info` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.s_sl_info.new](#fn-s_sl_infonew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_apigee_target_server` resource into the root Terraform configuration.
+
+
+### fn withDescription
+
+```ts
+withDescription()
+```
+
+`google-beta.string.withDescription` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the description field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `description` field.
+
+
+### fn withEnvId
+
+```ts
+withEnvId()
+```
+
+`google-beta.string.withEnvId` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the env_id field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `env_id` field.
+
+
+### fn withHost
+
+```ts
+withHost()
+```
+
+`google-beta.string.withHost` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the host field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `host` field.
+
+
+### fn withIsEnabled
+
+```ts
+withIsEnabled()
+```
+
+`google-beta.bool.withIsEnabled` constructs a mixin object that can be merged into the `bool`
+Terraform resource block to set or update the is_enabled field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`bool`): The value to set for the `is_enabled` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the name field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withPort
+
+```ts
+withPort()
+```
+
+`google-beta.number.withPort` constructs a mixin object that can be merged into the `number`
+Terraform resource block to set or update the port field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`number`): The value to set for the `port` field.
+
+
+### fn withProtocol
+
+```ts
+withProtocol()
+```
+
+`google-beta.string.withProtocol` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the protocol field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `protocol` field.
+
+
+### fn withSSlInfo
+
+```ts
+withSSlInfo()
+```
+
+`google-beta.list[obj].withSSlInfo` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the s_sl_info field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withSSlInfoMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `s_sl_info` field.
+
+
+### fn withSSlInfoMixin
+
+```ts
+withSSlInfoMixin()
+```
+
+`google-beta.list[obj].withSSlInfoMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the s_sl_info field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withSSlInfo](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `s_sl_info` field.
+
+
+### fn withTimeouts
+
+```ts
+withTimeouts()
+```
+
+`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will replace the map with the passed in `value`. If you wish to instead merge the
+passed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withTimeoutsMixin
+
+```ts
+withTimeoutsMixin()
+```
+
+`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will merge the passed in value to the existing map. If you wish
+to instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+## obj s_sl_info
+
+
+
+### fn s_sl_info.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_apigee_target_server.s_sl_info.new` constructs a new object with attributes and blocks configured for the `s_sl_info`
+Terraform sub block.
+
+
+
+**Args**:
+  - `ciphers` (`list`): The SSL/TLS cipher suites to be used. For programmable proxies, it must be one of the cipher suite names listed in: http://docs.oracle.com/javase/8/docs/technotes/guides/security/StandardNames.html#ciphersuites. For configurable proxies, it must follow the configuration specified in: https://commondatastorage.googleapis.com/chromium-boringssl-docs/ssl.h.html#Cipher-suite-configuration. This setting has no effect for configurable proxies when negotiating TLS 1.3. When `null`, the `ciphers` field will be omitted from the resulting object.
+  - `client_auth_enabled` (`bool`): Enables two-way TLS. When `null`, the `client_auth_enabled` field will be omitted from the resulting object.
+  - `enabled` (`bool`): Enables TLS. If false, neither one-way nor two-way TLS will be enabled.
+  - `ignore_validation_errors` (`bool`): If true, Edge ignores TLS certificate errors. Valid when configuring TLS for target servers and target endpoints, and when configuring virtual hosts that use 2-way TLS. When used with a target endpoint/target server, if the backend system uses SNI and returns a cert with a subject Distinguished Name (DN) that does not match the hostname, there is no way to ignore the error and the connection fails. When `null`, the `ignore_validation_errors` field will be omitted from the resulting object.
+  - `key_alias` (`string`): Required if clientAuthEnabled is true. The resource ID for the alias containing the private key and cert. When `null`, the `key_alias` field will be omitted from the resulting object.
+  - `key_store` (`string`): Required if clientAuthEnabled is true. The resource ID of the keystore. When `null`, the `key_store` field will be omitted from the resulting object.
+  - `protocols` (`list`): The TLS versioins to be used. When `null`, the `protocols` field will be omitted from the resulting object.
+  - `trust_store` (`string`): The resource ID of the truststore. When `null`, the `trust_store` field will be omitted from the resulting object.
+  - `common_name` (`list[obj]`): The TLS Common Name of the certificate. When `null`, the `common_name` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_apigee_target_server.s_sl_info.common_name.new](#fn-s_sl_infocommon_namenew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `s_sl_info` sub block.
+
+
+## obj s_sl_info.common_name
+
+
+
+### fn s_sl_info.common_name.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_apigee_target_server.s_sl_info.common_name.new` constructs a new object with attributes and blocks configured for the `common_name`
+Terraform sub block.
+
+
+
+**Args**:
+  - `value` (`string`): The TLS Common Name string of the certificate. When `null`, the `value` field will be omitted from the resulting object.
+  - `wildcard_match` (`bool`): Indicates whether the cert should be matched against as a wildcard cert. When `null`, the `wildcard_match` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `common_name` sub block.
+
+
+## obj timeouts
+
+
+
+### fn timeouts.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_apigee_target_server.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`
+Terraform sub block.
+
+
+
+**Args**:
+  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.
+  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.
+  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `timeouts` sub block.
diff --git a/docs/4.x/google_biglake_table.md b/docs/4.x/google_biglake_table.md
new file mode 100644
index 0000000..cf49ca8
--- /dev/null
+++ b/docs/4.x/google_biglake_table.md
@@ -0,0 +1,296 @@
+---
+permalink: /google_biglake_table/
+---
+
+# google_biglake_table
+
+`google_biglake_table` represents the `google-beta_google_biglake_table` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDatabase()`](#fn-withdatabase)
+* [`fn withHiveOptions()`](#fn-withhiveoptions)
+* [`fn withHiveOptionsMixin()`](#fn-withhiveoptionsmixin)
+* [`fn withName()`](#fn-withname)
+* [`fn withTimeouts()`](#fn-withtimeouts)
+* [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
+* [`fn withType()`](#fn-withtype)
+* [`obj hive_options`](#obj-hive_options)
+  * [`fn new()`](#fn-hive_optionsnew)
+  * [`obj hive_options.storage_descriptor`](#obj-hive_optionsstorage_descriptor)
+    * [`fn new()`](#fn-hive_optionsstorage_descriptornew)
+* [`obj timeouts`](#obj-timeouts)
+  * [`fn new()`](#fn-timeoutsnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.google_biglake_table.new` injects a new `google-beta_google_biglake_table` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.google_biglake_table.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.google_biglake_table` using the reference:
+
+    $._ref.google-beta_google_biglake_table.some_id.get('id')
+
+This is the same as directly entering `"${ google-beta_google_biglake_table.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `database` (`string`): The id of the parent database. When `null`, the `database` field will be omitted from the resulting object.
+  - `name` (`string`): Output only. The name of the Table. Format:
+projects/{project_id_or_number}/locations/{locationId}/catalogs/{catalogId}/databases/{databaseId}/tables/{tableId}
+  - `type` (`string`): The database type. Possible values: ["HIVE"] When `null`, the `type` field will be omitted from the resulting object.
+  - `hive_options` (`list[obj]`): Options of a Hive table. When `null`, the `hive_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.hive_options.new](#fn-hive_optionsnew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.google_biglake_table.newAttrs` constructs a new object with attributes and blocks configured for the `google_biglake_table`
+Terraform resource.
+
+Unlike [google-beta.google_biglake_table.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `database` (`string`): The id of the parent database. When `null`, the `database` field will be omitted from the resulting object.
+  - `name` (`string`): Output only. The name of the Table. Format:
+projects/{project_id_or_number}/locations/{locationId}/catalogs/{catalogId}/databases/{databaseId}/tables/{tableId}
+  - `type` (`string`): The database type. Possible values: ["HIVE"] When `null`, the `type` field will be omitted from the resulting object.
+  - `hive_options` (`list[obj]`): Options of a Hive table. When `null`, the `hive_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.hive_options.new](#fn-hive_optionsnew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_biglake_table` resource into the root Terraform configuration.
+
+
+### fn withDatabase
+
+```ts
+withDatabase()
+```
+
+`google-beta.string.withDatabase` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the database field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `database` field.
+
+
+### fn withHiveOptions
+
+```ts
+withHiveOptions()
+```
+
+`google-beta.list[obj].withHiveOptions` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the hive_options field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withHiveOptionsMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `hive_options` field.
+
+
+### fn withHiveOptionsMixin
+
+```ts
+withHiveOptionsMixin()
+```
+
+`google-beta.list[obj].withHiveOptionsMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the hive_options field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withHiveOptions](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `hive_options` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the name field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withTimeouts
+
+```ts
+withTimeouts()
+```
+
+`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will replace the map with the passed in `value`. If you wish to instead merge the
+passed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withTimeoutsMixin
+
+```ts
+withTimeoutsMixin()
+```
+
+`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will merge the passed in value to the existing map. If you wish
+to instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withType
+
+```ts
+withType()
+```
+
+`google-beta.string.withType` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the type field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `type` field.
+
+
+## obj hive_options
+
+
+
+### fn hive_options.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_biglake_table.hive_options.new` constructs a new object with attributes and blocks configured for the `hive_options`
+Terraform sub block.
+
+
+
+**Args**:
+  - `parameters` (`obj`): Stores user supplied Hive table parameters. An object containing a
+list of "key": value pairs.
+Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. When `null`, the `parameters` field will be omitted from the resulting object.
+  - `table_type` (`string`): Hive table type. For example, MANAGED_TABLE, EXTERNAL_TABLE. When `null`, the `table_type` field will be omitted from the resulting object.
+  - `storage_descriptor` (`list[obj]`): Stores physical storage information on the data. When `null`, the `storage_descriptor` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_biglake_table.hive_options.storage_descriptor.new](#fn-hive_optionsstorage_descriptornew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `hive_options` sub block.
+
+
+## obj hive_options.storage_descriptor
+
+
+
+### fn hive_options.storage_descriptor.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_biglake_table.hive_options.storage_descriptor.new` constructs a new object with attributes and blocks configured for the `storage_descriptor`
+Terraform sub block.
+
+
+
+**Args**:
+  - `input_format` (`string`): The fully qualified Java class name of the input format. When `null`, the `input_format` field will be omitted from the resulting object.
+  - `location_uri` (`string`): Cloud Storage folder URI where the table data is stored, starting with "gs://". When `null`, the `location_uri` field will be omitted from the resulting object.
+  - `output_format` (`string`): The fully qualified Java class name of the output format. When `null`, the `output_format` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `storage_descriptor` sub block.
+
+
+## obj timeouts
+
+
+
+### fn timeouts.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_biglake_table.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`
+Terraform sub block.
+
+
+
+**Args**:
+  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.
+  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.
+  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `timeouts` sub block.
diff --git a/docs/4.x/google_bigquery_table.md b/docs/4.x/google_bigquery_table.md
index 01a3e35..22e0191 100644
--- a/docs/4.x/google_bigquery_table.md
+++ b/docs/4.x/google_bigquery_table.md
@@ -33,6 +33,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withRangePartitioning()`](#fn-withrangepartitioning)
 * [`fn withRangePartitioningMixin()`](#fn-withrangepartitioningmixin)
 * [`fn withSchema()`](#fn-withschema)
+* [`fn withTableConstraints()`](#fn-withtableconstraints)
+* [`fn withTableConstraintsMixin()`](#fn-withtableconstraintsmixin)
 * [`fn withTableId()`](#fn-withtableid)
 * [`fn withTimePartitioning()`](#fn-withtimepartitioning)
 * [`fn withTimePartitioningMixin()`](#fn-withtimepartitioningmixin)
@@ -60,6 +62,16 @@ This package contains functions and utilities for setting up the resource using
   * [`fn new()`](#fn-range_partitioningnew)
   * [`obj range_partitioning.range`](#obj-range_partitioningrange)
     * [`fn new()`](#fn-range_partitioningrangenew)
+* [`obj table_constraints`](#obj-table_constraints)
+  * [`fn new()`](#fn-table_constraintsnew)
+  * [`obj table_constraints.foreign_keys`](#obj-table_constraintsforeign_keys)
+    * [`fn new()`](#fn-table_constraintsforeign_keysnew)
+    * [`obj table_constraints.foreign_keys.column_references`](#obj-table_constraintsforeign_keyscolumn_references)
+      * [`fn new()`](#fn-table_constraintsforeign_keyscolumn_referencesnew)
+    * [`obj table_constraints.foreign_keys.referenced_table`](#obj-table_constraintsforeign_keysreferenced_table)
+      * [`fn new()`](#fn-table_constraintsforeign_keysreferenced_tablenew)
+  * [`obj table_constraints.primary_key`](#obj-table_constraintsprimary_key)
+    * [`fn new()`](#fn-table_constraintsprimary_keynew)
 * [`obj time_partitioning`](#obj-time_partitioning)
   * [`fn new()`](#fn-time_partitioningnew)
 * [`obj view`](#obj-view)
@@ -109,6 +121,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
   - `external_data_configuration` (`list[obj]`): Describes the data format, location, and other properties of a table stored outside of BigQuery. By defining these properties, the data source can then be queried as if it were a standard BigQuery table. When `null`, the `external_data_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.new](#fn-external_data_configurationnew) constructor.
   - `materialized_view` (`list[obj]`): If specified, configures this table as a materialized view. When `null`, the `materialized_view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.materialized_view.new](#fn-materialized_viewnew) constructor.
   - `range_partitioning` (`list[obj]`): If specified, configures range-based partitioning for this table. When `null`, the `range_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.range_partitioning.new](#fn-range_partitioningnew) constructor.
+  - `table_constraints` (`list[obj]`): Defines the primary key and foreign keys. When `null`, the `table_constraints` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.new](#fn-table_constraintsnew) constructor.
   - `time_partitioning` (`list[obj]`): If specified, configures time-based partitioning for this table. When `null`, the `time_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.time_partitioning.new](#fn-time_partitioningnew) constructor.
   - `view` (`list[obj]`): If specified, configures this table as a view. When `null`, the `view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.view.new](#fn-viewnew) constructor.
 
@@ -149,6 +162,7 @@ injecting into a complete block.
   - `external_data_configuration` (`list[obj]`): Describes the data format, location, and other properties of a table stored outside of BigQuery. By defining these properties, the data source can then be queried as if it were a standard BigQuery table. When `null`, the `external_data_configuration` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.external_data_configuration.new](#fn-external_data_configurationnew) constructor.
   - `materialized_view` (`list[obj]`): If specified, configures this table as a materialized view. When `null`, the `materialized_view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.materialized_view.new](#fn-materialized_viewnew) constructor.
   - `range_partitioning` (`list[obj]`): If specified, configures range-based partitioning for this table. When `null`, the `range_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.range_partitioning.new](#fn-range_partitioningnew) constructor.
+  - `table_constraints` (`list[obj]`): Defines the primary key and foreign keys. When `null`, the `table_constraints` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.new](#fn-table_constraintsnew) constructor.
   - `time_partitioning` (`list[obj]`): If specified, configures time-based partitioning for this table. When `null`, the `time_partitioning` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.time_partitioning.new](#fn-time_partitioningnew) constructor.
   - `view` (`list[obj]`): If specified, configures this table as a view. When `null`, the `view` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.view.new](#fn-viewnew) constructor.
 
@@ -464,6 +478,43 @@ Terraform resource block to set or update the schema field.
   - `value` (`string`): The value to set for the `schema` field.
 
 
+### fn withTableConstraints
+
+```ts
+withTableConstraints()
+```
+
+`google-beta.list[obj].withTableConstraints` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the table_constraints field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withTableConstraintsMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `table_constraints` field.
+
+
+### fn withTableConstraintsMixin
+
+```ts
+withTableConstraintsMixin()
+```
+
+`google-beta.list[obj].withTableConstraintsMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the table_constraints field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withTableConstraints](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `table_constraints` field.
+
+
 ### fn withTableId
 
 ```ts
@@ -781,6 +832,7 @@ Terraform sub block.
 
 
 **Args**:
+  - `allow_non_incremental_definition` (`bool`): Allow non incremental materialized view definition. The default value is false. When `null`, the `allow_non_incremental_definition` field will be omitted from the resulting object.
   - `enable_refresh` (`bool`): Specifies if BigQuery should automatically refresh materialized view when the base table is updated. The default is true. When `null`, the `enable_refresh` field will be omitted from the resulting object.
   - `query` (`string`): A query whose result is persisted.
   - `refresh_interval_ms` (`number`): Specifies maximum frequency at which this materialized view will be refreshed. The default is 1800000 When `null`, the `refresh_interval_ms` field will be omitted from the resulting object.
@@ -838,6 +890,127 @@ Terraform sub block.
   - An attribute object that represents the `range` sub block.
 
 
+## obj table_constraints
+
+
+
+### fn table_constraints.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_bigquery_table.table_constraints.new` constructs a new object with attributes and blocks configured for the `table_constraints`
+Terraform sub block.
+
+
+
+**Args**:
+  - `foreign_keys` (`list[obj]`): Present only if the table has a foreign key. The foreign key is not enforced. When `null`, the `foreign_keys` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.foreign_keys.new](#fn-table_constraintsforeign_keysnew) constructor.
+  - `primary_key` (`list[obj]`): Represents a primary key constraint on a table's columns. Present only if the table has a primary key. The primary key is not enforced. When `null`, the `primary_key` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.primary_key.new](#fn-table_constraintsprimary_keynew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `table_constraints` sub block.
+
+
+## obj table_constraints.foreign_keys
+
+
+
+### fn table_constraints.foreign_keys.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_bigquery_table.table_constraints.foreign_keys.new` constructs a new object with attributes and blocks configured for the `foreign_keys`
+Terraform sub block.
+
+
+
+**Args**:
+  - `name` (`string`): Set only if the foreign key constraint is named. When `null`, the `name` field will be omitted from the resulting object.
+  - `column_references` (`list[obj]`): The pair of the foreign key column and primary key column. When `null`, the `column_references` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.foreign_keys.column_references.new](#fn-table_constraintstable_constraintscolumn_referencesnew) constructor.
+  - `referenced_table` (`list[obj]`): The table that holds the primary key and is referenced by this foreign key. When `null`, the `referenced_table` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_bigquery_table.table_constraints.foreign_keys.referenced_table.new](#fn-table_constraintstable_constraintsreferenced_tablenew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `foreign_keys` sub block.
+
+
+## obj table_constraints.foreign_keys.column_references
+
+
+
+### fn table_constraints.foreign_keys.column_references.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_bigquery_table.table_constraints.foreign_keys.column_references.new` constructs a new object with attributes and blocks configured for the `column_references`
+Terraform sub block.
+
+
+
+**Args**:
+  - `referenced_column` (`string`): The column in the primary key that are referenced by the referencingColumn.
+  - `referencing_column` (`string`): The column that composes the foreign key.
+
+**Returns**:
+  - An attribute object that represents the `column_references` sub block.
+
+
+## obj table_constraints.foreign_keys.referenced_table
+
+
+
+### fn table_constraints.foreign_keys.referenced_table.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_bigquery_table.table_constraints.foreign_keys.referenced_table.new` constructs a new object with attributes and blocks configured for the `referenced_table`
+Terraform sub block.
+
+
+
+**Args**:
+  - `dataset_id` (`string`): The ID of the dataset containing this table.
+  - `project_id` (`string`): The ID of the project containing this table.
+  - `table_id` (`string`): The ID of the table. The ID must contain only letters (a-z, A-Z), numbers (0-9), or underscores (_). The maximum length is 1,024 characters. Certain operations allow suffixing of the table ID with a partition decorator, such as sample_table$20190123.
+
+**Returns**:
+  - An attribute object that represents the `referenced_table` sub block.
+
+
+## obj table_constraints.primary_key
+
+
+
+### fn table_constraints.primary_key.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_bigquery_table.table_constraints.primary_key.new` constructs a new object with attributes and blocks configured for the `primary_key`
+Terraform sub block.
+
+
+
+**Args**:
+  - `columns` (`list`): The columns that are composed of the primary key constraint.
+
+**Returns**:
+  - An attribute object that represents the `primary_key` sub block.
+
+
 ## obj time_partitioning
 
 
diff --git a/docs/4.x/google_compute_instance.md b/docs/4.x/google_compute_instance.md
index 5a59267..c95699b 100644
--- a/docs/4.x/google_compute_instance.md
+++ b/docs/4.x/google_compute_instance.md
@@ -1137,6 +1137,8 @@ Terraform sub block.
 
 
 **Args**:
+  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.
+  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.
   - `network` (`string`): The name or self_link of the network attached to this interface. When `null`, the `network` field will be omitted from the resulting object.
   - `network_ip` (`string`): The private IP address assigned to the instance. When `null`, the `network_ip` field will be omitted from the resulting object.
   - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.
diff --git a/docs/4.x/google_compute_instance_from_machine_image.md b/docs/4.x/google_compute_instance_from_machine_image.md
index b783f41..7e05781 100644
--- a/docs/4.x/google_compute_instance_from_machine_image.md
+++ b/docs/4.x/google_compute_instance_from_machine_image.md
@@ -916,6 +916,8 @@ Terraform sub block.
 **Args**:
   - `access_config` (`list`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. When `null`, the `access_config` field will be omitted from the resulting object.
   - `alias_ip_range` (`list`): An array of alias IP ranges for this network interface. When `null`, the `alias_ip_range` field will be omitted from the resulting object.
+  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.
+  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.
   - `network` (`string`): The name or self_link of the network attached to this interface. When `null`, the `network` field will be omitted from the resulting object.
   - `network_ip` (`string`): The private IP address assigned to the instance. When `null`, the `network_ip` field will be omitted from the resulting object.
   - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.
diff --git a/docs/4.x/google_compute_instance_from_template.md b/docs/4.x/google_compute_instance_from_template.md
index 513f4a6..d3fc0d0 100644
--- a/docs/4.x/google_compute_instance_from_template.md
+++ b/docs/4.x/google_compute_instance_from_template.md
@@ -1055,6 +1055,8 @@ Terraform sub block.
 **Args**:
   - `access_config` (`list`): Access configurations, i.e. IPs via which this instance can be accessed via the Internet. When `null`, the `access_config` field will be omitted from the resulting object.
   - `alias_ip_range` (`list`): An array of alias IP ranges for this network interface. When `null`, the `alias_ip_range` field will be omitted from the resulting object.
+  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.
+  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.
   - `network` (`string`): The name or self_link of the network attached to this interface. When `null`, the `network` field will be omitted from the resulting object.
   - `network_ip` (`string`): The private IP address assigned to the instance. When `null`, the `network_ip` field will be omitted from the resulting object.
   - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.
diff --git a/docs/4.x/google_compute_instance_template.md b/docs/4.x/google_compute_instance_template.md
index b4c2c6a..3685d87 100644
--- a/docs/4.x/google_compute_instance_template.md
+++ b/docs/4.x/google_compute_instance_template.md
@@ -1066,6 +1066,8 @@ Terraform sub block.
 
 
 **Args**:
+  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.
+  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.
   - `network` (`string`): The name or self_link of the network to attach this interface to. Use network attribute for Legacy or Auto subnetted networks and subnetwork for custom subnetted networks. When `null`, the `network` field will be omitted from the resulting object.
   - `network_attachment` (`string`): The URL of the network attachment that this interface should connect to in the following format: projects/{projectNumber}/regions/{region_name}/networkAttachments/{network_attachment_name}. When `null`, the `network_attachment` field will be omitted from the resulting object.
   - `network_ip` (`string`): The private IP address to assign to the instance. If empty, the address will be automatically assigned. When `null`, the `network_ip` field will be omitted from the resulting object.
diff --git a/docs/4.x/google_compute_region_instance_template.md b/docs/4.x/google_compute_region_instance_template.md
index 5796e74..c5610bc 100644
--- a/docs/4.x/google_compute_region_instance_template.md
+++ b/docs/4.x/google_compute_region_instance_template.md
@@ -1066,6 +1066,8 @@ Terraform sub block.
 
 
 **Args**:
+  - `internal_ipv6_prefix_length` (`number`): The prefix length of the primary internal IPv6 range. When `null`, the `internal_ipv6_prefix_length` field will be omitted from the resulting object.
+  - `ipv6_address` (`string`): An IPv6 internal network address for this network interface. If not specified, Google Cloud will automatically assign an internal IPv6 address from the instance's subnetwork. When `null`, the `ipv6_address` field will be omitted from the resulting object.
   - `network` (`string`): The name or self_link of the network to attach this interface to. Use network attribute for Legacy or Auto subnetted networks and subnetwork for custom subnetted networks. When `null`, the `network` field will be omitted from the resulting object.
   - `network_ip` (`string`): The private IP address to assign to the instance. If empty, the address will be automatically assigned. When `null`, the `network_ip` field will be omitted from the resulting object.
   - `nic_type` (`string`): The type of vNIC to be used on this interface. Possible values:GVNIC, VIRTIO_NET When `null`, the `nic_type` field will be omitted from the resulting object.
diff --git a/docs/4.x/google_container_attached_cluster.md b/docs/4.x/google_container_attached_cluster.md
index 49b1ecf..c6bbfeb 100644
--- a/docs/4.x/google_container_attached_cluster.md
+++ b/docs/4.x/google_container_attached_cluster.md
@@ -18,6 +18,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withAnnotations()`](#fn-withannotations)
 * [`fn withAuthorization()`](#fn-withauthorization)
 * [`fn withAuthorizationMixin()`](#fn-withauthorizationmixin)
+* [`fn withBinaryAuthorization()`](#fn-withbinaryauthorization)
+* [`fn withBinaryAuthorizationMixin()`](#fn-withbinaryauthorizationmixin)
 * [`fn withDeletionPolicy()`](#fn-withdeletionpolicy)
 * [`fn withDescription()`](#fn-withdescription)
 * [`fn withDistribution()`](#fn-withdistribution)
@@ -37,6 +39,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
 * [`obj authorization`](#obj-authorization)
   * [`fn new()`](#fn-authorizationnew)
+* [`obj binary_authorization`](#obj-binary_authorization)
+  * [`fn new()`](#fn-binary_authorizationnew)
 * [`obj fleet`](#obj-fleet)
   * [`fn new()`](#fn-fleetnew)
 * [`obj logging_config`](#obj-logging_config)
@@ -97,6 +101,7 @@ than 255 UTF-8 encoded bytes. When `null`, the `description` field will be omitt
   - `platform_version` (`string`): The platform version for the cluster (e.g. '1.23.0-gke.1').
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
   - `authorization` (`list[obj]`): Configuration related to the cluster RBAC settings. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.authorization.new](#fn-authorizationnew) constructor.
+  - `binary_authorization` (`list[obj]`): Binary Authorization configuration. When `null`, the `binary_authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.binary_authorization.new](#fn-binary_authorizationnew) constructor.
   - `fleet` (`list[obj]`): Fleet configuration. When `null`, the `fleet` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.fleet.new](#fn-fleetnew) constructor.
   - `logging_config` (`list[obj]`): Logging configuration. When `null`, the `logging_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.logging_config.new](#fn-logging_confignew) constructor.
   - `monitoring_config` (`list[obj]`): Monitoring configuration. When `null`, the `monitoring_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.monitoring_config.new](#fn-monitoring_confignew) constructor.
@@ -151,6 +156,7 @@ than 255 UTF-8 encoded bytes. When `null`, the `description` field will be omitt
   - `platform_version` (`string`): The platform version for the cluster (e.g. '1.23.0-gke.1').
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
   - `authorization` (`list[obj]`): Configuration related to the cluster RBAC settings. When `null`, the `authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.authorization.new](#fn-authorizationnew) constructor.
+  - `binary_authorization` (`list[obj]`): Binary Authorization configuration. When `null`, the `binary_authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.binary_authorization.new](#fn-binary_authorizationnew) constructor.
   - `fleet` (`list[obj]`): Fleet configuration. When `null`, the `fleet` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.fleet.new](#fn-fleetnew) constructor.
   - `logging_config` (`list[obj]`): Logging configuration. When `null`, the `logging_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.logging_config.new](#fn-logging_confignew) constructor.
   - `monitoring_config` (`list[obj]`): Monitoring configuration. When `null`, the `monitoring_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_attached_cluster.monitoring_config.new](#fn-monitoring_confignew) constructor.
@@ -224,6 +230,43 @@ function.
   - `value` (`list[obj]`): The value to set for the `authorization` field.
 
 
+### fn withBinaryAuthorization
+
+```ts
+withBinaryAuthorization()
+```
+
+`google-beta.list[obj].withBinaryAuthorization` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the binary_authorization field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withBinaryAuthorizationMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `binary_authorization` field.
+
+
+### fn withBinaryAuthorizationMixin
+
+```ts
+withBinaryAuthorizationMixin()
+```
+
+`google-beta.list[obj].withBinaryAuthorizationMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the binary_authorization field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withBinaryAuthorization](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `binary_authorization` field.
+
+
 ### fn withDeletionPolicy
 
 ```ts
@@ -548,6 +591,29 @@ https://kubernetes.io/docs/reference/access-authn-authz/rbac/#user-facing-roles
   - An attribute object that represents the `authorization` sub block.
 
 
+## obj binary_authorization
+
+
+
+### fn binary_authorization.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_container_attached_cluster.binary_authorization.new` constructs a new object with attributes and blocks configured for the `binary_authorization`
+Terraform sub block.
+
+
+
+**Args**:
+  - `evaluation_mode` (`string`): Configure Binary Authorization evaluation mode. Possible values: ["DISABLED", "PROJECT_SINGLETON_POLICY_ENFORCE"] When `null`, the `evaluation_mode` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `binary_authorization` sub block.
+
+
 ## obj fleet
 
 
diff --git a/docs/4.x/google_container_cluster.md b/docs/4.x/google_container_cluster.md
index 6993ab9..4af92da 100644
--- a/docs/4.x/google_container_cluster.md
+++ b/docs/4.x/google_container_cluster.md
@@ -2413,7 +2413,7 @@ Terraform sub block.
   - `cloudrun_config` (`list[obj]`): The status of the CloudRun addon. It is disabled by default. Set disabled = false to enable. When `null`, the `cloudrun_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.cloudrun_config.new](#fn-addons_configcloudrun_confignew) constructor.
   - `config_connector_config` (`list[obj]`): The of the Config Connector addon. When `null`, the `config_connector_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.config_connector_config.new](#fn-addons_configconfig_connector_confignew) constructor.
   - `dns_cache_config` (`list[obj]`): The status of the NodeLocal DNSCache addon. It is disabled by default. Set enabled = true to enable. When `null`, the `dns_cache_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.dns_cache_config.new](#fn-addons_configdns_cache_confignew) constructor.
-  - `gce_persistent_disk_csi_driver_config` (`list[obj]`): Whether this cluster should enable the Google Compute Engine Persistent Disk Container Storage Interface (CSI) Driver. Defaults to enabled; set disabled = true to disable. When `null`, the `gce_persistent_disk_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gce_persistent_disk_csi_driver_config.new](#fn-addons_configgce_persistent_disk_csi_driver_confignew) constructor.
+  - `gce_persistent_disk_csi_driver_config` (`list[obj]`): Whether this cluster should enable the Google Compute Engine Persistent Disk Container Storage Interface (CSI) Driver. Set enabled = true to enable. The Compute Engine persistent disk CSI Driver is enabled by default on newly created clusters for the following versions: Linux clusters: GKE version 1.18.10-gke.2100 or later, or 1.19.3-gke.2100 or later. When `null`, the `gce_persistent_disk_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gce_persistent_disk_csi_driver_config.new](#fn-addons_configgce_persistent_disk_csi_driver_confignew) constructor.
   - `gcp_filestore_csi_driver_config` (`list[obj]`): The status of the Filestore CSI driver addon, which allows the usage of filestore instance as volumes. Defaults to disabled; set enabled = true to enable. When `null`, the `gcp_filestore_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gcp_filestore_csi_driver_config.new](#fn-addons_configgcp_filestore_csi_driver_confignew) constructor.
   - `gcs_fuse_csi_driver_config` (`list[obj]`): The status of the GCS Fuse CSI driver addon, which allows the usage of gcs bucket as volumes. Defaults to disabled; set enabled = true to enable. When `null`, the `gcs_fuse_csi_driver_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gcs_fuse_csi_driver_config.new](#fn-addons_configgcs_fuse_csi_driver_confignew) constructor.
   - `gke_backup_agent_config` (`list[obj]`): The status of the Backup for GKE Agent addon. It is disabled by default. Set enabled = true to enable. When `null`, the `gke_backup_agent_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_container_cluster.addons_config.gke_backup_agent_config.new](#fn-addons_configgke_backup_agent_confignew) constructor.
diff --git a/docs/4.x/google_data_pipeline_pipeline.md b/docs/4.x/google_data_pipeline_pipeline.md
new file mode 100644
index 0000000..787a26e
--- /dev/null
+++ b/docs/4.x/google_data_pipeline_pipeline.md
@@ -0,0 +1,657 @@
+---
+permalink: /google_data_pipeline_pipeline/
+---
+
+# google_data_pipeline_pipeline
+
+`google_data_pipeline_pipeline` represents the `google-beta_google_data_pipeline_pipeline` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDisplayName()`](#fn-withdisplayname)
+* [`fn withName()`](#fn-withname)
+* [`fn withPipelineSources()`](#fn-withpipelinesources)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withRegion()`](#fn-withregion)
+* [`fn withScheduleInfo()`](#fn-withscheduleinfo)
+* [`fn withScheduleInfoMixin()`](#fn-withscheduleinfomixin)
+* [`fn withSchedulerServiceAccountEmail()`](#fn-withschedulerserviceaccountemail)
+* [`fn withState()`](#fn-withstate)
+* [`fn withTimeouts()`](#fn-withtimeouts)
+* [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
+* [`fn withType()`](#fn-withtype)
+* [`fn withWorkload()`](#fn-withworkload)
+* [`fn withWorkloadMixin()`](#fn-withworkloadmixin)
+* [`obj schedule_info`](#obj-schedule_info)
+  * [`fn new()`](#fn-schedule_infonew)
+* [`obj timeouts`](#obj-timeouts)
+  * [`fn new()`](#fn-timeoutsnew)
+* [`obj workload`](#obj-workload)
+  * [`fn new()`](#fn-workloadnew)
+  * [`obj workload.dataflow_flex_template_request`](#obj-workloaddataflow_flex_template_request)
+    * [`fn new()`](#fn-workloaddataflow_flex_template_requestnew)
+    * [`obj workload.dataflow_flex_template_request.launch_parameter`](#obj-workloaddataflow_flex_template_requestlaunch_parameter)
+      * [`fn new()`](#fn-workloaddataflow_flex_template_requestlaunch_parameternew)
+      * [`obj workload.dataflow_flex_template_request.launch_parameter.environment`](#obj-workloaddataflow_flex_template_requestlaunch_parameterenvironment)
+        * [`fn new()`](#fn-workloaddataflow_flex_template_requestlaunch_parameterenvironmentnew)
+  * [`obj workload.dataflow_launch_template_request`](#obj-workloaddataflow_launch_template_request)
+    * [`fn new()`](#fn-workloaddataflow_launch_template_requestnew)
+    * [`obj workload.dataflow_launch_template_request.launch_parameters`](#obj-workloaddataflow_launch_template_requestlaunch_parameters)
+      * [`fn new()`](#fn-workloaddataflow_launch_template_requestlaunch_parametersnew)
+      * [`obj workload.dataflow_launch_template_request.launch_parameters.environment`](#obj-workloaddataflow_launch_template_requestlaunch_parametersenvironment)
+        * [`fn new()`](#fn-workloaddataflow_launch_template_requestlaunch_parametersenvironmentnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.new` injects a new `google-beta_google_data_pipeline_pipeline` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.google_data_pipeline_pipeline.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.google_data_pipeline_pipeline` using the reference:
+
+    $._ref.google-beta_google_data_pipeline_pipeline.some_id.get('id')
+
+This is the same as directly entering `"${ google-beta_google_data_pipeline_pipeline.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `display_name` (`string`): The display name of the pipeline. It can contain only letters ([A-Za-z]), numbers ([0-9]), hyphens (-), and underscores (_). When `null`, the `display_name` field will be omitted from the resulting object.
+  - `name` (`string`): "The pipeline name. For example': 'projects/PROJECT_ID/locations/LOCATION_ID/pipelines/PIPELINE_ID."
+"- PROJECT_ID can contain letters ([A-Za-z]), numbers ([0-9]), hyphens (-), colons (:), and periods (.). For more information, see Identifying projects."
+"LOCATION_ID is the canonical ID for the pipeline's location. The list of available locations can be obtained by calling google.cloud.location.Locations.ListLocations. Note that the Data Pipelines service is not available in all regions. It depends on Cloud Scheduler, an App Engine application, so it's only available in App Engine regions."
+"PIPELINE_ID is the ID of the pipeline. Must be unique for the selected project and location."
+  - `pipeline_sources` (`obj`): The sources of the pipeline (for example, Dataplex). The keys and values are set by the corresponding sources during pipeline creation.
+An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. When `null`, the `pipeline_sources` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): A reference to the region When `null`, the `region` field will be omitted from the resulting object.
+  - `scheduler_service_account_email` (`string`): Optional. A service account email to be used with the Cloud Scheduler job. If not specified, the default compute engine service account will be used. When `null`, the `scheduler_service_account_email` field will be omitted from the resulting object.
+  - `state` (`string`): The state of the pipeline. When the pipeline is created, the state is set to 'PIPELINE_STATE_ACTIVE' by default. State changes can be requested by setting the state to stopping, paused, or resuming. State cannot be changed through pipelines.patch requests.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#state Possible values: ["STATE_UNSPECIFIED", "STATE_RESUMING", "STATE_ACTIVE", "STATE_STOPPING", "STATE_ARCHIVED", "STATE_PAUSED"]
+  - `type` (`string`): The type of the pipeline. This field affects the scheduling of the pipeline and the type of metrics to show for the pipeline.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#pipelinetype Possible values: ["PIPELINE_TYPE_UNSPECIFIED", "PIPELINE_TYPE_BATCH", "PIPELINE_TYPE_STREAMING"]
+  - `schedule_info` (`list[obj]`): Internal scheduling information for a pipeline. If this information is provided, periodic jobs will be created per the schedule. If not, users are responsible for creating jobs externally.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#schedulespec When `null`, the `schedule_info` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.schedule_info.new](#fn-schedule_infonew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.timeouts.new](#fn-timeoutsnew) constructor.
+  - `workload` (`list[obj]`): Workload information for creating new jobs.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#workload When `null`, the `workload` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.new](#fn-workloadnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.newAttrs` constructs a new object with attributes and blocks configured for the `google_data_pipeline_pipeline`
+Terraform resource.
+
+Unlike [google-beta.google_data_pipeline_pipeline.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `display_name` (`string`): The display name of the pipeline. It can contain only letters ([A-Za-z]), numbers ([0-9]), hyphens (-), and underscores (_). When `null`, the `display_name` field will be omitted from the resulting object.
+  - `name` (`string`): "The pipeline name. For example': 'projects/PROJECT_ID/locations/LOCATION_ID/pipelines/PIPELINE_ID."
+"- PROJECT_ID can contain letters ([A-Za-z]), numbers ([0-9]), hyphens (-), colons (:), and periods (.). For more information, see Identifying projects."
+"LOCATION_ID is the canonical ID for the pipeline's location. The list of available locations can be obtained by calling google.cloud.location.Locations.ListLocations. Note that the Data Pipelines service is not available in all regions. It depends on Cloud Scheduler, an App Engine application, so it's only available in App Engine regions."
+"PIPELINE_ID is the ID of the pipeline. Must be unique for the selected project and location."
+  - `pipeline_sources` (`obj`): The sources of the pipeline (for example, Dataplex). The keys and values are set by the corresponding sources during pipeline creation.
+An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }. When `null`, the `pipeline_sources` field will be omitted from the resulting object.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `region` (`string`): A reference to the region When `null`, the `region` field will be omitted from the resulting object.
+  - `scheduler_service_account_email` (`string`): Optional. A service account email to be used with the Cloud Scheduler job. If not specified, the default compute engine service account will be used. When `null`, the `scheduler_service_account_email` field will be omitted from the resulting object.
+  - `state` (`string`): The state of the pipeline. When the pipeline is created, the state is set to 'PIPELINE_STATE_ACTIVE' by default. State changes can be requested by setting the state to stopping, paused, or resuming. State cannot be changed through pipelines.patch requests.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#state Possible values: ["STATE_UNSPECIFIED", "STATE_RESUMING", "STATE_ACTIVE", "STATE_STOPPING", "STATE_ARCHIVED", "STATE_PAUSED"]
+  - `type` (`string`): The type of the pipeline. This field affects the scheduling of the pipeline and the type of metrics to show for the pipeline.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#pipelinetype Possible values: ["PIPELINE_TYPE_UNSPECIFIED", "PIPELINE_TYPE_BATCH", "PIPELINE_TYPE_STREAMING"]
+  - `schedule_info` (`list[obj]`): Internal scheduling information for a pipeline. If this information is provided, periodic jobs will be created per the schedule. If not, users are responsible for creating jobs externally.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#schedulespec When `null`, the `schedule_info` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.schedule_info.new](#fn-schedule_infonew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.timeouts.new](#fn-timeoutsnew) constructor.
+  - `workload` (`list[obj]`): Workload information for creating new jobs.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#workload When `null`, the `workload` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.new](#fn-workloadnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_data_pipeline_pipeline` resource into the root Terraform configuration.
+
+
+### fn withDisplayName
+
+```ts
+withDisplayName()
+```
+
+`google-beta.string.withDisplayName` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the display_name field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `display_name` field.
+
+
+### fn withName
+
+```ts
+withName()
+```
+
+`google-beta.string.withName` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the name field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `name` field.
+
+
+### fn withPipelineSources
+
+```ts
+withPipelineSources()
+```
+
+`google-beta.obj.withPipelineSources` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the pipeline_sources field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `pipeline_sources` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the project field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withRegion
+
+```ts
+withRegion()
+```
+
+`google-beta.string.withRegion` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the region field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `region` field.
+
+
+### fn withScheduleInfo
+
+```ts
+withScheduleInfo()
+```
+
+`google-beta.list[obj].withScheduleInfo` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the schedule_info field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withScheduleInfoMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `schedule_info` field.
+
+
+### fn withScheduleInfoMixin
+
+```ts
+withScheduleInfoMixin()
+```
+
+`google-beta.list[obj].withScheduleInfoMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the schedule_info field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withScheduleInfo](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `schedule_info` field.
+
+
+### fn withSchedulerServiceAccountEmail
+
+```ts
+withSchedulerServiceAccountEmail()
+```
+
+`google-beta.string.withSchedulerServiceAccountEmail` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the scheduler_service_account_email field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `scheduler_service_account_email` field.
+
+
+### fn withState
+
+```ts
+withState()
+```
+
+`google-beta.string.withState` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the state field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `state` field.
+
+
+### fn withTimeouts
+
+```ts
+withTimeouts()
+```
+
+`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will replace the map with the passed in `value`. If you wish to instead merge the
+passed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withTimeoutsMixin
+
+```ts
+withTimeoutsMixin()
+```
+
+`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will merge the passed in value to the existing map. If you wish
+to instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withType
+
+```ts
+withType()
+```
+
+`google-beta.string.withType` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the type field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `type` field.
+
+
+### fn withWorkload
+
+```ts
+withWorkload()
+```
+
+`google-beta.list[obj].withWorkload` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the workload field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withWorkloadMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `workload` field.
+
+
+### fn withWorkloadMixin
+
+```ts
+withWorkloadMixin()
+```
+
+`google-beta.list[obj].withWorkloadMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the workload field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withWorkload](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `workload` field.
+
+
+## obj schedule_info
+
+
+
+### fn schedule_info.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.schedule_info.new` constructs a new object with attributes and blocks configured for the `schedule_info`
+Terraform sub block.
+
+
+
+**Args**:
+  - `schedule` (`string`): Unix-cron format of the schedule. This information is retrieved from the linked Cloud Scheduler. When `null`, the `schedule` field will be omitted from the resulting object.
+  - `time_zone` (`string`): Timezone ID. This matches the timezone IDs used by the Cloud Scheduler API. If empty, UTC time is assumed. When `null`, the `time_zone` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `schedule_info` sub block.
+
+
+## obj timeouts
+
+
+
+### fn timeouts.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`
+Terraform sub block.
+
+
+
+**Args**:
+  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.
+  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.
+  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `timeouts` sub block.
+
+
+## obj workload
+
+
+
+### fn workload.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.workload.new` constructs a new object with attributes and blocks configured for the `workload`
+Terraform sub block.
+
+
+
+**Args**:
+  - `dataflow_flex_template_request` (`list[obj]`): Template information and additional parameters needed to launch a Dataflow job using the flex launch API.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#launchflextemplaterequest When `null`, the `dataflow_flex_template_request` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.new](#fn-workloaddataflow_flex_template_requestnew) constructor.
+  - `dataflow_launch_template_request` (`list[obj]`): Template information and additional parameters needed to launch a Dataflow job using the standard launch API.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#launchtemplaterequest When `null`, the `dataflow_launch_template_request` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.new](#fn-workloaddataflow_launch_template_requestnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `workload` sub block.
+
+
+## obj workload.dataflow_flex_template_request
+
+
+
+### fn workload.dataflow_flex_template_request.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.new` constructs a new object with attributes and blocks configured for the `dataflow_flex_template_request`
+Terraform sub block.
+
+
+
+**Args**:
+  - `location` (`string`): The regional endpoint to which to direct the request. For example, us-central1, us-west1.
+  - `project_id` (`string`): The ID of the Cloud Platform project that the job belongs to.
+  - `validate_only` (`bool`): If true, the request is validated but not actually executed. Defaults to false. When `null`, the `validate_only` field will be omitted from the resulting object.
+  - `launch_parameter` (`list[obj]`): Parameter to launch a job from a Flex Template.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#launchflextemplateparameter When `null`, the `launch_parameter` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.launch_parameter.new](#fn-workloadworkloadlaunch_parameternew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `dataflow_flex_template_request` sub block.
+
+
+## obj workload.dataflow_flex_template_request.launch_parameter
+
+
+
+### fn workload.dataflow_flex_template_request.launch_parameter.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.launch_parameter.new` constructs a new object with attributes and blocks configured for the `launch_parameter`
+Terraform sub block.
+
+
+
+**Args**:
+  - `container_spec_gcs_path` (`string`): Cloud Storage path to a file with a JSON-serialized ContainerSpec as content. When `null`, the `container_spec_gcs_path` field will be omitted from the resulting object.
+  - `job_name` (`string`): The job name to use for the created job. For an update job request, the job name should be the same as the existing running job.
+  - `launch_options` (`obj`): Launch options for this Flex Template job. This is a common set of options across languages and templates. This should not be used to pass job parameters.
+'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `launch_options` field will be omitted from the resulting object.
+  - `parameters` (`obj`): 'The parameters for the Flex Template. Example: {"numWorkers":"5"}'
+'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `parameters` field will be omitted from the resulting object.
+  - `transform_name_mappings` (`obj`): 'Use this to pass transform name mappings for streaming update jobs. Example: {"oldTransformName":"newTransformName",...}'
+'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `transform_name_mappings` field will be omitted from the resulting object.
+  - `update` (`bool`): Set this to true if you are sending a request to update a running streaming job. When set, the job name should be the same as the running job. When `null`, the `update` field will be omitted from the resulting object.
+  - `environment` (`list[obj]`): The runtime environment for the Flex Template job.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#FlexTemplateRuntimeEnvironment When `null`, the `environment` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.launch_parameter.environment.new](#fn-workloadworkloaddataflow_flex_template_requestenvironmentnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `launch_parameter` sub block.
+
+
+## obj workload.dataflow_flex_template_request.launch_parameter.environment
+
+
+
+### fn workload.dataflow_flex_template_request.launch_parameter.environment.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.workload.dataflow_flex_template_request.launch_parameter.environment.new` constructs a new object with attributes and blocks configured for the `environment`
+Terraform sub block.
+
+
+
+**Args**:
+  - `additional_experiments` (`list`): Additional experiment flags for the job. When `null`, the `additional_experiments` field will be omitted from the resulting object.
+  - `additional_user_labels` (`obj`): Additional user labels to be specified for the job. Keys and values should follow the restrictions specified in the labeling restrictions page. An object containing a list of key/value pairs.
+'Example: { "name": "wrench", "mass": "1kg", "count": "3" }.'
+'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `additional_user_labels` field will be omitted from the resulting object.
+  - `enable_streaming_engine` (`bool`): Whether to enable Streaming Engine for the job. When `null`, the `enable_streaming_engine` field will be omitted from the resulting object.
+  - `flexrs_goal` (`string`): Set FlexRS goal for the job. https://cloud.google.com/dataflow/docs/guides/flexrs
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#FlexResourceSchedulingGoal Possible values: ["FLEXRS_UNSPECIFIED", "FLEXRS_SPEED_OPTIMIZED", "FLEXRS_COST_OPTIMIZED"] When `null`, the `flexrs_goal` field will be omitted from the resulting object.
+  - `ip_configuration` (`string`): Configuration for VM IPs.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#WorkerIPAddressConfiguration Possible values: ["WORKER_IP_UNSPECIFIED", "WORKER_IP_PUBLIC", "WORKER_IP_PRIVATE"] When `null`, the `ip_configuration` field will be omitted from the resulting object.
+  - `kms_key_name` (`string`): 'Name for the Cloud KMS key for the job. The key format is: projects//locations//keyRings//cryptoKeys/' When `null`, the `kms_key_name` field will be omitted from the resulting object.
+  - `machine_type` (`string`): The machine type to use for the job. Defaults to the value from the template if not specified. When `null`, the `machine_type` field will be omitted from the resulting object.
+  - `max_workers` (`number`): The maximum number of Compute Engine instances to be made available to your pipeline during execution, from 1 to 1000. When `null`, the `max_workers` field will be omitted from the resulting object.
+  - `network` (`string`): Network to which VMs will be assigned. If empty or unspecified, the service will use the network "default". When `null`, the `network` field will be omitted from the resulting object.
+  - `num_workers` (`number`): The initial number of Compute Engine instances for the job. When `null`, the `num_workers` field will be omitted from the resulting object.
+  - `service_account_email` (`string`): The email address of the service account to run the job as. When `null`, the `service_account_email` field will be omitted from the resulting object.
+  - `subnetwork` (`string`): Subnetwork to which VMs will be assigned, if desired. You can specify a subnetwork using either a complete URL or an abbreviated path. Expected to be of the form "https://www.googleapis.com/compute/v1/projects/HOST_PROJECT_ID/regions/REGION/subnetworks/SUBNETWORK" or "regions/REGION/subnetworks/SUBNETWORK". If the subnetwork is located in a Shared VPC network, you must use the complete URL. When `null`, the `subnetwork` field will be omitted from the resulting object.
+  - `temp_location` (`string`): The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `temp_location` field will be omitted from the resulting object.
+  - `worker_region` (`string`): The Compute Engine region (https://cloud.google.com/compute/docs/regions-zones/regions-zones) in which worker processing should occur, e.g. "us-west1". Mutually exclusive with workerZone. If neither workerRegion nor workerZone is specified, default to the control plane's region. When `null`, the `worker_region` field will be omitted from the resulting object.
+  - `worker_zone` (`string`): The Compute Engine zone (https://cloud.google.com/compute/docs/regions-zones/regions-zones) in which worker processing should occur, e.g. "us-west1-a". Mutually exclusive with workerRegion. If neither workerRegion nor workerZone is specified, a zone in the control plane's region is chosen based on available capacity. If both workerZone and zone are set, workerZone takes precedence. When `null`, the `worker_zone` field will be omitted from the resulting object.
+  - `zone` (`string`): The Compute Engine availability zone for launching worker instances to run your pipeline. In the future, workerZone will take precedence. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `environment` sub block.
+
+
+## obj workload.dataflow_launch_template_request
+
+
+
+### fn workload.dataflow_launch_template_request.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.new` constructs a new object with attributes and blocks configured for the `dataflow_launch_template_request`
+Terraform sub block.
+
+
+
+**Args**:
+  - `gcs_path` (`string`): A Cloud Storage path to the template from which to create the job. Must be a valid Cloud Storage URL, beginning with 'gs://'. When `null`, the `gcs_path` field will be omitted from the resulting object.
+  - `location` (`string`): The regional endpoint to which to direct the request. When `null`, the `location` field will be omitted from the resulting object.
+  - `project_id` (`string`): The ID of the Cloud Platform project that the job belongs to.
+  - `validate_only` (`bool`): Set the `validate_only` field on the resulting object. When `null`, the `validate_only` field will be omitted from the resulting object.
+  - `launch_parameters` (`list[obj]`): The parameters of the template to launch. This should be part of the body of the POST request.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#launchtemplateparameters When `null`, the `launch_parameters` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.launch_parameters.new](#fn-workloadworkloadlaunch_parametersnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `dataflow_launch_template_request` sub block.
+
+
+## obj workload.dataflow_launch_template_request.launch_parameters
+
+
+
+### fn workload.dataflow_launch_template_request.launch_parameters.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.launch_parameters.new` constructs a new object with attributes and blocks configured for the `launch_parameters`
+Terraform sub block.
+
+
+
+**Args**:
+  - `job_name` (`string`): The job name to use for the created job.
+  - `parameters` (`obj`): The runtime parameters to pass to the job.
+'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `parameters` field will be omitted from the resulting object.
+  - `transform_name_mapping` (`obj`): Map of transform name prefixes of the job to be replaced to the corresponding name prefixes of the new job. Only applicable when updating a pipeline.
+'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `transform_name_mapping` field will be omitted from the resulting object.
+  - `update` (`bool`): If set, replace the existing pipeline with the name specified by jobName with this pipeline, preserving state. When `null`, the `update` field will be omitted from the resulting object.
+  - `environment` (`list[obj]`): The runtime environment for the job.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#RuntimeEnvironment When `null`, the `environment` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.launch_parameters.environment.new](#fn-workloadworkloaddataflow_launch_template_requestenvironmentnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `launch_parameters` sub block.
+
+
+## obj workload.dataflow_launch_template_request.launch_parameters.environment
+
+
+
+### fn workload.dataflow_launch_template_request.launch_parameters.environment.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_data_pipeline_pipeline.workload.dataflow_launch_template_request.launch_parameters.environment.new` constructs a new object with attributes and blocks configured for the `environment`
+Terraform sub block.
+
+
+
+**Args**:
+  - `additional_experiments` (`list`): Additional experiment flags for the job. When `null`, the `additional_experiments` field will be omitted from the resulting object.
+  - `additional_user_labels` (`obj`): Additional user labels to be specified for the job. Keys and values should follow the restrictions specified in the labeling restrictions page. An object containing a list of key/value pairs.
+'Example: { "name": "wrench", "mass": "1kg", "count": "3" }.'
+'An object containing a list of "key": value pairs. Example: { "name": "wrench", "mass": "1.3kg", "count": "3" }.' When `null`, the `additional_user_labels` field will be omitted from the resulting object.
+  - `bypass_temp_dir_validation` (`bool`): Whether to bypass the safety checks for the job's temporary directory. Use with caution. When `null`, the `bypass_temp_dir_validation` field will be omitted from the resulting object.
+  - `enable_streaming_engine` (`bool`): Whether to enable Streaming Engine for the job. When `null`, the `enable_streaming_engine` field will be omitted from the resulting object.
+  - `ip_configuration` (`string`): Configuration for VM IPs.
+https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/v1/projects.locations.pipelines#WorkerIPAddressConfiguration Possible values: ["WORKER_IP_UNSPECIFIED", "WORKER_IP_PUBLIC", "WORKER_IP_PRIVATE"] When `null`, the `ip_configuration` field will be omitted from the resulting object.
+  - `kms_key_name` (`string`): 'Name for the Cloud KMS key for the job. The key format is: projects//locations//keyRings//cryptoKeys/' When `null`, the `kms_key_name` field will be omitted from the resulting object.
+  - `machine_type` (`string`): The machine type to use for the job. Defaults to the value from the template if not specified. When `null`, the `machine_type` field will be omitted from the resulting object.
+  - `max_workers` (`number`): The maximum number of Compute Engine instances to be made available to your pipeline during execution, from 1 to 1000. When `null`, the `max_workers` field will be omitted from the resulting object.
+  - `network` (`string`): Network to which VMs will be assigned. If empty or unspecified, the service will use the network "default". When `null`, the `network` field will be omitted from the resulting object.
+  - `num_workers` (`number`): The initial number of Compute Engine instances for the job. When `null`, the `num_workers` field will be omitted from the resulting object.
+  - `service_account_email` (`string`): The email address of the service account to run the job as. When `null`, the `service_account_email` field will be omitted from the resulting object.
+  - `subnetwork` (`string`): Subnetwork to which VMs will be assigned, if desired. You can specify a subnetwork using either a complete URL or an abbreviated path. Expected to be of the form "https://www.googleapis.com/compute/v1/projects/HOST_PROJECT_ID/regions/REGION/subnetworks/SUBNETWORK" or "regions/REGION/subnetworks/SUBNETWORK". If the subnetwork is located in a Shared VPC network, you must use the complete URL. When `null`, the `subnetwork` field will be omitted from the resulting object.
+  - `temp_location` (`string`): The Cloud Storage path to use for temporary files. Must be a valid Cloud Storage URL, beginning with gs://. When `null`, the `temp_location` field will be omitted from the resulting object.
+  - `worker_region` (`string`): The Compute Engine region (https://cloud.google.com/compute/docs/regions-zones/regions-zones) in which worker processing should occur, e.g. "us-west1". Mutually exclusive with workerZone. If neither workerRegion nor workerZone is specified, default to the control plane's region. When `null`, the `worker_region` field will be omitted from the resulting object.
+  - `worker_zone` (`string`): The Compute Engine zone (https://cloud.google.com/compute/docs/regions-zones/regions-zones) in which worker processing should occur, e.g. "us-west1-a". Mutually exclusive with workerRegion. If neither workerRegion nor workerZone is specified, a zone in the control plane's region is chosen based on available capacity. If both workerZone and zone are set, workerZone takes precedence. When `null`, the `worker_zone` field will be omitted from the resulting object.
+  - `zone` (`string`): The Compute Engine availability zone for launching worker instances to run your pipeline. In the future, workerZone will take precedence. When `null`, the `zone` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `environment` sub block.
diff --git a/docs/4.x/google_dialogflow_cx_test_case.md b/docs/4.x/google_dialogflow_cx_test_case.md
new file mode 100644
index 0000000..3f3bdca
--- /dev/null
+++ b/docs/4.x/google_dialogflow_cx_test_case.md
@@ -0,0 +1,597 @@
+---
+permalink: /google_dialogflow_cx_test_case/
+---
+
+# google_dialogflow_cx_test_case
+
+`google_dialogflow_cx_test_case` represents the `google-beta_google_dialogflow_cx_test_case` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDisplayName()`](#fn-withdisplayname)
+* [`fn withNotes()`](#fn-withnotes)
+* [`fn withParent()`](#fn-withparent)
+* [`fn withTags()`](#fn-withtags)
+* [`fn withTestCaseConversationTurns()`](#fn-withtestcaseconversationturns)
+* [`fn withTestCaseConversationTurnsMixin()`](#fn-withtestcaseconversationturnsmixin)
+* [`fn withTestConfig()`](#fn-withtestconfig)
+* [`fn withTestConfigMixin()`](#fn-withtestconfigmixin)
+* [`fn withTimeouts()`](#fn-withtimeouts)
+* [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
+* [`obj test_case_conversation_turns`](#obj-test_case_conversation_turns)
+  * [`fn new()`](#fn-test_case_conversation_turnsnew)
+  * [`obj test_case_conversation_turns.user_input`](#obj-test_case_conversation_turnsuser_input)
+    * [`fn new()`](#fn-test_case_conversation_turnsuser_inputnew)
+    * [`obj test_case_conversation_turns.user_input.input`](#obj-test_case_conversation_turnsuser_inputinput)
+      * [`fn new()`](#fn-test_case_conversation_turnsuser_inputinputnew)
+      * [`obj test_case_conversation_turns.user_input.input.dtmf`](#obj-test_case_conversation_turnsuser_inputinputdtmf)
+        * [`fn new()`](#fn-test_case_conversation_turnsuser_inputinputdtmfnew)
+      * [`obj test_case_conversation_turns.user_input.input.event`](#obj-test_case_conversation_turnsuser_inputinputevent)
+        * [`fn new()`](#fn-test_case_conversation_turnsuser_inputinputeventnew)
+      * [`obj test_case_conversation_turns.user_input.input.text`](#obj-test_case_conversation_turnsuser_inputinputtext)
+        * [`fn new()`](#fn-test_case_conversation_turnsuser_inputinputtextnew)
+  * [`obj test_case_conversation_turns.virtual_agent_output`](#obj-test_case_conversation_turnsvirtual_agent_output)
+    * [`fn new()`](#fn-test_case_conversation_turnsvirtual_agent_outputnew)
+    * [`obj test_case_conversation_turns.virtual_agent_output.current_page`](#obj-test_case_conversation_turnsvirtual_agent_outputcurrent_page)
+      * [`fn new()`](#fn-test_case_conversation_turnsvirtual_agent_outputcurrent_pagenew)
+    * [`obj test_case_conversation_turns.virtual_agent_output.text_responses`](#obj-test_case_conversation_turnsvirtual_agent_outputtext_responses)
+      * [`fn new()`](#fn-test_case_conversation_turnsvirtual_agent_outputtext_responsesnew)
+    * [`obj test_case_conversation_turns.virtual_agent_output.triggered_intent`](#obj-test_case_conversation_turnsvirtual_agent_outputtriggered_intent)
+      * [`fn new()`](#fn-test_case_conversation_turnsvirtual_agent_outputtriggered_intentnew)
+* [`obj test_config`](#obj-test_config)
+  * [`fn new()`](#fn-test_confignew)
+* [`obj timeouts`](#obj-timeouts)
+  * [`fn new()`](#fn-timeoutsnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.new` injects a new `google-beta_google_dialogflow_cx_test_case` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.google_dialogflow_cx_test_case.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.google_dialogflow_cx_test_case` using the reference:
+
+    $._ref.google-beta_google_dialogflow_cx_test_case.some_id.get('id')
+
+This is the same as directly entering `"${ google-beta_google_dialogflow_cx_test_case.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `display_name` (`string`): The human-readable name of the test case, unique within the agent. Limit of 200 characters.
+  - `notes` (`string`): Additional freeform notes about the test case. Limit of 400 characters. When `null`, the `notes` field will be omitted from the resulting object.
+  - `parent` (`string`): The agent to create the test case for.
+Format: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>. When `null`, the `parent` field will be omitted from the resulting object.
+  - `tags` (`list`): Tags are short descriptions that users may apply to test cases for organizational and filtering purposes.
+Each tag should start with "#" and has a limit of 30 characters When `null`, the `tags` field will be omitted from the resulting object.
+  - `test_case_conversation_turns` (`list[obj]`): The conversation turns uttered when the test case was created, in chronological order. These include the canonical set of agent utterances that should occur when the agent is working properly. When `null`, the `test_case_conversation_turns` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.new](#fn-test_case_conversation_turnsnew) constructor.
+  - `test_config` (`list[obj]`): Config for the test case. When `null`, the `test_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_config.new](#fn-test_confignew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.newAttrs` constructs a new object with attributes and blocks configured for the `google_dialogflow_cx_test_case`
+Terraform resource.
+
+Unlike [google-beta.google_dialogflow_cx_test_case.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `display_name` (`string`): The human-readable name of the test case, unique within the agent. Limit of 200 characters.
+  - `notes` (`string`): Additional freeform notes about the test case. Limit of 400 characters. When `null`, the `notes` field will be omitted from the resulting object.
+  - `parent` (`string`): The agent to create the test case for.
+Format: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>. When `null`, the `parent` field will be omitted from the resulting object.
+  - `tags` (`list`): Tags are short descriptions that users may apply to test cases for organizational and filtering purposes.
+Each tag should start with "#" and has a limit of 30 characters When `null`, the `tags` field will be omitted from the resulting object.
+  - `test_case_conversation_turns` (`list[obj]`): The conversation turns uttered when the test case was created, in chronological order. These include the canonical set of agent utterances that should occur when the agent is working properly. When `null`, the `test_case_conversation_turns` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.new](#fn-test_case_conversation_turnsnew) constructor.
+  - `test_config` (`list[obj]`): Config for the test case. When `null`, the `test_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_config.new](#fn-test_confignew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_dialogflow_cx_test_case` resource into the root Terraform configuration.
+
+
+### fn withDisplayName
+
+```ts
+withDisplayName()
+```
+
+`google-beta.string.withDisplayName` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the display_name field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `display_name` field.
+
+
+### fn withNotes
+
+```ts
+withNotes()
+```
+
+`google-beta.string.withNotes` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the notes field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `notes` field.
+
+
+### fn withParent
+
+```ts
+withParent()
+```
+
+`google-beta.string.withParent` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the parent field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `parent` field.
+
+
+### fn withTags
+
+```ts
+withTags()
+```
+
+`google-beta.list.withTags` constructs a mixin object that can be merged into the `list`
+Terraform resource block to set or update the tags field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list`): The value to set for the `tags` field.
+
+
+### fn withTestCaseConversationTurns
+
+```ts
+withTestCaseConversationTurns()
+```
+
+`google-beta.list[obj].withTestCaseConversationTurns` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the test_case_conversation_turns field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withTestCaseConversationTurnsMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `test_case_conversation_turns` field.
+
+
+### fn withTestCaseConversationTurnsMixin
+
+```ts
+withTestCaseConversationTurnsMixin()
+```
+
+`google-beta.list[obj].withTestCaseConversationTurnsMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the test_case_conversation_turns field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withTestCaseConversationTurns](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `test_case_conversation_turns` field.
+
+
+### fn withTestConfig
+
+```ts
+withTestConfig()
+```
+
+`google-beta.list[obj].withTestConfig` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the test_config field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withTestConfigMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `test_config` field.
+
+
+### fn withTestConfigMixin
+
+```ts
+withTestConfigMixin()
+```
+
+`google-beta.list[obj].withTestConfigMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the test_config field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withTestConfig](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `test_config` field.
+
+
+### fn withTimeouts
+
+```ts
+withTimeouts()
+```
+
+`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will replace the map with the passed in `value`. If you wish to instead merge the
+passed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withTimeoutsMixin
+
+```ts
+withTimeoutsMixin()
+```
+
+`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will merge the passed in value to the existing map. If you wish
+to instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+## obj test_case_conversation_turns
+
+
+
+### fn test_case_conversation_turns.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.new` constructs a new object with attributes and blocks configured for the `test_case_conversation_turns`
+Terraform sub block.
+
+
+
+**Args**:
+  - `user_input` (`list[obj]`): The user input. When `null`, the `user_input` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.new](#fn-test_case_conversation_turnsuser_inputnew) constructor.
+  - `virtual_agent_output` (`list[obj]`): The virtual agent output. When `null`, the `virtual_agent_output` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.new](#fn-test_case_conversation_turnsvirtual_agent_outputnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `test_case_conversation_turns` sub block.
+
+
+## obj test_case_conversation_turns.user_input
+
+
+
+### fn test_case_conversation_turns.user_input.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.new` constructs a new object with attributes and blocks configured for the `user_input`
+Terraform sub block.
+
+
+
+**Args**:
+  - `enable_sentiment_analysis` (`bool`): Whether sentiment analysis is enabled. When `null`, the `enable_sentiment_analysis` field will be omitted from the resulting object.
+  - `injected_parameters` (`string`): Parameters that need to be injected into the conversation during intent detection. When `null`, the `injected_parameters` field will be omitted from the resulting object.
+  - `is_webhook_enabled` (`bool`): If webhooks should be allowed to trigger in response to the user utterance. Often if parameters are injected, webhooks should not be enabled. When `null`, the `is_webhook_enabled` field will be omitted from the resulting object.
+  - `input` (`list[obj]`): User input. Supports text input, event input, dtmf input in the test case. When `null`, the `input` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.new](#fn-test_case_conversation_turnstest_case_conversation_turnsinputnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `user_input` sub block.
+
+
+## obj test_case_conversation_turns.user_input.input
+
+
+
+### fn test_case_conversation_turns.user_input.input.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.new` constructs a new object with attributes and blocks configured for the `input`
+Terraform sub block.
+
+
+
+**Args**:
+  - `language_code` (`string`): The language of the input. See [Language Support](https://cloud.google.com/dialogflow/cx/docs/reference/language) for a list of the currently supported language codes.
+Note that queries in the same session do not necessarily need to specify the same language. When `null`, the `language_code` field will be omitted from the resulting object.
+  - `dtmf` (`list[obj]`): The DTMF event to be handled. When `null`, the `dtmf` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.dtmf.new](#fn-test_case_conversation_turnstest_case_conversation_turnsuser_inputdtmfnew) constructor.
+  - `event` (`list[obj]`): The event to be triggered. When `null`, the `event` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.event.new](#fn-test_case_conversation_turnstest_case_conversation_turnsuser_inputeventnew) constructor.
+  - `text` (`list[obj]`): The natural language text to be processed. When `null`, the `text` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.text.new](#fn-test_case_conversation_turnstest_case_conversation_turnsuser_inputtextnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `input` sub block.
+
+
+## obj test_case_conversation_turns.user_input.input.dtmf
+
+
+
+### fn test_case_conversation_turns.user_input.input.dtmf.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.dtmf.new` constructs a new object with attributes and blocks configured for the `dtmf`
+Terraform sub block.
+
+
+
+**Args**:
+  - `digits` (`string`): The dtmf digits. When `null`, the `digits` field will be omitted from the resulting object.
+  - `finish_digit` (`string`): The finish digit (if any). When `null`, the `finish_digit` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `dtmf` sub block.
+
+
+## obj test_case_conversation_turns.user_input.input.event
+
+
+
+### fn test_case_conversation_turns.user_input.input.event.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.event.new` constructs a new object with attributes and blocks configured for the `event`
+Terraform sub block.
+
+
+
+**Args**:
+  - `event` (`string`): Name of the event.
+
+**Returns**:
+  - An attribute object that represents the `event` sub block.
+
+
+## obj test_case_conversation_turns.user_input.input.text
+
+
+
+### fn test_case_conversation_turns.user_input.input.text.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.user_input.input.text.new` constructs a new object with attributes and blocks configured for the `text`
+Terraform sub block.
+
+
+
+**Args**:
+  - `text` (`string`): The natural language text to be processed. Text length must not exceed 256 characters.
+
+**Returns**:
+  - An attribute object that represents the `text` sub block.
+
+
+## obj test_case_conversation_turns.virtual_agent_output
+
+
+
+### fn test_case_conversation_turns.virtual_agent_output.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.new` constructs a new object with attributes and blocks configured for the `virtual_agent_output`
+Terraform sub block.
+
+
+
+**Args**:
+  - `session_parameters` (`string`): The session parameters available to the bot at this point. When `null`, the `session_parameters` field will be omitted from the resulting object.
+  - `current_page` (`list[obj]`): The [Page](https://cloud.google.com/dialogflow/cx/docs/reference/rest/v3/projects.locations.agents.flows.pages#Page) on which the utterance was spoken. When `null`, the `current_page` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.current_page.new](#fn-test_case_conversation_turnstest_case_conversation_turnscurrent_pagenew) constructor.
+  - `text_responses` (`list[obj]`): The text responses from the agent for the turn. When `null`, the `text_responses` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.text_responses.new](#fn-test_case_conversation_turnstest_case_conversation_turnstext_responsesnew) constructor.
+  - `triggered_intent` (`list[obj]`): The [Intent](https://cloud.google.com/dialogflow/cx/docs/reference/rest/v3/projects.locations.agents.intents#Intent) that triggered the response. When `null`, the `triggered_intent` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.triggered_intent.new](#fn-test_case_conversation_turnstest_case_conversation_turnstriggered_intentnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `virtual_agent_output` sub block.
+
+
+## obj test_case_conversation_turns.virtual_agent_output.current_page
+
+
+
+### fn test_case_conversation_turns.virtual_agent_output.current_page.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.current_page.new` constructs a new object with attributes and blocks configured for the `current_page`
+Terraform sub block.
+
+
+
+**Args**:
+  - `name` (`string`): The unique identifier of the page.
+Format: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>/flows/<Flow ID>/pages/<Page ID>. When `null`, the `name` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `current_page` sub block.
+
+
+## obj test_case_conversation_turns.virtual_agent_output.text_responses
+
+
+
+### fn test_case_conversation_turns.virtual_agent_output.text_responses.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.text_responses.new` constructs a new object with attributes and blocks configured for the `text_responses`
+Terraform sub block.
+
+
+
+**Args**:
+  - `text` (`list`): A collection of text responses. When `null`, the `text` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `text_responses` sub block.
+
+
+## obj test_case_conversation_turns.virtual_agent_output.triggered_intent
+
+
+
+### fn test_case_conversation_turns.virtual_agent_output.triggered_intent.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_case_conversation_turns.virtual_agent_output.triggered_intent.new` constructs a new object with attributes and blocks configured for the `triggered_intent`
+Terraform sub block.
+
+
+
+**Args**:
+  - `name` (`string`): The unique identifier of the intent.
+Format: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>/intents/<Intent ID>. When `null`, the `name` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `triggered_intent` sub block.
+
+
+## obj test_config
+
+
+
+### fn test_config.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.test_config.new` constructs a new object with attributes and blocks configured for the `test_config`
+Terraform sub block.
+
+
+
+**Args**:
+  - `flow` (`string`): Flow name to start the test case with.
+Format: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>/flows/<Flow ID>.
+Only one of flow and page should be set to indicate the starting point of the test case. If neither is set, the test case will start with start page on the default start flow. When `null`, the `flow` field will be omitted from the resulting object.
+  - `page` (`string`): The page to start the test case with.
+Format: projects/<Project ID>/locations/<Location ID>/agents/<Agent ID>/flows/<Flow ID>/pages/<Page ID>.
+Only one of flow and page should be set to indicate the starting point of the test case. If neither is set, the test case will start with start page on the default start flow. When `null`, the `page` field will be omitted from the resulting object.
+  - `tracking_parameters` (`list`): Session parameters to be compared when calculating differences. When `null`, the `tracking_parameters` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `test_config` sub block.
+
+
+## obj timeouts
+
+
+
+### fn timeouts.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_dialogflow_cx_test_case.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`
+Terraform sub block.
+
+
+
+**Args**:
+  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.
+  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.
+  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `timeouts` sub block.
diff --git a/docs/4.x/google_firestore_database.md b/docs/4.x/google_firestore_database.md
index b09d2e1..365b43a 100644
--- a/docs/4.x/google_firestore_database.md
+++ b/docs/4.x/google_firestore_database.md
@@ -19,6 +19,7 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withConcurrencyMode()`](#fn-withconcurrencymode)
 * [`fn withLocationId()`](#fn-withlocationid)
 * [`fn withName()`](#fn-withname)
+* [`fn withPointInTimeRecoveryEnablement()`](#fn-withpointintimerecoveryenablement)
 * [`fn withProject()`](#fn-withproject)
 * [`fn withTimeouts()`](#fn-withtimeouts)
 * [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
@@ -65,6 +66,11 @@ characters. Valid characters are /[a-z][0-9]-/ with first character
 a letter and the last a letter or a number. Must not be
 UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
 "(default)" database id is also valid.
+  - `point_in_time_recovery_enablement` (`string`): Whether to enable the PITR feature on this database.
+If 'POINT_IN_TIME_RECOVERY_ENABLED' is selected, reads are supported on selected versions of the data from within the past 7 days.
+versionRetentionPeriod and earliestVersionTime can be used to determine the supported versions. These include reads against any timestamp within the past hour
+and reads against 1-minute snapshots beyond 1 hour and within 7 days.
+If 'POINT_IN_TIME_RECOVERY_DISABLED' is selected, reads are supported on any version of the data from within the past 1 hour. Default value: "POINT_IN_TIME_RECOVERY_DISABLED" Possible values: ["POINT_IN_TIME_RECOVERY_ENABLED", "POINT_IN_TIME_RECOVERY_DISABLED"] When `null`, the `point_in_time_recovery_enablement` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
   - `type` (`string`): The type of the database.
 See https://cloud.google.com/datastore/docs/firestore-or-datastore
@@ -103,6 +109,11 @@ characters. Valid characters are /[a-z][0-9]-/ with first character
 a letter and the last a letter or a number. Must not be
 UUID-like /[0-9a-f]{8}(-[0-9a-f]{4}){3}-[0-9a-f]{12}/.
 "(default)" database id is also valid.
+  - `point_in_time_recovery_enablement` (`string`): Whether to enable the PITR feature on this database.
+If 'POINT_IN_TIME_RECOVERY_ENABLED' is selected, reads are supported on selected versions of the data from within the past 7 days.
+versionRetentionPeriod and earliestVersionTime can be used to determine the supported versions. These include reads against any timestamp within the past hour
+and reads against 1-minute snapshots beyond 1 hour and within 7 days.
+If 'POINT_IN_TIME_RECOVERY_DISABLED' is selected, reads are supported on any version of the data from within the past 1 hour. Default value: "POINT_IN_TIME_RECOVERY_DISABLED" Possible values: ["POINT_IN_TIME_RECOVERY_ENABLED", "POINT_IN_TIME_RECOVERY_DISABLED"] When `null`, the `point_in_time_recovery_enablement` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
   - `type` (`string`): The type of the database.
 See https://cloud.google.com/datastore/docs/firestore-or-datastore
@@ -177,6 +188,22 @@ Terraform resource block to set or update the name field.
   - `value` (`string`): The value to set for the `name` field.
 
 
+### fn withPointInTimeRecoveryEnablement
+
+```ts
+withPointInTimeRecoveryEnablement()
+```
+
+`google-beta.string.withPointInTimeRecoveryEnablement` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the point_in_time_recovery_enablement field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `point_in_time_recovery_enablement` field.
+
+
 ### fn withProject
 
 ```ts
diff --git a/docs/4.x/google_gke_hub_membership_binding.md b/docs/4.x/google_gke_hub_membership_binding.md
index fada75c..fdb9703 100644
--- a/docs/4.x/google_gke_hub_membership_binding.md
+++ b/docs/4.x/google_gke_hub_membership_binding.md
@@ -15,6 +15,7 @@ This package contains functions and utilities for setting up the resource using
 
 * [`fn new()`](#fn-new)
 * [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLabels()`](#fn-withlabels)
 * [`fn withLocation()`](#fn-withlocation)
 * [`fn withMembershipBindingId()`](#fn-withmembershipbindingid)
 * [`fn withMembershipId()`](#fn-withmembershipid)
@@ -54,6 +55,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
 
 **Args**:
   - `resourceLabel` (`string`): The name label of the block.
+  - `labels` (`obj`): Labels for this Membership binding. When `null`, the `labels` field will be omitted from the resulting object.
   - `location` (`string`): Location of the membership
   - `membership_binding_id` (`string`): The client-provided identifier of the membership binding.
   - `membership_id` (`string`): Id of the membership
@@ -84,6 +86,7 @@ This is most useful when you need to preprocess the attributes with functions, c
 injecting into a complete block.
 
 **Args**:
+  - `labels` (`obj`): Labels for this Membership binding. When `null`, the `labels` field will be omitted from the resulting object.
   - `location` (`string`): Location of the membership
   - `membership_binding_id` (`string`): The client-provided identifier of the membership binding.
   - `membership_id` (`string`): Id of the membership
@@ -96,6 +99,22 @@ injecting into a complete block.
   - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gke_hub_membership_binding` resource into the root Terraform configuration.
 
 
+### fn withLabels
+
+```ts
+withLabels()
+```
+
+`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the labels field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `labels` field.
+
+
 ### fn withLocation
 
 ```ts
diff --git a/docs/4.x/google_gke_hub_namespace.md b/docs/4.x/google_gke_hub_namespace.md
index d9881d1..289b93e 100644
--- a/docs/4.x/google_gke_hub_namespace.md
+++ b/docs/4.x/google_gke_hub_namespace.md
@@ -15,6 +15,8 @@ This package contains functions and utilities for setting up the resource using
 
 * [`fn new()`](#fn-new)
 * [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLabels()`](#fn-withlabels)
+* [`fn withNamespaceLabels()`](#fn-withnamespacelabels)
 * [`fn withProject()`](#fn-withproject)
 * [`fn withScope()`](#fn-withscope)
 * [`fn withScopeId()`](#fn-withscopeid)
@@ -53,6 +55,12 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
 
 **Args**:
   - `resourceLabel` (`string`): The name label of the block.
+  - `labels` (`obj`): Labels for this Namespace. When `null`, the `labels` field will be omitted from the resulting object.
+  - `namespace_labels` (`obj`): Namespace-level cluster namespace labels. These labels are applied
+to the related namespace of the member clusters bound to the parent
+Scope. Scope-level labels ('namespace_labels' in the Fleet Scope
+resource) take precedence over Namespace-level labels if they share
+a key. Keys and values must be Kubernetes-conformant. When `null`, the `namespace_labels` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
   - `scope` (`string`): The name of the Scope instance.
   - `scope_id` (`string`): Id of the scope
@@ -81,6 +89,12 @@ This is most useful when you need to preprocess the attributes with functions, c
 injecting into a complete block.
 
 **Args**:
+  - `labels` (`obj`): Labels for this Namespace. When `null`, the `labels` field will be omitted from the resulting object.
+  - `namespace_labels` (`obj`): Namespace-level cluster namespace labels. These labels are applied
+to the related namespace of the member clusters bound to the parent
+Scope. Scope-level labels ('namespace_labels' in the Fleet Scope
+resource) take precedence over Namespace-level labels if they share
+a key. Keys and values must be Kubernetes-conformant. When `null`, the `namespace_labels` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
   - `scope` (`string`): The name of the Scope instance.
   - `scope_id` (`string`): Id of the scope
@@ -91,6 +105,38 @@ injecting into a complete block.
   - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gke_hub_namespace` resource into the root Terraform configuration.
 
 
+### fn withLabels
+
+```ts
+withLabels()
+```
+
+`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the labels field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `labels` field.
+
+
+### fn withNamespaceLabels
+
+```ts
+withNamespaceLabels()
+```
+
+`google-beta.obj.withNamespaceLabels` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the namespace_labels field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `namespace_labels` field.
+
+
 ### fn withProject
 
 ```ts
@@ -210,6 +256,7 @@ Terraform sub block.
 **Args**:
   - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.
   - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.
+  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.
 
 **Returns**:
   - An attribute object that represents the `timeouts` sub block.
diff --git a/docs/4.x/google_gke_hub_scope.md b/docs/4.x/google_gke_hub_scope.md
index fd0960f..6bb58b0 100644
--- a/docs/4.x/google_gke_hub_scope.md
+++ b/docs/4.x/google_gke_hub_scope.md
@@ -15,6 +15,7 @@ This package contains functions and utilities for setting up the resource using
 
 * [`fn new()`](#fn-new)
 * [`fn newAttrs()`](#fn-newattrs)
+* [`fn withLabels()`](#fn-withlabels)
 * [`fn withProject()`](#fn-withproject)
 * [`fn withScopeId()`](#fn-withscopeid)
 * [`fn withTimeouts()`](#fn-withtimeouts)
@@ -51,6 +52,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
 
 **Args**:
   - `resourceLabel` (`string`): The name label of the block.
+  - `labels` (`obj`): Labels for this Scope. When `null`, the `labels` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
   - `scope_id` (`string`): The client-provided identifier of the scope.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_scope.timeouts.new](#fn-timeoutsnew) constructor.
@@ -77,6 +79,7 @@ This is most useful when you need to preprocess the attributes with functions, c
 injecting into a complete block.
 
 **Args**:
+  - `labels` (`obj`): Labels for this Scope. When `null`, the `labels` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
   - `scope_id` (`string`): The client-provided identifier of the scope.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gke_hub_scope.timeouts.new](#fn-timeoutsnew) constructor.
@@ -85,6 +88,22 @@ injecting into a complete block.
   - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gke_hub_scope` resource into the root Terraform configuration.
 
 
+### fn withLabels
+
+```ts
+withLabels()
+```
+
+`google-beta.obj.withLabels` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the labels field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `labels` field.
+
+
 ### fn withProject
 
 ```ts
@@ -172,6 +191,7 @@ Terraform sub block.
 **Args**:
   - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.
   - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.
+  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.
 
 **Returns**:
   - An attribute object that represents the `timeouts` sub block.
diff --git a/docs/4.x/google_gkeonprem_bare_metal_cluster.md b/docs/4.x/google_gkeonprem_bare_metal_cluster.md
index e135255..69c6d71 100644
--- a/docs/4.x/google_gkeonprem_bare_metal_cluster.md
+++ b/docs/4.x/google_gkeonprem_bare_metal_cluster.md
@@ -18,6 +18,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withAdminClusterMembership()`](#fn-withadminclustermembership)
 * [`fn withAnnotations()`](#fn-withannotations)
 * [`fn withBareMetalVersion()`](#fn-withbaremetalversion)
+* [`fn withBinaryAuthorization()`](#fn-withbinaryauthorization)
+* [`fn withBinaryAuthorizationMixin()`](#fn-withbinaryauthorizationmixin)
 * [`fn withClusterOperations()`](#fn-withclusteroperations)
 * [`fn withClusterOperationsMixin()`](#fn-withclusteroperationsmixin)
 * [`fn withControlPlane()`](#fn-withcontrolplane)
@@ -46,6 +48,10 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withStorageMixin()`](#fn-withstoragemixin)
 * [`fn withTimeouts()`](#fn-withtimeouts)
 * [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
+* [`fn withUpgradePolicy()`](#fn-withupgradepolicy)
+* [`fn withUpgradePolicyMixin()`](#fn-withupgradepolicymixin)
+* [`obj binary_authorization`](#obj-binary_authorization)
+  * [`fn new()`](#fn-binary_authorizationnew)
 * [`obj cluster_operations`](#obj-cluster_operations)
   * [`fn new()`](#fn-cluster_operationsnew)
 * [`obj control_plane`](#obj-control_plane)
@@ -130,6 +136,8 @@ This package contains functions and utilities for setting up the resource using
       * [`fn new()`](#fn-storagelvp_share_configlvp_confignew)
 * [`obj timeouts`](#obj-timeouts)
   * [`fn new()`](#fn-timeoutsnew)
+* [`obj upgrade_policy`](#obj-upgrade_policy)
+  * [`fn new()`](#fn-upgrade_policynew)
 
 ## Fields
 
@@ -175,6 +183,7 @@ with dashes (-), underscores (_), dots (.), and alphanumerics between. When `nul
   - `location` (`string`): The location of the resource.
   - `name` (`string`): The bare metal cluster name.
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `binary_authorization` (`list[obj]`): Binary Authorization related configurations. When `null`, the `binary_authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.binary_authorization.new](#fn-binary_authorizationnew) constructor.
   - `cluster_operations` (`list[obj]`): Specifies the User Cluster's observability infrastructure. When `null`, the `cluster_operations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.cluster_operations.new](#fn-cluster_operationsnew) constructor.
   - `control_plane` (`list[obj]`): Specifies the control plane configuration. When `null`, the `control_plane` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.control_plane.new](#fn-control_planenew) constructor.
   - `load_balancer` (`list[obj]`): Specifies the load balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.load_balancer.new](#fn-load_balancernew) constructor.
@@ -187,6 +196,7 @@ with dashes (-), underscores (_), dots (.), and alphanumerics between. When `nul
   - `security_config` (`list[obj]`): Specifies the security related settings for the Bare Metal User Cluster. When `null`, the `security_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.security_config.new](#fn-security_confignew) constructor.
   - `storage` (`list[obj]`): Specifies the cluster storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.storage.new](#fn-storagenew) constructor.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.timeouts.new](#fn-timeoutsnew) constructor.
+  - `upgrade_policy` (`list[obj]`): The cluster upgrade policy. When `null`, the `upgrade_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.upgrade_policy.new](#fn-upgrade_policynew) constructor.
 
 **Returns**:
 - A mixin object that injects the new resource into the root Terraform configuration.
@@ -225,6 +235,7 @@ with dashes (-), underscores (_), dots (.), and alphanumerics between. When `nul
   - `location` (`string`): The location of the resource.
   - `name` (`string`): The bare metal cluster name.
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `binary_authorization` (`list[obj]`): Binary Authorization related configurations. When `null`, the `binary_authorization` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.binary_authorization.new](#fn-binary_authorizationnew) constructor.
   - `cluster_operations` (`list[obj]`): Specifies the User Cluster's observability infrastructure. When `null`, the `cluster_operations` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.cluster_operations.new](#fn-cluster_operationsnew) constructor.
   - `control_plane` (`list[obj]`): Specifies the control plane configuration. When `null`, the `control_plane` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.control_plane.new](#fn-control_planenew) constructor.
   - `load_balancer` (`list[obj]`): Specifies the load balancer configuration. When `null`, the `load_balancer` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.load_balancer.new](#fn-load_balancernew) constructor.
@@ -237,6 +248,7 @@ with dashes (-), underscores (_), dots (.), and alphanumerics between. When `nul
   - `security_config` (`list[obj]`): Specifies the security related settings for the Bare Metal User Cluster. When `null`, the `security_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.security_config.new](#fn-security_confignew) constructor.
   - `storage` (`list[obj]`): Specifies the cluster storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.storage.new](#fn-storagenew) constructor.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.timeouts.new](#fn-timeoutsnew) constructor.
+  - `upgrade_policy` (`list[obj]`): The cluster upgrade policy. When `null`, the `upgrade_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_bare_metal_cluster.upgrade_policy.new](#fn-upgrade_policynew) constructor.
 
 **Returns**:
   - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gkeonprem_bare_metal_cluster` resource into the root Terraform configuration.
@@ -290,6 +302,43 @@ Terraform resource block to set or update the bare_metal_version field.
   - `value` (`string`): The value to set for the `bare_metal_version` field.
 
 
+### fn withBinaryAuthorization
+
+```ts
+withBinaryAuthorization()
+```
+
+`google-beta.list[obj].withBinaryAuthorization` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the binary_authorization field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withBinaryAuthorizationMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `binary_authorization` field.
+
+
+### fn withBinaryAuthorizationMixin
+
+```ts
+withBinaryAuthorizationMixin()
+```
+
+`google-beta.list[obj].withBinaryAuthorizationMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the binary_authorization field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withBinaryAuthorization](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `binary_authorization` field.
+
+
 ### fn withClusterOperations
 
 ```ts
@@ -797,6 +846,67 @@ function.
   - `value` (`obj`): The value to set for the `timeouts` field.
 
 
+### fn withUpgradePolicy
+
+```ts
+withUpgradePolicy()
+```
+
+`google-beta.list[obj].withUpgradePolicy` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the upgrade_policy field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withUpgradePolicyMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `upgrade_policy` field.
+
+
+### fn withUpgradePolicyMixin
+
+```ts
+withUpgradePolicyMixin()
+```
+
+`google-beta.list[obj].withUpgradePolicyMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the upgrade_policy field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withUpgradePolicy](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `upgrade_policy` field.
+
+
+## obj binary_authorization
+
+
+
+### fn binary_authorization.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_gkeonprem_bare_metal_cluster.binary_authorization.new` constructs a new object with attributes and blocks configured for the `binary_authorization`
+Terraform sub block.
+
+
+
+**Args**:
+  - `evaluation_mode` (`string`): Mode of operation for binauthz policy evaluation. If unspecified,
+defaults to DISABLED. Possible values: ["DISABLED", "PROJECT_SINGLETON_POLICY_ENFORCE"] When `null`, the `evaluation_mode` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `binary_authorization` sub block.
+
+
 ## obj cluster_operations
 
 
@@ -1923,3 +2033,26 @@ Terraform sub block.
 
 **Returns**:
   - An attribute object that represents the `timeouts` sub block.
+
+
+## obj upgrade_policy
+
+
+
+### fn upgrade_policy.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_gkeonprem_bare_metal_cluster.upgrade_policy.new` constructs a new object with attributes and blocks configured for the `upgrade_policy`
+Terraform sub block.
+
+
+
+**Args**:
+  - `policy` (`string`): Specifies which upgrade policy to use. Possible values: ["SERIAL", "CONCURRENT"] When `null`, the `policy` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `upgrade_policy` sub block.
diff --git a/docs/4.x/google_gkeonprem_vmware_cluster.md b/docs/4.x/google_gkeonprem_vmware_cluster.md
index a6f8c53..cb1f6e0 100644
--- a/docs/4.x/google_gkeonprem_vmware_cluster.md
+++ b/docs/4.x/google_gkeonprem_vmware_cluster.md
@@ -41,6 +41,8 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withStorageMixin()`](#fn-withstoragemixin)
 * [`fn withTimeouts()`](#fn-withtimeouts)
 * [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
+* [`fn withUpgradePolicy()`](#fn-withupgradepolicy)
+* [`fn withUpgradePolicyMixin()`](#fn-withupgradepolicymixin)
 * [`fn withVmTrackingEnabled()`](#fn-withvmtrackingenabled)
 * [`obj anti_affinity_groups`](#obj-anti_affinity_groups)
   * [`fn new()`](#fn-anti_affinity_groupsnew)
@@ -90,6 +92,8 @@ This package contains functions and utilities for setting up the resource using
   * [`fn new()`](#fn-storagenew)
 * [`obj timeouts`](#obj-timeouts)
   * [`fn new()`](#fn-timeoutsnew)
+* [`obj upgrade_policy`](#obj-upgrade_policy)
+  * [`fn new()`](#fn-upgrade_policynew)
 
 ## Fields
 
@@ -149,6 +153,7 @@ least three physical hosts in the datacenter. When `null`, the `anti_affinity_gr
   - `network_config` (`list[obj]`): The VMware User Cluster network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.network_config.new](#fn-network_confignew) constructor.
   - `storage` (`list[obj]`): Storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.storage.new](#fn-storagenew) constructor.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.timeouts.new](#fn-timeoutsnew) constructor.
+  - `upgrade_policy` (`list[obj]`): Specifies upgrade policy for the cluster. When `null`, the `upgrade_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.upgrade_policy.new](#fn-upgrade_policynew) constructor.
 
 **Returns**:
 - A mixin object that injects the new resource into the root Terraform configuration.
@@ -201,6 +206,7 @@ least three physical hosts in the datacenter. When `null`, the `anti_affinity_gr
   - `network_config` (`list[obj]`): The VMware User Cluster network configuration. When `null`, the `network_config` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.network_config.new](#fn-network_confignew) constructor.
   - `storage` (`list[obj]`): Storage configuration. When `null`, the `storage` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.storage.new](#fn-storagenew) constructor.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.timeouts.new](#fn-timeoutsnew) constructor.
+  - `upgrade_policy` (`list[obj]`): Specifies upgrade policy for the cluster. When `null`, the `upgrade_policy` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_gkeonprem_vmware_cluster.upgrade_policy.new](#fn-upgrade_policynew) constructor.
 
 **Returns**:
   - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_gkeonprem_vmware_cluster` resource into the root Terraform configuration.
@@ -666,6 +672,43 @@ function.
   - `value` (`obj`): The value to set for the `timeouts` field.
 
 
+### fn withUpgradePolicy
+
+```ts
+withUpgradePolicy()
+```
+
+`google-beta.list[obj].withUpgradePolicy` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the upgrade_policy field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withUpgradePolicyMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `upgrade_policy` field.
+
+
+### fn withUpgradePolicyMixin
+
+```ts
+withUpgradePolicyMixin()
+```
+
+`google-beta.list[obj].withUpgradePolicyMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the upgrade_policy field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withUpgradePolicy](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `upgrade_policy` field.
+
+
 ### fn withVmTrackingEnabled
 
 ```ts
@@ -1287,3 +1330,26 @@ Terraform sub block.
 
 **Returns**:
   - An attribute object that represents the `timeouts` sub block.
+
+
+## obj upgrade_policy
+
+
+
+### fn upgrade_policy.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_gkeonprem_vmware_cluster.upgrade_policy.new` constructs a new object with attributes and blocks configured for the `upgrade_policy`
+Terraform sub block.
+
+
+
+**Args**:
+  - `control_plane_only` (`bool`): Controls whether the upgrade applies to the control plane only. When `null`, the `control_plane_only` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `upgrade_policy` sub block.
diff --git a/docs/4.x/google_secret_manager_secret.md b/docs/4.x/google_secret_manager_secret.md
index 6d81691..33aa347 100644
--- a/docs/4.x/google_secret_manager_secret.md
+++ b/docs/4.x/google_secret_manager_secret.md
@@ -32,6 +32,10 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withVersionAliases()`](#fn-withversionaliases)
 * [`obj replication`](#obj-replication)
   * [`fn new()`](#fn-replicationnew)
+  * [`obj replication.auto`](#obj-replicationauto)
+    * [`fn new()`](#fn-replicationautonew)
+    * [`obj replication.auto.customer_managed_encryption`](#obj-replicationautocustomer_managed_encryption)
+      * [`fn new()`](#fn-replicationautocustomer_managed_encryptionnew)
   * [`obj replication.user_managed`](#obj-replicationuser_managed)
     * [`fn new()`](#fn-replicationuser_managednew)
     * [`obj replication.user_managed.replicas`](#obj-replicationuser_managedreplicas)
@@ -471,12 +475,61 @@ Terraform sub block.
 
 **Args**:
   - `automatic` (`bool`): The Secret will automatically be replicated without any restrictions. When `null`, the `automatic` field will be omitted from the resulting object.
+  - `auto` (`list[obj]`): The Secret will automatically be replicated without any restrictions. When `null`, the `auto` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret.replication.auto.new](#fn-replicationautonew) constructor.
   - `user_managed` (`list[obj]`): The Secret will be replicated to the regions specified by the user. When `null`, the `user_managed` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret.replication.user_managed.new](#fn-replicationuser_managednew) constructor.
 
 **Returns**:
   - An attribute object that represents the `replication` sub block.
 
 
+## obj replication.auto
+
+
+
+### fn replication.auto.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_secret_manager_secret.replication.auto.new` constructs a new object with attributes and blocks configured for the `auto`
+Terraform sub block.
+
+
+
+**Args**:
+  - `customer_managed_encryption` (`list[obj]`): The customer-managed encryption configuration of the Secret.
+If no configuration is provided, Google-managed default
+encryption is used. When `null`, the `customer_managed_encryption` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_secret_manager_secret.replication.auto.customer_managed_encryption.new](#fn-replicationreplicationcustomer_managed_encryptionnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `auto` sub block.
+
+
+## obj replication.auto.customer_managed_encryption
+
+
+
+### fn replication.auto.customer_managed_encryption.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_secret_manager_secret.replication.auto.customer_managed_encryption.new` constructs a new object with attributes and blocks configured for the `customer_managed_encryption`
+Terraform sub block.
+
+
+
+**Args**:
+  - `kms_key_name` (`string`): The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.
+
+**Returns**:
+  - An attribute object that represents the `customer_managed_encryption` sub block.
+
+
 ## obj replication.user_managed
 
 
diff --git a/docs/4.x/google_secret_manager_secret_version.md b/docs/4.x/google_secret_manager_secret_version.md
index 2132944..afba93b 100644
--- a/docs/4.x/google_secret_manager_secret_version.md
+++ b/docs/4.x/google_secret_manager_secret_version.md
@@ -15,6 +15,7 @@ This package contains functions and utilities for setting up the resource using
 
 * [`fn new()`](#fn-new)
 * [`fn newAttrs()`](#fn-newattrs)
+* [`fn withDeletionPolicy()`](#fn-withdeletionpolicy)
 * [`fn withEnabled()`](#fn-withenabled)
 * [`fn withSecret()`](#fn-withsecret)
 * [`fn withSecretData()`](#fn-withsecretdata)
@@ -52,6 +53,12 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
 
 **Args**:
   - `resourceLabel` (`string`): The name label of the block.
+  - `deletion_policy` (`string`): The deletion policy for the secret version. Setting 'ABANDON' allows the resource
+to be abandoned rather than deleted. Setting 'DISABLE' allows the resource to be
+disabled rather than deleted. Default is 'DELETE'. Possible values are:
+  * DELETE
+  * DISABLE
+  * ABANDON When `null`, the `deletion_policy` field will be omitted from the resulting object.
   - `enabled` (`bool`): The current state of the SecretVersion. When `null`, the `enabled` field will be omitted from the resulting object.
   - `secret` (`string`): Secret Manager secret resource
   - `secret_data` (`string`): The secret data. Must be no larger than 64KiB.
@@ -79,6 +86,12 @@ This is most useful when you need to preprocess the attributes with functions, c
 injecting into a complete block.
 
 **Args**:
+  - `deletion_policy` (`string`): The deletion policy for the secret version. Setting 'ABANDON' allows the resource
+to be abandoned rather than deleted. Setting 'DISABLE' allows the resource to be
+disabled rather than deleted. Default is 'DELETE'. Possible values are:
+  * DELETE
+  * DISABLE
+  * ABANDON When `null`, the `deletion_policy` field will be omitted from the resulting object.
   - `enabled` (`bool`): The current state of the SecretVersion. When `null`, the `enabled` field will be omitted from the resulting object.
   - `secret` (`string`): Secret Manager secret resource
   - `secret_data` (`string`): The secret data. Must be no larger than 64KiB.
@@ -88,6 +101,22 @@ injecting into a complete block.
   - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_secret_manager_secret_version` resource into the root Terraform configuration.
 
 
+### fn withDeletionPolicy
+
+```ts
+withDeletionPolicy()
+```
+
+`google-beta.string.withDeletionPolicy` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the deletion_policy field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `deletion_policy` field.
+
+
 ### fn withEnabled
 
 ```ts
diff --git a/docs/4.x/google_storage_insights_report_config.md b/docs/4.x/google_storage_insights_report_config.md
new file mode 100644
index 0000000..363072b
--- /dev/null
+++ b/docs/4.x/google_storage_insights_report_config.md
@@ -0,0 +1,508 @@
+---
+permalink: /google_storage_insights_report_config/
+---
+
+# google_storage_insights_report_config
+
+`google_storage_insights_report_config` represents the `google-beta_google_storage_insights_report_config` Terraform resource.
+
+
+
+This package contains functions and utilities for setting up the resource using Jsonnet code.
+
+
+## Index
+
+* [`fn new()`](#fn-new)
+* [`fn newAttrs()`](#fn-newattrs)
+* [`fn withCsvOptions()`](#fn-withcsvoptions)
+* [`fn withCsvOptionsMixin()`](#fn-withcsvoptionsmixin)
+* [`fn withDisplayName()`](#fn-withdisplayname)
+* [`fn withFrequencyOptions()`](#fn-withfrequencyoptions)
+* [`fn withFrequencyOptionsMixin()`](#fn-withfrequencyoptionsmixin)
+* [`fn withLocation()`](#fn-withlocation)
+* [`fn withObjectMetadataReportOptions()`](#fn-withobjectmetadatareportoptions)
+* [`fn withObjectMetadataReportOptionsMixin()`](#fn-withobjectmetadatareportoptionsmixin)
+* [`fn withProject()`](#fn-withproject)
+* [`fn withTimeouts()`](#fn-withtimeouts)
+* [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
+* [`obj csv_options`](#obj-csv_options)
+  * [`fn new()`](#fn-csv_optionsnew)
+* [`obj frequency_options`](#obj-frequency_options)
+  * [`fn new()`](#fn-frequency_optionsnew)
+  * [`obj frequency_options.end_date`](#obj-frequency_optionsend_date)
+    * [`fn new()`](#fn-frequency_optionsend_datenew)
+  * [`obj frequency_options.start_date`](#obj-frequency_optionsstart_date)
+    * [`fn new()`](#fn-frequency_optionsstart_datenew)
+* [`obj object_metadata_report_options`](#obj-object_metadata_report_options)
+  * [`fn new()`](#fn-object_metadata_report_optionsnew)
+  * [`obj object_metadata_report_options.storage_destination_options`](#obj-object_metadata_report_optionsstorage_destination_options)
+    * [`fn new()`](#fn-object_metadata_report_optionsstorage_destination_optionsnew)
+  * [`obj object_metadata_report_options.storage_filters`](#obj-object_metadata_report_optionsstorage_filters)
+    * [`fn new()`](#fn-object_metadata_report_optionsstorage_filtersnew)
+* [`obj timeouts`](#obj-timeouts)
+  * [`fn new()`](#fn-timeoutsnew)
+
+## Fields
+
+### fn new
+
+```ts
+new()
+```
+
+
+`google-beta.google_storage_insights_report_config.new` injects a new `google-beta_google_storage_insights_report_config` Terraform `resource`
+block into the root module document.
+
+Additionally, this inserts a private function into the `_ref` attribute that generates references to attributes of the
+resource. For example, if you added a new instance to the root using:
+
+    # arguments omitted for brevity
+    google-beta.google_storage_insights_report_config.new('some_id')
+
+You can get the reference to the `id` field of the created `google-beta.google_storage_insights_report_config` using the reference:
+
+    $._ref.google-beta_google_storage_insights_report_config.some_id.get('id')
+
+This is the same as directly entering `"${ google-beta_google_storage_insights_report_config.some_id.id }"` as the value.
+
+NOTE: if you are chaining multiple resources together in a merge operation, you may not be able to use `super`, `self`,
+or `$` to refer to the root object. Instead, make an explicit outer object using `local`.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block.
+  - `display_name` (`string`): The editable display name of the inventory report configuration. Has a limit of 256 characters. Can be empty. When `null`, the `display_name` field will be omitted from the resulting object.
+  - `location` (`string`): The location of the ReportConfig. The source and destination buckets specified in the ReportConfig
+must be in the same location.
+  - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `csv_options` (`list[obj]`): Options for configuring the format of the inventory report CSV file. When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.csv_options.new](#fn-csv_optionsnew) constructor.
+  - `frequency_options` (`list[obj]`): Options for configuring how inventory reports are generated. When `null`, the `frequency_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.frequency_options.new](#fn-frequency_optionsnew) constructor.
+  - `object_metadata_report_options` (`list[obj]`): Options for including metadata in an inventory report. When `null`, the `object_metadata_report_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.object_metadata_report_options.new](#fn-object_metadata_report_optionsnew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+- A mixin object that injects the new resource into the root Terraform configuration.
+
+
+### fn newAttrs
+
+```ts
+newAttrs()
+```
+
+
+`google-beta.google_storage_insights_report_config.newAttrs` constructs a new object with attributes and blocks configured for the `google_storage_insights_report_config`
+Terraform resource.
+
+Unlike [google-beta.google_storage_insights_report_config.new](#fn-new), this function will not inject the `resource`
+block into the root Terraform document. Instead, this must be passed in as the `attrs` argument for the
+[tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) function to build a complete block.
+
+This is most useful when you need to preprocess the attributes with functions, conditional, or looping logic prior to
+injecting into a complete block.
+
+**Args**:
+  - `display_name` (`string`): The editable display name of the inventory report configuration. Has a limit of 256 characters. Can be empty. When `null`, the `display_name` field will be omitted from the resulting object.
+  - `location` (`string`): The location of the ReportConfig. The source and destination buckets specified in the ReportConfig
+must be in the same location.
+  - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `csv_options` (`list[obj]`): Options for configuring the format of the inventory report CSV file. When `null`, the `csv_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.csv_options.new](#fn-csv_optionsnew) constructor.
+  - `frequency_options` (`list[obj]`): Options for configuring how inventory reports are generated. When `null`, the `frequency_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.frequency_options.new](#fn-frequency_optionsnew) constructor.
+  - `object_metadata_report_options` (`list[obj]`): Options for including metadata in an inventory report. When `null`, the `object_metadata_report_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.object_metadata_report_options.new](#fn-object_metadata_report_optionsnew) constructor.
+  - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.timeouts.new](#fn-timeoutsnew) constructor.
+
+**Returns**:
+  - An attribute object that can be used with [tf.withResource](https://github.com/tf-libsonnet/core/tree/main/docs#fn-withresource) to construct a new `google_storage_insights_report_config` resource into the root Terraform configuration.
+
+
+### fn withCsvOptions
+
+```ts
+withCsvOptions()
+```
+
+`google-beta.list[obj].withCsvOptions` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the csv_options field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withCsvOptionsMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `csv_options` field.
+
+
+### fn withCsvOptionsMixin
+
+```ts
+withCsvOptionsMixin()
+```
+
+`google-beta.list[obj].withCsvOptionsMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the csv_options field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withCsvOptions](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `csv_options` field.
+
+
+### fn withDisplayName
+
+```ts
+withDisplayName()
+```
+
+`google-beta.string.withDisplayName` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the display_name field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `display_name` field.
+
+
+### fn withFrequencyOptions
+
+```ts
+withFrequencyOptions()
+```
+
+`google-beta.list[obj].withFrequencyOptions` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the frequency_options field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withFrequencyOptionsMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `frequency_options` field.
+
+
+### fn withFrequencyOptionsMixin
+
+```ts
+withFrequencyOptionsMixin()
+```
+
+`google-beta.list[obj].withFrequencyOptionsMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the frequency_options field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withFrequencyOptions](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `frequency_options` field.
+
+
+### fn withLocation
+
+```ts
+withLocation()
+```
+
+`google-beta.string.withLocation` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the location field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `location` field.
+
+
+### fn withObjectMetadataReportOptions
+
+```ts
+withObjectMetadataReportOptions()
+```
+
+`google-beta.list[obj].withObjectMetadataReportOptions` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the object_metadata_report_options field.
+
+This function will replace the array with the passed in `value`. If you wish to instead append the
+passed in value to the existing array, use the [google-beta.list[obj].withObjectMetadataReportOptionsMixin](TODO) function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `object_metadata_report_options` field.
+
+
+### fn withObjectMetadataReportOptionsMixin
+
+```ts
+withObjectMetadataReportOptionsMixin()
+```
+
+`google-beta.list[obj].withObjectMetadataReportOptionsMixin` constructs a mixin object that can be merged into the `list[obj]`
+Terraform resource block to set or update the object_metadata_report_options field.
+
+This function will append the passed in array or object to the existing array. If you wish
+to instead replace the array with the passed in `value`, use the [google-beta.list[obj].withObjectMetadataReportOptions](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`list[obj]`): The value to set for the `object_metadata_report_options` field.
+
+
+### fn withProject
+
+```ts
+withProject()
+```
+
+`google-beta.string.withProject` constructs a mixin object that can be merged into the `string`
+Terraform resource block to set or update the project field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`string`): The value to set for the `project` field.
+
+
+### fn withTimeouts
+
+```ts
+withTimeouts()
+```
+
+`google-beta.obj.withTimeouts` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will replace the map with the passed in `value`. If you wish to instead merge the
+passed in value to the existing map, use the [google-beta.obj.withTimeoutsMixin](TODO) function.
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+### fn withTimeoutsMixin
+
+```ts
+withTimeoutsMixin()
+```
+
+`google-beta.obj.withTimeoutsMixin` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the timeouts field.
+
+This function will merge the passed in value to the existing map. If you wish
+to instead replace the entire map with the passed in `value`, use the [google-beta.obj.withTimeouts](TODO)
+function.
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `timeouts` field.
+
+
+## obj csv_options
+
+
+
+### fn csv_options.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_storage_insights_report_config.csv_options.new` constructs a new object with attributes and blocks configured for the `csv_options`
+Terraform sub block.
+
+
+
+**Args**:
+  - `delimiter` (`string`): The delimiter used to separate the fields in the inventory report CSV file. When `null`, the `delimiter` field will be omitted from the resulting object.
+  - `header_required` (`bool`): The boolean that indicates whether or not headers are included in the inventory report CSV file. When `null`, the `header_required` field will be omitted from the resulting object.
+  - `record_separator` (`string`): The character used to separate the records in the inventory report CSV file. When `null`, the `record_separator` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `csv_options` sub block.
+
+
+## obj frequency_options
+
+
+
+### fn frequency_options.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_storage_insights_report_config.frequency_options.new` constructs a new object with attributes and blocks configured for the `frequency_options`
+Terraform sub block.
+
+
+
+**Args**:
+  - `frequency` (`string`): The frequency in which inventory reports are generated. Values are DAILY or WEEKLY. Possible values: ["DAILY", "WEEKLY"]
+  - `end_date` (`list[obj]`): The date to stop generating inventory reports. For example, {"day": 15, "month": 9, "year": 2022}. When `null`, the `end_date` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.frequency_options.end_date.new](#fn-frequency_optionsend_datenew) constructor.
+  - `start_date` (`list[obj]`): The date to start generating inventory reports. For example, {"day": 15, "month": 8, "year": 2022}. When `null`, the `start_date` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.frequency_options.start_date.new](#fn-frequency_optionsstart_datenew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `frequency_options` sub block.
+
+
+## obj frequency_options.end_date
+
+
+
+### fn frequency_options.end_date.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_storage_insights_report_config.frequency_options.end_date.new` constructs a new object with attributes and blocks configured for the `end_date`
+Terraform sub block.
+
+
+
+**Args**:
+  - `day` (`number`): The day of the month to stop generating inventory reports.
+  - `month` (`number`): The month to stop generating inventory reports.
+  - `year` (`number`): The year to stop generating inventory reports
+
+**Returns**:
+  - An attribute object that represents the `end_date` sub block.
+
+
+## obj frequency_options.start_date
+
+
+
+### fn frequency_options.start_date.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_storage_insights_report_config.frequency_options.start_date.new` constructs a new object with attributes and blocks configured for the `start_date`
+Terraform sub block.
+
+
+
+**Args**:
+  - `day` (`number`): The day of the month to start generating inventory reports.
+  - `month` (`number`): The month to start generating inventory reports.
+  - `year` (`number`): The year to start generating inventory reports
+
+**Returns**:
+  - An attribute object that represents the `start_date` sub block.
+
+
+## obj object_metadata_report_options
+
+
+
+### fn object_metadata_report_options.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_storage_insights_report_config.object_metadata_report_options.new` constructs a new object with attributes and blocks configured for the `object_metadata_report_options`
+Terraform sub block.
+
+
+
+**Args**:
+  - `metadata_fields` (`list`): The metadata fields included in an inventory report.
+  - `storage_destination_options` (`list[obj]`): Options for where the inventory reports are stored. When `null`, the `storage_destination_options` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.object_metadata_report_options.storage_destination_options.new](#fn-object_metadata_report_optionsstorage_destination_optionsnew) constructor.
+  - `storage_filters` (`list[obj]`): A nested object resource When `null`, the `storage_filters` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_storage_insights_report_config.object_metadata_report_options.storage_filters.new](#fn-object_metadata_report_optionsstorage_filtersnew) constructor.
+
+**Returns**:
+  - An attribute object that represents the `object_metadata_report_options` sub block.
+
+
+## obj object_metadata_report_options.storage_destination_options
+
+
+
+### fn object_metadata_report_options.storage_destination_options.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_storage_insights_report_config.object_metadata_report_options.storage_destination_options.new` constructs a new object with attributes and blocks configured for the `storage_destination_options`
+Terraform sub block.
+
+
+
+**Args**:
+  - `bucket` (`string`): The destination bucket that stores the generated inventory reports.
+  - `destination_path` (`string`): The path within the destination bucket to store generated inventory reports. When `null`, the `destination_path` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `storage_destination_options` sub block.
+
+
+## obj object_metadata_report_options.storage_filters
+
+
+
+### fn object_metadata_report_options.storage_filters.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_storage_insights_report_config.object_metadata_report_options.storage_filters.new` constructs a new object with attributes and blocks configured for the `storage_filters`
+Terraform sub block.
+
+
+
+**Args**:
+  - `bucket` (`string`): The filter to use when specifying which bucket to generate inventory reports for. When `null`, the `bucket` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `storage_filters` sub block.
+
+
+## obj timeouts
+
+
+
+### fn timeouts.new
+
+```ts
+new()
+```
+
+
+`google-beta.google_storage_insights_report_config.timeouts.new` constructs a new object with attributes and blocks configured for the `timeouts`
+Terraform sub block.
+
+
+
+**Args**:
+  - `create` (`string`): Set the `create` field on the resulting object. When `null`, the `create` field will be omitted from the resulting object.
+  - `delete` (`string`): Set the `delete` field on the resulting object. When `null`, the `delete` field will be omitted from the resulting object.
+  - `update` (`string`): Set the `update` field on the resulting object. When `null`, the `update` field will be omitted from the resulting object.
+
+**Returns**:
+  - An attribute object that represents the `timeouts` sub block.
diff --git a/docs/4.x/google_vertex_ai_index_endpoint.md b/docs/4.x/google_vertex_ai_index_endpoint.md
index 3916ae9..cb1ffab 100644
--- a/docs/4.x/google_vertex_ai_index_endpoint.md
+++ b/docs/4.x/google_vertex_ai_index_endpoint.md
@@ -20,6 +20,7 @@ This package contains functions and utilities for setting up the resource using
 * [`fn withLabels()`](#fn-withlabels)
 * [`fn withNetwork()`](#fn-withnetwork)
 * [`fn withProject()`](#fn-withproject)
+* [`fn withPublicEndpointEnabled()`](#fn-withpublicendpointenabled)
 * [`fn withRegion()`](#fn-withregion)
 * [`fn withTimeouts()`](#fn-withtimeouts)
 * [`fn withTimeoutsMixin()`](#fn-withtimeoutsmixin)
@@ -63,6 +64,7 @@ Private services access must already be configured for the network. If left unsp
 [Format](https://cloud.google.com/compute/docs/reference/rest/v1/networks/insert): 'projects/{project}/global/networks/{network}'.
 Where '{project}' is a project number, as in '12345', and '{network}' is network name. When `null`, the `network` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
+  - `public_endpoint_enabled` (`bool`): If true, the deployed index will be accessible through public endpoint. When `null`, the `public_endpoint_enabled` field will be omitted from the resulting object.
   - `region` (`string`): The region of the index endpoint. eg us-central1 When `null`, the `region` field will be omitted from the resulting object.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting resource block. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_vertex_ai_index_endpoint.timeouts.new](#fn-timeoutsnew) constructor.
 
@@ -96,6 +98,7 @@ Private services access must already be configured for the network. If left unsp
 [Format](https://cloud.google.com/compute/docs/reference/rest/v1/networks/insert): 'projects/{project}/global/networks/{network}'.
 Where '{project}' is a project number, as in '12345', and '{network}' is network name. When `null`, the `network` field will be omitted from the resulting object.
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
+  - `public_endpoint_enabled` (`bool`): If true, the deployed index will be accessible through public endpoint. When `null`, the `public_endpoint_enabled` field will be omitted from the resulting object.
   - `region` (`string`): The region of the index endpoint. eg us-central1 When `null`, the `region` field will be omitted from the resulting object.
   - `timeouts` (`obj`): Set the `timeouts` field on the resulting object. When `null`, the `timeouts` sub block will be omitted from the resulting object. When setting the sub block, it is recommended to construct the object using the [google-beta.google_vertex_ai_index_endpoint.timeouts.new](#fn-timeoutsnew) constructor.
 
@@ -183,6 +186,22 @@ Terraform resource block to set or update the project field.
   - `value` (`string`): The value to set for the `project` field.
 
 
+### fn withPublicEndpointEnabled
+
+```ts
+withPublicEndpointEnabled()
+```
+
+`google-beta.bool.withPublicEndpointEnabled` constructs a mixin object that can be merged into the `bool`
+Terraform resource block to set or update the public_endpoint_enabled field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`bool`): The value to set for the `public_endpoint_enabled` field.
+
+
 ### fn withRegion
 
 ```ts
diff --git a/docs/4.x/google_workstations_workstation.md b/docs/4.x/google_workstations_workstation.md
index 4eed501..8a6655f 100644
--- a/docs/4.x/google_workstations_workstation.md
+++ b/docs/4.x/google_workstations_workstation.md
@@ -17,6 +17,7 @@ This package contains functions and utilities for setting up the resource using
 * [`fn newAttrs()`](#fn-newattrs)
 * [`fn withAnnotations()`](#fn-withannotations)
 * [`fn withDisplayName()`](#fn-withdisplayname)
+* [`fn withEnv()`](#fn-withenv)
 * [`fn withLabels()`](#fn-withlabels)
 * [`fn withLocation()`](#fn-withlocation)
 * [`fn withProject()`](#fn-withproject)
@@ -59,6 +60,7 @@ or `$` to refer to the root object. Instead, make an explicit outer object using
   - `resourceLabel` (`string`): The name label of the block.
   - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.
   - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.
+  - `env` (`obj`): 'Client-specified environment variables passed to the workstation container's entrypoint.' When `null`, the `env` field will be omitted from the resulting object.
   - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.
   - `location` (`string`): The location where the workstation parent resources reside.
   - `project` (`string`): Set the `project` field on the resulting resource block. When `null`, the `project` field will be omitted from the resulting object.
@@ -91,6 +93,7 @@ injecting into a complete block.
 **Args**:
   - `annotations` (`obj`): Client-specified annotations. This is distinct from labels. When `null`, the `annotations` field will be omitted from the resulting object.
   - `display_name` (`string`): Human-readable name for this resource. When `null`, the `display_name` field will be omitted from the resulting object.
+  - `env` (`obj`): 'Client-specified environment variables passed to the workstation container's entrypoint.' When `null`, the `env` field will be omitted from the resulting object.
   - `labels` (`obj`): Client-specified labels that are applied to the resource and that are also propagated to the underlying Compute Engine resources. When `null`, the `labels` field will be omitted from the resulting object.
   - `location` (`string`): The location where the workstation parent resources reside.
   - `project` (`string`): Set the `project` field on the resulting object. When `null`, the `project` field will be omitted from the resulting object.
@@ -135,6 +138,22 @@ Terraform resource block to set or update the display_name field.
   - `value` (`string`): The value to set for the `display_name` field.
 
 
+### fn withEnv
+
+```ts
+withEnv()
+```
+
+`google-beta.obj.withEnv` constructs a mixin object that can be merged into the `obj`
+Terraform resource block to set or update the env field.
+
+
+
+**Args**:
+  - `resourceLabel` (`string`): The name label of the block to update.
+  - `value` (`obj`): The value to set for the `env` field.
+
+
 ### fn withLabels
 
 ```ts
diff --git a/docs/4.x/provider.md b/docs/4.x/provider.md
index 52e00f2..6da0be2 100644
--- a/docs/4.x/provider.md
+++ b/docs/4.x/provider.md
@@ -88,6 +88,7 @@ the `src` and/or `version` parameters are set.
   - `data_catalog_custom_endpoint` (`string`): Set the `data_catalog_custom_endpoint` field on the resulting provider block. When `null`, the `data_catalog_custom_endpoint` field will be omitted from the resulting object.
   - `data_fusion_custom_endpoint` (`string`): Set the `data_fusion_custom_endpoint` field on the resulting provider block. When `null`, the `data_fusion_custom_endpoint` field will be omitted from the resulting object.
   - `data_loss_prevention_custom_endpoint` (`string`): Set the `data_loss_prevention_custom_endpoint` field on the resulting provider block. When `null`, the `data_loss_prevention_custom_endpoint` field will be omitted from the resulting object.
+  - `data_pipeline_custom_endpoint` (`string`): Set the `data_pipeline_custom_endpoint` field on the resulting provider block. When `null`, the `data_pipeline_custom_endpoint` field will be omitted from the resulting object.
   - `database_migration_service_custom_endpoint` (`string`): Set the `database_migration_service_custom_endpoint` field on the resulting provider block. When `null`, the `database_migration_service_custom_endpoint` field will be omitted from the resulting object.
   - `dataflow_custom_endpoint` (`string`): Set the `dataflow_custom_endpoint` field on the resulting provider block. When `null`, the `dataflow_custom_endpoint` field will be omitted from the resulting object.
   - `dataform_custom_endpoint` (`string`): Set the `dataform_custom_endpoint` field on the resulting provider block. When `null`, the `dataform_custom_endpoint` field will be omitted from the resulting object.
@@ -168,6 +169,7 @@ the `src` and/or `version` parameters are set.
   - `spanner_custom_endpoint` (`string`): Set the `spanner_custom_endpoint` field on the resulting provider block. When `null`, the `spanner_custom_endpoint` field will be omitted from the resulting object.
   - `sql_custom_endpoint` (`string`): Set the `sql_custom_endpoint` field on the resulting provider block. When `null`, the `sql_custom_endpoint` field will be omitted from the resulting object.
   - `storage_custom_endpoint` (`string`): Set the `storage_custom_endpoint` field on the resulting provider block. When `null`, the `storage_custom_endpoint` field will be omitted from the resulting object.
+  - `storage_insights_custom_endpoint` (`string`): Set the `storage_insights_custom_endpoint` field on the resulting provider block. When `null`, the `storage_insights_custom_endpoint` field will be omitted from the resulting object.
   - `storage_transfer_custom_endpoint` (`string`): Set the `storage_transfer_custom_endpoint` field on the resulting provider block. When `null`, the `storage_transfer_custom_endpoint` field will be omitted from the resulting object.
   - `tags_custom_endpoint` (`string`): Set the `tags_custom_endpoint` field on the resulting provider block. When `null`, the `tags_custom_endpoint` field will be omitted from the resulting object.
   - `tags_location_custom_endpoint` (`string`): Set the `tags_location_custom_endpoint` field on the resulting provider block. When `null`, the `tags_location_custom_endpoint` field will be omitted from the resulting object.
@@ -264,6 +266,7 @@ injecting into a complete block.
   - `data_catalog_custom_endpoint` (`string`): Set the `data_catalog_custom_endpoint` field on the resulting object. When `null`, the `data_catalog_custom_endpoint` field will be omitted from the resulting object.
   - `data_fusion_custom_endpoint` (`string`): Set the `data_fusion_custom_endpoint` field on the resulting object. When `null`, the `data_fusion_custom_endpoint` field will be omitted from the resulting object.
   - `data_loss_prevention_custom_endpoint` (`string`): Set the `data_loss_prevention_custom_endpoint` field on the resulting object. When `null`, the `data_loss_prevention_custom_endpoint` field will be omitted from the resulting object.
+  - `data_pipeline_custom_endpoint` (`string`): Set the `data_pipeline_custom_endpoint` field on the resulting object. When `null`, the `data_pipeline_custom_endpoint` field will be omitted from the resulting object.
   - `database_migration_service_custom_endpoint` (`string`): Set the `database_migration_service_custom_endpoint` field on the resulting object. When `null`, the `database_migration_service_custom_endpoint` field will be omitted from the resulting object.
   - `dataflow_custom_endpoint` (`string`): Set the `dataflow_custom_endpoint` field on the resulting object. When `null`, the `dataflow_custom_endpoint` field will be omitted from the resulting object.
   - `dataform_custom_endpoint` (`string`): Set the `dataform_custom_endpoint` field on the resulting object. When `null`, the `dataform_custom_endpoint` field will be omitted from the resulting object.
@@ -344,6 +347,7 @@ injecting into a complete block.
   - `spanner_custom_endpoint` (`string`): Set the `spanner_custom_endpoint` field on the resulting object. When `null`, the `spanner_custom_endpoint` field will be omitted from the resulting object.
   - `sql_custom_endpoint` (`string`): Set the `sql_custom_endpoint` field on the resulting object. When `null`, the `sql_custom_endpoint` field will be omitted from the resulting object.
   - `storage_custom_endpoint` (`string`): Set the `storage_custom_endpoint` field on the resulting object. When `null`, the `storage_custom_endpoint` field will be omitted from the resulting object.
+  - `storage_insights_custom_endpoint` (`string`): Set the `storage_insights_custom_endpoint` field on the resulting object. When `null`, the `storage_insights_custom_endpoint` field will be omitted from the resulting object.
   - `storage_transfer_custom_endpoint` (`string`): Set the `storage_transfer_custom_endpoint` field on the resulting object. When `null`, the `storage_transfer_custom_endpoint` field will be omitted from the resulting object.
   - `tags_custom_endpoint` (`string`): Set the `tags_custom_endpoint` field on the resulting object. When `null`, the `tags_custom_endpoint` field will be omitted from the resulting object.
   - `tags_location_custom_endpoint` (`string`): Set the `tags_location_custom_endpoint` field on the resulting object. When `null`, the `tags_location_custom_endpoint` field will be omitted from the resulting object.