Add ability to mark output fields that are nested inside argument blocks (#7389) (#13896)

Signed-off-by: Modular Magician <magic-modules@google.com>

Author: modular-magician

.changelog/7389.txt

@@ -0,0 +1,3 @@
+```release-note:note
+updated documentation to mark attribute fields contained in block arguments as outputs
+```

website/docs/r/access_context_manager_service_perimeters.html.markdown

@@ -119,9 +119,11 @@ The following arguments are supported:
   behavior.
 
 * `create_time` -
+  (Output)
   Time the AccessPolicy was created in UTC.
 
 * `update_time` -
+  (Output)
   Time the AccessPolicy was updated in UTC.
 
 * `perimeter_type` -

website/docs/r/apigee_addons_config.html.markdown

@@ -193,6 +193,7 @@ The following arguments are supported:
   Flag that specifies whether the Advanced API Ops add-on is enabled.
 
 * `expires_at` -
+  (Output)
   Flag that specifies whether the Advanced API Ops add-on is enabled.
 
 <a name="nested_connectors_platform_config"></a>The `connectors_platform_config` block supports:
@@ -202,6 +203,7 @@ The following arguments are supported:
   Flag that specifies whether the Advanced API Ops add-on is enabled.
 
 * `expires_at` -
+  (Output)
   Flag that specifies whether the Advanced API Ops add-on is enabled.
 
 ## Attributes Reference

website/docs/r/apigee_environment.html.markdown

@@ -131,6 +131,7 @@ The following arguments are supported:
   recommended maximum number of nodes for that gateway.
 
 * `current_aggregate_node_count` -
+  (Output)
   The current total number of gateway nodes that each environment currently has across
   all instances.
 

website/docs/r/app_engine_domain_mapping.html.markdown

@@ -93,6 +93,7 @@ The following arguments are supported:
   Possible values are `AUTOMATIC` and `MANUAL`.
 
 * `pending_managed_certificate_id` -
+  (Output)
   ID of the managed `AuthorizedCertificate` resource currently being provisioned, if applicable. Until the new
   managed certificate has been successfully provisioned, the previous SSL state will be preserved. Once the
   provisioning process completes, the `certificateId` field will reflect the new managed certificate and this

website/docs/r/beyondcorp_app_connection.html.markdown

@@ -183,9 +183,11 @@ The following arguments are supported:
   for a list of possible values.
 
 * `uri` -
+  (Output)
   Server-defined URI for this resource.
 
 * `ingress_port` -
+  (Output)
   Ingress port reserved on the gateways for this AppConnection, if not specified or zero, the default port is 19443.
 
 ## Attributes Reference

website/docs/r/bigquery_connection.html.markdown

@@ -293,6 +293,7 @@ The following arguments are supported:
   Possible values are `DATABASE_TYPE_UNSPECIFIED`, `POSTGRES`, and `MYSQL`.
 
 * `service_account_id` -
+  (Output)
   When the connection is used in the context of an operation in BigQuery, this service account will serve as the identity being used for connecting to the CloudSQL instance specified in this connection.
 
 
@@ -322,17 +323,21 @@ The following arguments are supported:
   The user’s AWS IAM Role that trusts the Google-owned AWS IAM user Connection.
 
 * `identity` -
+  (Output)
   A unique Google-owned and Google-generated identity for the Connection. This identity will be used to access the user's AWS IAM Role.
 
 <a name="nested_azure"></a>The `azure` block supports:
 
 * `application` -
+  (Output)
   The name of the Azure Active Directory Application.
 
 * `client_id` -
+  (Output)
   The client id of the Azure Active Directory Application.
 
 * `object_id` -
+  (Output)
   The object id of the Azure Active Directory Application.
 
 * `customer_tenant_id` -
@@ -344,9 +349,11 @@ The following arguments are supported:
   The Azure Application (client) ID where the federated credentials will be hosted.
 
 * `redirect_uri` -
+  (Output)
   The URL user will be redirected to after granting consent during connection setup.
 
 * `identity` -
+  (Output)
   A unique Google-owned and Google-generated identity for the Connection. This identity will be used to access the user's Azure Active Directory Application.
 
 <a name="nested_cloud_spanner"></a>The `cloud_spanner` block supports:
@@ -366,6 +373,7 @@ The following arguments are supported:
 <a name="nested_cloud_resource"></a>The `cloud_resource` block supports:
 
 * `service_account_id` -
+  (Output)
   The account ID of the service created for the purpose of this connection.
 
 ## Attributes Reference

website/docs/r/bigquery_job.html.markdown

@@ -596,6 +596,7 @@ The following arguments are supported:
   The BigQuery Service Account associated with your project requires access to this encryption key.
 
 * `kms_key_version` -
+  (Output)
   Describes the Cloud KMS encryption key version used to protect destination BigQuery table.
 
 <a name="nested_script_options"></a>The `script_options` block supports:
@@ -797,6 +798,7 @@ The following arguments are supported:
   The BigQuery Service Account associated with your project requires access to this encryption key.
 
 * `kms_key_version` -
+  (Output)
   Describes the Cloud KMS encryption key version used to protect destination BigQuery table.
 
 <a name="nested_copy"></a>The `copy` block supports:
@@ -875,6 +877,7 @@ The following arguments are supported:
   The BigQuery Service Account associated with your project requires access to this encryption key.
 
 * `kms_key_version` -
+  (Output)
   Describes the Cloud KMS encryption key version used to protect destination BigQuery table.
 
 <a name="nested_extract"></a>The `extract` block supports:
@@ -996,6 +999,7 @@ In addition to the arguments listed above, the following computed attributes are
   Email address of the user who ran the job.
 
 * `job_type` -
+  (Output)
   The type of the job.
 
 * `status` -
@@ -1006,16 +1010,19 @@ In addition to the arguments listed above, the following computed attributes are
 <a name="nested_status"></a>The `status` block contains:
 
 * `error_result` -
+  (Output)
   Final error result of the job. If present, indicates that the job has completed and was unsuccessful.
   Structure is [documented below](#nested_error_result).
 
 * `errors` -
+  (Output)
   The first errors encountered during the running of the job. The final message
   includes the number of errors that caused the process to stop. Errors here do
   not necessarily mean that the job has not completed or was unsuccessful.
   Structure is [documented below](#nested_errors).
 
 * `state` -
+  (Output)
   Running state of the job. Valid states include 'PENDING', 'RUNNING', and 'DONE'.
 
 

website/docs/r/binary_authorization_attestor.html.markdown

@@ -163,6 +163,7 @@ The following arguments are supported:
   Structure is [documented below](#nested_public_keys).
 
 * `delegation_service_account_email` -
+  (Output)
   This field will contain the service account email address that
   this Attestor will use as the principal when querying Container
   Analysis. Attestor administrators must grant this service account

website/docs/r/certificate_manager_certificate.html.markdown

@@ -131,13 +131,16 @@ The following arguments are supported:
   Authorizations that will be used for performing domain authorization
 
 * `state` -
+  (Output)
   A state of this Managed Certificate.
 
 * `provisioning_issue` -
+  (Output)
   Information about issues with provisioning this Managed Certificate.
   Structure is [documented below](#nested_provisioning_issue).
 
 * `authorization_attempt_info` -
+  (Output)
   Detailed state of the latest authorization attempt for each domain
   specified for this Managed Certificate.
   Structure is [documented below](#nested_authorization_attempt_info).
@@ -146,25 +149,31 @@ The following arguments are supported:
 <a name="nested_provisioning_issue"></a>The `provisioning_issue` block contains:
 
 * `reason` -
+  (Output)
   Reason for provisioning failures.
 
 * `details` -
+  (Output)
   Human readable explanation about the issue. Provided to help address
   the configuration issues.
   Not guaranteed to be stable. For programmatic access use `reason` field.
 
 <a name="nested_authorization_attempt_info"></a>The `authorization_attempt_info` block contains:
 
 * `domain` -
+  (Output)
   Domain name of the authorization attempt.
 
 * `state` -
+  (Output)
   State of the domain for managed certificate issuance.
 
 * `failure_reason` -
+  (Output)
   Reason for failure of the authorization attempt for the domain.
 
 * `details` -
+  (Output)
   Human readable explanation for reaching the state. Provided to help
   address the configuration issues.
   Not guaranteed to be stable. For programmatic access use `failure_reason` field.

website/docs/r/certificate_manager_dns_authorization.html.markdown

@@ -100,13 +100,16 @@ In addition to the arguments listed above, the following computed attributes are
 <a name="nested_dns_resource_record"></a>The `dns_resource_record` block contains:
 
 * `name` -
+  (Output)
   Fully qualified name of the DNS Resource Record.
   E.g. `_acme-challenge.example.com`.
 
 * `type` -
+  (Output)
   Type of the DNS Resource Record.
 
 * `data` -
+  (Output)
   Data of the DNS Resource Record.
 
 ## Timeouts

website/docs/r/cloud_run_domain_mapping.html.markdown

@@ -118,9 +118,11 @@ The following arguments are supported:
   More info: http://kubernetes.io/docs/user-guide/labels
 
 * `generation` -
+  (Output)
   A sequence number representing a specific generation of the desired state.
 
 * `resource_version` -
+  (Output)
   An opaque value that represents the internal version of this object that
   can be used by clients to determine when objects have changed. May be used
   for optimistic concurrency, change detection, and the watch operation on a
@@ -130,9 +132,11 @@ The following arguments are supported:
   https://git.k8s.io/community/contributors/devel/api-conventions.md#concurrency-control-and-consistency
 
 * `self_link` -
+  (Output)
   SelfLink is a URL representing this object.
 
 * `uid` -
+  (Output)
   UID is a unique id generated by the server on successful creation of a resource and is not
   allowed to change on PUT operations.
   More info: http://kubernetes.io/docs/user-guide/identifiers#uids
@@ -172,11 +176,13 @@ In addition to the arguments listed above, the following computed attributes are
 <a name="nested_status"></a>The `status` block contains:
 
 * `conditions` -
+  (Output)
   Array of observed DomainMappingConditions, indicating the current state
   of the DomainMapping.
   Structure is [documented below](#nested_conditions).
 
 * `observed_generation` -
+  (Output)
   ObservedGeneration is the 'Generation' of the DomainMapping that
   was last processed by the controller.
 
@@ -188,21 +194,26 @@ In addition to the arguments listed above, the following computed attributes are
   Structure is [documented below](#nested_resource_records).
 
 * `mapped_route_name` -
+  (Output)
   The name of the route that the mapping currently points to.
 
 
 <a name="nested_conditions"></a>The `conditions` block contains:
 
 * `message` -
+  (Output)
   Human readable message indicating details about the current status.
 
 * `status` -
+  (Output)
   Status of the condition, one of True, False, Unknown.
 
 * `reason` -
+  (Output)
   One-word CamelCase reason for the condition's current status.
 
 * `type` -
+  (Output)
   Type of domain mapping condition.
 
 <a name="nested_resource_records"></a>The `resource_records` block supports:
@@ -213,10 +224,12 @@ In addition to the arguments listed above, the following computed attributes are
   Possible values are `A`, `AAAA`, and `CNAME`.
 
 * `rrdata` -
+  (Output)
   Data for this record. Values vary by record type, as defined in RFC 1035
   (section 5) and RFC 1034 (section 3.6.1).
 
 * `name` -
+  (Output)
   Relative name of the object affected by this record. Only applicable for
   `CNAME` records. Example: 'www'.