⭐ Add additional fields to the GCP pub/sub resources (#6655)

* Add additional fields to the GCP pub/sub resources

New security checks enabled:
- Ensure Pub/Sub topics are not publicly accessible (via iamPolicy)
- Ensure Pub/Sub subscriptions are not publicly accessible (via iamPolicy)

New fields on topic:
- iamPolicy: IAM policy bindings for the topic
- config.state: topic state (ACTIVE, INGESTION_RESOURCE_ERROR)

New fields on subscription:
- iamPolicy: IAM policy bindings for the subscription
- config.enableMessageOrdering: whether ordered key delivery is enabled
- config.enableExactlyOnceDelivery: whether exactly-once delivery is enabled
- config.filter: message filter expression
- config.detached: whether the subscription is detached from its topic
- config.state: subscription state (ACTIVE, RESOURCE_ERROR)

Signed-off-by: Tim Smith <tsmith84@gmail.com>

* Review fixes

Signed-off-by: Tim Smith <tsmith84@gmail.com>

* Update the generated code

Signed-off-by: Tim Smith <tsmith84@gmail.com>

* Address review concerns

Signed-off-by: Tim Smith <tsmith84@gmail.com>

---------

Signed-off-by: Tim Smith <tsmith84@gmail.com>

Author: tas50

providers/gcp/resources/gcp.lr

@@ -2216,6 +2216,8 @@ private gcp.project.pubsubService.topic @defaults("name") {
   name string
   // Topic configuration
   config() gcp.project.pubsubService.topic.config
+  // IAM policy for this topic
+  iamPolicy() []gcp.resourcemanager.binding
 }
 
 // Google Cloud (GCP) Pub/Sub topic configuration
@@ -2230,6 +2232,8 @@ private gcp.project.pubsubService.topic.config @defaults("kmsKeyName messageStor
   kmsKeyName string
   // Message storage policy
   messageStoragePolicy gcp.project.pubsubService.topic.config.messagestoragepolicy
+  // State of the topic (STATE_UNSPECIFIED, ACTIVE, INGESTION_RESOURCE_ERROR)
+  state string
 }
 
 // Google Cloud (GCP) Pub/Sub topic message storage policy
@@ -2248,6 +2252,8 @@ private gcp.project.pubsubService.subscription @defaults("name") {
   name string
   // Subscription configuration
   config() gcp.project.pubsubService.subscription.config
+  // IAM policy for this subscription
+  iamPolicy() []gcp.resourcemanager.binding
 }
 
 // Google Cloud (GCP) Pub/Sub subscription configuration
@@ -2270,6 +2276,16 @@ private gcp.project.pubsubService.subscription.config @defaults("topic.name ackD
   expirationPolicy time
   // The labels associated with this subscription
   labels map[string]string
+  // Whether message ordering is enabled
+  enableMessageOrdering bool
+  // Whether exactly-once delivery is enabled
+  enableExactlyOnceDelivery bool
+  // Filter expression for the subscription
+  filter string
+  // Whether the subscription is detached from its topic
+  detached bool
+  // State of the subscription (STATE_UNSPECIFIED, ACTIVE, RESOURCE_ERROR)
+  state string
 }
 
 // GCP Pub/Sub configuration for subscriptions that operate in push mode

providers/gcp/resources/gcp.lr.go

@@ -1088,7 +1088,11 @@ gcp.project.pubsubService.snapshots 9.0.0
 gcp.project.pubsubService.subscription 9.0.0
 gcp.project.pubsubService.subscription.config 9.0.0
 gcp.project.pubsubService.subscription.config.ackDeadline 9.0.0
+gcp.project.pubsubService.subscription.config.detached 11.0.146
+gcp.project.pubsubService.subscription.config.enableExactlyOnceDelivery 11.0.146
+gcp.project.pubsubService.subscription.config.enableMessageOrdering 11.0.146
 gcp.project.pubsubService.subscription.config.expirationPolicy 9.0.0
+gcp.project.pubsubService.subscription.config.filter 11.0.146
 gcp.project.pubsubService.subscription.config.labels 9.0.0
 gcp.project.pubsubService.subscription.config.projectId 9.0.0
 gcp.project.pubsubService.subscription.config.pushConfig 9.0.0
@@ -1098,8 +1102,10 @@ gcp.project.pubsubService.subscription.config.pushconfig.configId 9.0.0
 gcp.project.pubsubService.subscription.config.pushconfig.endpoint 9.0.0
 gcp.project.pubsubService.subscription.config.retainAckedMessages 9.0.0
 gcp.project.pubsubService.subscription.config.retentionDuration 9.0.0
+gcp.project.pubsubService.subscription.config.state 11.0.146
 gcp.project.pubsubService.subscription.config.subscriptionName 9.0.0
 gcp.project.pubsubService.subscription.config.topic 9.0.0
+gcp.project.pubsubService.subscription.iamPolicy 11.0.146
 gcp.project.pubsubService.subscription.name 9.0.0
 gcp.project.pubsubService.subscription.projectId 9.0.0
 gcp.project.pubsubService.subscriptions 9.0.0
@@ -1112,7 +1118,9 @@ gcp.project.pubsubService.topic.config.messagestoragepolicy 9.0.0
 gcp.project.pubsubService.topic.config.messagestoragepolicy.allowedPersistenceRegions 9.0.0
 gcp.project.pubsubService.topic.config.messagestoragepolicy.configId 9.0.0
 gcp.project.pubsubService.topic.config.projectId 9.0.0
+gcp.project.pubsubService.topic.config.state 11.0.146
 gcp.project.pubsubService.topic.config.topicName 9.0.0
+gcp.project.pubsubService.topic.iamPolicy 11.0.146
 gcp.project.pubsubService.topic.name 9.0.0
 gcp.project.pubsubService.topic.projectId 9.0.0
 gcp.project.pubsubService.topics 9.0.0