need elements listed in docs (#3141) (#161)

Signed-off-by: Modular Magician <magic-modules@google.com>

plugins/modules/gcp_bigquery_dataset.py

@@ -56,6 +56,7 @@ options:
   access:
     description:
     - An array of objects that define dataset access for one or more entities.
+    elements: dict
     required: false
     type: list
     suboptions:

plugins/modules/gcp_bigquery_table.py

@@ -75,6 +75,7 @@ options:
       simple-type fields are supported. When you cluster a table using multiple columns,
       the order of columns you specify is important. The order of the specified columns
       determines the sort order of the data.
+    elements: str
     required: false
     type: list
     version_added: '2.9'
@@ -120,6 +121,7 @@ options:
       user_defined_function_resources:
         description:
         - Describes user-defined function resources used in the query.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -171,6 +173,7 @@ options:
       fields:
         description:
         - Describes the fields in a table.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -182,6 +185,7 @@ options:
           fields:
             description:
             - Describes the nested schema fields if the type property is set to RECORD.
+            elements: str
             required: false
             type: list
           mode:
@@ -270,6 +274,7 @@ options:
           HTTPS URL for a Google Cloud Bigtable table. For Google Cloud Datastore
           backups, exactly one URI can be specified. Also, the ''*'' wildcard character
           is not allowed.'
+        elements: str
         required: false
         type: list
       schema:
@@ -281,6 +286,7 @@ options:
           fields:
             description:
             - Describes the fields in a table.
+            elements: dict
             required: false
             type: list
             suboptions:
@@ -293,6 +299,7 @@ options:
                 description:
                 - Describes the nested schema fields if the type property is set to
                   RECORD .
+                elements: str
                 required: false
                 type: list
               mode:
@@ -387,6 +394,7 @@ options:
             description:
             - List of column families to expose in the table schema along with their
               types.
+            elements: dict
             required: false
             type: list
             suboptions:
@@ -394,6 +402,7 @@ options:
                 description:
                 - Lists of columns that should be exposed as individual fields as
                   opposed to a list of (column name, value) pairs.
+                elements: dict
                 required: false
                 type: list
                 suboptions:

plugins/modules/gcp_bigtable_instance.py

@@ -76,6 +76,7 @@ options:
   clusters:
     description:
     - An array of clusters. Maximum 4.
+    elements: dict
     required: false
     type: list
     suboptions:

plugins/modules/gcp_cloudbuild_trigger.py

@@ -90,6 +90,7 @@ options:
     - If ignoredFiles is not empty, then we ignore any files that match any of the
       ignored_file globs. If the change has no files that are outside of the ignoredFiles
       globs, then we do not trigger a build.
+    elements: str
     required: false
     type: list
   included_files:
@@ -101,6 +102,7 @@ options:
     - If any of the files altered in the commit pass the ignoredFiles filter and includedFiles
       is not empty, then we make sure that at least one of those files matches a includedFiles
       glob. If not, then we do not trigger a build.
+    elements: str
     required: false
     type: list
   trigger_template:
@@ -161,6 +163,7 @@ options:
       tags:
         description:
         - Tags for annotation of a Build. These are not docker tags.
+        elements: str
         required: false
         type: list
       images:
@@ -171,6 +174,7 @@ options:
         - The digests of the pushed images will be stored in the Build resource's
           results field.
         - If any of the images fail to be pushed, the build status is marked FAILURE.
+        elements: str
         required: false
         type: list
       timeout:
@@ -189,6 +193,7 @@ options:
       steps:
         description:
         - The operations to be performed on the workspace.
+        elements: dict
         required: true
         type: list
         suboptions:
@@ -216,6 +221,7 @@ options:
               args are used as arguments to that entrypoint. If the image does not
               define an entrypoint, the first element in args is used as the entrypoint,
               and the remainder will be used as arguments.
+            elements: str
             required: false
             type: list
           env:
@@ -224,6 +230,7 @@ options:
               step.
             - The elements are of the form "KEY=VALUE" for the environment variable
               "KEY" being given the value "VALUE".
+            elements: str
             required: false
             type: list
           id:
@@ -256,6 +263,7 @@ options:
             - A list of environment variables which are encrypted using a Cloud Key
               Management Service crypto key. These values must be specified in the
               build's `Secret`.
+            elements: str
             required: false
             type: list
           timeout:
@@ -278,6 +286,7 @@ options:
               are discarded.
             - Using a named volume in only one step is not valid as it is indicative
               of a build request with an incorrect configuration.
+            elements: dict
             required: false
             type: list
             suboptions:
@@ -303,6 +312,7 @@ options:
               have completed successfully. If `wait_for` is empty, this build step
               will start when all previous build steps in the `Build.Steps` list have
               completed successfully.
+            elements: str
             required: false
             type: list
   project:

plugins/modules/gcp_compute_autoscaler.py

@@ -131,6 +131,7 @@ options:
       custom_metric_utilizations:
         description:
         - Configuration parameters of autoscaling based on a custom metric.
+        elements: dict
         required: false
         type: list
         aliases:

plugins/modules/gcp_compute_backend_service.py

@@ -63,6 +63,7 @@ options:
   backends:
     description:
     - The set of backends that serve this BackendService.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -202,6 +203,7 @@ options:
             - All other parameters will be included. Either specify query_string_whitelist
               or query_string_blacklist, not both.
             - "'&' and '=' will be percent encoded and not treated as delimiters."
+            elements: str
             required: false
             type: list
           query_string_whitelist:
@@ -210,6 +212,7 @@ options:
             - All other parameters will be excluded. Either specify query_string_whitelist
               or query_string_blacklist, not both.
             - "'&' and '=' will be percent encoded and not treated as delimiters."
+            elements: str
             required: false
             type: list
       signed_url_cache_max_age_sec:
@@ -255,6 +258,7 @@ options:
       and a health check is required.
     - For internal load balancing, a URL to a HealthCheck resource must be specified
       instead.
+    elements: str
     required: true
     type: list
   iap:

plugins/modules/gcp_compute_disk.py

@@ -73,6 +73,7 @@ options:
   licenses:
     description:
     - Any applicable publicly visible licenses.
+    elements: str
     required: false
     type: list
   name:

plugins/modules/gcp_compute_firewall.py

@@ -59,6 +59,7 @@ options:
     description:
     - The list of ALLOW rules specified by this firewall. Each rule specifies a protocol
       and port-range tuple that describes a permitted connection.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -77,12 +78,14 @@ options:
           or a range. If not specified, this rule applies to connections through any
           port.
         - 'Example inputs include: ["22"], ["80","443"], and ["12345-12349"].'
+        elements: str
         required: false
         type: list
   denied:
     description:
     - The list of DENY rules specified by this firewall. Each rule specifies a protocol
       and port-range tuple that describes a denied connection.
+    elements: dict
     required: false
     type: list
     version_added: '2.8'
@@ -102,6 +105,7 @@ options:
           or a range. If not specified, this rule applies to connections through any
           port.
         - 'Example inputs include: ["22"], ["80","443"], and ["12345-12349"].'
+        elements: str
         required: false
         type: list
   description:
@@ -115,6 +119,7 @@ options:
     - If destination ranges are specified, the firewall will apply only to traffic
       that has destination IP address in these ranges. These ranges must be expressed
       in CIDR format. Only IPv4 is supported.
+    elements: str
     required: false
     type: list
     version_added: '2.8'
@@ -197,6 +202,7 @@ options:
       sourceRanges OR the source IP that belongs to a tag listed in the sourceTags
       property. The connection does not need to match both properties for the firewall
       to apply. Only IPv4 is supported.
+    elements: str
     required: false
     type: list
   source_service_accounts:
@@ -210,6 +216,7 @@ options:
       OR the source IP belongs to an instance with service account listed in sourceServiceAccount.
       The connection does not need to match both properties for the firewall to apply.
       sourceServiceAccounts cannot be used at the same time as sourceTags or targetTags.
+    elements: str
     required: false
     type: list
     version_added: '2.8'
@@ -223,6 +230,7 @@ options:
       has source IP address within sourceRanges OR the source IP that belongs to a
       tag listed in the sourceTags property. The connection does not need to match
       both properties for the firewall to apply.
+    elements: str
     required: false
     type: list
   target_service_accounts:
@@ -232,6 +240,7 @@ options:
     - targetServiceAccounts cannot be used at the same time as targetTags or sourceTags.
       If neither targetServiceAccounts nor targetTags are specified, the firewall
       rule applies to all instances on the specified network.
+    elements: str
     required: false
     type: list
     version_added: '2.8'
@@ -241,6 +250,7 @@ options:
       that may make network connections as specified in allowed[].
     - If no targetTags are specified, the firewall rule applies to all instances on
       the specified network.
+    elements: str
     required: false
     type: list
   project:

plugins/modules/gcp_compute_forwarding_rule.py

@@ -155,6 +155,7 @@ options:
       list of ports can be configured. Only packets addressed to these ports will
       be forwarded to the backends configured with this forwarding rule.
     - You may specify a maximum of up to 5 ports.
+    elements: str
     required: false
     type: list
   subnetwork:

plugins/modules/gcp_compute_global_forwarding_rule.py

@@ -121,6 +121,7 @@ options:
       that this ForwardingRule references.
     - metadataFilters only applies to Loadbalancers that have their loadBalancingScheme
       set to INTERNAL_SELF_MANAGED.
+    elements: dict
     required: false
     type: list
     version_added: '2.10'
@@ -140,6 +141,7 @@ options:
         - The list of label value pairs that must match labels in the provided metadata
           based on filterMatchCriteria This list must not be empty and can have at
           the most 64 entries.
+        elements: dict
         required: true
         type: list
         suboptions:

plugins/modules/gcp_compute_image.py

@@ -81,6 +81,7 @@ options:
     description:
     - A list of features to enable on the guest operating system.
     - Applicable only for bootable images.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -114,6 +115,7 @@ options:
   licenses:
     description:
     - Any applicable license URI.
+    elements: str
     required: false
     type: list
   name:

plugins/modules/gcp_compute_instance.py

@@ -67,6 +67,7 @@ options:
     description:
     - An array of disks that are associated with the instances that are created from
       this template.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -210,6 +211,7 @@ options:
   guest_accelerators:
     description:
     - List of the type and count of accelerator cards attached to the instance .
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -270,6 +272,7 @@ options:
     - An array of configurations for this interface. This specifies how this interface
       is configured to interact with other network services, such as connecting to
       the internet. Only one network interface is supported per instance.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -278,6 +281,7 @@ options:
         - An array of configurations for this interface. Currently, only one access
           config, ONE_TO_ONE_NAT, is supported. If there are no accessConfigs specified,
           then this instance will have no external internet access.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -339,6 +343,7 @@ options:
         description:
         - An array of alias IP ranges for this network interface. Can only be specified
           for network interfaces on subnet-mode networks.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -423,6 +428,7 @@ options:
     description:
     - A list of service accounts, with their specified scopes, authorized for this
       instance. Only one service account per VM instance is supported.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -434,6 +440,7 @@ options:
       scopes:
         description:
         - The list of scopes to be made available for this service account.
+        elements: str
         required: false
         type: list
   shielded_instance_config:
@@ -491,6 +498,7 @@ options:
         description:
         - An array of tags. Each tag must be 1-63 characters long, and comply with
           RFC1035.
+        elements: str
         required: false
         type: list
   zone:

plugins/modules/gcp_compute_instance_group.py

@@ -71,6 +71,7 @@ options:
       port number. Named ports can also contain multiple ports.
     - 'For example: [{name: "http", port: 80},{name: "http", port: 8080}] Named ports
       apply to all instances in this instance group.'
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -122,6 +123,7 @@ options:
     - All instances not in this list will be removed from the InstanceGroup and will
       not be deleted.
     - Only the full identifier of the instance will be returned.
+    elements: dict
     required: false
     type: list
     version_added: '2.8'

plugins/modules/gcp_compute_instance_group_manager.py

@@ -89,6 +89,7 @@ options:
     description:
     - Named ports configured for the Instance Groups complementary to this Instance
       Group Manager.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -108,6 +109,7 @@ options:
     - TargetPool resources to which instances in the instanceGroup field are added.
       The target pools automatically apply to all of the instances in the managed
       instance group.
+    elements: dict
     required: false
     type: list
   target_size:

plugins/modules/gcp_compute_instance_template.py

@@ -90,6 +90,7 @@ options:
         description:
         - An array of disks that are associated with the instances that are created
           from this template.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -258,6 +259,7 @@ options:
         description:
         - List of the type and count of accelerator cards attached to the instance
           .
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -277,6 +279,7 @@ options:
         - An array of configurations for this interface. This specifies how this interface
           is configured to interact with other network services, such as connecting
           to the internet. Only one network interface is supported per instance.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -285,6 +288,7 @@ options:
             - An array of configurations for this interface. Currently, only one access
               config, ONE_TO_ONE_NAT, is supported. If there are no accessConfigs
               specified, then this instance will have no external internet access.
+            elements: dict
             required: false
             type: list
             suboptions:
@@ -346,6 +350,7 @@ options:
             description:
             - An array of alias IP ranges for this network interface. Can only be
               specified for network interfaces on subnet-mode networks.
+            elements: dict
             required: false
             type: list
             suboptions:
@@ -432,6 +437,7 @@ options:
         description:
         - A list of service accounts, with their specified scopes, authorized for
           this instance. Only one service account per VM instance is supported.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -443,6 +449,7 @@ options:
           scopes:
             description:
             - The list of scopes to be made available for this service account.
+            elements: str
             required: false
             type: list
       tags:
@@ -467,6 +474,7 @@ options:
             description:
             - An array of tags. Each tag must be 1-63 characters long, and comply
               with RFC1035.
+            elements: str
             required: false
             type: list
   project:

plugins/modules/gcp_compute_interconnect_attachment.py

@@ -130,6 +130,7 @@ options:
       from the supplied candidate prefix(es). The request will fail if all possible
       /29s are in use on Google's edge. If not supplied, Google will randomly select
       an unused /29 from all of link-local space.
+    elements: str
     required: false
     type: list
   vlan_tag8021q:

plugins/modules/gcp_compute_region_backend_service.py

@@ -52,6 +52,7 @@ options:
   backends:
     description:
     - The set of backends that serve this RegionBackendService.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -177,6 +178,7 @@ options:
     description:
     - The set of URLs to HealthCheck resources for health checking this RegionBackendService.
       Currently at most one health check can be specified, and a health check is required.
+    elements: str
     required: true
     type: list
   load_balancing_scheme:

plugins/modules/gcp_compute_region_disk.py

@@ -72,6 +72,7 @@ options:
   licenses:
     description:
     - Any applicable publicly visible licenses.
+    elements: str
     required: false
     type: list
   name:
@@ -106,6 +107,7 @@ options:
   replica_zones:
     description:
     - URLs of the zones where the disk should be replicated to.
+    elements: str
     required: true
     type: list
   type:

plugins/modules/gcp_compute_reservation.py

@@ -108,6 +108,7 @@ options:
           guest_accelerators:
             description:
             - Guest accelerator type and count.
+            elements: dict
             required: false
             type: list
             suboptions:
@@ -128,6 +129,7 @@ options:
             description:
             - The amount of local ssd to reserve with each instance. This reserves
               disks of type `local-ssd`.
+            elements: dict
             required: false
             type: list
             suboptions:

plugins/modules/gcp_compute_route.py

@@ -108,6 +108,7 @@ options:
   tags:
     description:
     - A list of instance tags to which this route applies.
+    elements: str
     required: false
     type: list
   next_hop_gateway:

plugins/modules/gcp_compute_router.py

@@ -101,6 +101,7 @@ options:
           to any specified prefixes. Leave this field blank to advertise no custom
           groups.
         - 'This enum field has the one valid value: ALL_SUBNETS .'
+        elements: str
         required: false
         type: list
       advertised_ip_ranges:
@@ -110,6 +111,7 @@ options:
           to all peers of the router. These IP ranges will be advertised in addition
           to any specified groups.
         - Leave this field blank to advertise no custom IP ranges.
+        elements: dict
         required: false
         type: list
         suboptions:

plugins/modules/gcp_compute_ssl_policy.py

@@ -86,6 +86,7 @@ options:
     - A list of features enabled when the selected profile is CUSTOM. The method returns
       the set of features that can be specified in this list. This field must be empty
       if the profile is not CUSTOM.
+    elements: str
     required: false
     type: list
   project:

plugins/modules/gcp_compute_subnetwork.py

@@ -104,6 +104,7 @@ options:
     - An array of configurations for secondary IP ranges for VM instances contained
       in this subnetwork. The primary IP of such VM must belong to the primary ipCidrRange
       of the subnetwork. The alias IPs may belong to either primary or secondary ranges.
+    elements: dict
     required: false
     type: list
     version_added: '2.8'

plugins/modules/gcp_compute_target_https_proxy.py

@@ -79,6 +79,7 @@ options:
     description:
     - A list of SslCertificate resources that are used to authenticate connections
       between users and the load balancer. At least one SSL certificate must be specified.
+    elements: dict
     required: true
     type: list
   ssl_policy:

plugins/modules/gcp_compute_target_pool.py

@@ -105,6 +105,7 @@ options:
     description:
     - A list of virtual machine instances serving this pool.
     - They must live in zones contained in the same region as this pool.
+    elements: dict
     required: false
     type: list
   name:

plugins/modules/gcp_compute_target_ssl_proxy.py

@@ -86,6 +86,7 @@ options:
     - A list of SslCertificate resources that are used to authenticate connections
       between users and the load balancer. Currently, exactly one SSL certificate
       must be specified.
+    elements: dict
     required: true
     type: list
   ssl_policy:

plugins/modules/gcp_compute_url_map.py

@@ -84,6 +84,7 @@ options:
         description:
         - Headers to add to a matching request prior to forwarding the request to
           the backendService.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -108,11 +109,13 @@ options:
         description:
         - A list of header names for headers that need to be removed from the request
           prior to forwarding the request to the backendService.
+        elements: str
         required: false
         type: list
       response_headers_to_add:
         description:
         - Headers to add the response prior to sending the response back to the client.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -137,11 +140,13 @@ options:
         description:
         - A list of header names for headers that need to be removed from the response
           prior to sending the response back to the client.
+        elements: str
         required: false
         type: list
   host_rules:
     description:
     - The list of HostRules to use against the URL.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -156,6 +161,7 @@ options:
         - The list of host patterns to match. They must be valid hostnames, except
           * will match any string of ([a-z0-9-.]*). In that case, * must be the first
           character and must be followed in the pattern by either - or .
+        elements: str
         required: true
         type: list
       path_matcher:
@@ -177,6 +183,7 @@ options:
   path_matchers:
     description:
     - The list of named PathMatchers to use against the URL.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -223,6 +230,7 @@ options:
             description:
             - Headers to add to a matching request prior to forwarding the request
               to the backendService.
+            elements: dict
             required: false
             type: list
             suboptions:
@@ -247,12 +255,14 @@ options:
             description:
             - A list of header names for headers that need to be removed from the
               request prior to forwarding the request to the backendService.
+            elements: str
             required: false
             type: list
           response_headers_to_add:
             description:
             - Headers to add the response prior to sending the response back to the
               client.
+            elements: dict
             required: false
             type: list
             suboptions:
@@ -277,6 +287,7 @@ options:
             description:
             - A list of header names for headers that need to be removed from the
               response prior to sending the response back to the client.
+            elements: str
             required: false
             type: list
       name:
@@ -293,6 +304,7 @@ options:
           match before /a/b/* irrespective of the order in which those paths appear
           in this list. Within a given pathMatcher, only one of pathRules or routeRules
           must be set.'
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -319,6 +331,7 @@ options:
               only place a * is allowed is at the end following a /. The string fed
               to the path matcher does not include any text after the first ? or #,
               and those chars are not allowed here.'
+            elements: str
             required: true
             type: list
           route_action:
@@ -353,11 +366,13 @@ options:
                   allow_headers:
                     description:
                     - Specifies the content for the Access-Control-Allow-Headers header.
+                    elements: str
                     required: false
                     type: list
                   allow_methods:
                     description:
                     - Specifies the content for the Access-Control-Allow-Methods header.
+                    elements: str
                     required: false
                     type: list
                   allow_origin_regexes:
@@ -365,6 +380,7 @@ options:
                     - Specifies the regualar expression patterns that match allowed
                       origins. For regular expression grammar please see en.cppreference.com/w/cpp/regex/ecmascript
                       An origin is allowed if it matches either allow_origins or allow_origin_regex.
+                    elements: str
                     required: false
                     type: list
                   allow_origins:
@@ -372,6 +388,7 @@ options:
                     - Specifies the list of origins that will be allowed to do CORS
                       requests. An origin is allowed if it matches either allow_origins
                       or allow_origin_regex.
+                    elements: str
                     required: false
                     type: list
                   disabled:
@@ -383,6 +400,7 @@ options:
                     description:
                     - Specifies the content for the Access-Control-Expose-Headers
                       header.
+                    elements: str
                     required: false
                     type: list
                   max_age:
@@ -537,6 +555,7 @@ options:
                       set to resource-exhausted - unavailable: Loadbalancer will retry
                       if the gRPC status code in the response header is set to unavailable
                       ."
+                    elements: str
                     required: false
                     type: list
               timeout:
@@ -593,6 +612,7 @@ options:
                   and before forwarding the request to the backend service, advanced
                   routing actions like Url rewrites and header transformations are
                   applied depending on additional settings specified in this HttpRouteAction.
+                elements: dict
                 required: false
                 type: list
                 suboptions:
@@ -622,6 +642,7 @@ options:
                         description:
                         - Headers to add to a matching request prior to forwarding
                           the request to the backendService.
+                        elements: dict
                         required: false
                         type: list
                         suboptions:
@@ -648,12 +669,14 @@ options:
                         - A list of header names for headers that need to be removed
                           from the request prior to forwarding the request to the
                           backendService.
+                        elements: str
                         required: false
                         type: list
                       response_headers_to_add:
                         description:
                         - Headers to add the response prior to sending the response
                           back to the client.
+                        elements: dict
                         required: false
                         type: list
                         suboptions:
@@ -680,6 +703,7 @@ options:
                         - A list of header names for headers that need to be removed
                           from the response prior to sending the response back to
                           the client.
+                        elements: str
                         required: false
                         type: list
                   weight:
@@ -765,6 +789,7 @@ options:
           its specified routing action to take effect. Within a given pathMatcher,
           only one of pathRules or routeRules must be set. routeRules are not supported
           in UrlMaps intended for External load balancers.'
+        elements: dict
         required: false
         type: list
         version_added: '2.10'
@@ -817,6 +842,7 @@ options:
                 description:
                 - Headers to add to a matching request prior to forwarding the request
                   to the backendService.
+                elements: dict
                 required: false
                 type: list
                 suboptions:
@@ -841,12 +867,14 @@ options:
                 description:
                 - A list of header names for headers that need to be removed from
                   the request prior to forwarding the request to the backendService.
+                elements: str
                 required: false
                 type: list
               response_headers_to_add:
                 description:
                 - Headers to add the response prior to sending the response back to
                   the client.
+                elements: dict
                 required: false
                 type: list
                 suboptions:
@@ -871,11 +899,13 @@ options:
                 description:
                 - A list of header names for headers that need to be removed from
                   the response prior to sending the response back to the client.
+                elements: str
                 required: false
                 type: list
           match_rules:
             description:
             - The rules for determining a match.
+            elements: dict
             required: false
             type: list
             suboptions:
@@ -892,6 +922,7 @@ options:
                 description:
                 - Specifies a list of header match criteria, all of which must match
                   corresponding headers in the request.
+                elements: dict
                 required: false
                 type: list
                 suboptions:
@@ -997,6 +1028,7 @@ options:
                   those specified in ForwardingRule that refers to this UrlMap. metadataFilters
                   only applies to Loadbalancers that have their loadBalancingScheme
                   set to INTERNAL_SELF_MANAGED.
+                elements: dict
                 required: false
                 type: list
                 suboptions:
@@ -1005,6 +1037,7 @@ options:
                     - The list of label value pairs that must match labels in the
                       provided metadata based on filterMatchCriteria This list must
                       not be empty and can have at the most 64 entries.
+                    elements: dict
                     required: true
                     type: list
                     suboptions:
@@ -1043,6 +1076,7 @@ options:
                 description:
                 - Specifies a list of query parameter match criteria, all of which
                   must match corresponding query parameters in the request.
+                elements: dict
                 required: false
                 type: list
                 suboptions:
@@ -1117,11 +1151,13 @@ options:
                   allow_headers:
                     description:
                     - Specifies the content for the Access-Control-Allow-Headers header.
+                    elements: str
                     required: false
                     type: list
                   allow_methods:
                     description:
                     - Specifies the content for the Access-Control-Allow-Methods header.
+                    elements: str
                     required: false
                     type: list
                   allow_origin_regexes:
@@ -1129,6 +1165,7 @@ options:
                     - Specifies the regualar expression patterns that match allowed
                       origins. For regular expression grammar please see en.cppreference.com/w/cpp/regex/ecmascript
                       An origin is allowed if it matches either allow_origins or allow_origin_regex.
+                    elements: str
                     required: false
                     type: list
                   allow_origins:
@@ -1136,6 +1173,7 @@ options:
                     - Specifies the list of origins that will be allowed to do CORS
                       requests. An origin is allowed if it matches either allow_origins
                       or allow_origin_regex.
+                    elements: str
                     required: false
                     type: list
                   disabled:
@@ -1150,6 +1188,7 @@ options:
                     description:
                     - Specifies the content for the Access-Control-Expose-Headers
                       header.
+                    elements: str
                     required: false
                     type: list
                   max_age:
@@ -1307,6 +1346,7 @@ options:
                       set to resource-exhausted - unavailable: Loadbalancer will retry
                       if the gRPC status code in the response header is set to unavailable
                       ."
+                    elements: str
                     required: false
                     type: list
               timeout:
@@ -1363,6 +1403,7 @@ options:
                   and before forwarding the request to the backend service, advanced
                   routing actions like Url rewrites and header transformations are
                   applied depending on additional settings specified in this HttpRouteAction.
+                elements: dict
                 required: false
                 type: list
                 suboptions:
@@ -1392,6 +1433,7 @@ options:
                         description:
                         - Headers to add to a matching request prior to forwarding
                           the request to the backendService.
+                        elements: dict
                         required: false
                         type: list
                         suboptions:
@@ -1418,12 +1460,14 @@ options:
                         - A list of header names for headers that need to be removed
                           from the request prior to forwarding the request to the
                           backendService.
+                        elements: str
                         required: false
                         type: list
                       response_headers_to_add:
                         description:
                         - Headers to add the response prior to sending the response
                           back to the client.
+                        elements: dict
                         required: false
                         type: list
                         suboptions:
@@ -1450,6 +1494,7 @@ options:
                         - A list of header names for headers that need to be removed
                           from the response prior to sending the response back to
                           the client.
+                        elements: str
                         required: false
                         type: list
                   weight:
@@ -1530,6 +1575,7 @@ options:
     - The list of expected URL mapping tests. Request to update this UrlMap will succeed
       only if all of the test cases pass. You can specify a maximum of 100 tests per
       UrlMap.
+    elements: dict
     required: false
     type: list
     suboptions:

plugins/modules/gcp_compute_vpn_tunnel.py

@@ -106,6 +106,7 @@ options:
       gateway. The value should be a CIDR formatted string, for example `192.168.0.0/16`.
       The ranges should be disjoint.
     - Only IPv4 is supported.
+    elements: str
     required: false
     type: list
   remote_traffic_selector:
@@ -114,6 +115,7 @@ options:
       gateway. The value should be a CIDR formatted string, for example `192.168.0.0/16`.
       The ranges should be disjoint.
     - Only IPv4 is supported.
+    elements: str
     required: false
     type: list
   region:

plugins/modules/gcp_container_cluster.py

@@ -106,6 +106,7 @@ options:
           communicating with gcr.io (the Google Container Registry).
         - If unspecified, no scopes are added, unless Cloud Logging or Cloud Monitoring
           are enabled, in which case their required scopes will be added.
+        elements: str
         required: false
         type: list
       service_account:
@@ -162,6 +163,7 @@ options:
           valid sources or targets for network firewalls and are specified by the
           client during cluster or node pool creation. Each tag within the list must
           comply with RFC1035.
+        elements: str
         required: false
         type: list
       preemptible:
@@ -174,6 +176,7 @@ options:
         description:
         - A list of hardware accelerators to be attached to each node. See U(https://cloud.google.com/compute/docs/gpus)
           for more information about support for GPUs.
+        elements: dict
         required: false
         type: list
         version_added: '2.9'
@@ -207,6 +210,7 @@ options:
         - List of kubernetes taints to be applied to each node.
         - 'For more information, including usage and the valid values, see: U(https://kubernetes.io/docs/concepts/configuration/taint-and-toleration/)
           .'
+        elements: dict
         required: false
         type: list
         version_added: '2.9'
@@ -385,6 +389,7 @@ options:
     description:
     - The list of Google Compute Engine zones in which the cluster's nodes should
       be located.
+    elements: str
     required: false
     type: list
     aliases:
@@ -534,6 +539,7 @@ options:
         description:
         - Define up to 50 external networks that could access Kubernetes master through
           HTTPS.
+        elements: dict
         required: false
         type: list
         suboptions:

plugins/modules/gcp_container_node_pool.py

@@ -86,6 +86,7 @@ options:
           communicating with gcr.io (the Google Container Registry).
         - If unspecified, no scopes are added, unless Cloud Logging or Cloud Monitoring
           are enabled, in which case their required scopes will be added.
+        elements: str
         required: false
         type: list
       service_account:
@@ -142,6 +143,7 @@ options:
           valid sources or targets for network firewalls and are specified by the
           client during cluster or node pool creation. Each tag within the list must
           comply with RFC1035.
+        elements: str
         required: false
         type: list
       preemptible:
@@ -153,6 +155,7 @@ options:
       accelerators:
         description:
         - A list of hardware accelerators to be attached to each node.
+        elements: dict
         required: false
         type: list
         version_added: '2.9'
@@ -184,6 +187,7 @@ options:
       taints:
         description:
         - List of kubernetes taints to be applied to each node.
+        elements: dict
         required: false
         type: list
         version_added: '2.9'
@@ -282,6 +286,7 @@ options:
   conditions:
     description:
     - Which conditions caused the current node pool state.
+    elements: dict
     required: false
     type: list
     version_added: '2.9'

plugins/modules/gcp_dns_managed_zone.py

@@ -91,6 +91,7 @@ options:
         - Specifies parameters that will be used for generating initial DnsKeys for
           this ManagedZone. If you provide a spec for keySigning or zoneSigning, you
           must also provide one for the other.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -162,6 +163,7 @@ options:
       networks:
         description:
         - The list of VPC networks that can see this zone.
+        elements: dict
         required: true
         type: list
         suboptions:

plugins/modules/gcp_dns_resource_record_set.py

@@ -72,6 +72,7 @@ options:
   target:
     description:
     - As defined in RFC 1035 (section 5) and RFC 1034 (section 3.6.1) .
+    elements: str
     required: false
     type: list
   managed_zone:

plugins/modules/gcp_filestore_instance.py

@@ -73,6 +73,7 @@ options:
     description:
     - File system shares on the instance. For this version, only a single file share
       is supported.
+    elements: dict
     required: true
     type: list
     suboptions:
@@ -91,6 +92,7 @@ options:
     description:
     - VPC networks to which the instance is connected. For this version, only a single
       network is supported.
+    elements: dict
     required: true
     type: list
     suboptions:
@@ -102,6 +104,7 @@ options:
       modes:
         description:
         - IP versions for which the instance has IP addresses assigned.
+        elements: str
         required: true
         type: list
       reserved_ip_range:

plugins/modules/gcp_iam_role.py

@@ -67,6 +67,7 @@ options:
   included_permissions:
     description:
     - Names of permissions this role grants when bound in an IAM policy.
+    elements: str
     required: false
     type: list
   stage:

plugins/modules/gcp_logging_metric.py

@@ -110,6 +110,7 @@ options:
           metric type has a label for the HTTP response code, response_code, so you
           can look at latencies for successful responses or just for responses that
           failed.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -223,6 +224,7 @@ options:
           bounds:
             description:
             - The values must be monotonically increasing.
+            elements: str
             required: true
             type: list
   project:

plugins/modules/gcp_mlengine_model.py

@@ -76,6 +76,7 @@ options:
     description:
     - The list of regions where the model is going to be deployed.
     - Currently only one region per model is supported .
+    elements: str
     required: false
     type: list
   online_prediction_logging:

plugins/modules/gcp_pubsub_topic.py

@@ -84,6 +84,7 @@ options:
           non-allowed GCP regions (or running outside of GCP altogether) will be routed
           for storage in one of the allowed regions. An empty list means that no regions
           are allowed, and is not a valid configuration.
+        elements: str
         required: true
         type: list
   project:

plugins/modules/gcp_spanner_database.py

@@ -60,6 +60,7 @@ options:
       Statements can create tables, indexes, etc. These statements execute atomically
       with the creation of the database: if there is an error in any statement, the
       database is not created.'
+    elements: str
     required: false
     type: list
   instance:

plugins/modules/gcp_sql_instance.py

@@ -208,6 +208,7 @@ options:
       replica_names:
         description:
         - The replicas of the instance.
+        elements: str
         required: false
         type: list
       service_account_email_address:
@@ -225,6 +226,7 @@ options:
       database_flags:
         description:
         - The database flags passed to the instance at startup.
+        elements: dict
         required: false
         type: list
         version_added: '2.9'
@@ -260,6 +262,7 @@ options:
             - The list of external networks that are allowed to connect to the instance
               using the IP. In CIDR notation, also known as 'slash' notation (e.g.
               192.168.100.0/24).
+            elements: dict
             required: false
             type: list
             suboptions:

plugins/modules/gcp_storage_bucket.py

@@ -56,6 +56,7 @@ options:
   acl:
     description:
     - Access controls on the bucket.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -111,6 +112,7 @@ options:
   cors:
     description:
     - The bucket's Cross-Origin Resource Sharing (CORS) configuration.
+    elements: dict
     required: false
     type: list
     suboptions:
@@ -125,18 +127,21 @@ options:
         - 'The list of HTTP methods on which to include CORS response headers, (GET,
           OPTIONS, POST, etc) Note: "*" is permitted in the list of methods, and means
           "any method".'
+        elements: str
         required: false
         type: list
       origin:
         description:
         - The list of Origins eligible to receive CORS response headers.
         - 'Note: "*" is permitted in the list of origins, and means "any Origin".'
+        elements: str
         required: false
         type: list
       response_header:
         description:
         - The list of HTTP headers other than the simple response headers to give
           permission for the user-agent to share across domains.
+        elements: str
         required: false
         type: list
   default_event_based_hold:
@@ -149,6 +154,7 @@ options:
   default_object_acl:
     description:
     - Default access controls to apply to new objects when no ACL is provided.
+    elements: dict
     required: false
     type: list
     version_added: '2.7'
@@ -194,6 +200,7 @@ options:
         description:
         - A lifecycle management rule, which is made of an action to take and the
           condition(s) under which the action will be taken.
+        elements: dict
         required: false
         type: list
         suboptions:
@@ -246,6 +253,7 @@ options:
                 - Objects having any of the storage classes specified by this condition
                   will be matched. Values include MULTI_REGIONAL, REGIONAL, NEARLINE,
                   COLDLINE, STANDARD, and DURABLE_REDUCED_AVAILABILITY.
+                elements: str
                 required: false
                 type: list
               num_newer_versions: