@pulumi/kubernetes 0.0.1-alpha.100

package/rbac/v1beta1/index.js

@@ -0,0 +1,66 @@
+"use strict";
+// *** WARNING: this file was generated by pulumigen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RolePatch = exports.RoleList = exports.RoleBindingPatch = exports.RoleBindingList = exports.RoleBinding = exports.Role = exports.ClusterRolePatch = exports.ClusterRoleList = exports.ClusterRoleBindingPatch = exports.ClusterRoleBindingList = exports.ClusterRoleBinding = exports.ClusterRole = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../../utilities");
+exports.ClusterRole = null;
+utilities.lazyLoad(exports, ["ClusterRole"], () => require("./clusterRole"));
+exports.ClusterRoleBinding = null;
+utilities.lazyLoad(exports, ["ClusterRoleBinding"], () => require("./clusterRoleBinding"));
+exports.ClusterRoleBindingList = null;
+utilities.lazyLoad(exports, ["ClusterRoleBindingList"], () => require("./clusterRoleBindingList"));
+exports.ClusterRoleBindingPatch = null;
+utilities.lazyLoad(exports, ["ClusterRoleBindingPatch"], () => require("./clusterRoleBindingPatch"));
+exports.ClusterRoleList = null;
+utilities.lazyLoad(exports, ["ClusterRoleList"], () => require("./clusterRoleList"));
+exports.ClusterRolePatch = null;
+utilities.lazyLoad(exports, ["ClusterRolePatch"], () => require("./clusterRolePatch"));
+exports.Role = null;
+utilities.lazyLoad(exports, ["Role"], () => require("./role"));
+exports.RoleBinding = null;
+utilities.lazyLoad(exports, ["RoleBinding"], () => require("./roleBinding"));
+exports.RoleBindingList = null;
+utilities.lazyLoad(exports, ["RoleBindingList"], () => require("./roleBindingList"));
+exports.RoleBindingPatch = null;
+utilities.lazyLoad(exports, ["RoleBindingPatch"], () => require("./roleBindingPatch"));
+exports.RoleList = null;
+utilities.lazyLoad(exports, ["RoleList"], () => require("./roleList"));
+exports.RolePatch = null;
+utilities.lazyLoad(exports, ["RolePatch"], () => require("./rolePatch"));
+const _module = {
+    version: utilities.getVersion(),
+    construct: (name, type, urn) => {
+        switch (type) {
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:ClusterRole":
+                return new exports.ClusterRole(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:ClusterRoleBinding":
+                return new exports.ClusterRoleBinding(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:ClusterRoleBindingList":
+                return new exports.ClusterRoleBindingList(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:ClusterRoleBindingPatch":
+                return new exports.ClusterRoleBindingPatch(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:ClusterRoleList":
+                return new exports.ClusterRoleList(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:ClusterRolePatch":
+                return new exports.ClusterRolePatch(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:Role":
+                return new exports.Role(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:RoleBinding":
+                return new exports.RoleBinding(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:RoleBindingList":
+                return new exports.RoleBindingList(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:RoleBindingPatch":
+                return new exports.RoleBindingPatch(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:RoleList":
+                return new exports.RoleList(name, undefined, { urn });
+            case "kubernetes:rbac.authorization.k8s.io/v1beta1:RolePatch":
+                return new exports.RolePatch(name, undefined, { urn });
+            default:
+                throw new Error(`unknown resource type ${type}`);
+        }
+    },
+};
+pulumi.runtime.registerResourceModule("kubernetes", "rbac.authorization.k8s.io/v1beta1", _module);
+//# sourceMappingURL=index.js.map

package/rbac/v1beta1/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../rbac/v1beta1/index.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;AAEjF,yCAAyC;AACzC,6CAA6C;AAKhC,QAAA,WAAW,GAA+C,IAAW,CAAC;AACnF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;AAIhE,QAAA,kBAAkB,GAA6D,IAAW,CAAC;AACxG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,oBAAoB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC,CAAC;AAI9E,QAAA,sBAAsB,GAAqE,IAAW,CAAC;AACpH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,wBAAwB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC,CAAC;AAItF,QAAA,uBAAuB,GAAuE,IAAW,CAAC;AACvH,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,yBAAyB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC,CAAC;AAIxF,QAAA,eAAe,GAAuD,IAAW,CAAC;AAC/F,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAIxE,QAAA,gBAAgB,GAAyD,IAAW,CAAC;AAClG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAI1E,QAAA,IAAI,GAAiC,IAAW,CAAC;AAC9D,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC;AAIlD,QAAA,WAAW,GAA+C,IAAW,CAAC;AACnF,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;AAIhE,QAAA,eAAe,GAAuD,IAAW,CAAC;AAC/F,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,iBAAiB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,CAAC;AAIxE,QAAA,gBAAgB,GAAyD,IAAW,CAAC;AAClG,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC;AAI1E,QAAA,QAAQ,GAAyC,IAAW,CAAC;AAC1E,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,CAAC;AAI1D,QAAA,SAAS,GAA2C,IAAW,CAAC;AAC7E,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC;AAGzE,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,0DAA0D;gBAC3D,OAAO,IAAI,mBAAW,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACzD,KAAK,iEAAiE;gBAClE,OAAO,IAAI,0BAAkB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAChE,KAAK,qEAAqE;gBACtE,OAAO,IAAI,8BAAsB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACpE,KAAK,sEAAsE;gBACvE,OAAO,IAAI,+BAAuB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACrE,KAAK,8DAA8D;gBAC/D,OAAO,IAAI,uBAAe,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,KAAK,+DAA+D;gBAChE,OAAO,IAAI,wBAAgB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC9D,KAAK,mDAAmD;gBACpD,OAAO,IAAI,YAAI,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAClD,KAAK,0DAA0D;gBAC3D,OAAO,IAAI,mBAAW,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACzD,KAAK,8DAA8D;gBAC/D,OAAO,IAAI,uBAAe,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC7D,KAAK,+DAA+D;gBAChE,OAAO,IAAI,wBAAgB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC9D,KAAK,uDAAuD;gBACxD,OAAO,IAAI,gBAAQ,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtD,KAAK,wDAAwD;gBACzD,OAAO,IAAI,iBAAS,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACvD;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,YAAY,EAAE,mCAAmC,EAAE,OAAO,CAAC,CAAA"}

package/rbac/v1beta1/role.d.ts

@@ -0,0 +1,67 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../../types/input";
+import * as outputs from "../../types/output";
+/**
+ * Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.20.
+ */
+export declare class Role extends pulumi.CustomResource {
+    /**
+     * Get an existing Role resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): Role;
+    /**
+     * Returns true if the given object is an instance of Role.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is Role;
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    readonly apiVersion: pulumi.Output<"rbac.authorization.k8s.io/v1beta1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    readonly kind: pulumi.Output<"Role">;
+    /**
+     * Standard object's metadata.
+     */
+    readonly metadata: pulumi.Output<outputs.meta.v1.ObjectMeta>;
+    /**
+     * Rules holds all the PolicyRules for this Role
+     */
+    readonly rules: pulumi.Output<outputs.rbac.v1beta1.PolicyRule[]>;
+    /**
+     * Create a Role resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: RoleArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a Role resource.
+ */
+export interface RoleArgs {
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    apiVersion?: pulumi.Input<"rbac.authorization.k8s.io/v1beta1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    kind?: pulumi.Input<"Role">;
+    /**
+     * Standard object's metadata.
+     */
+    metadata?: pulumi.Input<inputs.meta.v1.ObjectMeta>;
+    /**
+     * Rules holds all the PolicyRules for this Role
+     */
+    rules?: pulumi.Input<pulumi.Input<inputs.rbac.v1beta1.PolicyRule>[]>;
+}

package/rbac/v1beta1/role.js

@@ -0,0 +1,64 @@
+"use strict";
+// *** WARNING: this file was generated by pulumigen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Role = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../../utilities");
+/**
+ * Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 Role, and will no longer be served in v1.20.
+ */
+class Role extends pulumi.CustomResource {
+    /**
+     * Get an existing Role resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, opts) {
+        return new Role(name, undefined, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of Role.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === Role.__pulumiType;
+    }
+    /**
+     * Create a Role resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (!opts.id) {
+            resourceInputs["apiVersion"] = "rbac.authorization.k8s.io/v1beta1";
+            resourceInputs["kind"] = "Role";
+            resourceInputs["metadata"] = args ? args.metadata : undefined;
+            resourceInputs["rules"] = args ? args.rules : undefined;
+        }
+        else {
+            resourceInputs["apiVersion"] = undefined /*out*/;
+            resourceInputs["kind"] = undefined /*out*/;
+            resourceInputs["metadata"] = undefined /*out*/;
+            resourceInputs["rules"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const aliasOpts = { aliases: [{ type: "kubernetes:rbac.authorization.k8s.io/v1:Role" }, { type: "kubernetes:rbac.authorization.k8s.io/v1alpha1:Role" }] };
+        opts = pulumi.mergeOptions(opts, aliasOpts);
+        super(Role.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.Role = Role;
+/** @internal */
+Role.__pulumiType = 'kubernetes:rbac.authorization.k8s.io/v1beta1:Role';
+//# sourceMappingURL=role.js.map

package/rbac/v1beta1/role.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"role.js","sourceRoot":"","sources":["../../../rbac/v1beta1/role.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;AAEjF,yCAAyC;AAIzC,6CAA6C;AAE7C;;GAEG;AACH,MAAa,IAAK,SAAQ,MAAM,CAAC,cAAc;IAC3C;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,IAAI,CAAC,IAAI,EAAE,SAAgB,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACjE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,IAAI,CAAC,YAAY,CAAC;IACrD,CAAC;IAmBD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAe,EAAE,IAAmC;QAC1E,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,cAAc,CAAC,YAAY,CAAC,GAAG,mCAAmC,CAAC;YACnE,cAAc,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC;YAChC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;SAC3D;aAAM;YACH,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAC/C;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,8CAA8C,EAAE,EAAE,EAAE,IAAI,EAAE,oDAAoD,EAAE,CAAC,EAAE,CAAC;QAC1J,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,IAAI,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACzD,CAAC;;AArEL,oBAsEC;AAzDG,gBAAgB;AACO,iBAAY,GAAG,mDAAmD,CAAC"}

package/rbac/v1beta1/roleBinding.d.ts

@@ -0,0 +1,75 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../../types/input";
+import * as outputs from "../../types/output";
+/**
+ * RoleBinding references a role, but does not contain it.  It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in.  RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.20.
+ */
+export declare class RoleBinding extends pulumi.CustomResource {
+    /**
+     * Get an existing RoleBinding resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): RoleBinding;
+    /**
+     * Returns true if the given object is an instance of RoleBinding.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is RoleBinding;
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    readonly apiVersion: pulumi.Output<"rbac.authorization.k8s.io/v1beta1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    readonly kind: pulumi.Output<"RoleBinding">;
+    /**
+     * Standard object's metadata.
+     */
+    readonly metadata: pulumi.Output<outputs.meta.v1.ObjectMeta>;
+    /**
+     * RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
+     */
+    readonly roleRef: pulumi.Output<outputs.rbac.v1beta1.RoleRef>;
+    /**
+     * Subjects holds references to the objects the role applies to.
+     */
+    readonly subjects: pulumi.Output<outputs.rbac.v1beta1.Subject[]>;
+    /**
+     * Create a RoleBinding resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: RoleBindingArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a RoleBinding resource.
+ */
+export interface RoleBindingArgs {
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    apiVersion?: pulumi.Input<"rbac.authorization.k8s.io/v1beta1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    kind?: pulumi.Input<"RoleBinding">;
+    /**
+     * Standard object's metadata.
+     */
+    metadata?: pulumi.Input<inputs.meta.v1.ObjectMeta>;
+    /**
+     * RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
+     */
+    roleRef: pulumi.Input<inputs.rbac.v1beta1.RoleRef>;
+    /**
+     * Subjects holds references to the objects the role applies to.
+     */
+    subjects?: pulumi.Input<pulumi.Input<inputs.rbac.v1beta1.Subject>[]>;
+}

package/rbac/v1beta1/roleBinding.js

@@ -0,0 +1,69 @@
+"use strict";
+// *** WARNING: this file was generated by pulumigen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoleBinding = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../../utilities");
+/**
+ * RoleBinding references a role, but does not contain it.  It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in.  RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.20.
+ */
+class RoleBinding extends pulumi.CustomResource {
+    /**
+     * Get an existing RoleBinding resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, opts) {
+        return new RoleBinding(name, undefined, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of RoleBinding.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === RoleBinding.__pulumiType;
+    }
+    /**
+     * Create a RoleBinding resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (!opts.id) {
+            if ((!args || args.roleRef === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'roleRef'");
+            }
+            resourceInputs["apiVersion"] = "rbac.authorization.k8s.io/v1beta1";
+            resourceInputs["kind"] = "RoleBinding";
+            resourceInputs["metadata"] = args ? args.metadata : undefined;
+            resourceInputs["roleRef"] = args ? args.roleRef : undefined;
+            resourceInputs["subjects"] = args ? args.subjects : undefined;
+        }
+        else {
+            resourceInputs["apiVersion"] = undefined /*out*/;
+            resourceInputs["kind"] = undefined /*out*/;
+            resourceInputs["metadata"] = undefined /*out*/;
+            resourceInputs["roleRef"] = undefined /*out*/;
+            resourceInputs["subjects"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const aliasOpts = { aliases: [{ type: "kubernetes:rbac.authorization.k8s.io/v1:RoleBinding" }, { type: "kubernetes:rbac.authorization.k8s.io/v1alpha1:RoleBinding" }] };
+        opts = pulumi.mergeOptions(opts, aliasOpts);
+        super(RoleBinding.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.RoleBinding = RoleBinding;
+/** @internal */
+RoleBinding.__pulumiType = 'kubernetes:rbac.authorization.k8s.io/v1beta1:RoleBinding';
+//# sourceMappingURL=roleBinding.js.map

package/rbac/v1beta1/roleBinding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleBinding.js","sourceRoot":"","sources":["../../../rbac/v1beta1/roleBinding.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;AAEjF,yCAAyC;AAIzC,6CAA6C;AAE7C;;GAEG;AACH,MAAa,WAAY,SAAQ,MAAM,CAAC,cAAc;IAClD;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,WAAW,CAAC,IAAI,EAAE,SAAgB,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACxE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,WAAW,CAAC,YAAY,CAAC;IAC5D,CAAC;IAuBD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAsB,EAAE,IAAmC;QACjF,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACpD,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,mCAAmC,CAAC;YACnE,cAAc,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC;YACvC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;YAC5D,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,qDAAqD,EAAE,EAAE,EAAE,IAAI,EAAE,2DAA2D,EAAE,CAAC,EAAE,CAAC;QACxK,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,WAAW,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;;AA9EL,kCA+EC;AAlEG,gBAAgB;AACO,wBAAY,GAAG,0DAA0D,CAAC"}

package/rbac/v1beta1/roleBindingList.d.ts

@@ -0,0 +1,67 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../../types/input";
+import * as outputs from "../../types/output";
+/**
+ * RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.20.
+ */
+export declare class RoleBindingList extends pulumi.CustomResource {
+    /**
+     * Get an existing RoleBindingList resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): RoleBindingList;
+    /**
+     * Returns true if the given object is an instance of RoleBindingList.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is RoleBindingList;
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    readonly apiVersion: pulumi.Output<"rbac.authorization.k8s.io/v1beta1">;
+    /**
+     * Items is a list of RoleBindings
+     */
+    readonly items: pulumi.Output<outputs.rbac.v1beta1.RoleBinding[]>;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    readonly kind: pulumi.Output<"RoleBindingList">;
+    /**
+     * Standard object's metadata.
+     */
+    readonly metadata: pulumi.Output<outputs.meta.v1.ListMeta>;
+    /**
+     * Create a RoleBindingList resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: RoleBindingListArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a RoleBindingList resource.
+ */
+export interface RoleBindingListArgs {
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    apiVersion?: pulumi.Input<"rbac.authorization.k8s.io/v1beta1">;
+    /**
+     * Items is a list of RoleBindings
+     */
+    items: pulumi.Input<pulumi.Input<inputs.rbac.v1beta1.RoleBinding>[]>;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    kind?: pulumi.Input<"RoleBindingList">;
+    /**
+     * Standard object's metadata.
+     */
+    metadata?: pulumi.Input<inputs.meta.v1.ListMeta>;
+}

package/rbac/v1beta1/roleBindingList.js

@@ -0,0 +1,65 @@
+"use strict";
+// *** WARNING: this file was generated by pulumigen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.RoleBindingList = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../../utilities");
+/**
+ * RoleBindingList is a collection of RoleBindings Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBindingList, and will no longer be served in v1.20.
+ */
+class RoleBindingList extends pulumi.CustomResource {
+    /**
+     * Get an existing RoleBindingList resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, opts) {
+        return new RoleBindingList(name, undefined, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of RoleBindingList.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === RoleBindingList.__pulumiType;
+    }
+    /**
+     * Create a RoleBindingList resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (!opts.id) {
+            if ((!args || args.items === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'items'");
+            }
+            resourceInputs["apiVersion"] = "rbac.authorization.k8s.io/v1beta1";
+            resourceInputs["items"] = args ? args.items : undefined;
+            resourceInputs["kind"] = "RoleBindingList";
+            resourceInputs["metadata"] = args ? args.metadata : undefined;
+        }
+        else {
+            resourceInputs["apiVersion"] = undefined /*out*/;
+            resourceInputs["items"] = undefined /*out*/;
+            resourceInputs["kind"] = undefined /*out*/;
+            resourceInputs["metadata"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(RoleBindingList.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.RoleBindingList = RoleBindingList;
+/** @internal */
+RoleBindingList.__pulumiType = 'kubernetes:rbac.authorization.k8s.io/v1beta1:RoleBindingList';
+//# sourceMappingURL=roleBindingList.js.map

package/rbac/v1beta1/roleBindingList.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"roleBindingList.js","sourceRoot":"","sources":["../../../rbac/v1beta1/roleBindingList.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;AAEjF,yCAAyC;AAIzC,6CAA6C;AAE7C;;GAEG;AACH,MAAa,eAAgB,SAAQ,MAAM,CAAC,cAAc;IACtD;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,eAAe,CAAC,IAAI,EAAE,SAAgB,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC5E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,eAAe,CAAC,YAAY,CAAC;IAChE,CAAC;IAmBD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAA0B,EAAE,IAAmC;QACrF,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAClD,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;aACxD;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,mCAAmC,CAAC;YACnE,cAAc,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,GAAG,iBAAiB,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;SACjE;aAAM;YACH,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,OAAO,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAClD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,eAAe,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpE,CAAC;;AAtEL,0CAuEC;AA1DG,gBAAgB;AACO,4BAAY,GAAG,8DAA8D,CAAC"}

package/rbac/v1beta1/roleBindingPatch.d.ts

@@ -0,0 +1,81 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../../types/input";
+import * as outputs from "../../types/output";
+/**
+ * Patch resources are used to modify existing Kubernetes resources by using
+ * Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than
+ * one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource.
+ * Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the
+ * [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/how-to-guides/managing-resources-with-server-side-apply/) for
+ * additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi.
+ * RoleBinding references a role, but does not contain it.  It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in.  RoleBindings in a given namespace only have effect in that namespace. Deprecated in v1.17 in favor of rbac.authorization.k8s.io/v1 RoleBinding, and will no longer be served in v1.20.
+ */
+export declare class RoleBindingPatch extends pulumi.CustomResource {
+    /**
+     * Get an existing RoleBindingPatch resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): RoleBindingPatch;
+    /**
+     * Returns true if the given object is an instance of RoleBindingPatch.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is RoleBindingPatch;
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    readonly apiVersion: pulumi.Output<"rbac.authorization.k8s.io/v1beta1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    readonly kind: pulumi.Output<"RoleBinding">;
+    /**
+     * Standard object's metadata.
+     */
+    readonly metadata: pulumi.Output<outputs.meta.v1.ObjectMetaPatch>;
+    /**
+     * RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
+     */
+    readonly roleRef: pulumi.Output<outputs.rbac.v1beta1.RoleRefPatch>;
+    /**
+     * Subjects holds references to the objects the role applies to.
+     */
+    readonly subjects: pulumi.Output<outputs.rbac.v1beta1.SubjectPatch[]>;
+    /**
+     * Create a RoleBindingPatch resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: RoleBindingPatchArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a RoleBindingPatch resource.
+ */
+export interface RoleBindingPatchArgs {
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    apiVersion?: pulumi.Input<"rbac.authorization.k8s.io/v1beta1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    kind?: pulumi.Input<"RoleBinding">;
+    /**
+     * Standard object's metadata.
+     */
+    metadata?: pulumi.Input<inputs.meta.v1.ObjectMetaPatch>;
+    /**
+     * RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error.
+     */
+    roleRef?: pulumi.Input<inputs.rbac.v1beta1.RoleRefPatch>;
+    /**
+     * Subjects holds references to the objects the role applies to.
+     */
+    subjects?: pulumi.Input<pulumi.Input<inputs.rbac.v1beta1.SubjectPatch>[]>;
+}