@pulumi/kubernetes 3.19.4 → 3.20.2

package/authentication/v1beta1/tokenReviewPatch.js

@@ -0,0 +1,75 @@
+"use strict";
+// *** WARNING: this file was generated by pulumigen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenReviewPatch = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../../utilities");
+/**
+ * Patch resources are used to modify existing Kubernetes resources by using
+ * Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than
+ * one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource.
+ * Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the
+ * [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/installation-configuration/#server-side-apply) for
+ * additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi.
+ * TokenReview attempts to authenticate a token to a known user. Note: TokenReview requests may be cached by the webhook token authenticator plugin in the kube-apiserver.
+ */
+class TokenReviewPatch extends pulumi.CustomResource {
+    /**
+     * Create a TokenReviewPatch resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (!opts.id) {
+            if ((!args || args.metadata === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'metadata'");
+            }
+            resourceInputs["apiVersion"] = "authentication.k8s.io/v1beta1";
+            resourceInputs["kind"] = "TokenReview";
+            resourceInputs["metadata"] = args ? args.metadata : undefined;
+            resourceInputs["spec"] = args ? args.spec : undefined;
+            resourceInputs["status"] = undefined /*out*/;
+        }
+        else {
+            resourceInputs["apiVersion"] = undefined /*out*/;
+            resourceInputs["kind"] = undefined /*out*/;
+            resourceInputs["metadata"] = undefined /*out*/;
+            resourceInputs["spec"] = undefined /*out*/;
+            resourceInputs["status"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const aliasOpts = { aliases: [{ type: "kubernetes:authentication.k8s.io/v1:TokenReviewPatch" }] };
+        opts = pulumi.mergeOptions(opts, aliasOpts);
+        super(TokenReviewPatch.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing TokenReviewPatch resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, opts) {
+        return new TokenReviewPatch(name, undefined, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of TokenReviewPatch.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === TokenReviewPatch.__pulumiType;
+    }
+}
+exports.TokenReviewPatch = TokenReviewPatch;
+/** @internal */
+TokenReviewPatch.__pulumiType = 'kubernetes:authentication.k8s.io/v1beta1:TokenReviewPatch';
+//# sourceMappingURL=tokenReviewPatch.js.map

package/authentication/v1beta1/tokenReviewPatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tokenReviewPatch.js","sourceRoot":"","sources":["../../../authentication/v1beta1/tokenReviewPatch.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;AAEjF,yCAAyC;AAEzC,6CAA6C;AAE7C;;;;;;;;GAQG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IA6CvD;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAA2B,EAAE,IAAmC;QACtF,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,+BAA+B,CAAC;YAC/D,cAAc,CAAC,MAAM,CAAC,GAAG,aAAa,CAAC;YACvC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;aAAM;YACH,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,sDAAsD,EAAE,CAAC,EAAE,CAAC;QAClG,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;IA1ED;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAE,SAAgB,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC7E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;;AAzBL,4CA4EC;AA/DG,gBAAgB;AACO,6BAAY,GAAG,2DAA2D,CAAC"}

package/authorization/v1/index.d.ts

@@ -1,4 +1,8 @@
 export * from "./localSubjectAccessReview";
+export * from "./localSubjectAccessReviewPatch";
 export * from "./selfSubjectAccessReview";
+export * from "./selfSubjectAccessReviewPatch";
 export * from "./selfSubjectRulesReview";
+export * from "./selfSubjectRulesReviewPatch";
 export * from "./subjectAccessReview";
+export * from "./subjectAccessReviewPatch";

package/authorization/v1/index.js

@@ -20,26 +20,42 @@ const pulumi = require("@pulumi/pulumi");
 const utilities = require("../../utilities");
 // Export members:
 __exportStar(require("./localSubjectAccessReview"), exports);
+__exportStar(require("./localSubjectAccessReviewPatch"), exports);
 __exportStar(require("./selfSubjectAccessReview"), exports);
+__exportStar(require("./selfSubjectAccessReviewPatch"), exports);
 __exportStar(require("./selfSubjectRulesReview"), exports);
+__exportStar(require("./selfSubjectRulesReviewPatch"), exports);
 __exportStar(require("./subjectAccessReview"), exports);
+__exportStar(require("./subjectAccessReviewPatch"), exports);
 // Import resources to register:
 const localSubjectAccessReview_1 = require("./localSubjectAccessReview");
+const localSubjectAccessReviewPatch_1 = require("./localSubjectAccessReviewPatch");
 const selfSubjectAccessReview_1 = require("./selfSubjectAccessReview");
+const selfSubjectAccessReviewPatch_1 = require("./selfSubjectAccessReviewPatch");
 const selfSubjectRulesReview_1 = require("./selfSubjectRulesReview");
+const selfSubjectRulesReviewPatch_1 = require("./selfSubjectRulesReviewPatch");
 const subjectAccessReview_1 = require("./subjectAccessReview");
+const subjectAccessReviewPatch_1 = require("./subjectAccessReviewPatch");
 const _module = {
     version: utilities.getVersion(),
     construct: (name, type, urn) => {
         switch (type) {
             case "kubernetes:authorization.k8s.io/v1:LocalSubjectAccessReview":
                 return new localSubjectAccessReview_1.LocalSubjectAccessReview(name, undefined, { urn });
+            case "kubernetes:authorization.k8s.io/v1:LocalSubjectAccessReviewPatch":
+                return new localSubjectAccessReviewPatch_1.LocalSubjectAccessReviewPatch(name, undefined, { urn });
             case "kubernetes:authorization.k8s.io/v1:SelfSubjectAccessReview":
                 return new selfSubjectAccessReview_1.SelfSubjectAccessReview(name, undefined, { urn });
+            case "kubernetes:authorization.k8s.io/v1:SelfSubjectAccessReviewPatch":
+                return new selfSubjectAccessReviewPatch_1.SelfSubjectAccessReviewPatch(name, undefined, { urn });
             case "kubernetes:authorization.k8s.io/v1:SelfSubjectRulesReview":
                 return new selfSubjectRulesReview_1.SelfSubjectRulesReview(name, undefined, { urn });
+            case "kubernetes:authorization.k8s.io/v1:SelfSubjectRulesReviewPatch":
+                return new selfSubjectRulesReviewPatch_1.SelfSubjectRulesReviewPatch(name, undefined, { urn });
             case "kubernetes:authorization.k8s.io/v1:SubjectAccessReview":
                 return new subjectAccessReview_1.SubjectAccessReview(name, undefined, { urn });
+            case "kubernetes:authorization.k8s.io/v1:SubjectAccessReviewPatch":
+                return new subjectAccessReviewPatch_1.SubjectAccessReviewPatch(name, undefined, { urn });
             default:
                 throw new Error(`unknown resource type ${type}`);
         }

package/authorization/v1/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../authorization/v1/index.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;;;;;;;;;;;;;;AAEjF,yCAAyC;AACzC,6CAA6C;AAE7C,kBAAkB;AAClB,6DAA2C;AAC3C,4DAA0C;AAC1C,2DAAyC;AACzC,wDAAsC;AAEtC,gCAAgC;AAChC,yEAAsE;AACtE,uEAAoE;AACpE,qEAAkE;AAClE,+DAA4D;AAE5D,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,6DAA6D;gBAC9D,OAAO,IAAI,mDAAwB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,KAAK,4DAA4D;gBAC7D,OAAO,IAAI,iDAAuB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACrE,KAAK,2DAA2D;gBAC5D,OAAO,IAAI,+CAAsB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACpE,KAAK,wDAAwD;gBACzD,OAAO,IAAI,yCAAmB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACjE;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,YAAY,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../authorization/v1/index.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;;;;;;;;;;;;;;AAEjF,yCAAyC;AACzC,6CAA6C;AAE7C,kBAAkB;AAClB,6DAA2C;AAC3C,kEAAgD;AAChD,4DAA0C;AAC1C,iEAA+C;AAC/C,2DAAyC;AACzC,gEAA8C;AAC9C,wDAAsC;AACtC,6DAA2C;AAE3C,gCAAgC;AAChC,yEAAsE;AACtE,mFAAgF;AAChF,uEAAoE;AACpE,iFAA8E;AAC9E,qEAAkE;AAClE,+EAA4E;AAC5E,+DAA4D;AAC5D,yEAAsE;AAEtE,MAAM,OAAO,GAAG;IACZ,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE;IAC/B,SAAS,EAAE,CAAC,IAAY,EAAE,IAAY,EAAE,GAAW,EAAmB,EAAE;QACpE,QAAQ,IAAI,EAAE;YACV,KAAK,6DAA6D;gBAC9D,OAAO,IAAI,mDAAwB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE,KAAK,kEAAkE;gBACnE,OAAO,IAAI,6DAA6B,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC3E,KAAK,4DAA4D;gBAC7D,OAAO,IAAI,iDAAuB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACrE,KAAK,iEAAiE;gBAClE,OAAO,IAAI,2DAA4B,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YAC1E,KAAK,2DAA2D;gBAC5D,OAAO,IAAI,+CAAsB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACpE,KAAK,gEAAgE;gBACjE,OAAO,IAAI,yDAA2B,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACzE,KAAK,wDAAwD;gBACzD,OAAO,IAAI,yCAAmB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACjE,KAAK,6DAA6D;gBAC9D,OAAO,IAAI,mDAAwB,CAAC,IAAI,EAAO,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,CAAA;YACtE;gBACI,MAAM,IAAI,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC,CAAC;SACxD;IACL,CAAC;CACJ,CAAC;AACF,MAAM,CAAC,OAAO,CAAC,sBAAsB,CAAC,YAAY,EAAE,yBAAyB,EAAE,OAAO,CAAC,CAAA"}

package/authorization/v1/localSubjectAccessReviewPatch.d.ts

@@ -0,0 +1,76 @@
+import * as pulumi from "@pulumi/pulumi";
+import { input as inputs, output as outputs } from "../../types";
+/**
+ * Patch resources are used to modify existing Kubernetes resources by using
+ * Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than
+ * one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource.
+ * Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the
+ * [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/installation-configuration/#server-side-apply) for
+ * additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi.
+ * LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
+ */
+export declare class LocalSubjectAccessReviewPatch extends pulumi.CustomResource {
+    /**
+     * Get an existing LocalSubjectAccessReviewPatch resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): LocalSubjectAccessReviewPatch;
+    /**
+     * Returns true if the given object is an instance of LocalSubjectAccessReviewPatch.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is LocalSubjectAccessReviewPatch;
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    readonly apiVersion: pulumi.Output<"authorization.k8s.io/v1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    readonly kind: pulumi.Output<"LocalSubjectAccessReview">;
+    /**
+     * Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+     */
+    readonly metadata: pulumi.Output<outputs.meta.v1.ObjectMetaPatch>;
+    /**
+     * Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
+     */
+    readonly spec: pulumi.Output<outputs.authorization.v1.SubjectAccessReviewSpecPatch>;
+    /**
+     * Status is filled in by the server and indicates whether the request is allowed or not
+     */
+    readonly status: pulumi.Output<outputs.authorization.v1.SubjectAccessReviewStatusPatch>;
+    /**
+     * Create a LocalSubjectAccessReviewPatch resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: LocalSubjectAccessReviewPatchArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a LocalSubjectAccessReviewPatch resource.
+ */
+export interface LocalSubjectAccessReviewPatchArgs {
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    apiVersion?: pulumi.Input<"authorization.k8s.io/v1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    kind?: pulumi.Input<"LocalSubjectAccessReview">;
+    /**
+     * Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+     */
+    metadata: pulumi.Input<inputs.meta.v1.ObjectMetaPatch>;
+    /**
+     * Spec holds information about the request being evaluated.  spec.namespace must be equal to the namespace you made the request against.  If empty, it is defaulted.
+     */
+    spec?: pulumi.Input<inputs.authorization.v1.SubjectAccessReviewSpecPatch>;
+}

package/authorization/v1/localSubjectAccessReviewPatch.js

@@ -0,0 +1,75 @@
+"use strict";
+// *** WARNING: this file was generated by pulumigen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.LocalSubjectAccessReviewPatch = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../../utilities");
+/**
+ * Patch resources are used to modify existing Kubernetes resources by using
+ * Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than
+ * one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource.
+ * Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the
+ * [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/installation-configuration/#server-side-apply) for
+ * additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi.
+ * LocalSubjectAccessReview checks whether or not a user or group can perform an action in a given namespace. Having a namespace scoped resource makes it much easier to grant namespace scoped policy that includes permissions checking.
+ */
+class LocalSubjectAccessReviewPatch extends pulumi.CustomResource {
+    /**
+     * Create a LocalSubjectAccessReviewPatch resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (!opts.id) {
+            if ((!args || args.metadata === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'metadata'");
+            }
+            resourceInputs["apiVersion"] = "authorization.k8s.io/v1";
+            resourceInputs["kind"] = "LocalSubjectAccessReview";
+            resourceInputs["metadata"] = args ? args.metadata : undefined;
+            resourceInputs["spec"] = args ? args.spec : undefined;
+            resourceInputs["status"] = undefined /*out*/;
+        }
+        else {
+            resourceInputs["apiVersion"] = undefined /*out*/;
+            resourceInputs["kind"] = undefined /*out*/;
+            resourceInputs["metadata"] = undefined /*out*/;
+            resourceInputs["spec"] = undefined /*out*/;
+            resourceInputs["status"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const aliasOpts = { aliases: [{ type: "kubernetes:authorization.k8s.io/v1beta1:LocalSubjectAccessReviewPatch" }] };
+        opts = pulumi.mergeOptions(opts, aliasOpts);
+        super(LocalSubjectAccessReviewPatch.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing LocalSubjectAccessReviewPatch resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, opts) {
+        return new LocalSubjectAccessReviewPatch(name, undefined, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of LocalSubjectAccessReviewPatch.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === LocalSubjectAccessReviewPatch.__pulumiType;
+    }
+}
+exports.LocalSubjectAccessReviewPatch = LocalSubjectAccessReviewPatch;
+/** @internal */
+LocalSubjectAccessReviewPatch.__pulumiType = 'kubernetes:authorization.k8s.io/v1:LocalSubjectAccessReviewPatch';
+//# sourceMappingURL=localSubjectAccessReviewPatch.js.map

package/authorization/v1/localSubjectAccessReviewPatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"localSubjectAccessReviewPatch.js","sourceRoot":"","sources":["../../../authorization/v1/localSubjectAccessReviewPatch.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;AAEjF,yCAAyC;AAEzC,6CAA6C;AAE7C;;;;;;;;GAQG;AACH,MAAa,6BAA8B,SAAQ,MAAM,CAAC,cAAc;IAgDpE;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,yBAAyB,CAAC;YACzD,cAAc,CAAC,MAAM,CAAC,GAAG,0BAA0B,CAAC;YACpD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;aAAM;YACH,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,uEAAuE,EAAE,CAAC,EAAE,CAAC;QACnH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,6BAA6B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAClF,CAAC;IA7ED;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,6BAA6B,CAAC,IAAI,EAAE,SAAgB,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IAC1F,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,6BAA6B,CAAC,YAAY,CAAC;IAC9E,CAAC;;AAzBL,sEA+EC;AAlEG,gBAAgB;AACO,0CAAY,GAAG,kEAAkE,CAAC"}

package/authorization/v1/selfSubjectAccessReviewPatch.d.ts

@@ -0,0 +1,76 @@
+import * as pulumi from "@pulumi/pulumi";
+import { input as inputs, output as outputs } from "../../types";
+/**
+ * Patch resources are used to modify existing Kubernetes resources by using
+ * Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than
+ * one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource.
+ * Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the
+ * [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/installation-configuration/#server-side-apply) for
+ * additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi.
+ * SelfSubjectAccessReview checks whether or the current user can perform an action.  Not filling in a spec.namespace means "in all namespaces".  Self is a special case, because users should always be able to check whether they can perform an action
+ */
+export declare class SelfSubjectAccessReviewPatch extends pulumi.CustomResource {
+    /**
+     * Get an existing SelfSubjectAccessReviewPatch resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): SelfSubjectAccessReviewPatch;
+    /**
+     * Returns true if the given object is an instance of SelfSubjectAccessReviewPatch.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is SelfSubjectAccessReviewPatch;
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    readonly apiVersion: pulumi.Output<"authorization.k8s.io/v1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    readonly kind: pulumi.Output<"SelfSubjectAccessReview">;
+    /**
+     * Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+     */
+    readonly metadata: pulumi.Output<outputs.meta.v1.ObjectMetaPatch>;
+    /**
+     * Spec holds information about the request being evaluated.  user and groups must be empty
+     */
+    readonly spec: pulumi.Output<outputs.authorization.v1.SelfSubjectAccessReviewSpecPatch>;
+    /**
+     * Status is filled in by the server and indicates whether the request is allowed or not
+     */
+    readonly status: pulumi.Output<outputs.authorization.v1.SubjectAccessReviewStatusPatch>;
+    /**
+     * Create a SelfSubjectAccessReviewPatch resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: SelfSubjectAccessReviewPatchArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a SelfSubjectAccessReviewPatch resource.
+ */
+export interface SelfSubjectAccessReviewPatchArgs {
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    apiVersion?: pulumi.Input<"authorization.k8s.io/v1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    kind?: pulumi.Input<"SelfSubjectAccessReview">;
+    /**
+     * Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+     */
+    metadata: pulumi.Input<inputs.meta.v1.ObjectMetaPatch>;
+    /**
+     * Spec holds information about the request being evaluated.  user and groups must be empty
+     */
+    spec?: pulumi.Input<inputs.authorization.v1.SelfSubjectAccessReviewSpecPatch>;
+}

package/authorization/v1/selfSubjectAccessReviewPatch.js

@@ -0,0 +1,75 @@
+"use strict";
+// *** WARNING: this file was generated by pulumigen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SelfSubjectAccessReviewPatch = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../../utilities");
+/**
+ * Patch resources are used to modify existing Kubernetes resources by using
+ * Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than
+ * one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource.
+ * Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the
+ * [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/installation-configuration/#server-side-apply) for
+ * additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi.
+ * SelfSubjectAccessReview checks whether or the current user can perform an action.  Not filling in a spec.namespace means "in all namespaces".  Self is a special case, because users should always be able to check whether they can perform an action
+ */
+class SelfSubjectAccessReviewPatch extends pulumi.CustomResource {
+    /**
+     * Create a SelfSubjectAccessReviewPatch resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (!opts.id) {
+            if ((!args || args.metadata === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'metadata'");
+            }
+            resourceInputs["apiVersion"] = "authorization.k8s.io/v1";
+            resourceInputs["kind"] = "SelfSubjectAccessReview";
+            resourceInputs["metadata"] = args ? args.metadata : undefined;
+            resourceInputs["spec"] = args ? args.spec : undefined;
+            resourceInputs["status"] = undefined /*out*/;
+        }
+        else {
+            resourceInputs["apiVersion"] = undefined /*out*/;
+            resourceInputs["kind"] = undefined /*out*/;
+            resourceInputs["metadata"] = undefined /*out*/;
+            resourceInputs["spec"] = undefined /*out*/;
+            resourceInputs["status"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const aliasOpts = { aliases: [{ type: "kubernetes:authorization.k8s.io/v1beta1:SelfSubjectAccessReviewPatch" }] };
+        opts = pulumi.mergeOptions(opts, aliasOpts);
+        super(SelfSubjectAccessReviewPatch.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing SelfSubjectAccessReviewPatch resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, opts) {
+        return new SelfSubjectAccessReviewPatch(name, undefined, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of SelfSubjectAccessReviewPatch.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === SelfSubjectAccessReviewPatch.__pulumiType;
+    }
+}
+exports.SelfSubjectAccessReviewPatch = SelfSubjectAccessReviewPatch;
+/** @internal */
+SelfSubjectAccessReviewPatch.__pulumiType = 'kubernetes:authorization.k8s.io/v1:SelfSubjectAccessReviewPatch';
+//# sourceMappingURL=selfSubjectAccessReviewPatch.js.map

package/authorization/v1/selfSubjectAccessReviewPatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfSubjectAccessReviewPatch.js","sourceRoot":"","sources":["../../../authorization/v1/selfSubjectAccessReviewPatch.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;AAEjF,yCAAyC;AAEzC,6CAA6C;AAE7C;;;;;;;;GAQG;AACH,MAAa,4BAA6B,SAAQ,MAAM,CAAC,cAAc;IAgDnE;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAuC,EAAE,IAAmC;QAClG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,yBAAyB,CAAC;YACzD,cAAc,CAAC,MAAM,CAAC,GAAG,yBAAyB,CAAC;YACnD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;aAAM;YACH,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,sEAAsE,EAAE,CAAC,EAAE,CAAC;QAClH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,4BAA4B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACjF,CAAC;IA7ED;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,4BAA4B,CAAC,IAAI,EAAE,SAAgB,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACzF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,4BAA4B,CAAC,YAAY,CAAC;IAC7E,CAAC;;AAzBL,oEA+EC;AAlEG,gBAAgB;AACO,yCAAY,GAAG,iEAAiE,CAAC"}

package/authorization/v1/selfSubjectRulesReviewPatch.d.ts

@@ -0,0 +1,76 @@
+import * as pulumi from "@pulumi/pulumi";
+import { input as inputs, output as outputs } from "../../types";
+/**
+ * Patch resources are used to modify existing Kubernetes resources by using
+ * Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than
+ * one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource.
+ * Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the
+ * [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/installation-configuration/#server-side-apply) for
+ * additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi.
+ * SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.
+ */
+export declare class SelfSubjectRulesReviewPatch extends pulumi.CustomResource {
+    /**
+     * Get an existing SelfSubjectRulesReviewPatch resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, opts?: pulumi.CustomResourceOptions): SelfSubjectRulesReviewPatch;
+    /**
+     * Returns true if the given object is an instance of SelfSubjectRulesReviewPatch.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is SelfSubjectRulesReviewPatch;
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    readonly apiVersion: pulumi.Output<"authorization.k8s.io/v1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    readonly kind: pulumi.Output<"SelfSubjectRulesReview">;
+    /**
+     * Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+     */
+    readonly metadata: pulumi.Output<outputs.meta.v1.ObjectMetaPatch>;
+    /**
+     * Spec holds information about the request being evaluated.
+     */
+    readonly spec: pulumi.Output<outputs.authorization.v1.SelfSubjectRulesReviewSpecPatch>;
+    /**
+     * Status is filled in by the server and indicates the set of actions a user can perform.
+     */
+    readonly status: pulumi.Output<outputs.authorization.v1.SubjectRulesReviewStatusPatch>;
+    /**
+     * Create a SelfSubjectRulesReviewPatch resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: SelfSubjectRulesReviewPatchArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * The set of arguments for constructing a SelfSubjectRulesReviewPatch resource.
+ */
+export interface SelfSubjectRulesReviewPatchArgs {
+    /**
+     * APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+     */
+    apiVersion?: pulumi.Input<"authorization.k8s.io/v1">;
+    /**
+     * Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+     */
+    kind?: pulumi.Input<"SelfSubjectRulesReview">;
+    /**
+     * Standard list metadata. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#metadata
+     */
+    metadata: pulumi.Input<inputs.meta.v1.ObjectMetaPatch>;
+    /**
+     * Spec holds information about the request being evaluated.
+     */
+    spec?: pulumi.Input<inputs.authorization.v1.SelfSubjectRulesReviewSpecPatch>;
+}

package/authorization/v1/selfSubjectRulesReviewPatch.js

@@ -0,0 +1,75 @@
+"use strict";
+// *** WARNING: this file was generated by pulumigen. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SelfSubjectRulesReviewPatch = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../../utilities");
+/**
+ * Patch resources are used to modify existing Kubernetes resources by using
+ * Server-Side Apply updates. The name of the resource must be specified, but all other properties are optional. More than
+ * one patch may be applied to the same resource, and a random FieldManager name will be used for each Patch resource.
+ * Conflicts will result in an error by default, but can be forced using the "pulumi.com/patchForce" annotation. See the
+ * [Server-Side Apply Docs](https://www.pulumi.com/registry/packages/kubernetes/installation-configuration/#server-side-apply) for
+ * additional information about using Server-Side Apply to manage Kubernetes resources with Pulumi.
+ * SelfSubjectRulesReview enumerates the set of actions the current user can perform within a namespace. The returned list of actions may be incomplete depending on the server's authorization mode, and any errors experienced during the evaluation. SelfSubjectRulesReview should be used by UIs to show/hide actions, or to quickly let an end user reason about their permissions. It should NOT Be used by external systems to drive authorization decisions as this raises confused deputy, cache lifetime/revocation, and correctness concerns. SubjectAccessReview, and LocalAccessReview are the correct way to defer authorization decisions to the API server.
+ */
+class SelfSubjectRulesReviewPatch extends pulumi.CustomResource {
+    /**
+     * Create a SelfSubjectRulesReviewPatch resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name, args, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (!opts.id) {
+            if ((!args || args.metadata === undefined) && !opts.urn) {
+                throw new Error("Missing required property 'metadata'");
+            }
+            resourceInputs["apiVersion"] = "authorization.k8s.io/v1";
+            resourceInputs["kind"] = "SelfSubjectRulesReview";
+            resourceInputs["metadata"] = args ? args.metadata : undefined;
+            resourceInputs["spec"] = args ? args.spec : undefined;
+            resourceInputs["status"] = undefined /*out*/;
+        }
+        else {
+            resourceInputs["apiVersion"] = undefined /*out*/;
+            resourceInputs["kind"] = undefined /*out*/;
+            resourceInputs["metadata"] = undefined /*out*/;
+            resourceInputs["spec"] = undefined /*out*/;
+            resourceInputs["status"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        const aliasOpts = { aliases: [{ type: "kubernetes:authorization.k8s.io/v1beta1:SelfSubjectRulesReviewPatch" }] };
+        opts = pulumi.mergeOptions(opts, aliasOpts);
+        super(SelfSubjectRulesReviewPatch.__pulumiType, name, resourceInputs, opts);
+    }
+    /**
+     * Get an existing SelfSubjectRulesReviewPatch resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, opts) {
+        return new SelfSubjectRulesReviewPatch(name, undefined, Object.assign(Object.assign({}, opts), { id: id }));
+    }
+    /**
+     * Returns true if the given object is an instance of SelfSubjectRulesReviewPatch.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === SelfSubjectRulesReviewPatch.__pulumiType;
+    }
+}
+exports.SelfSubjectRulesReviewPatch = SelfSubjectRulesReviewPatch;
+/** @internal */
+SelfSubjectRulesReviewPatch.__pulumiType = 'kubernetes:authorization.k8s.io/v1:SelfSubjectRulesReviewPatch';
+//# sourceMappingURL=selfSubjectRulesReviewPatch.js.map

package/authorization/v1/selfSubjectRulesReviewPatch.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"selfSubjectRulesReviewPatch.js","sourceRoot":"","sources":["../../../authorization/v1/selfSubjectRulesReviewPatch.ts"],"names":[],"mappings":";AAAA,yDAAyD;AACzD,iFAAiF;;;AAEjF,yCAAyC;AAEzC,6CAA6C;AAE7C;;;;;;;;GAQG;AACH,MAAa,2BAA4B,SAAQ,MAAM,CAAC,cAAc;IAgDlE;;;;;;OAMG;IACH,YAAY,IAAY,EAAE,IAAsC,EAAE,IAAmC;QACjG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACrD,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,YAAY,CAAC,GAAG,yBAAyB,CAAC;YACzD,cAAc,CAAC,MAAM,CAAC,GAAG,wBAAwB,CAAC;YAClD,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YAC9D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YACtD,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;aAAM;YACH,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC3C,cAAc,CAAC,QAAQ,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SAChD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,SAAS,GAAG,EAAE,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,qEAAqE,EAAE,CAAC,EAAE,CAAC;QACjH,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QAC5C,KAAK,CAAC,2BAA2B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAChF,CAAC;IA7ED;;;;;;;OAOG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,IAAmC;QAC5F,OAAO,IAAI,2BAA2B,CAAC,IAAI,EAAE,SAAgB,kCAAO,IAAI,KAAE,EAAE,EAAE,EAAE,IAAG,CAAC;IACxF,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,2BAA2B,CAAC,YAAY,CAAC;IAC5E,CAAC;;AAzBL,kEA+EC;AAlEG,gBAAgB;AACO,wCAAY,GAAG,gEAAgE,CAAC"}