pulumi-azure-native 2.34.0__py3-none-any.whl → 2.34.1a1712062553__py3-none-any.whl

pulumi_azure_native/kubernetesconfiguration/v20240401preview/_inputs.py

@@ -0,0 +1,1356 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import copy
+import warnings
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+from ... import _utilities
+from ._enums import *
+
+__all__ = [
+    'AzureBlobDefinitionArgs',
+    'BucketDefinitionArgs',
+    'GitRepositoryDefinitionArgs',
+    'KustomizationDefinitionArgs',
+    'LayerSelectorDefinitionArgs',
+    'ManagedIdentityDefinitionArgs',
+    'MatchOidcIdentityDefinitionArgs',
+    'OCIRepositoryDefinitionArgs',
+    'OCIRepositoryRefDefinitionArgs',
+    'PostBuildDefinitionArgs',
+    'RepositoryRefDefinitionArgs',
+    'ServicePrincipalDefinitionArgs',
+    'SubstituteFromDefinitionArgs',
+    'TlsConfigDefinitionArgs',
+    'VerifyDefinitionArgs',
+]
+
+@pulumi.input_type
+class AzureBlobDefinitionArgs:
+    def __init__(__self__, *,
+                 account_key: Optional[pulumi.Input[str]] = None,
+                 container_name: Optional[pulumi.Input[str]] = None,
+                 local_auth_ref: Optional[pulumi.Input[str]] = None,
+                 managed_identity: Optional[pulumi.Input['ManagedIdentityDefinitionArgs']] = None,
+                 sas_token: Optional[pulumi.Input[str]] = None,
+                 service_principal: Optional[pulumi.Input['ServicePrincipalDefinitionArgs']] = None,
+                 sync_interval_in_seconds: Optional[pulumi.Input[float]] = None,
+                 timeout_in_seconds: Optional[pulumi.Input[float]] = None,
+                 url: Optional[pulumi.Input[str]] = None):
+        """
+        Parameters to reconcile to the AzureBlob source kind type.
+        :param pulumi.Input[str] account_key: The account key (shared key) to access the storage account
+        :param pulumi.Input[str] container_name: The Azure Blob container name to sync from the url endpoint for the flux configuration.
+        :param pulumi.Input[str] local_auth_ref: Name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
+        :param pulumi.Input['ManagedIdentityDefinitionArgs'] managed_identity: Parameters to authenticate using a Managed Identity.
+        :param pulumi.Input[str] sas_token: The Shared Access token to access the storage container
+        :param pulumi.Input['ServicePrincipalDefinitionArgs'] service_principal: Parameters to authenticate using Service Principal.
+        :param pulumi.Input[float] sync_interval_in_seconds: The interval at which to re-reconcile the cluster Azure Blob source with the remote.
+        :param pulumi.Input[float] timeout_in_seconds: The maximum time to attempt to reconcile the cluster Azure Blob source with the remote.
+        :param pulumi.Input[str] url: The URL to sync for the flux configuration Azure Blob storage account.
+        """
+        if account_key is not None:
+            pulumi.set(__self__, "account_key", account_key)
+        if container_name is not None:
+            pulumi.set(__self__, "container_name", container_name)
+        if local_auth_ref is not None:
+            pulumi.set(__self__, "local_auth_ref", local_auth_ref)
+        if managed_identity is not None:
+            pulumi.set(__self__, "managed_identity", managed_identity)
+        if sas_token is not None:
+            pulumi.set(__self__, "sas_token", sas_token)
+        if service_principal is not None:
+            pulumi.set(__self__, "service_principal", service_principal)
+        if sync_interval_in_seconds is None:
+            sync_interval_in_seconds = 600
+        if sync_interval_in_seconds is not None:
+            pulumi.set(__self__, "sync_interval_in_seconds", sync_interval_in_seconds)
+        if timeout_in_seconds is None:
+            timeout_in_seconds = 600
+        if timeout_in_seconds is not None:
+            pulumi.set(__self__, "timeout_in_seconds", timeout_in_seconds)
+        if url is not None:
+            pulumi.set(__self__, "url", url)
+
+    @property
+    @pulumi.getter(name="accountKey")
+    def account_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        The account key (shared key) to access the storage account
+        """
+        return pulumi.get(self, "account_key")
+
+    @account_key.setter
+    def account_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "account_key", value)
+
+    @property
+    @pulumi.getter(name="containerName")
+    def container_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Azure Blob container name to sync from the url endpoint for the flux configuration.
+        """
+        return pulumi.get(self, "container_name")
+
+    @container_name.setter
+    def container_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "container_name", value)
+
+    @property
+    @pulumi.getter(name="localAuthRef")
+    def local_auth_ref(self) -> Optional[pulumi.Input[str]]:
+        """
+        Name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
+        """
+        return pulumi.get(self, "local_auth_ref")
+
+    @local_auth_ref.setter
+    def local_auth_ref(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "local_auth_ref", value)
+
+    @property
+    @pulumi.getter(name="managedIdentity")
+    def managed_identity(self) -> Optional[pulumi.Input['ManagedIdentityDefinitionArgs']]:
+        """
+        Parameters to authenticate using a Managed Identity.
+        """
+        return pulumi.get(self, "managed_identity")
+
+    @managed_identity.setter
+    def managed_identity(self, value: Optional[pulumi.Input['ManagedIdentityDefinitionArgs']]):
+        pulumi.set(self, "managed_identity", value)
+
+    @property
+    @pulumi.getter(name="sasToken")
+    def sas_token(self) -> Optional[pulumi.Input[str]]:
+        """
+        The Shared Access token to access the storage container
+        """
+        return pulumi.get(self, "sas_token")
+
+    @sas_token.setter
+    def sas_token(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "sas_token", value)
+
+    @property
+    @pulumi.getter(name="servicePrincipal")
+    def service_principal(self) -> Optional[pulumi.Input['ServicePrincipalDefinitionArgs']]:
+        """
+        Parameters to authenticate using Service Principal.
+        """
+        return pulumi.get(self, "service_principal")
+
+    @service_principal.setter
+    def service_principal(self, value: Optional[pulumi.Input['ServicePrincipalDefinitionArgs']]):
+        pulumi.set(self, "service_principal", value)
+
+    @property
+    @pulumi.getter(name="syncIntervalInSeconds")
+    def sync_interval_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The interval at which to re-reconcile the cluster Azure Blob source with the remote.
+        """
+        return pulumi.get(self, "sync_interval_in_seconds")
+
+    @sync_interval_in_seconds.setter
+    def sync_interval_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "sync_interval_in_seconds", value)
+
+    @property
+    @pulumi.getter(name="timeoutInSeconds")
+    def timeout_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The maximum time to attempt to reconcile the cluster Azure Blob source with the remote.
+        """
+        return pulumi.get(self, "timeout_in_seconds")
+
+    @timeout_in_seconds.setter
+    def timeout_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "timeout_in_seconds", value)
+
+    @property
+    @pulumi.getter
+    def url(self) -> Optional[pulumi.Input[str]]:
+        """
+        The URL to sync for the flux configuration Azure Blob storage account.
+        """
+        return pulumi.get(self, "url")
+
+    @url.setter
+    def url(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "url", value)
+
+
+@pulumi.input_type
+class BucketDefinitionArgs:
+    def __init__(__self__, *,
+                 access_key: Optional[pulumi.Input[str]] = None,
+                 bucket_name: Optional[pulumi.Input[str]] = None,
+                 insecure: Optional[pulumi.Input[bool]] = None,
+                 local_auth_ref: Optional[pulumi.Input[str]] = None,
+                 sync_interval_in_seconds: Optional[pulumi.Input[float]] = None,
+                 timeout_in_seconds: Optional[pulumi.Input[float]] = None,
+                 url: Optional[pulumi.Input[str]] = None):
+        """
+        Parameters to reconcile to the Bucket source kind type.
+        :param pulumi.Input[str] access_key: Plaintext access key used to securely access the S3 bucket
+        :param pulumi.Input[str] bucket_name: The bucket name to sync from the url endpoint for the flux configuration.
+        :param pulumi.Input[bool] insecure: Specify whether to use insecure communication when puling data from the S3 bucket.
+        :param pulumi.Input[str] local_auth_ref: Name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
+        :param pulumi.Input[float] sync_interval_in_seconds: The interval at which to re-reconcile the cluster bucket source with the remote.
+        :param pulumi.Input[float] timeout_in_seconds: The maximum time to attempt to reconcile the cluster bucket source with the remote.
+        :param pulumi.Input[str] url: The URL to sync for the flux configuration S3 bucket.
+        """
+        if access_key is not None:
+            pulumi.set(__self__, "access_key", access_key)
+        if bucket_name is not None:
+            pulumi.set(__self__, "bucket_name", bucket_name)
+        if insecure is None:
+            insecure = True
+        if insecure is not None:
+            pulumi.set(__self__, "insecure", insecure)
+        if local_auth_ref is not None:
+            pulumi.set(__self__, "local_auth_ref", local_auth_ref)
+        if sync_interval_in_seconds is None:
+            sync_interval_in_seconds = 600
+        if sync_interval_in_seconds is not None:
+            pulumi.set(__self__, "sync_interval_in_seconds", sync_interval_in_seconds)
+        if timeout_in_seconds is None:
+            timeout_in_seconds = 600
+        if timeout_in_seconds is not None:
+            pulumi.set(__self__, "timeout_in_seconds", timeout_in_seconds)
+        if url is not None:
+            pulumi.set(__self__, "url", url)
+
+    @property
+    @pulumi.getter(name="accessKey")
+    def access_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        Plaintext access key used to securely access the S3 bucket
+        """
+        return pulumi.get(self, "access_key")
+
+    @access_key.setter
+    def access_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "access_key", value)
+
+    @property
+    @pulumi.getter(name="bucketName")
+    def bucket_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The bucket name to sync from the url endpoint for the flux configuration.
+        """
+        return pulumi.get(self, "bucket_name")
+
+    @bucket_name.setter
+    def bucket_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "bucket_name", value)
+
+    @property
+    @pulumi.getter
+    def insecure(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Specify whether to use insecure communication when puling data from the S3 bucket.
+        """
+        return pulumi.get(self, "insecure")
+
+    @insecure.setter
+    def insecure(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "insecure", value)
+
+    @property
+    @pulumi.getter(name="localAuthRef")
+    def local_auth_ref(self) -> Optional[pulumi.Input[str]]:
+        """
+        Name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
+        """
+        return pulumi.get(self, "local_auth_ref")
+
+    @local_auth_ref.setter
+    def local_auth_ref(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "local_auth_ref", value)
+
+    @property
+    @pulumi.getter(name="syncIntervalInSeconds")
+    def sync_interval_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The interval at which to re-reconcile the cluster bucket source with the remote.
+        """
+        return pulumi.get(self, "sync_interval_in_seconds")
+
+    @sync_interval_in_seconds.setter
+    def sync_interval_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "sync_interval_in_seconds", value)
+
+    @property
+    @pulumi.getter(name="timeoutInSeconds")
+    def timeout_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The maximum time to attempt to reconcile the cluster bucket source with the remote.
+        """
+        return pulumi.get(self, "timeout_in_seconds")
+
+    @timeout_in_seconds.setter
+    def timeout_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "timeout_in_seconds", value)
+
+    @property
+    @pulumi.getter
+    def url(self) -> Optional[pulumi.Input[str]]:
+        """
+        The URL to sync for the flux configuration S3 bucket.
+        """
+        return pulumi.get(self, "url")
+
+    @url.setter
+    def url(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "url", value)
+
+
+@pulumi.input_type
+class GitRepositoryDefinitionArgs:
+    def __init__(__self__, *,
+                 https_ca_cert: Optional[pulumi.Input[str]] = None,
+                 https_user: Optional[pulumi.Input[str]] = None,
+                 local_auth_ref: Optional[pulumi.Input[str]] = None,
+                 repository_ref: Optional[pulumi.Input['RepositoryRefDefinitionArgs']] = None,
+                 ssh_known_hosts: Optional[pulumi.Input[str]] = None,
+                 sync_interval_in_seconds: Optional[pulumi.Input[float]] = None,
+                 timeout_in_seconds: Optional[pulumi.Input[float]] = None,
+                 url: Optional[pulumi.Input[str]] = None):
+        """
+        Parameters to reconcile to the GitRepository source kind type.
+        :param pulumi.Input[str] https_ca_cert: Base64-encoded HTTPS certificate authority contents used to access git private git repositories over HTTPS
+        :param pulumi.Input[str] https_user: Plaintext HTTPS username used to access private git repositories over HTTPS
+        :param pulumi.Input[str] local_auth_ref: Name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
+        :param pulumi.Input['RepositoryRefDefinitionArgs'] repository_ref: The source reference for the GitRepository object.
+        :param pulumi.Input[str] ssh_known_hosts: Base64-encoded known_hosts value containing public SSH keys required to access private git repositories over SSH
+        :param pulumi.Input[float] sync_interval_in_seconds: The interval at which to re-reconcile the cluster git repository source with the remote.
+        :param pulumi.Input[float] timeout_in_seconds: The maximum time to attempt to reconcile the cluster git repository source with the remote.
+        :param pulumi.Input[str] url: The URL to sync for the flux configuration git repository.
+        """
+        if https_ca_cert is not None:
+            pulumi.set(__self__, "https_ca_cert", https_ca_cert)
+        if https_user is not None:
+            pulumi.set(__self__, "https_user", https_user)
+        if local_auth_ref is not None:
+            pulumi.set(__self__, "local_auth_ref", local_auth_ref)
+        if repository_ref is not None:
+            pulumi.set(__self__, "repository_ref", repository_ref)
+        if ssh_known_hosts is not None:
+            pulumi.set(__self__, "ssh_known_hosts", ssh_known_hosts)
+        if sync_interval_in_seconds is None:
+            sync_interval_in_seconds = 600
+        if sync_interval_in_seconds is not None:
+            pulumi.set(__self__, "sync_interval_in_seconds", sync_interval_in_seconds)
+        if timeout_in_seconds is None:
+            timeout_in_seconds = 600
+        if timeout_in_seconds is not None:
+            pulumi.set(__self__, "timeout_in_seconds", timeout_in_seconds)
+        if url is not None:
+            pulumi.set(__self__, "url", url)
+
+    @property
+    @pulumi.getter(name="httpsCACert")
+    def https_ca_cert(self) -> Optional[pulumi.Input[str]]:
+        """
+        Base64-encoded HTTPS certificate authority contents used to access git private git repositories over HTTPS
+        """
+        return pulumi.get(self, "https_ca_cert")
+
+    @https_ca_cert.setter
+    def https_ca_cert(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "https_ca_cert", value)
+
+    @property
+    @pulumi.getter(name="httpsUser")
+    def https_user(self) -> Optional[pulumi.Input[str]]:
+        """
+        Plaintext HTTPS username used to access private git repositories over HTTPS
+        """
+        return pulumi.get(self, "https_user")
+
+    @https_user.setter
+    def https_user(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "https_user", value)
+
+    @property
+    @pulumi.getter(name="localAuthRef")
+    def local_auth_ref(self) -> Optional[pulumi.Input[str]]:
+        """
+        Name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
+        """
+        return pulumi.get(self, "local_auth_ref")
+
+    @local_auth_ref.setter
+    def local_auth_ref(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "local_auth_ref", value)
+
+    @property
+    @pulumi.getter(name="repositoryRef")
+    def repository_ref(self) -> Optional[pulumi.Input['RepositoryRefDefinitionArgs']]:
+        """
+        The source reference for the GitRepository object.
+        """
+        return pulumi.get(self, "repository_ref")
+
+    @repository_ref.setter
+    def repository_ref(self, value: Optional[pulumi.Input['RepositoryRefDefinitionArgs']]):
+        pulumi.set(self, "repository_ref", value)
+
+    @property
+    @pulumi.getter(name="sshKnownHosts")
+    def ssh_known_hosts(self) -> Optional[pulumi.Input[str]]:
+        """
+        Base64-encoded known_hosts value containing public SSH keys required to access private git repositories over SSH
+        """
+        return pulumi.get(self, "ssh_known_hosts")
+
+    @ssh_known_hosts.setter
+    def ssh_known_hosts(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ssh_known_hosts", value)
+
+    @property
+    @pulumi.getter(name="syncIntervalInSeconds")
+    def sync_interval_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The interval at which to re-reconcile the cluster git repository source with the remote.
+        """
+        return pulumi.get(self, "sync_interval_in_seconds")
+
+    @sync_interval_in_seconds.setter
+    def sync_interval_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "sync_interval_in_seconds", value)
+
+    @property
+    @pulumi.getter(name="timeoutInSeconds")
+    def timeout_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The maximum time to attempt to reconcile the cluster git repository source with the remote.
+        """
+        return pulumi.get(self, "timeout_in_seconds")
+
+    @timeout_in_seconds.setter
+    def timeout_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "timeout_in_seconds", value)
+
+    @property
+    @pulumi.getter
+    def url(self) -> Optional[pulumi.Input[str]]:
+        """
+        The URL to sync for the flux configuration git repository.
+        """
+        return pulumi.get(self, "url")
+
+    @url.setter
+    def url(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "url", value)
+
+
+@pulumi.input_type
+class KustomizationDefinitionArgs:
+    def __init__(__self__, *,
+                 depends_on: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 force: Optional[pulumi.Input[bool]] = None,
+                 path: Optional[pulumi.Input[str]] = None,
+                 post_build: Optional[pulumi.Input['PostBuildDefinitionArgs']] = None,
+                 prune: Optional[pulumi.Input[bool]] = None,
+                 retry_interval_in_seconds: Optional[pulumi.Input[float]] = None,
+                 sync_interval_in_seconds: Optional[pulumi.Input[float]] = None,
+                 timeout_in_seconds: Optional[pulumi.Input[float]] = None,
+                 wait: Optional[pulumi.Input[bool]] = None):
+        """
+        The Kustomization defining how to reconcile the artifact pulled by the source type on the cluster.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] depends_on: Specifies other Kustomizations that this Kustomization depends on. This Kustomization will not reconcile until all dependencies have completed their reconciliation.
+        :param pulumi.Input[bool] force: Enable/disable re-creating Kubernetes resources on the cluster when patching fails due to an immutable field change.
+        :param pulumi.Input[str] path: The path in the source reference to reconcile on the cluster.
+        :param pulumi.Input['PostBuildDefinitionArgs'] post_build: Used for variable substitution for this Kustomization after kustomize build.
+        :param pulumi.Input[bool] prune: Enable/disable garbage collections of Kubernetes objects created by this Kustomization.
+        :param pulumi.Input[float] retry_interval_in_seconds: The interval at which to re-reconcile the Kustomization on the cluster in the event of failure on reconciliation.
+        :param pulumi.Input[float] sync_interval_in_seconds: The interval at which to re-reconcile the Kustomization on the cluster.
+        :param pulumi.Input[float] timeout_in_seconds: The maximum time to attempt to reconcile the Kustomization on the cluster.
+        :param pulumi.Input[bool] wait: Enable/disable health check for all Kubernetes objects created by this Kustomization.
+        """
+        if depends_on is not None:
+            pulumi.set(__self__, "depends_on", depends_on)
+        if force is None:
+            force = False
+        if force is not None:
+            pulumi.set(__self__, "force", force)
+        if path is None:
+            path = ''
+        if path is not None:
+            pulumi.set(__self__, "path", path)
+        if post_build is not None:
+            pulumi.set(__self__, "post_build", post_build)
+        if prune is None:
+            prune = False
+        if prune is not None:
+            pulumi.set(__self__, "prune", prune)
+        if retry_interval_in_seconds is not None:
+            pulumi.set(__self__, "retry_interval_in_seconds", retry_interval_in_seconds)
+        if sync_interval_in_seconds is None:
+            sync_interval_in_seconds = 600
+        if sync_interval_in_seconds is not None:
+            pulumi.set(__self__, "sync_interval_in_seconds", sync_interval_in_seconds)
+        if timeout_in_seconds is None:
+            timeout_in_seconds = 600
+        if timeout_in_seconds is not None:
+            pulumi.set(__self__, "timeout_in_seconds", timeout_in_seconds)
+        if wait is None:
+            wait = True
+        if wait is not None:
+            pulumi.set(__self__, "wait", wait)
+
+    @property
+    @pulumi.getter(name="dependsOn")
+    def depends_on(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
+        """
+        Specifies other Kustomizations that this Kustomization depends on. This Kustomization will not reconcile until all dependencies have completed their reconciliation.
+        """
+        return pulumi.get(self, "depends_on")
+
+    @depends_on.setter
+    def depends_on(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
+        pulumi.set(self, "depends_on", value)
+
+    @property
+    @pulumi.getter
+    def force(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Enable/disable re-creating Kubernetes resources on the cluster when patching fails due to an immutable field change.
+        """
+        return pulumi.get(self, "force")
+
+    @force.setter
+    def force(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "force", value)
+
+    @property
+    @pulumi.getter
+    def path(self) -> Optional[pulumi.Input[str]]:
+        """
+        The path in the source reference to reconcile on the cluster.
+        """
+        return pulumi.get(self, "path")
+
+    @path.setter
+    def path(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "path", value)
+
+    @property
+    @pulumi.getter(name="postBuild")
+    def post_build(self) -> Optional[pulumi.Input['PostBuildDefinitionArgs']]:
+        """
+        Used for variable substitution for this Kustomization after kustomize build.
+        """
+        return pulumi.get(self, "post_build")
+
+    @post_build.setter
+    def post_build(self, value: Optional[pulumi.Input['PostBuildDefinitionArgs']]):
+        pulumi.set(self, "post_build", value)
+
+    @property
+    @pulumi.getter
+    def prune(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Enable/disable garbage collections of Kubernetes objects created by this Kustomization.
+        """
+        return pulumi.get(self, "prune")
+
+    @prune.setter
+    def prune(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "prune", value)
+
+    @property
+    @pulumi.getter(name="retryIntervalInSeconds")
+    def retry_interval_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The interval at which to re-reconcile the Kustomization on the cluster in the event of failure on reconciliation.
+        """
+        return pulumi.get(self, "retry_interval_in_seconds")
+
+    @retry_interval_in_seconds.setter
+    def retry_interval_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "retry_interval_in_seconds", value)
+
+    @property
+    @pulumi.getter(name="syncIntervalInSeconds")
+    def sync_interval_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The interval at which to re-reconcile the Kustomization on the cluster.
+        """
+        return pulumi.get(self, "sync_interval_in_seconds")
+
+    @sync_interval_in_seconds.setter
+    def sync_interval_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "sync_interval_in_seconds", value)
+
+    @property
+    @pulumi.getter(name="timeoutInSeconds")
+    def timeout_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The maximum time to attempt to reconcile the Kustomization on the cluster.
+        """
+        return pulumi.get(self, "timeout_in_seconds")
+
+    @timeout_in_seconds.setter
+    def timeout_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "timeout_in_seconds", value)
+
+    @property
+    @pulumi.getter
+    def wait(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Enable/disable health check for all Kubernetes objects created by this Kustomization.
+        """
+        return pulumi.get(self, "wait")
+
+    @wait.setter
+    def wait(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "wait", value)
+
+
+@pulumi.input_type
+class LayerSelectorDefinitionArgs:
+    def __init__(__self__, *,
+                 media_type: Optional[pulumi.Input[str]] = None,
+                 operation: Optional[pulumi.Input[Union[str, 'OperationType']]] = None):
+        """
+        Parameters to specify which layer to pull from the OCI artifact. By default, the first layer in the artifact is pulled.
+        :param pulumi.Input[str] media_type: The first layer matching the specified media type will be used.
+        :param pulumi.Input[Union[str, 'OperationType']] operation: The operation to be performed on the selected layer. The default value is 'extract', but it can be set to 'copy'.
+        """
+        if media_type is not None:
+            pulumi.set(__self__, "media_type", media_type)
+        if operation is not None:
+            pulumi.set(__self__, "operation", operation)
+
+    @property
+    @pulumi.getter(name="mediaType")
+    def media_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        The first layer matching the specified media type will be used.
+        """
+        return pulumi.get(self, "media_type")
+
+    @media_type.setter
+    def media_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "media_type", value)
+
+    @property
+    @pulumi.getter
+    def operation(self) -> Optional[pulumi.Input[Union[str, 'OperationType']]]:
+        """
+        The operation to be performed on the selected layer. The default value is 'extract', but it can be set to 'copy'.
+        """
+        return pulumi.get(self, "operation")
+
+    @operation.setter
+    def operation(self, value: Optional[pulumi.Input[Union[str, 'OperationType']]]):
+        pulumi.set(self, "operation", value)
+
+
+@pulumi.input_type
+class ManagedIdentityDefinitionArgs:
+    def __init__(__self__, *,
+                 client_id: Optional[pulumi.Input[str]] = None):
+        """
+        Parameters to authenticate using a Managed Identity.
+        :param pulumi.Input[str] client_id: The client Id for authenticating a Managed Identity.
+        """
+        if client_id is not None:
+            pulumi.set(__self__, "client_id", client_id)
+
+    @property
+    @pulumi.getter(name="clientId")
+    def client_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The client Id for authenticating a Managed Identity.
+        """
+        return pulumi.get(self, "client_id")
+
+    @client_id.setter
+    def client_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "client_id", value)
+
+
+@pulumi.input_type
+class MatchOidcIdentityDefinitionArgs:
+    def __init__(__self__, *,
+                 issuer: Optional[pulumi.Input[str]] = None,
+                 subject: Optional[pulumi.Input[str]] = None):
+        """
+        MatchOIDCIdentity defines the criteria for matching the identity while verifying an OCI artifact.
+        :param pulumi.Input[str] issuer: The regex pattern to match against to verify the OIDC issuer.
+        :param pulumi.Input[str] subject: The regex pattern to match against to verify the identity subject.
+        """
+        if issuer is not None:
+            pulumi.set(__self__, "issuer", issuer)
+        if subject is not None:
+            pulumi.set(__self__, "subject", subject)
+
+    @property
+    @pulumi.getter
+    def issuer(self) -> Optional[pulumi.Input[str]]:
+        """
+        The regex pattern to match against to verify the OIDC issuer.
+        """
+        return pulumi.get(self, "issuer")
+
+    @issuer.setter
+    def issuer(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "issuer", value)
+
+    @property
+    @pulumi.getter
+    def subject(self) -> Optional[pulumi.Input[str]]:
+        """
+        The regex pattern to match against to verify the identity subject.
+        """
+        return pulumi.get(self, "subject")
+
+    @subject.setter
+    def subject(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "subject", value)
+
+
+@pulumi.input_type
+class OCIRepositoryDefinitionArgs:
+    def __init__(__self__, *,
+                 insecure: Optional[pulumi.Input[bool]] = None,
+                 layer_selector: Optional[pulumi.Input['LayerSelectorDefinitionArgs']] = None,
+                 local_auth_ref: Optional[pulumi.Input[str]] = None,
+                 repository_ref: Optional[pulumi.Input['OCIRepositoryRefDefinitionArgs']] = None,
+                 service_account_name: Optional[pulumi.Input[str]] = None,
+                 sync_interval_in_seconds: Optional[pulumi.Input[float]] = None,
+                 timeout_in_seconds: Optional[pulumi.Input[float]] = None,
+                 tls_config: Optional[pulumi.Input['TlsConfigDefinitionArgs']] = None,
+                 url: Optional[pulumi.Input[str]] = None,
+                 use_workload_identity: Optional[pulumi.Input[bool]] = None,
+                 verify: Optional[pulumi.Input['VerifyDefinitionArgs']] = None):
+        """
+        Parameters to reconcile to the OCIRepository source kind type.
+        :param pulumi.Input[bool] insecure: Specify whether to allow connecting to a non-TLS HTTP container registry.
+        :param pulumi.Input['LayerSelectorDefinitionArgs'] layer_selector: The layer to be pulled from the OCI artifact.
+        :param pulumi.Input[str] local_auth_ref: Name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
+        :param pulumi.Input['OCIRepositoryRefDefinitionArgs'] repository_ref: The source reference for the OCIRepository object.
+        :param pulumi.Input[str] service_account_name: The service account name to authenticate with the OCI repository.
+        :param pulumi.Input[float] sync_interval_in_seconds: The interval at which to re-reconcile the cluster OCI repository source with the remote.
+        :param pulumi.Input[float] timeout_in_seconds: The maximum time to attempt to reconcile the cluster OCI repository source with the remote.
+        :param pulumi.Input['TlsConfigDefinitionArgs'] tls_config: Parameters to authenticate using TLS config for OCI repository.
+        :param pulumi.Input[str] url: The URL to sync for the flux configuration OCI repository.
+        :param pulumi.Input[bool] use_workload_identity: Specifies whether to use Workload Identity to authenticate with the OCI repository.
+        :param pulumi.Input['VerifyDefinitionArgs'] verify: Verification of the authenticity of an OCI Artifact.
+        """
+        if insecure is None:
+            insecure = False
+        if insecure is not None:
+            pulumi.set(__self__, "insecure", insecure)
+        if layer_selector is not None:
+            pulumi.set(__self__, "layer_selector", layer_selector)
+        if local_auth_ref is not None:
+            pulumi.set(__self__, "local_auth_ref", local_auth_ref)
+        if repository_ref is not None:
+            pulumi.set(__self__, "repository_ref", repository_ref)
+        if service_account_name is not None:
+            pulumi.set(__self__, "service_account_name", service_account_name)
+        if sync_interval_in_seconds is None:
+            sync_interval_in_seconds = 600
+        if sync_interval_in_seconds is not None:
+            pulumi.set(__self__, "sync_interval_in_seconds", sync_interval_in_seconds)
+        if timeout_in_seconds is None:
+            timeout_in_seconds = 600
+        if timeout_in_seconds is not None:
+            pulumi.set(__self__, "timeout_in_seconds", timeout_in_seconds)
+        if tls_config is not None:
+            pulumi.set(__self__, "tls_config", tls_config)
+        if url is not None:
+            pulumi.set(__self__, "url", url)
+        if use_workload_identity is None:
+            use_workload_identity = False
+        if use_workload_identity is not None:
+            pulumi.set(__self__, "use_workload_identity", use_workload_identity)
+        if verify is not None:
+            pulumi.set(__self__, "verify", verify)
+
+    @property
+    @pulumi.getter
+    def insecure(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Specify whether to allow connecting to a non-TLS HTTP container registry.
+        """
+        return pulumi.get(self, "insecure")
+
+    @insecure.setter
+    def insecure(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "insecure", value)
+
+    @property
+    @pulumi.getter(name="layerSelector")
+    def layer_selector(self) -> Optional[pulumi.Input['LayerSelectorDefinitionArgs']]:
+        """
+        The layer to be pulled from the OCI artifact.
+        """
+        return pulumi.get(self, "layer_selector")
+
+    @layer_selector.setter
+    def layer_selector(self, value: Optional[pulumi.Input['LayerSelectorDefinitionArgs']]):
+        pulumi.set(self, "layer_selector", value)
+
+    @property
+    @pulumi.getter(name="localAuthRef")
+    def local_auth_ref(self) -> Optional[pulumi.Input[str]]:
+        """
+        Name of a local secret on the Kubernetes cluster to use as the authentication secret rather than the managed or user-provided configuration secrets.
+        """
+        return pulumi.get(self, "local_auth_ref")
+
+    @local_auth_ref.setter
+    def local_auth_ref(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "local_auth_ref", value)
+
+    @property
+    @pulumi.getter(name="repositoryRef")
+    def repository_ref(self) -> Optional[pulumi.Input['OCIRepositoryRefDefinitionArgs']]:
+        """
+        The source reference for the OCIRepository object.
+        """
+        return pulumi.get(self, "repository_ref")
+
+    @repository_ref.setter
+    def repository_ref(self, value: Optional[pulumi.Input['OCIRepositoryRefDefinitionArgs']]):
+        pulumi.set(self, "repository_ref", value)
+
+    @property
+    @pulumi.getter(name="serviceAccountName")
+    def service_account_name(self) -> Optional[pulumi.Input[str]]:
+        """
+        The service account name to authenticate with the OCI repository.
+        """
+        return pulumi.get(self, "service_account_name")
+
+    @service_account_name.setter
+    def service_account_name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "service_account_name", value)
+
+    @property
+    @pulumi.getter(name="syncIntervalInSeconds")
+    def sync_interval_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The interval at which to re-reconcile the cluster OCI repository source with the remote.
+        """
+        return pulumi.get(self, "sync_interval_in_seconds")
+
+    @sync_interval_in_seconds.setter
+    def sync_interval_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "sync_interval_in_seconds", value)
+
+    @property
+    @pulumi.getter(name="timeoutInSeconds")
+    def timeout_in_seconds(self) -> Optional[pulumi.Input[float]]:
+        """
+        The maximum time to attempt to reconcile the cluster OCI repository source with the remote.
+        """
+        return pulumi.get(self, "timeout_in_seconds")
+
+    @timeout_in_seconds.setter
+    def timeout_in_seconds(self, value: Optional[pulumi.Input[float]]):
+        pulumi.set(self, "timeout_in_seconds", value)
+
+    @property
+    @pulumi.getter(name="tlsConfig")
+    def tls_config(self) -> Optional[pulumi.Input['TlsConfigDefinitionArgs']]:
+        """
+        Parameters to authenticate using TLS config for OCI repository.
+        """
+        return pulumi.get(self, "tls_config")
+
+    @tls_config.setter
+    def tls_config(self, value: Optional[pulumi.Input['TlsConfigDefinitionArgs']]):
+        pulumi.set(self, "tls_config", value)
+
+    @property
+    @pulumi.getter
+    def url(self) -> Optional[pulumi.Input[str]]:
+        """
+        The URL to sync for the flux configuration OCI repository.
+        """
+        return pulumi.get(self, "url")
+
+    @url.setter
+    def url(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "url", value)
+
+    @property
+    @pulumi.getter(name="useWorkloadIdentity")
+    def use_workload_identity(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Specifies whether to use Workload Identity to authenticate with the OCI repository.
+        """
+        return pulumi.get(self, "use_workload_identity")
+
+    @use_workload_identity.setter
+    def use_workload_identity(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "use_workload_identity", value)
+
+    @property
+    @pulumi.getter
+    def verify(self) -> Optional[pulumi.Input['VerifyDefinitionArgs']]:
+        """
+        Verification of the authenticity of an OCI Artifact.
+        """
+        return pulumi.get(self, "verify")
+
+    @verify.setter
+    def verify(self, value: Optional[pulumi.Input['VerifyDefinitionArgs']]):
+        pulumi.set(self, "verify", value)
+
+
+@pulumi.input_type
+class OCIRepositoryRefDefinitionArgs:
+    def __init__(__self__, *,
+                 digest: Optional[pulumi.Input[str]] = None,
+                 semver: Optional[pulumi.Input[str]] = None,
+                 tag: Optional[pulumi.Input[str]] = None):
+        """
+        The source reference for the OCIRepository object.
+        :param pulumi.Input[str] digest: The image digest to pull from OCI repository, the value should be in the format ‘sha256:’. This takes precedence over semver.
+        :param pulumi.Input[str] semver: The semver range used to match against OCI repository tags. This takes precedence over tag.
+        :param pulumi.Input[str] tag: The OCI repository image tag name to pull. This defaults to 'latest'.
+        """
+        if digest is not None:
+            pulumi.set(__self__, "digest", digest)
+        if semver is not None:
+            pulumi.set(__self__, "semver", semver)
+        if tag is not None:
+            pulumi.set(__self__, "tag", tag)
+
+    @property
+    @pulumi.getter
+    def digest(self) -> Optional[pulumi.Input[str]]:
+        """
+        The image digest to pull from OCI repository, the value should be in the format ‘sha256:’. This takes precedence over semver.
+        """
+        return pulumi.get(self, "digest")
+
+    @digest.setter
+    def digest(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "digest", value)
+
+    @property
+    @pulumi.getter
+    def semver(self) -> Optional[pulumi.Input[str]]:
+        """
+        The semver range used to match against OCI repository tags. This takes precedence over tag.
+        """
+        return pulumi.get(self, "semver")
+
+    @semver.setter
+    def semver(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "semver", value)
+
+    @property
+    @pulumi.getter
+    def tag(self) -> Optional[pulumi.Input[str]]:
+        """
+        The OCI repository image tag name to pull. This defaults to 'latest'.
+        """
+        return pulumi.get(self, "tag")
+
+    @tag.setter
+    def tag(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "tag", value)
+
+
+@pulumi.input_type
+class PostBuildDefinitionArgs:
+    def __init__(__self__, *,
+                 substitute: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
+                 substitute_from: Optional[pulumi.Input[Sequence[pulumi.Input['SubstituteFromDefinitionArgs']]]] = None):
+        """
+        The postBuild definitions defining variable substitutions for this Kustomization after kustomize build.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] substitute: Key/value pairs holding the variables to be substituted in this Kustomization.
+        :param pulumi.Input[Sequence[pulumi.Input['SubstituteFromDefinitionArgs']]] substitute_from: Array of ConfigMaps/Secrets from which the variables are substituted for this Kustomization.
+        """
+        if substitute is not None:
+            pulumi.set(__self__, "substitute", substitute)
+        if substitute_from is not None:
+            pulumi.set(__self__, "substitute_from", substitute_from)
+
+    @property
+    @pulumi.getter
+    def substitute(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        Key/value pairs holding the variables to be substituted in this Kustomization.
+        """
+        return pulumi.get(self, "substitute")
+
+    @substitute.setter
+    def substitute(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "substitute", value)
+
+    @property
+    @pulumi.getter(name="substituteFrom")
+    def substitute_from(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['SubstituteFromDefinitionArgs']]]]:
+        """
+        Array of ConfigMaps/Secrets from which the variables are substituted for this Kustomization.
+        """
+        return pulumi.get(self, "substitute_from")
+
+    @substitute_from.setter
+    def substitute_from(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['SubstituteFromDefinitionArgs']]]]):
+        pulumi.set(self, "substitute_from", value)
+
+
+@pulumi.input_type
+class RepositoryRefDefinitionArgs:
+    def __init__(__self__, *,
+                 branch: Optional[pulumi.Input[str]] = None,
+                 commit: Optional[pulumi.Input[str]] = None,
+                 semver: Optional[pulumi.Input[str]] = None,
+                 tag: Optional[pulumi.Input[str]] = None):
+        """
+        The source reference for the GitRepository object.
+        :param pulumi.Input[str] branch: The git repository branch name to checkout.
+        :param pulumi.Input[str] commit: The commit SHA to checkout. This value must be combined with the branch name to be valid. This takes precedence over semver.
+        :param pulumi.Input[str] semver: The semver range used to match against git repository tags. This takes precedence over tag.
+        :param pulumi.Input[str] tag: The git repository tag name to checkout. This takes precedence over branch.
+        """
+        if branch is not None:
+            pulumi.set(__self__, "branch", branch)
+        if commit is not None:
+            pulumi.set(__self__, "commit", commit)
+        if semver is not None:
+            pulumi.set(__self__, "semver", semver)
+        if tag is not None:
+            pulumi.set(__self__, "tag", tag)
+
+    @property
+    @pulumi.getter
+    def branch(self) -> Optional[pulumi.Input[str]]:
+        """
+        The git repository branch name to checkout.
+        """
+        return pulumi.get(self, "branch")
+
+    @branch.setter
+    def branch(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "branch", value)
+
+    @property
+    @pulumi.getter
+    def commit(self) -> Optional[pulumi.Input[str]]:
+        """
+        The commit SHA to checkout. This value must be combined with the branch name to be valid. This takes precedence over semver.
+        """
+        return pulumi.get(self, "commit")
+
+    @commit.setter
+    def commit(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "commit", value)
+
+    @property
+    @pulumi.getter
+    def semver(self) -> Optional[pulumi.Input[str]]:
+        """
+        The semver range used to match against git repository tags. This takes precedence over tag.
+        """
+        return pulumi.get(self, "semver")
+
+    @semver.setter
+    def semver(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "semver", value)
+
+    @property
+    @pulumi.getter
+    def tag(self) -> Optional[pulumi.Input[str]]:
+        """
+        The git repository tag name to checkout. This takes precedence over branch.
+        """
+        return pulumi.get(self, "tag")
+
+    @tag.setter
+    def tag(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "tag", value)
+
+
+@pulumi.input_type
+class ServicePrincipalDefinitionArgs:
+    def __init__(__self__, *,
+                 client_certificate: Optional[pulumi.Input[str]] = None,
+                 client_certificate_password: Optional[pulumi.Input[str]] = None,
+                 client_certificate_send_chain: Optional[pulumi.Input[bool]] = None,
+                 client_id: Optional[pulumi.Input[str]] = None,
+                 client_secret: Optional[pulumi.Input[str]] = None,
+                 tenant_id: Optional[pulumi.Input[str]] = None):
+        """
+        Parameters to authenticate using Service Principal.
+        :param pulumi.Input[str] client_certificate: Base64-encoded certificate used to authenticate a Service Principal 
+        :param pulumi.Input[str] client_certificate_password: The password for the certificate used to authenticate a Service Principal 
+        :param pulumi.Input[bool] client_certificate_send_chain: Specifies whether to include x5c header in client claims when acquiring a token to enable subject name / issuer based authentication for the Client Certificate
+        :param pulumi.Input[str] client_id: The client Id for authenticating a Service Principal.
+        :param pulumi.Input[str] client_secret: The client secret for authenticating a Service Principal
+        :param pulumi.Input[str] tenant_id: The tenant Id for authenticating a Service Principal
+        """
+        if client_certificate is not None:
+            pulumi.set(__self__, "client_certificate", client_certificate)
+        if client_certificate_password is not None:
+            pulumi.set(__self__, "client_certificate_password", client_certificate_password)
+        if client_certificate_send_chain is None:
+            client_certificate_send_chain = False
+        if client_certificate_send_chain is not None:
+            pulumi.set(__self__, "client_certificate_send_chain", client_certificate_send_chain)
+        if client_id is not None:
+            pulumi.set(__self__, "client_id", client_id)
+        if client_secret is not None:
+            pulumi.set(__self__, "client_secret", client_secret)
+        if tenant_id is not None:
+            pulumi.set(__self__, "tenant_id", tenant_id)
+
+    @property
+    @pulumi.getter(name="clientCertificate")
+    def client_certificate(self) -> Optional[pulumi.Input[str]]:
+        """
+        Base64-encoded certificate used to authenticate a Service Principal 
+        """
+        return pulumi.get(self, "client_certificate")
+
+    @client_certificate.setter
+    def client_certificate(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "client_certificate", value)
+
+    @property
+    @pulumi.getter(name="clientCertificatePassword")
+    def client_certificate_password(self) -> Optional[pulumi.Input[str]]:
+        """
+        The password for the certificate used to authenticate a Service Principal 
+        """
+        return pulumi.get(self, "client_certificate_password")
+
+    @client_certificate_password.setter
+    def client_certificate_password(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "client_certificate_password", value)
+
+    @property
+    @pulumi.getter(name="clientCertificateSendChain")
+    def client_certificate_send_chain(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Specifies whether to include x5c header in client claims when acquiring a token to enable subject name / issuer based authentication for the Client Certificate
+        """
+        return pulumi.get(self, "client_certificate_send_chain")
+
+    @client_certificate_send_chain.setter
+    def client_certificate_send_chain(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "client_certificate_send_chain", value)
+
+    @property
+    @pulumi.getter(name="clientId")
+    def client_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The client Id for authenticating a Service Principal.
+        """
+        return pulumi.get(self, "client_id")
+
+    @client_id.setter
+    def client_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "client_id", value)
+
+    @property
+    @pulumi.getter(name="clientSecret")
+    def client_secret(self) -> Optional[pulumi.Input[str]]:
+        """
+        The client secret for authenticating a Service Principal
+        """
+        return pulumi.get(self, "client_secret")
+
+    @client_secret.setter
+    def client_secret(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "client_secret", value)
+
+    @property
+    @pulumi.getter(name="tenantId")
+    def tenant_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The tenant Id for authenticating a Service Principal
+        """
+        return pulumi.get(self, "tenant_id")
+
+    @tenant_id.setter
+    def tenant_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "tenant_id", value)
+
+
+@pulumi.input_type
+class SubstituteFromDefinitionArgs:
+    def __init__(__self__, *,
+                 kind: Optional[pulumi.Input[str]] = None,
+                 name: Optional[pulumi.Input[str]] = None,
+                 optional: Optional[pulumi.Input[bool]] = None):
+        """
+        Array of ConfigMaps/Secrets from which the variables are substituted for this Kustomization.
+        :param pulumi.Input[str] kind: Define whether it is ConfigMap or Secret that holds the variables to be used in substitution.
+        :param pulumi.Input[str] name: Name of the ConfigMap/Secret that holds the variables to be used in substitution.
+        :param pulumi.Input[bool] optional: Set to True to proceed without ConfigMap/Secret, if it is not present.
+        """
+        if kind is not None:
+            pulumi.set(__self__, "kind", kind)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if optional is None:
+            optional = False
+        if optional is not None:
+            pulumi.set(__self__, "optional", optional)
+
+    @property
+    @pulumi.getter
+    def kind(self) -> Optional[pulumi.Input[str]]:
+        """
+        Define whether it is ConfigMap or Secret that holds the variables to be used in substitution.
+        """
+        return pulumi.get(self, "kind")
+
+    @kind.setter
+    def kind(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "kind", value)
+
+    @property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[str]]:
+        """
+        Name of the ConfigMap/Secret that holds the variables to be used in substitution.
+        """
+        return pulumi.get(self, "name")
+
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "name", value)
+
+    @property
+    @pulumi.getter
+    def optional(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Set to True to proceed without ConfigMap/Secret, if it is not present.
+        """
+        return pulumi.get(self, "optional")
+
+    @optional.setter
+    def optional(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "optional", value)
+
+
+@pulumi.input_type
+class TlsConfigDefinitionArgs:
+    def __init__(__self__, *,
+                 ca_certificate: Optional[pulumi.Input[str]] = None,
+                 client_certificate: Optional[pulumi.Input[str]] = None,
+                 private_key: Optional[pulumi.Input[str]] = None):
+        """
+        Parameters to authenticate using TLS config for OCI repository.
+        :param pulumi.Input[str] ca_certificate: Base64-encoded CA certificate used to verify the server.
+        :param pulumi.Input[str] client_certificate: Base64-encoded certificate used to authenticate a client with the OCI repository.
+        :param pulumi.Input[str] private_key: Base64-encoded private key used to authenticate a client with the OCI repository.
+        """
+        if ca_certificate is not None:
+            pulumi.set(__self__, "ca_certificate", ca_certificate)
+        if client_certificate is not None:
+            pulumi.set(__self__, "client_certificate", client_certificate)
+        if private_key is not None:
+            pulumi.set(__self__, "private_key", private_key)
+
+    @property
+    @pulumi.getter(name="caCertificate")
+    def ca_certificate(self) -> Optional[pulumi.Input[str]]:
+        """
+        Base64-encoded CA certificate used to verify the server.
+        """
+        return pulumi.get(self, "ca_certificate")
+
+    @ca_certificate.setter
+    def ca_certificate(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "ca_certificate", value)
+
+    @property
+    @pulumi.getter(name="clientCertificate")
+    def client_certificate(self) -> Optional[pulumi.Input[str]]:
+        """
+        Base64-encoded certificate used to authenticate a client with the OCI repository.
+        """
+        return pulumi.get(self, "client_certificate")
+
+    @client_certificate.setter
+    def client_certificate(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "client_certificate", value)
+
+    @property
+    @pulumi.getter(name="privateKey")
+    def private_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        Base64-encoded private key used to authenticate a client with the OCI repository.
+        """
+        return pulumi.get(self, "private_key")
+
+    @private_key.setter
+    def private_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "private_key", value)
+
+
+@pulumi.input_type
+class VerifyDefinitionArgs:
+    def __init__(__self__, *,
+                 match_oidc_identity: Optional[pulumi.Input[Sequence[pulumi.Input['MatchOidcIdentityDefinitionArgs']]]] = None,
+                 provider: Optional[pulumi.Input[str]] = None,
+                 verification_config: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None):
+        """
+        Parameters to verify the authenticity of an OCI Artifact.
+        :param pulumi.Input[Sequence[pulumi.Input['MatchOidcIdentityDefinitionArgs']]] match_oidc_identity: Array defining the criteria for matching the identity while verifying an OCI artifact.
+        :param pulumi.Input[str] provider: Verification provider name.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] verification_config: An object containing trusted public keys of trusted authors.
+        """
+        if match_oidc_identity is not None:
+            pulumi.set(__self__, "match_oidc_identity", match_oidc_identity)
+        if provider is not None:
+            pulumi.set(__self__, "provider", provider)
+        if verification_config is not None:
+            pulumi.set(__self__, "verification_config", verification_config)
+
+    @property
+    @pulumi.getter(name="matchOidcIdentity")
+    def match_oidc_identity(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['MatchOidcIdentityDefinitionArgs']]]]:
+        """
+        Array defining the criteria for matching the identity while verifying an OCI artifact.
+        """
+        return pulumi.get(self, "match_oidc_identity")
+
+    @match_oidc_identity.setter
+    def match_oidc_identity(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['MatchOidcIdentityDefinitionArgs']]]]):
+        pulumi.set(self, "match_oidc_identity", value)
+
+    @property
+    @pulumi.getter
+    def provider(self) -> Optional[pulumi.Input[str]]:
+        """
+        Verification provider name.
+        """
+        return pulumi.get(self, "provider")
+
+    @provider.setter
+    def provider(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "provider", value)
+
+    @property
+    @pulumi.getter(name="verificationConfig")
+    def verification_config(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
+        """
+        An object containing trusted public keys of trusted authors.
+        """
+        return pulumi.get(self, "verification_config")
+
+    @verification_config.setter
+    def verification_config(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
+        pulumi.set(self, "verification_config", value)
+
+