pulumi-kubernetes 4.22.1__py3-none-any.whl → 4.23.0__py3-none-any.whl

pulumi_kubernetes/rbac/v1/outputs.py

@@ -2,6 +2,7 @@
 # *** WARNING: this file was generated by pulumigen. ***
 # *** Do not edit by hand unless you're certain you know what you are doing! ***
 
+import builtins
 import copy
 import warnings
 import sys
@@ -137,15 +138,15 @@ class ClusterRole(dict):
 
     def __init__(__self__, *,
                  aggregation_rule: Optional['outputs.AggregationRule'] = None,
-                 api_version: Optional[str] = None,
-                 kind: Optional[str] = None,
+                 api_version: Optional[builtins.str] = None,
+                 kind: Optional[builtins.str] = None,
                  metadata: Optional['_meta.v1.outputs.ObjectMeta'] = None,
                  rules: Optional[Sequence['outputs.PolicyRule']] = None):
         """
         ClusterRole is a cluster level, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding or ClusterRoleBinding.
         :param 'AggregationRuleArgs' aggregation_rule: AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.
-        :param str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-        :param str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+        :param builtins.str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+        :param builtins.str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         :param '_meta.v1.ObjectMetaArgs' metadata: Standard object's metadata.
         :param Sequence['PolicyRuleArgs'] rules: Rules holds all the PolicyRules for this ClusterRole
         """
@@ -170,7 +171,7 @@ class ClusterRole(dict):
 
     @property
     @pulumi.getter(name="apiVersion")
-    def api_version(self) -> Optional[str]:
+    def api_version(self) -> Optional[builtins.str]:
         """
         APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
         """
@@ -178,7 +179,7 @@ class ClusterRole(dict):
 
     @property
     @pulumi.getter
-    def kind(self) -> Optional[str]:
+    def kind(self) -> Optional[builtins.str]:
         """
         Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         """
@@ -227,15 +228,15 @@ class ClusterRoleBinding(dict):
 
     def __init__(__self__, *,
                  role_ref: 'outputs.RoleRef',
-                 api_version: Optional[str] = None,
-                 kind: Optional[str] = None,
+                 api_version: Optional[builtins.str] = None,
+                 kind: Optional[builtins.str] = None,
                  metadata: Optional['_meta.v1.outputs.ObjectMeta'] = None,
                  subjects: Optional[Sequence['outputs.Subject']] = None):
         """
         ClusterRoleBinding references a ClusterRole, but not contain it.  It can reference a ClusterRole in the global namespace, and adds who information via Subject.
         :param 'RoleRefArgs' role_ref: RoleRef can only reference a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable.
-        :param str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-        :param str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+        :param builtins.str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+        :param builtins.str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         :param '_meta.v1.ObjectMetaArgs' metadata: Standard object's metadata.
         :param Sequence['SubjectArgs'] subjects: Subjects holds references to the objects the role applies to.
         """
@@ -259,7 +260,7 @@ class ClusterRoleBinding(dict):
 
     @property
     @pulumi.getter(name="apiVersion")
-    def api_version(self) -> Optional[str]:
+    def api_version(self) -> Optional[builtins.str]:
         """
         APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
         """
@@ -267,7 +268,7 @@ class ClusterRoleBinding(dict):
 
     @property
     @pulumi.getter
-    def kind(self) -> Optional[str]:
+    def kind(self) -> Optional[builtins.str]:
         """
         Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         """
@@ -317,18 +318,18 @@ class PolicyRule(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 verbs: Sequence[str],
-                 api_groups: Optional[Sequence[str]] = None,
-                 non_resource_urls: Optional[Sequence[str]] = None,
-                 resource_names: Optional[Sequence[str]] = None,
-                 resources: Optional[Sequence[str]] = None):
+                 verbs: Sequence[builtins.str],
+                 api_groups: Optional[Sequence[builtins.str]] = None,
+                 non_resource_urls: Optional[Sequence[builtins.str]] = None,
+                 resource_names: Optional[Sequence[builtins.str]] = None,
+                 resources: Optional[Sequence[builtins.str]] = None):
         """
         PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.
-        :param Sequence[str] verbs: Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
-        :param Sequence[str] api_groups: APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
-        :param Sequence[str] non_resource_urls: NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
-        :param Sequence[str] resource_names: ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
-        :param Sequence[str] resources: Resources is a list of resources this rule applies to. '*' represents all resources.
+        :param Sequence[builtins.str] verbs: Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
+        :param Sequence[builtins.str] api_groups: APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
+        :param Sequence[builtins.str] non_resource_urls: NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
+        :param Sequence[builtins.str] resource_names: ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
+        :param Sequence[builtins.str] resources: Resources is a list of resources this rule applies to. '*' represents all resources.
         """
         pulumi.set(__self__, "verbs", verbs)
         if api_groups is not None:
@@ -342,7 +343,7 @@ class PolicyRule(dict):
 
     @property
     @pulumi.getter
-    def verbs(self) -> Sequence[str]:
+    def verbs(self) -> Sequence[builtins.str]:
         """
         Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
         """
@@ -350,7 +351,7 @@ class PolicyRule(dict):
 
     @property
     @pulumi.getter(name="apiGroups")
-    def api_groups(self) -> Optional[Sequence[str]]:
+    def api_groups(self) -> Optional[Sequence[builtins.str]]:
         """
         APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
         """
@@ -358,7 +359,7 @@ class PolicyRule(dict):
 
     @property
     @pulumi.getter(name="nonResourceURLs")
-    def non_resource_urls(self) -> Optional[Sequence[str]]:
+    def non_resource_urls(self) -> Optional[Sequence[builtins.str]]:
         """
         NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
         """
@@ -366,7 +367,7 @@ class PolicyRule(dict):
 
     @property
     @pulumi.getter(name="resourceNames")
-    def resource_names(self) -> Optional[Sequence[str]]:
+    def resource_names(self) -> Optional[Sequence[builtins.str]]:
         """
         ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
         """
@@ -374,7 +375,7 @@ class PolicyRule(dict):
 
     @property
     @pulumi.getter
-    def resources(self) -> Optional[Sequence[str]]:
+    def resources(self) -> Optional[Sequence[builtins.str]]:
         """
         Resources is a list of resources this rule applies to. '*' represents all resources.
         """
@@ -408,18 +409,18 @@ class PolicyRulePatch(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 api_groups: Optional[Sequence[str]] = None,
-                 non_resource_urls: Optional[Sequence[str]] = None,
-                 resource_names: Optional[Sequence[str]] = None,
-                 resources: Optional[Sequence[str]] = None,
-                 verbs: Optional[Sequence[str]] = None):
+                 api_groups: Optional[Sequence[builtins.str]] = None,
+                 non_resource_urls: Optional[Sequence[builtins.str]] = None,
+                 resource_names: Optional[Sequence[builtins.str]] = None,
+                 resources: Optional[Sequence[builtins.str]] = None,
+                 verbs: Optional[Sequence[builtins.str]] = None):
         """
         PolicyRule holds information that describes a policy rule, but does not contain information about who the rule applies to or which namespace the rule applies to.
-        :param Sequence[str] api_groups: APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
-        :param Sequence[str] non_resource_urls: NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
-        :param Sequence[str] resource_names: ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
-        :param Sequence[str] resources: Resources is a list of resources this rule applies to. '*' represents all resources.
-        :param Sequence[str] verbs: Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
+        :param Sequence[builtins.str] api_groups: APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
+        :param Sequence[builtins.str] non_resource_urls: NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
+        :param Sequence[builtins.str] resource_names: ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
+        :param Sequence[builtins.str] resources: Resources is a list of resources this rule applies to. '*' represents all resources.
+        :param Sequence[builtins.str] verbs: Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
         """
         if api_groups is not None:
             pulumi.set(__self__, "api_groups", api_groups)
@@ -434,7 +435,7 @@ class PolicyRulePatch(dict):
 
     @property
     @pulumi.getter(name="apiGroups")
-    def api_groups(self) -> Optional[Sequence[str]]:
+    def api_groups(self) -> Optional[Sequence[builtins.str]]:
         """
         APIGroups is the name of the APIGroup that contains the resources.  If multiple API groups are specified, any action requested against one of the enumerated resources in any API group will be allowed. "" represents the core API group and "*" represents all API groups.
         """
@@ -442,7 +443,7 @@ class PolicyRulePatch(dict):
 
     @property
     @pulumi.getter(name="nonResourceURLs")
-    def non_resource_urls(self) -> Optional[Sequence[str]]:
+    def non_resource_urls(self) -> Optional[Sequence[builtins.str]]:
         """
         NonResourceURLs is a set of partial urls that a user should have access to.  *s are allowed, but only as the full, final step in the path Since non-resource URLs are not namespaced, this field is only applicable for ClusterRoles referenced from a ClusterRoleBinding. Rules can either apply to API resources (such as "pods" or "secrets") or non-resource URL paths (such as "/api"),  but not both.
         """
@@ -450,7 +451,7 @@ class PolicyRulePatch(dict):
 
     @property
     @pulumi.getter(name="resourceNames")
-    def resource_names(self) -> Optional[Sequence[str]]:
+    def resource_names(self) -> Optional[Sequence[builtins.str]]:
         """
         ResourceNames is an optional white list of names that the rule applies to.  An empty set means that everything is allowed.
         """
@@ -458,7 +459,7 @@ class PolicyRulePatch(dict):
 
     @property
     @pulumi.getter
-    def resources(self) -> Optional[Sequence[str]]:
+    def resources(self) -> Optional[Sequence[builtins.str]]:
         """
         Resources is a list of resources this rule applies to. '*' represents all resources.
         """
@@ -466,7 +467,7 @@ class PolicyRulePatch(dict):
 
     @property
     @pulumi.getter
-    def verbs(self) -> Optional[Sequence[str]]:
+    def verbs(self) -> Optional[Sequence[builtins.str]]:
         """
         Verbs is a list of Verbs that apply to ALL the ResourceKinds contained in this rule. '*' represents all verbs.
         """
@@ -496,14 +497,14 @@ class Role(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 api_version: Optional[str] = None,
-                 kind: Optional[str] = None,
+                 api_version: Optional[builtins.str] = None,
+                 kind: Optional[builtins.str] = None,
                  metadata: Optional['_meta.v1.outputs.ObjectMeta'] = None,
                  rules: Optional[Sequence['outputs.PolicyRule']] = None):
         """
         Role is a namespaced, logical grouping of PolicyRules that can be referenced as a unit by a RoleBinding.
-        :param str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-        :param str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+        :param builtins.str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+        :param builtins.str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         :param '_meta.v1.ObjectMetaArgs' metadata: Standard object's metadata.
         :param Sequence['PolicyRuleArgs'] rules: Rules holds all the PolicyRules for this Role
         """
@@ -518,7 +519,7 @@ class Role(dict):
 
     @property
     @pulumi.getter(name="apiVersion")
-    def api_version(self) -> Optional[str]:
+    def api_version(self) -> Optional[builtins.str]:
         """
         APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
         """
@@ -526,7 +527,7 @@ class Role(dict):
 
     @property
     @pulumi.getter
-    def kind(self) -> Optional[str]:
+    def kind(self) -> Optional[builtins.str]:
         """
         Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         """
@@ -575,15 +576,15 @@ class RoleBinding(dict):
 
     def __init__(__self__, *,
                  role_ref: 'outputs.RoleRef',
-                 api_version: Optional[str] = None,
-                 kind: Optional[str] = None,
+                 api_version: Optional[builtins.str] = None,
+                 kind: Optional[builtins.str] = None,
                  metadata: Optional['_meta.v1.outputs.ObjectMeta'] = None,
                  subjects: Optional[Sequence['outputs.Subject']] = None):
         """
         RoleBinding references a role, but does not contain it.  It can reference a Role in the same namespace or a ClusterRole in the global namespace. It adds who information via Subjects and namespace information by which namespace it exists in.  RoleBindings in a given namespace only have effect in that namespace.
         :param 'RoleRefArgs' role_ref: RoleRef can reference a Role in the current namespace or a ClusterRole in the global namespace. If the RoleRef cannot be resolved, the Authorizer must return an error. This field is immutable.
-        :param str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-        :param str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+        :param builtins.str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+        :param builtins.str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         :param '_meta.v1.ObjectMetaArgs' metadata: Standard object's metadata.
         :param Sequence['SubjectArgs'] subjects: Subjects holds references to the objects the role applies to.
         """
@@ -607,7 +608,7 @@ class RoleBinding(dict):
 
     @property
     @pulumi.getter(name="apiVersion")
-    def api_version(self) -> Optional[str]:
+    def api_version(self) -> Optional[builtins.str]:
         """
         APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
         """
@@ -615,7 +616,7 @@ class RoleBinding(dict):
 
     @property
     @pulumi.getter
-    def kind(self) -> Optional[str]:
+    def kind(self) -> Optional[builtins.str]:
         """
         Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         """
@@ -661,14 +662,14 @@ class RoleRef(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 api_group: str,
-                 kind: str,
-                 name: str):
+                 api_group: builtins.str,
+                 kind: builtins.str,
+                 name: builtins.str):
         """
         RoleRef contains information that points to the role being used
-        :param str api_group: APIGroup is the group for the resource being referenced
-        :param str kind: Kind is the type of resource being referenced
-        :param str name: Name is the name of resource being referenced
+        :param builtins.str api_group: APIGroup is the group for the resource being referenced
+        :param builtins.str kind: Kind is the type of resource being referenced
+        :param builtins.str name: Name is the name of resource being referenced
         """
         pulumi.set(__self__, "api_group", api_group)
         pulumi.set(__self__, "kind", kind)
@@ -676,7 +677,7 @@ class RoleRef(dict):
 
     @property
     @pulumi.getter(name="apiGroup")
-    def api_group(self) -> str:
+    def api_group(self) -> builtins.str:
         """
         APIGroup is the group for the resource being referenced
         """
@@ -684,7 +685,7 @@ class RoleRef(dict):
 
     @property
     @pulumi.getter
-    def kind(self) -> str:
+    def kind(self) -> builtins.str:
         """
         Kind is the type of resource being referenced
         """
@@ -692,7 +693,7 @@ class RoleRef(dict):
 
     @property
     @pulumi.getter
-    def name(self) -> str:
+    def name(self) -> builtins.str:
         """
         Name is the name of resource being referenced
         """
@@ -722,14 +723,14 @@ class RoleRefPatch(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 api_group: Optional[str] = None,
-                 kind: Optional[str] = None,
-                 name: Optional[str] = None):
+                 api_group: Optional[builtins.str] = None,
+                 kind: Optional[builtins.str] = None,
+                 name: Optional[builtins.str] = None):
         """
         RoleRef contains information that points to the role being used
-        :param str api_group: APIGroup is the group for the resource being referenced
-        :param str kind: Kind is the type of resource being referenced
-        :param str name: Name is the name of resource being referenced
+        :param builtins.str api_group: APIGroup is the group for the resource being referenced
+        :param builtins.str kind: Kind is the type of resource being referenced
+        :param builtins.str name: Name is the name of resource being referenced
         """
         if api_group is not None:
             pulumi.set(__self__, "api_group", api_group)
@@ -740,7 +741,7 @@ class RoleRefPatch(dict):
 
     @property
     @pulumi.getter(name="apiGroup")
-    def api_group(self) -> Optional[str]:
+    def api_group(self) -> Optional[builtins.str]:
         """
         APIGroup is the group for the resource being referenced
         """
@@ -748,7 +749,7 @@ class RoleRefPatch(dict):
 
     @property
     @pulumi.getter
-    def kind(self) -> Optional[str]:
+    def kind(self) -> Optional[builtins.str]:
         """
         Kind is the type of resource being referenced
         """
@@ -756,7 +757,7 @@ class RoleRefPatch(dict):
 
     @property
     @pulumi.getter
-    def name(self) -> Optional[str]:
+    def name(self) -> Optional[builtins.str]:
         """
         Name is the name of resource being referenced
         """
@@ -786,16 +787,16 @@ class Subject(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 kind: str,
-                 name: str,
-                 api_group: Optional[str] = None,
-                 namespace: Optional[str] = None):
+                 kind: builtins.str,
+                 name: builtins.str,
+                 api_group: Optional[builtins.str] = None,
+                 namespace: Optional[builtins.str] = None):
         """
         Subject contains a reference to the object or user identities a role binding applies to.  This can either hold a direct API object reference, or a value for non-objects such as user and group names.
-        :param str kind: Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
-        :param str name: Name of the object being referenced.
-        :param str api_group: APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
-        :param str namespace: Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.
+        :param builtins.str kind: Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
+        :param builtins.str name: Name of the object being referenced.
+        :param builtins.str api_group: APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
+        :param builtins.str namespace: Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.
         """
         pulumi.set(__self__, "kind", kind)
         pulumi.set(__self__, "name", name)
@@ -806,7 +807,7 @@ class Subject(dict):
 
     @property
     @pulumi.getter
-    def kind(self) -> str:
+    def kind(self) -> builtins.str:
         """
         Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
         """
@@ -814,7 +815,7 @@ class Subject(dict):
 
     @property
     @pulumi.getter
-    def name(self) -> str:
+    def name(self) -> builtins.str:
         """
         Name of the object being referenced.
         """
@@ -822,7 +823,7 @@ class Subject(dict):
 
     @property
     @pulumi.getter(name="apiGroup")
-    def api_group(self) -> Optional[str]:
+    def api_group(self) -> Optional[builtins.str]:
         """
         APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
         """
@@ -830,7 +831,7 @@ class Subject(dict):
 
     @property
     @pulumi.getter
-    def namespace(self) -> Optional[str]:
+    def namespace(self) -> Optional[builtins.str]:
         """
         Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.
         """
@@ -860,16 +861,16 @@ class SubjectPatch(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 api_group: Optional[str] = None,
-                 kind: Optional[str] = None,
-                 name: Optional[str] = None,
-                 namespace: Optional[str] = None):
+                 api_group: Optional[builtins.str] = None,
+                 kind: Optional[builtins.str] = None,
+                 name: Optional[builtins.str] = None,
+                 namespace: Optional[builtins.str] = None):
         """
         Subject contains a reference to the object or user identities a role binding applies to.  This can either hold a direct API object reference, or a value for non-objects such as user and group names.
-        :param str api_group: APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
-        :param str kind: Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
-        :param str name: Name of the object being referenced.
-        :param str namespace: Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.
+        :param builtins.str api_group: APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
+        :param builtins.str kind: Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
+        :param builtins.str name: Name of the object being referenced.
+        :param builtins.str namespace: Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.
         """
         if api_group is not None:
             pulumi.set(__self__, "api_group", api_group)
@@ -882,7 +883,7 @@ class SubjectPatch(dict):
 
     @property
     @pulumi.getter(name="apiGroup")
-    def api_group(self) -> Optional[str]:
+    def api_group(self) -> Optional[builtins.str]:
         """
         APIGroup holds the API group of the referenced subject. Defaults to "" for ServiceAccount subjects. Defaults to "rbac.authorization.k8s.io" for User and Group subjects.
         """
@@ -890,7 +891,7 @@ class SubjectPatch(dict):
 
     @property
     @pulumi.getter
-    def kind(self) -> Optional[str]:
+    def kind(self) -> Optional[builtins.str]:
         """
         Kind of object being referenced. Values defined by this API group are "User", "Group", and "ServiceAccount". If the Authorizer does not recognized the kind value, the Authorizer should report an error.
         """
@@ -898,7 +899,7 @@ class SubjectPatch(dict):
 
     @property
     @pulumi.getter
-    def name(self) -> Optional[str]:
+    def name(self) -> Optional[builtins.str]:
         """
         Name of the object being referenced.
         """
@@ -906,7 +907,7 @@ class SubjectPatch(dict):
 
     @property
     @pulumi.getter
-    def namespace(self) -> Optional[str]:
+    def namespace(self) -> Optional[builtins.str]:
         """
         Namespace of the referenced object.  If the object kind is non-namespace, such as "User" or "Group", and this value is not empty the Authorizer should report an error.
         """

pulumi_kubernetes/rbac/v1alpha1/ClusterRole.py

@@ -2,6 +2,7 @@
 # *** WARNING: this file was generated by pulumigen. ***
 # *** Do not edit by hand unless you're certain you know what you are doing! ***
 
+import builtins
 import copy
 import warnings
 import sys
@@ -23,15 +24,15 @@ __all__ = ['ClusterRoleInitArgs', 'ClusterRole']
 class ClusterRoleInitArgs:
     def __init__(__self__, *,
                  aggregation_rule: Optional[pulumi.Input['AggregationRuleArgs']] = None,
-                 api_version: Optional[pulumi.Input[str]] = None,
-                 kind: Optional[pulumi.Input[str]] = None,
+                 api_version: Optional[pulumi.Input[builtins.str]] = None,
+                 kind: Optional[pulumi.Input[builtins.str]] = None,
                  metadata: Optional[pulumi.Input['_meta.v1.ObjectMetaArgs']] = None,
                  rules: Optional[pulumi.Input[Sequence[pulumi.Input['PolicyRuleArgs']]]] = None):
         """
         The set of arguments for constructing a ClusterRole resource.
         :param pulumi.Input['AggregationRuleArgs'] aggregation_rule: AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.
-        :param pulumi.Input[str] api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-        :param pulumi.Input[str] kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+        :param pulumi.Input[builtins.str] api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+        :param pulumi.Input[builtins.str] kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         :param pulumi.Input['_meta.v1.ObjectMetaArgs'] metadata: Standard object's metadata.
         :param pulumi.Input[Sequence[pulumi.Input['PolicyRuleArgs']]] rules: Rules holds all the PolicyRules for this ClusterRole
         """
@@ -60,26 +61,26 @@ class ClusterRoleInitArgs:
 
     @property
     @pulumi.getter(name="apiVersion")
-    def api_version(self) -> Optional[pulumi.Input[str]]:
+    def api_version(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
         """
         return pulumi.get(self, "api_version")
 
     @api_version.setter
-    def api_version(self, value: Optional[pulumi.Input[str]]):
+    def api_version(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "api_version", value)
 
     @property
     @pulumi.getter
-    def kind(self) -> Optional[pulumi.Input[str]]:
+    def kind(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         """
         return pulumi.get(self, "kind")
 
     @kind.setter
-    def kind(self, value: Optional[pulumi.Input[str]]):
+    def kind(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "kind", value)
 
     @property
@@ -107,14 +108,15 @@ class ClusterRoleInitArgs:
         pulumi.set(self, "rules", value)
 
 
+@pulumi.type_token("kubernetes:rbac.authorization.k8s.io/v1alpha1:ClusterRole")
 class ClusterRole(pulumi.CustomResource):
     @overload
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  aggregation_rule: Optional[pulumi.Input[Union['AggregationRuleArgs', 'AggregationRuleArgsDict']]] = None,
-                 api_version: Optional[pulumi.Input[str]] = None,
-                 kind: Optional[pulumi.Input[str]] = None,
+                 api_version: Optional[pulumi.Input[builtins.str]] = None,
+                 kind: Optional[pulumi.Input[builtins.str]] = None,
                  metadata: Optional[pulumi.Input[Union['_meta.v1.ObjectMetaArgs', '_meta.v1.ObjectMetaArgsDict']]] = None,
                  rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['PolicyRuleArgs', 'PolicyRuleArgsDict']]]]] = None,
                  __props__=None):
@@ -124,8 +126,8 @@ class ClusterRole(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Union['AggregationRuleArgs', 'AggregationRuleArgsDict']] aggregation_rule: AggregationRule is an optional field that describes how to build the Rules for this ClusterRole. If AggregationRule is set, then the Rules are controller managed and direct changes to Rules will be stomped by the controller.
-        :param pulumi.Input[str] api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-        :param pulumi.Input[str] kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+        :param pulumi.Input[builtins.str] api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+        :param pulumi.Input[builtins.str] kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         :param pulumi.Input[Union['_meta.v1.ObjectMetaArgs', '_meta.v1.ObjectMetaArgsDict']] metadata: Standard object's metadata.
         :param pulumi.Input[Sequence[pulumi.Input[Union['PolicyRuleArgs', 'PolicyRuleArgsDict']]]] rules: Rules holds all the PolicyRules for this ClusterRole
         """
@@ -154,8 +156,8 @@ class ClusterRole(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  aggregation_rule: Optional[pulumi.Input[Union['AggregationRuleArgs', 'AggregationRuleArgsDict']]] = None,
-                 api_version: Optional[pulumi.Input[str]] = None,
-                 kind: Optional[pulumi.Input[str]] = None,
+                 api_version: Optional[pulumi.Input[builtins.str]] = None,
+                 kind: Optional[pulumi.Input[builtins.str]] = None,
                  metadata: Optional[pulumi.Input[Union['_meta.v1.ObjectMetaArgs', '_meta.v1.ObjectMetaArgsDict']]] = None,
                  rules: Optional[pulumi.Input[Sequence[pulumi.Input[Union['PolicyRuleArgs', 'PolicyRuleArgsDict']]]]] = None,
                  __props__=None):
@@ -213,7 +215,7 @@ class ClusterRole(pulumi.CustomResource):
 
     @property
     @pulumi.getter(name="apiVersion")
-    def api_version(self) -> pulumi.Output[str]:
+    def api_version(self) -> pulumi.Output[builtins.str]:
         """
         APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
         """
@@ -221,7 +223,7 @@ class ClusterRole(pulumi.CustomResource):
 
     @property
     @pulumi.getter
-    def kind(self) -> pulumi.Output[str]:
+    def kind(self) -> pulumi.Output[builtins.str]:
         """
         Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         """