pulumi-kubernetes 4.22.1__py3-none-any.whl → 4.23.0__py3-none-any.whl

pulumi_kubernetes/certificates/v1/outputs.py

@@ -2,6 +2,7 @@
 # *** WARNING: this file was generated by pulumigen. ***
 # *** Do not edit by hand unless you're certain you know what you are doing! ***
 
+import builtins
 import copy
 import warnings
 import sys
@@ -56,8 +57,8 @@ class CertificateSigningRequest(dict):
 
     def __init__(__self__, *,
                  spec: 'outputs.CertificateSigningRequestSpec',
-                 api_version: Optional[str] = None,
-                 kind: Optional[str] = None,
+                 api_version: Optional[builtins.str] = None,
+                 kind: Optional[builtins.str] = None,
                  metadata: Optional['_meta.v1.outputs.ObjectMeta'] = None,
                  status: Optional['outputs.CertificateSigningRequestStatus'] = None):
         """
@@ -69,8 +70,8 @@ class CertificateSigningRequest(dict):
 
         This API can be used to request client certificates to authenticate to kube-apiserver (with the "kubernetes.io/kube-apiserver-client" signerName), or to obtain certificates from custom non-Kubernetes signers.
         :param 'CertificateSigningRequestSpecArgs' spec: spec contains the certificate request, and is immutable after creation. Only the request, signerName, expirationSeconds, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users.
-        :param str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-        :param str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+        :param builtins.str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+        :param builtins.str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         :param 'CertificateSigningRequestStatusArgs' status: status contains information about whether the request is approved or denied, and the certificate issued by the signer, or the failure condition indicating signer failure.
         """
         pulumi.set(__self__, "spec", spec)
@@ -93,7 +94,7 @@ class CertificateSigningRequest(dict):
 
     @property
     @pulumi.getter(name="apiVersion")
-    def api_version(self) -> Optional[str]:
+    def api_version(self) -> Optional[builtins.str]:
         """
         APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
         """
@@ -101,7 +102,7 @@ class CertificateSigningRequest(dict):
 
     @property
     @pulumi.getter
-    def kind(self) -> Optional[str]:
+    def kind(self) -> Optional[builtins.str]:
         """
         Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         """
@@ -146,16 +147,16 @@ class CertificateSigningRequestCondition(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 status: str,
-                 type: str,
-                 last_transition_time: Optional[str] = None,
-                 last_update_time: Optional[str] = None,
-                 message: Optional[str] = None,
-                 reason: Optional[str] = None):
+                 status: builtins.str,
+                 type: builtins.str,
+                 last_transition_time: Optional[builtins.str] = None,
+                 last_update_time: Optional[builtins.str] = None,
+                 message: Optional[builtins.str] = None,
+                 reason: Optional[builtins.str] = None):
         """
         CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest object
-        :param str status: status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
-        :param str type: type of the condition. Known conditions are "Approved", "Denied", and "Failed".
+        :param builtins.str status: status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
+        :param builtins.str type: type of the condition. Known conditions are "Approved", "Denied", and "Failed".
                
                An "Approved" condition is added via the /approval subresource, indicating the request was approved and should be issued by the signer.
                
@@ -166,10 +167,10 @@ class CertificateSigningRequestCondition(dict):
                Approved and Denied conditions are mutually exclusive. Approved, Denied, and Failed conditions cannot be removed once added.
                
                Only one condition of a given type is allowed.
-        :param str last_transition_time: lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
-        :param str last_update_time: lastUpdateTime is the time of the last update to this condition
-        :param str message: message contains a human readable message with details about the request state
-        :param str reason: reason indicates a brief reason for the request state
+        :param builtins.str last_transition_time: lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
+        :param builtins.str last_update_time: lastUpdateTime is the time of the last update to this condition
+        :param builtins.str message: message contains a human readable message with details about the request state
+        :param builtins.str reason: reason indicates a brief reason for the request state
         """
         pulumi.set(__self__, "status", status)
         pulumi.set(__self__, "type", type)
@@ -184,7 +185,7 @@ class CertificateSigningRequestCondition(dict):
 
     @property
     @pulumi.getter
-    def status(self) -> str:
+    def status(self) -> builtins.str:
         """
         status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
         """
@@ -192,7 +193,7 @@ class CertificateSigningRequestCondition(dict):
 
     @property
     @pulumi.getter
-    def type(self) -> str:
+    def type(self) -> builtins.str:
         """
         type of the condition. Known conditions are "Approved", "Denied", and "Failed".
 
@@ -210,7 +211,7 @@ class CertificateSigningRequestCondition(dict):
 
     @property
     @pulumi.getter(name="lastTransitionTime")
-    def last_transition_time(self) -> Optional[str]:
+    def last_transition_time(self) -> Optional[builtins.str]:
         """
         lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
         """
@@ -218,7 +219,7 @@ class CertificateSigningRequestCondition(dict):
 
     @property
     @pulumi.getter(name="lastUpdateTime")
-    def last_update_time(self) -> Optional[str]:
+    def last_update_time(self) -> Optional[builtins.str]:
         """
         lastUpdateTime is the time of the last update to this condition
         """
@@ -226,7 +227,7 @@ class CertificateSigningRequestCondition(dict):
 
     @property
     @pulumi.getter
-    def message(self) -> Optional[str]:
+    def message(self) -> Optional[builtins.str]:
         """
         message contains a human readable message with details about the request state
         """
@@ -234,7 +235,7 @@ class CertificateSigningRequestCondition(dict):
 
     @property
     @pulumi.getter
-    def reason(self) -> Optional[str]:
+    def reason(self) -> Optional[builtins.str]:
         """
         reason indicates a brief reason for the request state
         """
@@ -266,20 +267,20 @@ class CertificateSigningRequestConditionPatch(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 last_transition_time: Optional[str] = None,
-                 last_update_time: Optional[str] = None,
-                 message: Optional[str] = None,
-                 reason: Optional[str] = None,
-                 status: Optional[str] = None,
-                 type: Optional[str] = None):
+                 last_transition_time: Optional[builtins.str] = None,
+                 last_update_time: Optional[builtins.str] = None,
+                 message: Optional[builtins.str] = None,
+                 reason: Optional[builtins.str] = None,
+                 status: Optional[builtins.str] = None,
+                 type: Optional[builtins.str] = None):
         """
         CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest object
-        :param str last_transition_time: lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
-        :param str last_update_time: lastUpdateTime is the time of the last update to this condition
-        :param str message: message contains a human readable message with details about the request state
-        :param str reason: reason indicates a brief reason for the request state
-        :param str status: status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
-        :param str type: type of the condition. Known conditions are "Approved", "Denied", and "Failed".
+        :param builtins.str last_transition_time: lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
+        :param builtins.str last_update_time: lastUpdateTime is the time of the last update to this condition
+        :param builtins.str message: message contains a human readable message with details about the request state
+        :param builtins.str reason: reason indicates a brief reason for the request state
+        :param builtins.str status: status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
+        :param builtins.str type: type of the condition. Known conditions are "Approved", "Denied", and "Failed".
                
                An "Approved" condition is added via the /approval subresource, indicating the request was approved and should be issued by the signer.
                
@@ -306,7 +307,7 @@ class CertificateSigningRequestConditionPatch(dict):
 
     @property
     @pulumi.getter(name="lastTransitionTime")
-    def last_transition_time(self) -> Optional[str]:
+    def last_transition_time(self) -> Optional[builtins.str]:
         """
         lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
         """
@@ -314,7 +315,7 @@ class CertificateSigningRequestConditionPatch(dict):
 
     @property
     @pulumi.getter(name="lastUpdateTime")
-    def last_update_time(self) -> Optional[str]:
+    def last_update_time(self) -> Optional[builtins.str]:
         """
         lastUpdateTime is the time of the last update to this condition
         """
@@ -322,7 +323,7 @@ class CertificateSigningRequestConditionPatch(dict):
 
     @property
     @pulumi.getter
-    def message(self) -> Optional[str]:
+    def message(self) -> Optional[builtins.str]:
         """
         message contains a human readable message with details about the request state
         """
@@ -330,7 +331,7 @@ class CertificateSigningRequestConditionPatch(dict):
 
     @property
     @pulumi.getter
-    def reason(self) -> Optional[str]:
+    def reason(self) -> Optional[builtins.str]:
         """
         reason indicates a brief reason for the request state
         """
@@ -338,7 +339,7 @@ class CertificateSigningRequestConditionPatch(dict):
 
     @property
     @pulumi.getter
-    def status(self) -> Optional[str]:
+    def status(self) -> Optional[builtins.str]:
         """
         status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
         """
@@ -346,7 +347,7 @@ class CertificateSigningRequestConditionPatch(dict):
 
     @property
     @pulumi.getter
-    def type(self) -> Optional[str]:
+    def type(self) -> Optional[builtins.str]:
         """
         type of the condition. Known conditions are "Approved", "Denied", and "Failed".
 
@@ -388,18 +389,18 @@ class CertificateSigningRequestSpec(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 request: str,
-                 signer_name: str,
-                 expiration_seconds: Optional[int] = None,
-                 extra: Optional[Mapping[str, Sequence[str]]] = None,
-                 groups: Optional[Sequence[str]] = None,
-                 uid: Optional[str] = None,
-                 usages: Optional[Sequence[str]] = None,
-                 username: Optional[str] = None):
+                 request: builtins.str,
+                 signer_name: builtins.str,
+                 expiration_seconds: Optional[builtins.int] = None,
+                 extra: Optional[Mapping[str, Sequence[builtins.str]]] = None,
+                 groups: Optional[Sequence[builtins.str]] = None,
+                 uid: Optional[builtins.str] = None,
+                 usages: Optional[Sequence[builtins.str]] = None,
+                 username: Optional[builtins.str] = None):
         """
         CertificateSigningRequestSpec contains the certificate request.
-        :param str request: request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
-        :param str signer_name: signerName indicates the requested signer, and is a qualified name.
+        :param builtins.str request: request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
+        :param builtins.str signer_name: signerName indicates the requested signer, and is a qualified name.
                
                List/watch requests for CertificateSigningRequests can filter on this field using a "spec.signerName=NAME" fieldSelector.
                
@@ -420,7 +421,7 @@ class CertificateSigningRequestSpec(dict):
                 4. Required, permitted, or forbidden key usages / extended key usages.
                 5. Expiration/certificate lifetime: whether it is fixed by the signer, configurable by the admin.
                 6. Whether or not requests for CA certificates are allowed.
-        :param int expiration_seconds: expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
+        :param builtins.int expiration_seconds: expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
                
                The v1.22+ in-tree implementations of the well-known Kubernetes signers will honor this field as long as the requested duration is not greater than the maximum duration they will honor per the --cluster-signing-duration CLI flag to the Kubernetes controller manager.
                
@@ -432,10 +433,10 @@ class CertificateSigningRequestSpec(dict):
                  3. Signer whose configured minimum is longer than the requested duration
                
                The minimum valid value for expirationSeconds is 600, i.e. 10 minutes.
-        :param Mapping[str, Sequence[str]] extra: extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param Sequence[str] groups: groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param str uid: uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param Sequence[str] usages: usages specifies a set of key usages requested in the issued certificate.
+        :param Mapping[str, Sequence[builtins.str]] extra: extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param Sequence[builtins.str] groups: groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param builtins.str uid: uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param Sequence[builtins.str] usages: usages specifies a set of key usages requested in the issued certificate.
                
                Requests for TLS client certificates typically request: "digital signature", "key encipherment", "client auth".
                
@@ -449,7 +450,7 @@ class CertificateSigningRequestSpec(dict):
                 "code signing", "email protection", "s/mime",
                 "ipsec end system", "ipsec tunnel", "ipsec user",
                 "timestamping", "ocsp signing", "microsoft sgc", "netscape sgc"
-        :param str username: username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param builtins.str username: username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         pulumi.set(__self__, "request", request)
         pulumi.set(__self__, "signer_name", signer_name)
@@ -468,7 +469,7 @@ class CertificateSigningRequestSpec(dict):
 
     @property
     @pulumi.getter
-    def request(self) -> str:
+    def request(self) -> builtins.str:
         """
         request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
         """
@@ -476,7 +477,7 @@ class CertificateSigningRequestSpec(dict):
 
     @property
     @pulumi.getter(name="signerName")
-    def signer_name(self) -> str:
+    def signer_name(self) -> builtins.str:
         """
         signerName indicates the requested signer, and is a qualified name.
 
@@ -504,7 +505,7 @@ class CertificateSigningRequestSpec(dict):
 
     @property
     @pulumi.getter(name="expirationSeconds")
-    def expiration_seconds(self) -> Optional[int]:
+    def expiration_seconds(self) -> Optional[builtins.int]:
         """
         expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
 
@@ -523,7 +524,7 @@ class CertificateSigningRequestSpec(dict):
 
     @property
     @pulumi.getter
-    def extra(self) -> Optional[Mapping[str, Sequence[str]]]:
+    def extra(self) -> Optional[Mapping[str, Sequence[builtins.str]]]:
         """
         extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -531,7 +532,7 @@ class CertificateSigningRequestSpec(dict):
 
     @property
     @pulumi.getter
-    def groups(self) -> Optional[Sequence[str]]:
+    def groups(self) -> Optional[Sequence[builtins.str]]:
         """
         groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -539,7 +540,7 @@ class CertificateSigningRequestSpec(dict):
 
     @property
     @pulumi.getter
-    def uid(self) -> Optional[str]:
+    def uid(self) -> Optional[builtins.str]:
         """
         uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -547,7 +548,7 @@ class CertificateSigningRequestSpec(dict):
 
     @property
     @pulumi.getter
-    def usages(self) -> Optional[Sequence[str]]:
+    def usages(self) -> Optional[Sequence[builtins.str]]:
         """
         usages specifies a set of key usages requested in the issued certificate.
 
@@ -568,7 +569,7 @@ class CertificateSigningRequestSpec(dict):
 
     @property
     @pulumi.getter
-    def username(self) -> Optional[str]:
+    def username(self) -> Optional[builtins.str]:
         """
         username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -600,17 +601,17 @@ class CertificateSigningRequestSpecPatch(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 expiration_seconds: Optional[int] = None,
-                 extra: Optional[Mapping[str, Sequence[str]]] = None,
-                 groups: Optional[Sequence[str]] = None,
-                 request: Optional[str] = None,
-                 signer_name: Optional[str] = None,
-                 uid: Optional[str] = None,
-                 usages: Optional[Sequence[str]] = None,
-                 username: Optional[str] = None):
+                 expiration_seconds: Optional[builtins.int] = None,
+                 extra: Optional[Mapping[str, Sequence[builtins.str]]] = None,
+                 groups: Optional[Sequence[builtins.str]] = None,
+                 request: Optional[builtins.str] = None,
+                 signer_name: Optional[builtins.str] = None,
+                 uid: Optional[builtins.str] = None,
+                 usages: Optional[Sequence[builtins.str]] = None,
+                 username: Optional[builtins.str] = None):
         """
         CertificateSigningRequestSpec contains the certificate request.
-        :param int expiration_seconds: expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
+        :param builtins.int expiration_seconds: expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
                
                The v1.22+ in-tree implementations of the well-known Kubernetes signers will honor this field as long as the requested duration is not greater than the maximum duration they will honor per the --cluster-signing-duration CLI flag to the Kubernetes controller manager.
                
@@ -622,10 +623,10 @@ class CertificateSigningRequestSpecPatch(dict):
                  3. Signer whose configured minimum is longer than the requested duration
                
                The minimum valid value for expirationSeconds is 600, i.e. 10 minutes.
-        :param Mapping[str, Sequence[str]] extra: extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param Sequence[str] groups: groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param str request: request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
-        :param str signer_name: signerName indicates the requested signer, and is a qualified name.
+        :param Mapping[str, Sequence[builtins.str]] extra: extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param Sequence[builtins.str] groups: groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param builtins.str request: request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
+        :param builtins.str signer_name: signerName indicates the requested signer, and is a qualified name.
                
                List/watch requests for CertificateSigningRequests can filter on this field using a "spec.signerName=NAME" fieldSelector.
                
@@ -646,8 +647,8 @@ class CertificateSigningRequestSpecPatch(dict):
                 4. Required, permitted, or forbidden key usages / extended key usages.
                 5. Expiration/certificate lifetime: whether it is fixed by the signer, configurable by the admin.
                 6. Whether or not requests for CA certificates are allowed.
-        :param str uid: uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param Sequence[str] usages: usages specifies a set of key usages requested in the issued certificate.
+        :param builtins.str uid: uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param Sequence[builtins.str] usages: usages specifies a set of key usages requested in the issued certificate.
                
                Requests for TLS client certificates typically request: "digital signature", "key encipherment", "client auth".
                
@@ -661,7 +662,7 @@ class CertificateSigningRequestSpecPatch(dict):
                 "code signing", "email protection", "s/mime",
                 "ipsec end system", "ipsec tunnel", "ipsec user",
                 "timestamping", "ocsp signing", "microsoft sgc", "netscape sgc"
-        :param str username: username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param builtins.str username: username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         if expiration_seconds is not None:
             pulumi.set(__self__, "expiration_seconds", expiration_seconds)
@@ -682,7 +683,7 @@ class CertificateSigningRequestSpecPatch(dict):
 
     @property
     @pulumi.getter(name="expirationSeconds")
-    def expiration_seconds(self) -> Optional[int]:
+    def expiration_seconds(self) -> Optional[builtins.int]:
         """
         expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
 
@@ -701,7 +702,7 @@ class CertificateSigningRequestSpecPatch(dict):
 
     @property
     @pulumi.getter
-    def extra(self) -> Optional[Mapping[str, Sequence[str]]]:
+    def extra(self) -> Optional[Mapping[str, Sequence[builtins.str]]]:
         """
         extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -709,7 +710,7 @@ class CertificateSigningRequestSpecPatch(dict):
 
     @property
     @pulumi.getter
-    def groups(self) -> Optional[Sequence[str]]:
+    def groups(self) -> Optional[Sequence[builtins.str]]:
         """
         groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -717,7 +718,7 @@ class CertificateSigningRequestSpecPatch(dict):
 
     @property
     @pulumi.getter
-    def request(self) -> Optional[str]:
+    def request(self) -> Optional[builtins.str]:
         """
         request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
         """
@@ -725,7 +726,7 @@ class CertificateSigningRequestSpecPatch(dict):
 
     @property
     @pulumi.getter(name="signerName")
-    def signer_name(self) -> Optional[str]:
+    def signer_name(self) -> Optional[builtins.str]:
         """
         signerName indicates the requested signer, and is a qualified name.
 
@@ -753,7 +754,7 @@ class CertificateSigningRequestSpecPatch(dict):
 
     @property
     @pulumi.getter
-    def uid(self) -> Optional[str]:
+    def uid(self) -> Optional[builtins.str]:
         """
         uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -761,7 +762,7 @@ class CertificateSigningRequestSpecPatch(dict):
 
     @property
     @pulumi.getter
-    def usages(self) -> Optional[Sequence[str]]:
+    def usages(self) -> Optional[Sequence[builtins.str]]:
         """
         usages specifies a set of key usages requested in the issued certificate.
 
@@ -782,7 +783,7 @@ class CertificateSigningRequestSpecPatch(dict):
 
     @property
     @pulumi.getter
-    def username(self) -> Optional[str]:
+    def username(self) -> Optional[builtins.str]:
         """
         username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -795,11 +796,11 @@ class CertificateSigningRequestStatus(dict):
     CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.
     """
     def __init__(__self__, *,
-                 certificate: Optional[str] = None,
+                 certificate: Optional[builtins.str] = None,
                  conditions: Optional[Sequence['outputs.CertificateSigningRequestCondition']] = None):
         """
         CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.
-        :param str certificate: certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
+        :param builtins.str certificate: certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
                
                If the certificate signing request is denied, a condition of type "Denied" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type "Failed" is added and this field remains empty.
                
@@ -830,7 +831,7 @@ class CertificateSigningRequestStatus(dict):
 
     @property
     @pulumi.getter
-    def certificate(self) -> Optional[str]:
+    def certificate(self) -> Optional[builtins.str]:
         """
         certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
 
@@ -872,11 +873,11 @@ class CertificateSigningRequestStatusPatch(dict):
     CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.
     """
     def __init__(__self__, *,
-                 certificate: Optional[str] = None,
+                 certificate: Optional[builtins.str] = None,
                  conditions: Optional[Sequence['outputs.CertificateSigningRequestConditionPatch']] = None):
         """
         CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.
-        :param str certificate: certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
+        :param builtins.str certificate: certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
                
                If the certificate signing request is denied, a condition of type "Denied" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type "Failed" is added and this field remains empty.
                
@@ -907,7 +908,7 @@ class CertificateSigningRequestStatusPatch(dict):
 
     @property
     @pulumi.getter
-    def certificate(self) -> Optional[str]:
+    def certificate(self) -> Optional[builtins.str]:
         """
         certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.