pulumi-kubernetes 4.24.0a1752908431__py3-none-any.whl → 4.24.0a1753121506__py3-none-any.whl

pulumi_kubernetes/certificates/v1/outputs.py

@@ -2,8 +2,7 @@
 # *** WARNING: this file was generated by pulumigen. ***
 # *** Do not edit by hand unless you're certain you know what you are doing! ***
 
-import builtins
-import copy
+import builtins as _builtins
 import warnings
 import sys
 import pulumi
@@ -57,8 +56,8 @@ class CertificateSigningRequest(dict):
 
     def __init__(__self__, *,
                  spec: 'outputs.CertificateSigningRequestSpec',
-                 api_version: Optional[builtins.str] = None,
-                 kind: Optional[builtins.str] = None,
+                 api_version: Optional[_builtins.str] = None,
+                 kind: Optional[_builtins.str] = None,
                  metadata: Optional['_meta.v1.outputs.ObjectMeta'] = None,
                  status: Optional['outputs.CertificateSigningRequestStatus'] = None):
         """
@@ -70,8 +69,8 @@ class CertificateSigningRequest(dict):
 
         This API can be used to request client certificates to authenticate to kube-apiserver (with the "kubernetes.io/kube-apiserver-client" signerName), or to obtain certificates from custom non-Kubernetes signers.
         :param 'CertificateSigningRequestSpecArgs' spec: spec contains the certificate request, and is immutable after creation. Only the request, signerName, expirationSeconds, and usages fields can be set on creation. Other fields are derived by Kubernetes and cannot be modified by users.
-        :param builtins.str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
-        :param builtins.str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
+        :param _builtins.str api_version: APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
+        :param _builtins.str kind: Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         :param 'CertificateSigningRequestStatusArgs' status: status contains information about whether the request is approved or denied, and the certificate issued by the signer, or the failure condition indicating signer failure.
         """
         pulumi.set(__self__, "spec", spec)
@@ -84,7 +83,7 @@ class CertificateSigningRequest(dict):
         if status is not None:
             pulumi.set(__self__, "status", status)
 
-    @property
+    @_builtins.property
     @pulumi.getter
     def spec(self) -> 'outputs.CertificateSigningRequestSpec':
         """
@@ -92,28 +91,28 @@ class CertificateSigningRequest(dict):
         """
         return pulumi.get(self, "spec")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="apiVersion")
-    def api_version(self) -> Optional[builtins.str]:
+    def api_version(self) -> Optional[_builtins.str]:
         """
         APIVersion defines the versioned schema of this representation of an object. Servers should convert recognized schemas to the latest internal value, and may reject unrecognized values. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#resources
         """
         return pulumi.get(self, "api_version")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def kind(self) -> Optional[builtins.str]:
+    def kind(self) -> Optional[_builtins.str]:
         """
         Kind is a string value representing the REST resource this object represents. Servers may infer this from the endpoint the client submits requests to. Cannot be updated. In CamelCase. More info: https://git.k8s.io/community/contributors/devel/sig-architecture/api-conventions.md#types-kinds
         """
         return pulumi.get(self, "kind")
 
-    @property
+    @_builtins.property
     @pulumi.getter
     def metadata(self) -> Optional['_meta.v1.outputs.ObjectMeta']:
         return pulumi.get(self, "metadata")
 
-    @property
+    @_builtins.property
     @pulumi.getter
     def status(self) -> Optional['outputs.CertificateSigningRequestStatus']:
         """
@@ -147,16 +146,16 @@ class CertificateSigningRequestCondition(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 status: builtins.str,
-                 type: builtins.str,
-                 last_transition_time: Optional[builtins.str] = None,
-                 last_update_time: Optional[builtins.str] = None,
-                 message: Optional[builtins.str] = None,
-                 reason: Optional[builtins.str] = None):
+                 status: _builtins.str,
+                 type: _builtins.str,
+                 last_transition_time: Optional[_builtins.str] = None,
+                 last_update_time: Optional[_builtins.str] = None,
+                 message: Optional[_builtins.str] = None,
+                 reason: Optional[_builtins.str] = None):
         """
         CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest object
-        :param builtins.str status: status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
-        :param builtins.str type: type of the condition. Known conditions are "Approved", "Denied", and "Failed".
+        :param _builtins.str status: status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
+        :param _builtins.str type: type of the condition. Known conditions are "Approved", "Denied", and "Failed".
                
                An "Approved" condition is added via the /approval subresource, indicating the request was approved and should be issued by the signer.
                
@@ -167,10 +166,10 @@ class CertificateSigningRequestCondition(dict):
                Approved and Denied conditions are mutually exclusive. Approved, Denied, and Failed conditions cannot be removed once added.
                
                Only one condition of a given type is allowed.
-        :param builtins.str last_transition_time: lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
-        :param builtins.str last_update_time: lastUpdateTime is the time of the last update to this condition
-        :param builtins.str message: message contains a human readable message with details about the request state
-        :param builtins.str reason: reason indicates a brief reason for the request state
+        :param _builtins.str last_transition_time: lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
+        :param _builtins.str last_update_time: lastUpdateTime is the time of the last update to this condition
+        :param _builtins.str message: message contains a human readable message with details about the request state
+        :param _builtins.str reason: reason indicates a brief reason for the request state
         """
         pulumi.set(__self__, "status", status)
         pulumi.set(__self__, "type", type)
@@ -183,17 +182,17 @@ class CertificateSigningRequestCondition(dict):
         if reason is not None:
             pulumi.set(__self__, "reason", reason)
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def status(self) -> builtins.str:
+    def status(self) -> _builtins.str:
         """
         status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
         """
         return pulumi.get(self, "status")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def type(self) -> builtins.str:
+    def type(self) -> _builtins.str:
         """
         type of the condition. Known conditions are "Approved", "Denied", and "Failed".
 
@@ -209,33 +208,33 @@ class CertificateSigningRequestCondition(dict):
         """
         return pulumi.get(self, "type")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="lastTransitionTime")
-    def last_transition_time(self) -> Optional[builtins.str]:
+    def last_transition_time(self) -> Optional[_builtins.str]:
         """
         lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
         """
         return pulumi.get(self, "last_transition_time")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="lastUpdateTime")
-    def last_update_time(self) -> Optional[builtins.str]:
+    def last_update_time(self) -> Optional[_builtins.str]:
         """
         lastUpdateTime is the time of the last update to this condition
         """
         return pulumi.get(self, "last_update_time")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def message(self) -> Optional[builtins.str]:
+    def message(self) -> Optional[_builtins.str]:
         """
         message contains a human readable message with details about the request state
         """
         return pulumi.get(self, "message")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def reason(self) -> Optional[builtins.str]:
+    def reason(self) -> Optional[_builtins.str]:
         """
         reason indicates a brief reason for the request state
         """
@@ -267,20 +266,20 @@ class CertificateSigningRequestConditionPatch(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 last_transition_time: Optional[builtins.str] = None,
-                 last_update_time: Optional[builtins.str] = None,
-                 message: Optional[builtins.str] = None,
-                 reason: Optional[builtins.str] = None,
-                 status: Optional[builtins.str] = None,
-                 type: Optional[builtins.str] = None):
+                 last_transition_time: Optional[_builtins.str] = None,
+                 last_update_time: Optional[_builtins.str] = None,
+                 message: Optional[_builtins.str] = None,
+                 reason: Optional[_builtins.str] = None,
+                 status: Optional[_builtins.str] = None,
+                 type: Optional[_builtins.str] = None):
         """
         CertificateSigningRequestCondition describes a condition of a CertificateSigningRequest object
-        :param builtins.str last_transition_time: lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
-        :param builtins.str last_update_time: lastUpdateTime is the time of the last update to this condition
-        :param builtins.str message: message contains a human readable message with details about the request state
-        :param builtins.str reason: reason indicates a brief reason for the request state
-        :param builtins.str status: status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
-        :param builtins.str type: type of the condition. Known conditions are "Approved", "Denied", and "Failed".
+        :param _builtins.str last_transition_time: lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
+        :param _builtins.str last_update_time: lastUpdateTime is the time of the last update to this condition
+        :param _builtins.str message: message contains a human readable message with details about the request state
+        :param _builtins.str reason: reason indicates a brief reason for the request state
+        :param _builtins.str status: status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
+        :param _builtins.str type: type of the condition. Known conditions are "Approved", "Denied", and "Failed".
                
                An "Approved" condition is added via the /approval subresource, indicating the request was approved and should be issued by the signer.
                
@@ -305,49 +304,49 @@ class CertificateSigningRequestConditionPatch(dict):
         if type is not None:
             pulumi.set(__self__, "type", type)
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="lastTransitionTime")
-    def last_transition_time(self) -> Optional[builtins.str]:
+    def last_transition_time(self) -> Optional[_builtins.str]:
         """
         lastTransitionTime is the time the condition last transitioned from one status to another. If unset, when a new condition type is added or an existing condition's status is changed, the server defaults this to the current time.
         """
         return pulumi.get(self, "last_transition_time")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="lastUpdateTime")
-    def last_update_time(self) -> Optional[builtins.str]:
+    def last_update_time(self) -> Optional[_builtins.str]:
         """
         lastUpdateTime is the time of the last update to this condition
         """
         return pulumi.get(self, "last_update_time")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def message(self) -> Optional[builtins.str]:
+    def message(self) -> Optional[_builtins.str]:
         """
         message contains a human readable message with details about the request state
         """
         return pulumi.get(self, "message")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def reason(self) -> Optional[builtins.str]:
+    def reason(self) -> Optional[_builtins.str]:
         """
         reason indicates a brief reason for the request state
         """
         return pulumi.get(self, "reason")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def status(self) -> Optional[builtins.str]:
+    def status(self) -> Optional[_builtins.str]:
         """
         status of the condition, one of True, False, Unknown. Approved, Denied, and Failed conditions may not be "False" or "Unknown".
         """
         return pulumi.get(self, "status")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def type(self) -> Optional[builtins.str]:
+    def type(self) -> Optional[_builtins.str]:
         """
         type of the condition. Known conditions are "Approved", "Denied", and "Failed".
 
@@ -389,18 +388,18 @@ class CertificateSigningRequestSpec(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 request: builtins.str,
-                 signer_name: builtins.str,
-                 expiration_seconds: Optional[builtins.int] = None,
-                 extra: Optional[Mapping[str, Sequence[builtins.str]]] = None,
-                 groups: Optional[Sequence[builtins.str]] = None,
-                 uid: Optional[builtins.str] = None,
-                 usages: Optional[Sequence[builtins.str]] = None,
-                 username: Optional[builtins.str] = None):
+                 request: _builtins.str,
+                 signer_name: _builtins.str,
+                 expiration_seconds: Optional[_builtins.int] = None,
+                 extra: Optional[Mapping[str, Sequence[_builtins.str]]] = None,
+                 groups: Optional[Sequence[_builtins.str]] = None,
+                 uid: Optional[_builtins.str] = None,
+                 usages: Optional[Sequence[_builtins.str]] = None,
+                 username: Optional[_builtins.str] = None):
         """
         CertificateSigningRequestSpec contains the certificate request.
-        :param builtins.str request: request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
-        :param builtins.str signer_name: signerName indicates the requested signer, and is a qualified name.
+        :param _builtins.str request: request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
+        :param _builtins.str signer_name: signerName indicates the requested signer, and is a qualified name.
                
                List/watch requests for CertificateSigningRequests can filter on this field using a "spec.signerName=NAME" fieldSelector.
                
@@ -421,7 +420,7 @@ class CertificateSigningRequestSpec(dict):
                 4. Required, permitted, or forbidden key usages / extended key usages.
                 5. Expiration/certificate lifetime: whether it is fixed by the signer, configurable by the admin.
                 6. Whether or not requests for CA certificates are allowed.
-        :param builtins.int expiration_seconds: expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
+        :param _builtins.int expiration_seconds: expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
                
                The v1.22+ in-tree implementations of the well-known Kubernetes signers will honor this field as long as the requested duration is not greater than the maximum duration they will honor per the --cluster-signing-duration CLI flag to the Kubernetes controller manager.
                
@@ -433,10 +432,10 @@ class CertificateSigningRequestSpec(dict):
                  3. Signer whose configured minimum is longer than the requested duration
                
                The minimum valid value for expirationSeconds is 600, i.e. 10 minutes.
-        :param Mapping[str, Sequence[builtins.str]] extra: extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param Sequence[builtins.str] groups: groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param builtins.str uid: uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param Sequence[builtins.str] usages: usages specifies a set of key usages requested in the issued certificate.
+        :param Mapping[str, Sequence[_builtins.str]] extra: extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param Sequence[_builtins.str] groups: groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param _builtins.str uid: uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param Sequence[_builtins.str] usages: usages specifies a set of key usages requested in the issued certificate.
                
                Requests for TLS client certificates typically request: "digital signature", "key encipherment", "client auth".
                
@@ -450,7 +449,7 @@ class CertificateSigningRequestSpec(dict):
                 "code signing", "email protection", "s/mime",
                 "ipsec end system", "ipsec tunnel", "ipsec user",
                 "timestamping", "ocsp signing", "microsoft sgc", "netscape sgc"
-        :param builtins.str username: username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param _builtins.str username: username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         pulumi.set(__self__, "request", request)
         pulumi.set(__self__, "signer_name", signer_name)
@@ -467,17 +466,17 @@ class CertificateSigningRequestSpec(dict):
         if username is not None:
             pulumi.set(__self__, "username", username)
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def request(self) -> builtins.str:
+    def request(self) -> _builtins.str:
         """
         request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
         """
         return pulumi.get(self, "request")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="signerName")
-    def signer_name(self) -> builtins.str:
+    def signer_name(self) -> _builtins.str:
         """
         signerName indicates the requested signer, and is a qualified name.
 
@@ -503,9 +502,9 @@ class CertificateSigningRequestSpec(dict):
         """
         return pulumi.get(self, "signer_name")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="expirationSeconds")
-    def expiration_seconds(self) -> Optional[builtins.int]:
+    def expiration_seconds(self) -> Optional[_builtins.int]:
         """
         expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
 
@@ -522,33 +521,33 @@ class CertificateSigningRequestSpec(dict):
         """
         return pulumi.get(self, "expiration_seconds")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def extra(self) -> Optional[Mapping[str, Sequence[builtins.str]]]:
+    def extra(self) -> Optional[Mapping[str, Sequence[_builtins.str]]]:
         """
         extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         return pulumi.get(self, "extra")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def groups(self) -> Optional[Sequence[builtins.str]]:
+    def groups(self) -> Optional[Sequence[_builtins.str]]:
         """
         groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         return pulumi.get(self, "groups")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def uid(self) -> Optional[builtins.str]:
+    def uid(self) -> Optional[_builtins.str]:
         """
         uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         return pulumi.get(self, "uid")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def usages(self) -> Optional[Sequence[builtins.str]]:
+    def usages(self) -> Optional[Sequence[_builtins.str]]:
         """
         usages specifies a set of key usages requested in the issued certificate.
 
@@ -567,9 +566,9 @@ class CertificateSigningRequestSpec(dict):
         """
         return pulumi.get(self, "usages")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def username(self) -> Optional[builtins.str]:
+    def username(self) -> Optional[_builtins.str]:
         """
         username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -601,17 +600,17 @@ class CertificateSigningRequestSpecPatch(dict):
         return super().get(key, default)
 
     def __init__(__self__, *,
-                 expiration_seconds: Optional[builtins.int] = None,
-                 extra: Optional[Mapping[str, Sequence[builtins.str]]] = None,
-                 groups: Optional[Sequence[builtins.str]] = None,
-                 request: Optional[builtins.str] = None,
-                 signer_name: Optional[builtins.str] = None,
-                 uid: Optional[builtins.str] = None,
-                 usages: Optional[Sequence[builtins.str]] = None,
-                 username: Optional[builtins.str] = None):
+                 expiration_seconds: Optional[_builtins.int] = None,
+                 extra: Optional[Mapping[str, Sequence[_builtins.str]]] = None,
+                 groups: Optional[Sequence[_builtins.str]] = None,
+                 request: Optional[_builtins.str] = None,
+                 signer_name: Optional[_builtins.str] = None,
+                 uid: Optional[_builtins.str] = None,
+                 usages: Optional[Sequence[_builtins.str]] = None,
+                 username: Optional[_builtins.str] = None):
         """
         CertificateSigningRequestSpec contains the certificate request.
-        :param builtins.int expiration_seconds: expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
+        :param _builtins.int expiration_seconds: expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
                
                The v1.22+ in-tree implementations of the well-known Kubernetes signers will honor this field as long as the requested duration is not greater than the maximum duration they will honor per the --cluster-signing-duration CLI flag to the Kubernetes controller manager.
                
@@ -623,10 +622,10 @@ class CertificateSigningRequestSpecPatch(dict):
                  3. Signer whose configured minimum is longer than the requested duration
                
                The minimum valid value for expirationSeconds is 600, i.e. 10 minutes.
-        :param Mapping[str, Sequence[builtins.str]] extra: extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param Sequence[builtins.str] groups: groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param builtins.str request: request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
-        :param builtins.str signer_name: signerName indicates the requested signer, and is a qualified name.
+        :param Mapping[str, Sequence[_builtins.str]] extra: extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param Sequence[_builtins.str] groups: groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param _builtins.str request: request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
+        :param _builtins.str signer_name: signerName indicates the requested signer, and is a qualified name.
                
                List/watch requests for CertificateSigningRequests can filter on this field using a "spec.signerName=NAME" fieldSelector.
                
@@ -647,8 +646,8 @@ class CertificateSigningRequestSpecPatch(dict):
                 4. Required, permitted, or forbidden key usages / extended key usages.
                 5. Expiration/certificate lifetime: whether it is fixed by the signer, configurable by the admin.
                 6. Whether or not requests for CA certificates are allowed.
-        :param builtins.str uid: uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
-        :param Sequence[builtins.str] usages: usages specifies a set of key usages requested in the issued certificate.
+        :param _builtins.str uid: uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param Sequence[_builtins.str] usages: usages specifies a set of key usages requested in the issued certificate.
                
                Requests for TLS client certificates typically request: "digital signature", "key encipherment", "client auth".
                
@@ -662,7 +661,7 @@ class CertificateSigningRequestSpecPatch(dict):
                 "code signing", "email protection", "s/mime",
                 "ipsec end system", "ipsec tunnel", "ipsec user",
                 "timestamping", "ocsp signing", "microsoft sgc", "netscape sgc"
-        :param builtins.str username: username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
+        :param _builtins.str username: username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         if expiration_seconds is not None:
             pulumi.set(__self__, "expiration_seconds", expiration_seconds)
@@ -681,9 +680,9 @@ class CertificateSigningRequestSpecPatch(dict):
         if username is not None:
             pulumi.set(__self__, "username", username)
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="expirationSeconds")
-    def expiration_seconds(self) -> Optional[builtins.int]:
+    def expiration_seconds(self) -> Optional[_builtins.int]:
         """
         expirationSeconds is the requested duration of validity of the issued certificate. The certificate signer may issue a certificate with a different validity duration so a client must check the delta between the notBefore and and notAfter fields in the issued certificate to determine the actual duration.
 
@@ -700,33 +699,33 @@ class CertificateSigningRequestSpecPatch(dict):
         """
         return pulumi.get(self, "expiration_seconds")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def extra(self) -> Optional[Mapping[str, Sequence[builtins.str]]]:
+    def extra(self) -> Optional[Mapping[str, Sequence[_builtins.str]]]:
         """
         extra contains extra attributes of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         return pulumi.get(self, "extra")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def groups(self) -> Optional[Sequence[builtins.str]]:
+    def groups(self) -> Optional[Sequence[_builtins.str]]:
         """
         groups contains group membership of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         return pulumi.get(self, "groups")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def request(self) -> Optional[builtins.str]:
+    def request(self) -> Optional[_builtins.str]:
         """
         request contains an x509 certificate signing request encoded in a "CERTIFICATE REQUEST" PEM block. When serialized as JSON or YAML, the data is additionally base64-encoded.
         """
         return pulumi.get(self, "request")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="signerName")
-    def signer_name(self) -> Optional[builtins.str]:
+    def signer_name(self) -> Optional[_builtins.str]:
         """
         signerName indicates the requested signer, and is a qualified name.
 
@@ -752,17 +751,17 @@ class CertificateSigningRequestSpecPatch(dict):
         """
         return pulumi.get(self, "signer_name")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def uid(self) -> Optional[builtins.str]:
+    def uid(self) -> Optional[_builtins.str]:
         """
         uid contains the uid of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
         return pulumi.get(self, "uid")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def usages(self) -> Optional[Sequence[builtins.str]]:
+    def usages(self) -> Optional[Sequence[_builtins.str]]:
         """
         usages specifies a set of key usages requested in the issued certificate.
 
@@ -781,9 +780,9 @@ class CertificateSigningRequestSpecPatch(dict):
         """
         return pulumi.get(self, "usages")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def username(self) -> Optional[builtins.str]:
+    def username(self) -> Optional[_builtins.str]:
         """
         username contains the name of the user that created the CertificateSigningRequest. Populated by the API server on creation and immutable.
         """
@@ -796,11 +795,11 @@ class CertificateSigningRequestStatus(dict):
     CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.
     """
     def __init__(__self__, *,
-                 certificate: Optional[builtins.str] = None,
+                 certificate: Optional[_builtins.str] = None,
                  conditions: Optional[Sequence['outputs.CertificateSigningRequestCondition']] = None):
         """
         CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.
-        :param builtins.str certificate: certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
+        :param _builtins.str certificate: certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
                
                If the certificate signing request is denied, a condition of type "Denied" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type "Failed" is added and this field remains empty.
                
@@ -829,9 +828,9 @@ class CertificateSigningRequestStatus(dict):
         if conditions is not None:
             pulumi.set(__self__, "conditions", conditions)
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def certificate(self) -> Optional[builtins.str]:
+    def certificate(self) -> Optional[_builtins.str]:
         """
         certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
 
@@ -858,7 +857,7 @@ class CertificateSigningRequestStatus(dict):
         """
         return pulumi.get(self, "certificate")
 
-    @property
+    @_builtins.property
     @pulumi.getter
     def conditions(self) -> Optional[Sequence['outputs.CertificateSigningRequestCondition']]:
         """
@@ -873,11 +872,11 @@ class CertificateSigningRequestStatusPatch(dict):
     CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.
     """
     def __init__(__self__, *,
-                 certificate: Optional[builtins.str] = None,
+                 certificate: Optional[_builtins.str] = None,
                  conditions: Optional[Sequence['outputs.CertificateSigningRequestConditionPatch']] = None):
         """
         CertificateSigningRequestStatus contains conditions used to indicate approved/denied/failed status of the request, and the issued certificate.
-        :param builtins.str certificate: certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
+        :param _builtins.str certificate: certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
                
                If the certificate signing request is denied, a condition of type "Denied" is added and this field remains empty. If the signer cannot issue the certificate, a condition of type "Failed" is added and this field remains empty.
                
@@ -906,9 +905,9 @@ class CertificateSigningRequestStatusPatch(dict):
         if conditions is not None:
             pulumi.set(__self__, "conditions", conditions)
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def certificate(self) -> Optional[builtins.str]:
+    def certificate(self) -> Optional[_builtins.str]:
         """
         certificate is populated with an issued certificate by the signer after an Approved condition is present. This field is set via the /status subresource. Once populated, this field is immutable.
 
@@ -935,7 +934,7 @@ class CertificateSigningRequestStatusPatch(dict):
         """
         return pulumi.get(self, "certificate")
 
-    @property
+    @_builtins.property
     @pulumi.getter
     def conditions(self) -> Optional[Sequence['outputs.CertificateSigningRequestConditionPatch']]:
         """