pulumi-vault 5.16.0a1694757730__tar.gz → 5.16.0a1697145324__tar.gz

{pulumi_vault-5.16.0a1694757730 → pulumi_vault-5.16.0a1697145324}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: pulumi_vault
-Version: 5.16.0a1694757730
+Version: 5.16.0a1697145324
 Summary: A Pulumi package for creating and managing HashiCorp Vault cloud resources.
 Home-page: https://pulumi.io
 License: Apache-2.0

{pulumi_vault-5.16.0a1694757730 → pulumi_vault-5.16.0a1697145324}/pulumi_vault/cert_auth_backend_role.py

@@ -42,7 +42,7 @@ class CertAuthBackendRoleArgs:
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_common_names: Allowed the common names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_dns_sans: Allowed alternative dns names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_email_sans: Allowed emails for authenticated client certificates
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_names: Allowed subject names for authenticated client certificates
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_names: DEPRECATED: Please use the individual `allowed_X_sans` parameters instead. Allowed subject names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_organizational_units: Allowed organization units for authenticated client certificates.
                *In previous provider releases this field was incorrectly named `allowed_organization_units`, please update accordingly*
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_uri_sans: Allowed URIs for authenticated client certificates
@@ -180,7 +180,7 @@ class CertAuthBackendRoleArgs:
     @pulumi.getter(name="allowedNames")
     def allowed_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Allowed subject names for authenticated client certificates
+        DEPRECATED: Please use the individual `allowed_X_sans` parameters instead. Allowed subject names for authenticated client certificates
         """
         return pulumi.get(self, "allowed_names")
 
@@ -441,7 +441,7 @@ class _CertAuthBackendRoleState:
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_common_names: Allowed the common names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_dns_sans: Allowed alternative dns names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_email_sans: Allowed emails for authenticated client certificates
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_names: Allowed subject names for authenticated client certificates
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_names: DEPRECATED: Please use the individual `allowed_X_sans` parameters instead. Allowed subject names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_organizational_units: Allowed organization units for authenticated client certificates.
                *In previous provider releases this field was incorrectly named `allowed_organization_units`, please update accordingly*
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_uri_sans: Allowed URIs for authenticated client certificates
@@ -569,7 +569,7 @@ class _CertAuthBackendRoleState:
     @pulumi.getter(name="allowedNames")
     def allowed_names(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        Allowed subject names for authenticated client certificates
+        DEPRECATED: Please use the individual `allowed_X_sans` parameters instead. Allowed subject names for authenticated client certificates
         """
         return pulumi.get(self, "allowed_names")
 
@@ -869,7 +869,7 @@ class CertAuthBackendRole(pulumi.CustomResource):
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_common_names: Allowed the common names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_dns_sans: Allowed alternative dns names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_email_sans: Allowed emails for authenticated client certificates
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_names: Allowed subject names for authenticated client certificates
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_names: DEPRECATED: Please use the individual `allowed_X_sans` parameters instead. Allowed subject names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_organizational_units: Allowed organization units for authenticated client certificates.
                *In previous provider releases this field was incorrectly named `allowed_organization_units`, please update accordingly*
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_uri_sans: Allowed URIs for authenticated client certificates
@@ -1054,7 +1054,7 @@ class CertAuthBackendRole(pulumi.CustomResource):
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_common_names: Allowed the common names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_dns_sans: Allowed alternative dns names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_email_sans: Allowed emails for authenticated client certificates
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_names: Allowed subject names for authenticated client certificates
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_names: DEPRECATED: Please use the individual `allowed_X_sans` parameters instead. Allowed subject names for authenticated client certificates
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_organizational_units: Allowed organization units for authenticated client certificates.
                *In previous provider releases this field was incorrectly named `allowed_organization_units`, please update accordingly*
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_uri_sans: Allowed URIs for authenticated client certificates
@@ -1150,7 +1150,7 @@ class CertAuthBackendRole(pulumi.CustomResource):
     @pulumi.getter(name="allowedNames")
     def allowed_names(self) -> pulumi.Output[Sequence[str]]:
         """
-        Allowed subject names for authenticated client certificates
+        DEPRECATED: Please use the individual `allowed_X_sans` parameters instead. Allowed subject names for authenticated client certificates
         """
         return pulumi.get(self, "allowed_names")
 

{pulumi_vault-5.16.0a1694757730 → pulumi_vault-5.16.0a1697145324}/pulumi_vault/ldap/secret_backend.py

@@ -77,7 +77,7 @@ class SecretBackendArgs:
                not begin or end with a `/`. Defaults to `ldap`.
         :param pulumi.Input[int] request_timeout: Timeout, in seconds, for the connection when making requests against the server
                before returning back an error.
-        :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include openldap, ad, and racf.
+        :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         :param pulumi.Input[bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
         :param pulumi.Input[bool] starttls: Issue a StartTLS command after establishing unencrypted connection.
         :param pulumi.Input[str] upndomain: Enables userPrincipalDomain login with [username]@UPNDomain.
@@ -424,7 +424,7 @@ class SecretBackendArgs:
     @pulumi.getter
     def schema(self) -> Optional[pulumi.Input[str]]:
         """
-        The LDAP schema to use when storing entry passwords. Valid schemas include openldap, ad, and racf.
+        The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         """
         return pulumi.get(self, "schema")
 
@@ -574,7 +574,7 @@ class _SecretBackendState:
                not begin or end with a `/`. Defaults to `ldap`.
         :param pulumi.Input[int] request_timeout: Timeout, in seconds, for the connection when making requests against the server
                before returning back an error.
-        :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include openldap, ad, and racf.
+        :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         :param pulumi.Input[bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
         :param pulumi.Input[bool] starttls: Issue a StartTLS command after establishing unencrypted connection.
         :param pulumi.Input[str] upndomain: Enables userPrincipalDomain login with [username]@UPNDomain.
@@ -937,7 +937,7 @@ class _SecretBackendState:
     @pulumi.getter
     def schema(self) -> Optional[pulumi.Input[str]]:
         """
-        The LDAP schema to use when storing entry passwords. Valid schemas include openldap, ad, and racf.
+        The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         """
         return pulumi.get(self, "schema")
 
@@ -1112,7 +1112,7 @@ class SecretBackend(pulumi.CustomResource):
                not begin or end with a `/`. Defaults to `ldap`.
         :param pulumi.Input[int] request_timeout: Timeout, in seconds, for the connection when making requests against the server
                before returning back an error.
-        :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include openldap, ad, and racf.
+        :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         :param pulumi.Input[bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
         :param pulumi.Input[bool] starttls: Issue a StartTLS command after establishing unencrypted connection.
         :param pulumi.Input[str] upndomain: Enables userPrincipalDomain login with [username]@UPNDomain.
@@ -1323,7 +1323,7 @@ class SecretBackend(pulumi.CustomResource):
                not begin or end with a `/`. Defaults to `ldap`.
         :param pulumi.Input[int] request_timeout: Timeout, in seconds, for the connection when making requests against the server
                before returning back an error.
-        :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include openldap, ad, and racf.
+        :param pulumi.Input[str] schema: The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         :param pulumi.Input[bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
         :param pulumi.Input[bool] starttls: Issue a StartTLS command after establishing unencrypted connection.
         :param pulumi.Input[str] upndomain: Enables userPrincipalDomain login with [username]@UPNDomain.
@@ -1566,7 +1566,7 @@ class SecretBackend(pulumi.CustomResource):
     @pulumi.getter
     def schema(self) -> pulumi.Output[str]:
         """
-        The LDAP schema to use when storing entry passwords. Valid schemas include openldap, ad, and racf.
+        The LDAP schema to use when storing entry passwords. Valid schemas include `openldap`, `ad`, and `racf`. Default is `openldap`.
         """
         return pulumi.get(self, "schema")
 

{pulumi_vault-5.16.0a1694757730 → pulumi_vault-5.16.0a1697145324}/pulumi_vault/quota_lease_count.py

@@ -17,7 +17,8 @@ class QuotaLeaseCountArgs:
                  max_leases: pulumi.Input[int],
                  name: Optional[pulumi.Input[str]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
-                 path: Optional[pulumi.Input[str]] = None):
+                 path: Optional[pulumi.Input[str]] = None,
+                 role: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a QuotaLeaseCount resource.
         :param pulumi.Input[int] max_leases: The maximum number of leases to be allowed by the quota
@@ -33,6 +34,7 @@ class QuotaLeaseCountArgs:
                Updating this field on an existing quota can have "moving" effects. For example, updating
                `auth/userpass` to `namespace1/auth/userpass` moves this quota from being a global mount quota to
                a namespace specific mount quota. **Note, namespaces are supported in Enterprise only.**
+        :param pulumi.Input[str] role: If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
         """
         pulumi.set(__self__, "max_leases", max_leases)
         if name is not None:
@@ -41,6 +43,8 @@ class QuotaLeaseCountArgs:
             pulumi.set(__self__, "namespace", namespace)
         if path is not None:
             pulumi.set(__self__, "path", path)
+        if role is not None:
+            pulumi.set(__self__, "role", role)
 
     @property
     @pulumi.getter(name="maxLeases")
@@ -99,6 +103,18 @@ class QuotaLeaseCountArgs:
     def path(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "path", value)
 
+    @property
+    @pulumi.getter
+    def role(self) -> Optional[pulumi.Input[str]]:
+        """
+        If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
+        """
+        return pulumi.get(self, "role")
+
+    @role.setter
+    def role(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "role", value)
+
 
 @pulumi.input_type
 class _QuotaLeaseCountState:
@@ -106,7 +122,8 @@ class _QuotaLeaseCountState:
                  max_leases: Optional[pulumi.Input[int]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
-                 path: Optional[pulumi.Input[str]] = None):
+                 path: Optional[pulumi.Input[str]] = None,
+                 role: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering QuotaLeaseCount resources.
         :param pulumi.Input[int] max_leases: The maximum number of leases to be allowed by the quota
@@ -122,6 +139,7 @@ class _QuotaLeaseCountState:
                Updating this field on an existing quota can have "moving" effects. For example, updating
                `auth/userpass` to `namespace1/auth/userpass` moves this quota from being a global mount quota to
                a namespace specific mount quota. **Note, namespaces are supported in Enterprise only.**
+        :param pulumi.Input[str] role: If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
         """
         if max_leases is not None:
             pulumi.set(__self__, "max_leases", max_leases)
@@ -131,6 +149,8 @@ class _QuotaLeaseCountState:
             pulumi.set(__self__, "namespace", namespace)
         if path is not None:
             pulumi.set(__self__, "path", path)
+        if role is not None:
+            pulumi.set(__self__, "role", role)
 
     @property
     @pulumi.getter(name="maxLeases")
@@ -189,6 +209,18 @@ class _QuotaLeaseCountState:
     def path(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "path", value)
 
+    @property
+    @pulumi.getter
+    def role(self) -> Optional[pulumi.Input[str]]:
+        """
+        If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
+        """
+        return pulumi.get(self, "role")
+
+    @role.setter
+    def role(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "role", value)
+
 
 class QuotaLeaseCount(pulumi.CustomResource):
     @overload
@@ -199,6 +231,7 @@ class QuotaLeaseCount(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None,
+                 role: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
         Manage lease count quotas which enforce the number of leases that can be created.
@@ -244,6 +277,7 @@ class QuotaLeaseCount(pulumi.CustomResource):
                Updating this field on an existing quota can have "moving" effects. For example, updating
                `auth/userpass` to `namespace1/auth/userpass` moves this quota from being a global mount quota to
                a namespace specific mount quota. **Note, namespaces are supported in Enterprise only.**
+        :param pulumi.Input[str] role: If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
         """
         ...
     @overload
@@ -299,6 +333,7 @@ class QuotaLeaseCount(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None,
+                 role: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -314,6 +349,7 @@ class QuotaLeaseCount(pulumi.CustomResource):
             __props__.__dict__["name"] = name
             __props__.__dict__["namespace"] = namespace
             __props__.__dict__["path"] = path
+            __props__.__dict__["role"] = role
         super(QuotaLeaseCount, __self__).__init__(
             'vault:index/quotaLeaseCount:QuotaLeaseCount',
             resource_name,
@@ -327,7 +363,8 @@ class QuotaLeaseCount(pulumi.CustomResource):
             max_leases: Optional[pulumi.Input[int]] = None,
             name: Optional[pulumi.Input[str]] = None,
             namespace: Optional[pulumi.Input[str]] = None,
-            path: Optional[pulumi.Input[str]] = None) -> 'QuotaLeaseCount':
+            path: Optional[pulumi.Input[str]] = None,
+            role: Optional[pulumi.Input[str]] = None) -> 'QuotaLeaseCount':
         """
         Get an existing QuotaLeaseCount resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -348,6 +385,7 @@ class QuotaLeaseCount(pulumi.CustomResource):
                Updating this field on an existing quota can have "moving" effects. For example, updating
                `auth/userpass` to `namespace1/auth/userpass` moves this quota from being a global mount quota to
                a namespace specific mount quota. **Note, namespaces are supported in Enterprise only.**
+        :param pulumi.Input[str] role: If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -357,6 +395,7 @@ class QuotaLeaseCount(pulumi.CustomResource):
         __props__.__dict__["name"] = name
         __props__.__dict__["namespace"] = namespace
         __props__.__dict__["path"] = path
+        __props__.__dict__["role"] = role
         return QuotaLeaseCount(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -400,3 +439,11 @@ class QuotaLeaseCount(pulumi.CustomResource):
         """
         return pulumi.get(self, "path")
 
+    @property
+    @pulumi.getter
+    def role(self) -> pulumi.Output[Optional[str]]:
+        """
+        If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
+        """
+        return pulumi.get(self, "role")
+

{pulumi_vault-5.16.0a1694757730 → pulumi_vault-5.16.0a1697145324}/pulumi_vault/quota_rate_limit.py

@@ -19,7 +19,8 @@ class QuotaRateLimitArgs:
                  interval: Optional[pulumi.Input[int]] = None,
                  name: Optional[pulumi.Input[str]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
-                 path: Optional[pulumi.Input[str]] = None):
+                 path: Optional[pulumi.Input[str]] = None,
+                 role: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a QuotaRateLimit resource.
         :param pulumi.Input[float] rate: The maximum number of requests at any given second to be allowed by the quota
@@ -38,6 +39,7 @@ class QuotaRateLimitArgs:
                Updating this field on an existing quota can have "moving" effects. For example, updating
                `auth/userpass` to `namespace1/auth/userpass` moves this quota from being a global mount quota to
                a namespace specific mount quota. **Note, namespaces are supported in Enterprise only.**
+        :param pulumi.Input[str] role: If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
         """
         pulumi.set(__self__, "rate", rate)
         if block_interval is not None:
@@ -50,6 +52,8 @@ class QuotaRateLimitArgs:
             pulumi.set(__self__, "namespace", namespace)
         if path is not None:
             pulumi.set(__self__, "path", path)
+        if role is not None:
+            pulumi.set(__self__, "role", role)
 
     @property
     @pulumi.getter
@@ -133,6 +137,18 @@ class QuotaRateLimitArgs:
     def path(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "path", value)
 
+    @property
+    @pulumi.getter
+    def role(self) -> Optional[pulumi.Input[str]]:
+        """
+        If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
+        """
+        return pulumi.get(self, "role")
+
+    @role.setter
+    def role(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "role", value)
+
 
 @pulumi.input_type
 class _QuotaRateLimitState:
@@ -142,7 +158,8 @@ class _QuotaRateLimitState:
                  name: Optional[pulumi.Input[str]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None,
-                 rate: Optional[pulumi.Input[float]] = None):
+                 rate: Optional[pulumi.Input[float]] = None,
+                 role: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering QuotaRateLimit resources.
         :param pulumi.Input[int] block_interval: If set, when a client reaches a rate limit threshold, the client will
@@ -161,6 +178,7 @@ class _QuotaRateLimitState:
                a namespace specific mount quota. **Note, namespaces are supported in Enterprise only.**
         :param pulumi.Input[float] rate: The maximum number of requests at any given second to be allowed by the quota
                rule. The `rate` must be positive.
+        :param pulumi.Input[str] role: If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
         """
         if block_interval is not None:
             pulumi.set(__self__, "block_interval", block_interval)
@@ -174,6 +192,8 @@ class _QuotaRateLimitState:
             pulumi.set(__self__, "path", path)
         if rate is not None:
             pulumi.set(__self__, "rate", rate)
+        if role is not None:
+            pulumi.set(__self__, "role", role)
 
     @property
     @pulumi.getter(name="blockInterval")
@@ -257,6 +277,18 @@ class _QuotaRateLimitState:
     def rate(self, value: Optional[pulumi.Input[float]]):
         pulumi.set(self, "rate", value)
 
+    @property
+    @pulumi.getter
+    def role(self) -> Optional[pulumi.Input[str]]:
+        """
+        If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
+        """
+        return pulumi.get(self, "role")
+
+    @role.setter
+    def role(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "role", value)
+
 
 class QuotaRateLimit(pulumi.CustomResource):
     @overload
@@ -269,6 +301,7 @@ class QuotaRateLimit(pulumi.CustomResource):
                  namespace: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None,
                  rate: Optional[pulumi.Input[float]] = None,
+                 role: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
         Manage rate limit quotas which enforce API rate limiting using a token bucket algorithm.
@@ -315,6 +348,7 @@ class QuotaRateLimit(pulumi.CustomResource):
                a namespace specific mount quota. **Note, namespaces are supported in Enterprise only.**
         :param pulumi.Input[float] rate: The maximum number of requests at any given second to be allowed by the quota
                rule. The `rate` must be positive.
+        :param pulumi.Input[str] role: If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
         """
         ...
     @overload
@@ -370,6 +404,7 @@ class QuotaRateLimit(pulumi.CustomResource):
                  namespace: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None,
                  rate: Optional[pulumi.Input[float]] = None,
+                 role: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -387,6 +422,7 @@ class QuotaRateLimit(pulumi.CustomResource):
             if rate is None and not opts.urn:
                 raise TypeError("Missing required property 'rate'")
             __props__.__dict__["rate"] = rate
+            __props__.__dict__["role"] = role
         super(QuotaRateLimit, __self__).__init__(
             'vault:index/quotaRateLimit:QuotaRateLimit',
             resource_name,
@@ -402,7 +438,8 @@ class QuotaRateLimit(pulumi.CustomResource):
             name: Optional[pulumi.Input[str]] = None,
             namespace: Optional[pulumi.Input[str]] = None,
             path: Optional[pulumi.Input[str]] = None,
-            rate: Optional[pulumi.Input[float]] = None) -> 'QuotaRateLimit':
+            rate: Optional[pulumi.Input[float]] = None,
+            role: Optional[pulumi.Input[str]] = None) -> 'QuotaRateLimit':
         """
         Get an existing QuotaRateLimit resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -426,6 +463,7 @@ class QuotaRateLimit(pulumi.CustomResource):
                a namespace specific mount quota. **Note, namespaces are supported in Enterprise only.**
         :param pulumi.Input[float] rate: The maximum number of requests at any given second to be allowed by the quota
                rule. The `rate` must be positive.
+        :param pulumi.Input[str] role: If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -437,6 +475,7 @@ class QuotaRateLimit(pulumi.CustomResource):
         __props__.__dict__["namespace"] = namespace
         __props__.__dict__["path"] = path
         __props__.__dict__["rate"] = rate
+        __props__.__dict__["role"] = role
         return QuotaRateLimit(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -497,3 +536,11 @@ class QuotaRateLimit(pulumi.CustomResource):
         """
         return pulumi.get(self, "rate")
 
+    @property
+    @pulumi.getter
+    def role(self) -> pulumi.Output[Optional[str]]:
+        """
+        If set on a quota where `path` is set to an auth mount with a concept of roles (such as /auth/approle/), this will make the quota restrict login requests to that mount that are made with the specified role.
+        """
+        return pulumi.get(self, "role")
+

{pulumi_vault-5.16.0a1694757730 → pulumi_vault-5.16.0a1697145324}/pulumi_vault.egg-info/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: pulumi-vault
-Version: 5.16.0a1694757730
+Version: 5.16.0a1697145324
 Summary: A Pulumi package for creating and managing HashiCorp Vault cloud resources.
 Home-page: https://pulumi.io
 License: Apache-2.0

{pulumi_vault-5.16.0a1694757730 → pulumi_vault-5.16.0a1697145324}/setup.py

@@ -8,8 +8,8 @@ from setuptools.command.install import install
 from subprocess import check_call
 
 
-VERSION = "5.16.0a1694757730"
-PLUGIN_VERSION = "5.16.0-alpha.1694757730+2d9fcea1"
+VERSION = "5.16.0a1697145324"
+PLUGIN_VERSION = "5.16.0-alpha.1697145324+c8f36fe1"
 
 class InstallPluginCommand(install):
     def run(self):