pulumi-vault 5.16.0a1697145324__tar.gz → 5.16.0a1697217180__tar.gz

{pulumi_vault-5.16.0a1697145324 → pulumi_vault-5.16.0a1697217180}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: pulumi_vault
-Version: 5.16.0a1697145324
+Version: 5.16.0a1697217180
 Summary: A Pulumi package for creating and managing HashiCorp Vault cloud resources.
 Home-page: https://pulumi.io
 License: Apache-2.0

{pulumi_vault-5.16.0a1697145324 → pulumi_vault-5.16.0a1697217180}/pulumi_vault/approle/auth_backend_login.py

@@ -400,7 +400,7 @@ class AuthBackendLogin(pulumi.CustomResource):
             if role_id is None and not opts.urn:
                 raise TypeError("Missing required property 'role_id'")
             __props__.__dict__["role_id"] = role_id
-            __props__.__dict__["secret_id"] = secret_id
+            __props__.__dict__["secret_id"] = None if secret_id is None else pulumi.Output.secret(secret_id)
             __props__.__dict__["accessor"] = None
             __props__.__dict__["client_token"] = None
             __props__.__dict__["lease_duration"] = None
@@ -408,6 +408,8 @@ class AuthBackendLogin(pulumi.CustomResource):
             __props__.__dict__["metadata"] = None
             __props__.__dict__["policies"] = None
             __props__.__dict__["renewable"] = None
+        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["clientToken", "secretId"])
+        opts = pulumi.ResourceOptions.merge(opts, secret_opts)
         super(AuthBackendLogin, __self__).__init__(
             'vault:appRole/authBackendLogin:AuthBackendLogin',
             resource_name,

{pulumi_vault-5.16.0a1697145324 → pulumi_vault-5.16.0a1697217180}/pulumi_vault/aws/secret_backend.py

@@ -19,6 +19,7 @@ class SecretBackendArgs:
                  description: Optional[pulumi.Input[str]] = None,
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  iam_endpoint: Optional[pulumi.Input[str]] = None,
+                 local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None,
@@ -36,6 +37,7 @@ class SecretBackendArgs:
         :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
         :param pulumi.Input[str] iam_endpoint: Specifies a custom HTTP IAM endpoint to use.
+        :param pulumi.Input[bool] local: Specifies whether the secrets mount will be marked as local. Local mounts are not replicated to performance replicas.
         :param pulumi.Input[int] max_lease_ttl_seconds: The maximum TTL that can be requested
                for credentials issued by this backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
@@ -60,6 +62,8 @@ class SecretBackendArgs:
             pulumi.set(__self__, "disable_remount", disable_remount)
         if iam_endpoint is not None:
             pulumi.set(__self__, "iam_endpoint", iam_endpoint)
+        if local is not None:
+            pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
             pulumi.set(__self__, "max_lease_ttl_seconds", max_lease_ttl_seconds)
         if namespace is not None:
@@ -138,6 +142,18 @@ class SecretBackendArgs:
     def iam_endpoint(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "iam_endpoint", value)
 
+    @property
+    @pulumi.getter
+    def local(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Specifies whether the secrets mount will be marked as local. Local mounts are not replicated to performance replicas.
+        """
+        return pulumi.get(self, "local")
+
+    @local.setter
+    def local(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "local", value)
+
     @property
     @pulumi.getter(name="maxLeaseTtlSeconds")
     def max_lease_ttl_seconds(self) -> Optional[pulumi.Input[int]]:
@@ -237,6 +253,7 @@ class _SecretBackendState:
                  description: Optional[pulumi.Input[str]] = None,
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  iam_endpoint: Optional[pulumi.Input[str]] = None,
+                 local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None,
@@ -254,6 +271,7 @@ class _SecretBackendState:
         :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
         :param pulumi.Input[str] iam_endpoint: Specifies a custom HTTP IAM endpoint to use.
+        :param pulumi.Input[bool] local: Specifies whether the secrets mount will be marked as local. Local mounts are not replicated to performance replicas.
         :param pulumi.Input[int] max_lease_ttl_seconds: The maximum TTL that can be requested
                for credentials issued by this backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
@@ -278,6 +296,8 @@ class _SecretBackendState:
             pulumi.set(__self__, "disable_remount", disable_remount)
         if iam_endpoint is not None:
             pulumi.set(__self__, "iam_endpoint", iam_endpoint)
+        if local is not None:
+            pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
             pulumi.set(__self__, "max_lease_ttl_seconds", max_lease_ttl_seconds)
         if namespace is not None:
@@ -356,6 +376,18 @@ class _SecretBackendState:
     def iam_endpoint(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "iam_endpoint", value)
 
+    @property
+    @pulumi.getter
+    def local(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Specifies whether the secrets mount will be marked as local. Local mounts are not replicated to performance replicas.
+        """
+        return pulumi.get(self, "local")
+
+    @local.setter
+    def local(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "local", value)
+
     @property
     @pulumi.getter(name="maxLeaseTtlSeconds")
     def max_lease_ttl_seconds(self) -> Optional[pulumi.Input[int]]:
@@ -457,6 +489,7 @@ class SecretBackend(pulumi.CustomResource):
                  description: Optional[pulumi.Input[str]] = None,
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  iam_endpoint: Optional[pulumi.Input[str]] = None,
+                 local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None,
@@ -484,6 +517,7 @@ class SecretBackend(pulumi.CustomResource):
         :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
         :param pulumi.Input[str] iam_endpoint: Specifies a custom HTTP IAM endpoint to use.
+        :param pulumi.Input[bool] local: Specifies whether the secrets mount will be marked as local. Local mounts are not replicated to performance replicas.
         :param pulumi.Input[int] max_lease_ttl_seconds: The maximum TTL that can be requested
                for credentials issued by this backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
@@ -533,6 +567,7 @@ class SecretBackend(pulumi.CustomResource):
                  description: Optional[pulumi.Input[str]] = None,
                  disable_remount: Optional[pulumi.Input[bool]] = None,
                  iam_endpoint: Optional[pulumi.Input[str]] = None,
+                 local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  path: Optional[pulumi.Input[str]] = None,
@@ -554,6 +589,7 @@ class SecretBackend(pulumi.CustomResource):
             __props__.__dict__["description"] = description
             __props__.__dict__["disable_remount"] = disable_remount
             __props__.__dict__["iam_endpoint"] = iam_endpoint
+            __props__.__dict__["local"] = local
             __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
             __props__.__dict__["namespace"] = namespace
             __props__.__dict__["path"] = path
@@ -578,6 +614,7 @@ class SecretBackend(pulumi.CustomResource):
             description: Optional[pulumi.Input[str]] = None,
             disable_remount: Optional[pulumi.Input[bool]] = None,
             iam_endpoint: Optional[pulumi.Input[str]] = None,
+            local: Optional[pulumi.Input[bool]] = None,
             max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
             namespace: Optional[pulumi.Input[str]] = None,
             path: Optional[pulumi.Input[str]] = None,
@@ -600,6 +637,7 @@ class SecretBackend(pulumi.CustomResource):
         :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
         :param pulumi.Input[str] iam_endpoint: Specifies a custom HTTP IAM endpoint to use.
+        :param pulumi.Input[bool] local: Specifies whether the secrets mount will be marked as local. Local mounts are not replicated to performance replicas.
         :param pulumi.Input[int] max_lease_ttl_seconds: The maximum TTL that can be requested
                for credentials issued by this backend.
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
@@ -623,6 +661,7 @@ class SecretBackend(pulumi.CustomResource):
         __props__.__dict__["description"] = description
         __props__.__dict__["disable_remount"] = disable_remount
         __props__.__dict__["iam_endpoint"] = iam_endpoint
+        __props__.__dict__["local"] = local
         __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
         __props__.__dict__["namespace"] = namespace
         __props__.__dict__["path"] = path
@@ -675,6 +714,14 @@ class SecretBackend(pulumi.CustomResource):
         """
         return pulumi.get(self, "iam_endpoint")
 
+    @property
+    @pulumi.getter
+    def local(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Specifies whether the secrets mount will be marked as local. Local mounts are not replicated to performance replicas.
+        """
+        return pulumi.get(self, "local")
+
     @property
     @pulumi.getter(name="maxLeaseTtlSeconds")
     def max_lease_ttl_seconds(self) -> pulumi.Output[int]:

{pulumi_vault-5.16.0a1697145324 → pulumi_vault-5.16.0a1697217180}/pulumi_vault/database/_inputs.py

@@ -1175,16 +1175,19 @@ class SecretBackendConnectionMssqlArgs:
 @pulumi.input_type
 class SecretBackendConnectionMysqlArgs:
     def __init__(__self__, *,
+                 auth_type: Optional[pulumi.Input[str]] = None,
                  connection_url: Optional[pulumi.Input[str]] = None,
                  max_connection_lifetime: Optional[pulumi.Input[int]] = None,
                  max_idle_connections: Optional[pulumi.Input[int]] = None,
                  max_open_connections: Optional[pulumi.Input[int]] = None,
                  password: Optional[pulumi.Input[str]] = None,
+                 service_account_json: Optional[pulumi.Input[str]] = None,
                  tls_ca: Optional[pulumi.Input[str]] = None,
                  tls_certificate_key: Optional[pulumi.Input[str]] = None,
                  username: Optional[pulumi.Input[str]] = None,
                  username_template: Optional[pulumi.Input[str]] = None):
         """
+        :param pulumi.Input[str] auth_type: Enable IAM authentication to a Google Cloud instance when set to `gcp_iam`
         :param pulumi.Input[str] connection_url: Specifies the Redshift DSN. See
                the [Vault
                docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
@@ -1195,11 +1198,14 @@ class SecretBackendConnectionMysqlArgs:
         :param pulumi.Input[int] max_open_connections: The maximum number of open connections to
                the database.
         :param pulumi.Input[str] password: The root credential password used in the connection URL.
+        :param pulumi.Input[str] service_account_json: JSON encoding of an IAM access key. Requires `auth_type` to be `gcp_iam`.
         :param pulumi.Input[str] tls_ca: x509 CA file for validating the certificate presented by the MySQL server. Must be PEM encoded.
         :param pulumi.Input[str] tls_certificate_key: x509 certificate for connecting to the database. This must be a PEM encoded version of the private key and the certificate combined.
         :param pulumi.Input[str] username: The root credential username used in the connection URL.
         :param pulumi.Input[str] username_template: - [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
         """
+        if auth_type is not None:
+            pulumi.set(__self__, "auth_type", auth_type)
         if connection_url is not None:
             pulumi.set(__self__, "connection_url", connection_url)
         if max_connection_lifetime is not None:
@@ -1210,6 +1216,8 @@ class SecretBackendConnectionMysqlArgs:
             pulumi.set(__self__, "max_open_connections", max_open_connections)
         if password is not None:
             pulumi.set(__self__, "password", password)
+        if service_account_json is not None:
+            pulumi.set(__self__, "service_account_json", service_account_json)
         if tls_ca is not None:
             pulumi.set(__self__, "tls_ca", tls_ca)
         if tls_certificate_key is not None:
@@ -1219,6 +1227,18 @@ class SecretBackendConnectionMysqlArgs:
         if username_template is not None:
             pulumi.set(__self__, "username_template", username_template)
 
+    @property
+    @pulumi.getter(name="authType")
+    def auth_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        Enable IAM authentication to a Google Cloud instance when set to `gcp_iam`
+        """
+        return pulumi.get(self, "auth_type")
+
+    @auth_type.setter
+    def auth_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "auth_type", value)
+
     @property
     @pulumi.getter(name="connectionUrl")
     def connection_url(self) -> Optional[pulumi.Input[str]]:
@@ -1284,6 +1304,18 @@ class SecretBackendConnectionMysqlArgs:
     def password(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "password", value)
 
+    @property
+    @pulumi.getter(name="serviceAccountJson")
+    def service_account_json(self) -> Optional[pulumi.Input[str]]:
+        """
+        JSON encoding of an IAM access key. Requires `auth_type` to be `gcp_iam`.
+        """
+        return pulumi.get(self, "service_account_json")
+
+    @service_account_json.setter
+    def service_account_json(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "service_account_json", value)
+
     @property
     @pulumi.getter(name="tlsCa")
     def tls_ca(self) -> Optional[pulumi.Input[str]]:
@@ -1852,15 +1884,18 @@ class SecretBackendConnectionOracleArgs:
 @pulumi.input_type
 class SecretBackendConnectionPostgresqlArgs:
     def __init__(__self__, *,
+                 auth_type: Optional[pulumi.Input[str]] = None,
                  connection_url: Optional[pulumi.Input[str]] = None,
                  disable_escaping: Optional[pulumi.Input[bool]] = None,
                  max_connection_lifetime: Optional[pulumi.Input[int]] = None,
                  max_idle_connections: Optional[pulumi.Input[int]] = None,
                  max_open_connections: Optional[pulumi.Input[int]] = None,
                  password: Optional[pulumi.Input[str]] = None,
+                 service_account_json: Optional[pulumi.Input[str]] = None,
                  username: Optional[pulumi.Input[str]] = None,
                  username_template: Optional[pulumi.Input[str]] = None):
         """
+        :param pulumi.Input[str] auth_type: Enable IAM authentication to a Google Cloud instance when set to `gcp_iam`
         :param pulumi.Input[str] connection_url: Specifies the Redshift DSN. See
                the [Vault
                docs](https://www.vaultproject.io/api-docs/secret/databases/redshift#sample-payload)
@@ -1872,9 +1907,12 @@ class SecretBackendConnectionPostgresqlArgs:
         :param pulumi.Input[int] max_open_connections: The maximum number of open connections to
                the database.
         :param pulumi.Input[str] password: The root credential password used in the connection URL.
+        :param pulumi.Input[str] service_account_json: JSON encoding of an IAM access key. Requires `auth_type` to be `gcp_iam`.
         :param pulumi.Input[str] username: The root credential username used in the connection URL.
         :param pulumi.Input[str] username_template: - [Template](https://www.vaultproject.io/docs/concepts/username-templating) describing how dynamic usernames are generated.
         """
+        if auth_type is not None:
+            pulumi.set(__self__, "auth_type", auth_type)
         if connection_url is not None:
             pulumi.set(__self__, "connection_url", connection_url)
         if disable_escaping is not None:
@@ -1887,11 +1925,25 @@ class SecretBackendConnectionPostgresqlArgs:
             pulumi.set(__self__, "max_open_connections", max_open_connections)
         if password is not None:
             pulumi.set(__self__, "password", password)
+        if service_account_json is not None:
+            pulumi.set(__self__, "service_account_json", service_account_json)
         if username is not None:
             pulumi.set(__self__, "username", username)
         if username_template is not None:
             pulumi.set(__self__, "username_template", username_template)
 
+    @property
+    @pulumi.getter(name="authType")
+    def auth_type(self) -> Optional[pulumi.Input[str]]:
+        """
+        Enable IAM authentication to a Google Cloud instance when set to `gcp_iam`
+        """
+        return pulumi.get(self, "auth_type")
+
+    @auth_type.setter
+    def auth_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "auth_type", value)
+
     @property
     @pulumi.getter(name="connectionUrl")
     def connection_url(self) -> Optional[pulumi.Input[str]]:
@@ -1969,6 +2021,18 @@ class SecretBackendConnectionPostgresqlArgs:
     def password(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "password", value)
 
+    @property
+    @pulumi.getter(name="serviceAccountJson")
+    def service_account_json(self) -> Optional[pulumi.Input[str]]:
+        """
+        JSON encoding of an IAM access key. Requires `auth_type` to be `gcp_iam`.
+        """
+        return pulumi.get(self, "service_account_json")
+
+    @service_account_json.setter
+    def service_account_json(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "service_account_json", value)
+
     @property
     @pulumi.getter
     def username(self) -> Optional[pulumi.Input[str]]:
@@ -4339,6 +4403,7 @@ class SecretsMountMysqlArgs:
     def __init__(__self__, *,
                  name: pulumi.Input[str],
                  allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 auth_type: Optional[pulumi.Input[str]] = None,
                  connection_url: Optional[pulumi.Input[str]] = None,
                  data: Optional[pulumi.Input[Mapping[str, Any]]] = None,
                  max_connection_lifetime: Optional[pulumi.Input[int]] = None,
@@ -4347,6 +4412,7 @@ class SecretsMountMysqlArgs:
                  password: Optional[pulumi.Input[str]] = None,
                  plugin_name: Optional[pulumi.Input[str]] = None,
                  root_rotation_statements: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 service_account_json: Optional[pulumi.Input[str]] = None,
                  tls_ca: Optional[pulumi.Input[str]] = None,
                  tls_certificate_key: Optional[pulumi.Input[str]] = None,
                  username: Optional[pulumi.Input[str]] = None,
@@ -4377,6 +4443,8 @@ class SecretsMountMysqlArgs:
         pulumi.set(__self__, "name", name)
         if allowed_roles is not None:
             pulumi.set(__self__, "allowed_roles", allowed_roles)
+        if auth_type is not None:
+            pulumi.set(__self__, "auth_type", auth_type)
         if connection_url is not None:
             pulumi.set(__self__, "connection_url", connection_url)
         if data is not None:
@@ -4393,6 +4461,8 @@ class SecretsMountMysqlArgs:
             pulumi.set(__self__, "plugin_name", plugin_name)
         if root_rotation_statements is not None:
             pulumi.set(__self__, "root_rotation_statements", root_rotation_statements)
+        if service_account_json is not None:
+            pulumi.set(__self__, "service_account_json", service_account_json)
         if tls_ca is not None:
             pulumi.set(__self__, "tls_ca", tls_ca)
         if tls_certificate_key is not None:
@@ -4426,6 +4496,15 @@ class SecretsMountMysqlArgs:
     def allowed_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "allowed_roles", value)
 
+    @property
+    @pulumi.getter(name="authType")
+    def auth_type(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "auth_type")
+
+    @auth_type.setter
+    def auth_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "auth_type", value)
+
     @property
     @pulumi.getter(name="connectionUrl")
     def connection_url(self) -> Optional[pulumi.Input[str]]:
@@ -4526,6 +4605,15 @@ class SecretsMountMysqlArgs:
     def root_rotation_statements(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "root_rotation_statements", value)
 
+    @property
+    @pulumi.getter(name="serviceAccountJson")
+    def service_account_json(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "service_account_json")
+
+    @service_account_json.setter
+    def service_account_json(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "service_account_json", value)
+
     @property
     @pulumi.getter(name="tlsCa")
     def tls_ca(self) -> Optional[pulumi.Input[str]]:
@@ -5481,6 +5569,7 @@ class SecretsMountPostgresqlArgs:
     def __init__(__self__, *,
                  name: pulumi.Input[str],
                  allowed_roles: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 auth_type: Optional[pulumi.Input[str]] = None,
                  connection_url: Optional[pulumi.Input[str]] = None,
                  data: Optional[pulumi.Input[Mapping[str, Any]]] = None,
                  disable_escaping: Optional[pulumi.Input[bool]] = None,
@@ -5490,6 +5579,7 @@ class SecretsMountPostgresqlArgs:
                  password: Optional[pulumi.Input[str]] = None,
                  plugin_name: Optional[pulumi.Input[str]] = None,
                  root_rotation_statements: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
+                 service_account_json: Optional[pulumi.Input[str]] = None,
                  username: Optional[pulumi.Input[str]] = None,
                  username_template: Optional[pulumi.Input[str]] = None,
                  verify_connection: Optional[pulumi.Input[bool]] = None):
@@ -5517,6 +5607,8 @@ class SecretsMountPostgresqlArgs:
         pulumi.set(__self__, "name", name)
         if allowed_roles is not None:
             pulumi.set(__self__, "allowed_roles", allowed_roles)
+        if auth_type is not None:
+            pulumi.set(__self__, "auth_type", auth_type)
         if connection_url is not None:
             pulumi.set(__self__, "connection_url", connection_url)
         if data is not None:
@@ -5535,6 +5627,8 @@ class SecretsMountPostgresqlArgs:
             pulumi.set(__self__, "plugin_name", plugin_name)
         if root_rotation_statements is not None:
             pulumi.set(__self__, "root_rotation_statements", root_rotation_statements)
+        if service_account_json is not None:
+            pulumi.set(__self__, "service_account_json", service_account_json)
         if username is not None:
             pulumi.set(__self__, "username", username)
         if username_template is not None:
@@ -5564,6 +5658,15 @@ class SecretsMountPostgresqlArgs:
     def allowed_roles(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "allowed_roles", value)
 
+    @property
+    @pulumi.getter(name="authType")
+    def auth_type(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "auth_type")
+
+    @auth_type.setter
+    def auth_type(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "auth_type", value)
+
     @property
     @pulumi.getter(name="connectionUrl")
     def connection_url(self) -> Optional[pulumi.Input[str]]:
@@ -5676,6 +5779,15 @@ class SecretsMountPostgresqlArgs:
     def root_rotation_statements(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "root_rotation_statements", value)
 
+    @property
+    @pulumi.getter(name="serviceAccountJson")
+    def service_account_json(self) -> Optional[pulumi.Input[str]]:
+        return pulumi.get(self, "service_account_json")
+
+    @service_account_json.setter
+    def service_account_json(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "service_account_json", value)
+
     @property
     @pulumi.getter
     def username(self) -> Optional[pulumi.Input[str]]: