PyPI - pulumi-vault - Versions diffs - 6.2.0__py3-none-any.whl → 6.2.0a1712731873__py3-none-any.whl - Mend

pulumi-vault 6.2.0py3-none-any.whl → 6.2.0a1712731873py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (192) hide show

pulumi_vault/__init__.py +0 -26
pulumi_vault/_inputs.py +20 -0
pulumi_vault/ad/secret_backend.py +6 -2
pulumi_vault/ad/secret_library.py +4 -2
pulumi_vault/ad/secret_role.py +4 -0
pulumi_vault/alicloud/auth_backend_role.py +192 -69
pulumi_vault/approle/auth_backend_login.py +4 -0
pulumi_vault/approle/auth_backend_role.py +186 -63
pulumi_vault/approle/auth_backend_role_secret_id.py +4 -0
pulumi_vault/approle/get_auth_backend_role_id.py +4 -0
pulumi_vault/audit.py +20 -12
pulumi_vault/audit_request_header.py +6 -6
pulumi_vault/auth_backend.py +0 -47
pulumi_vault/aws/auth_backend_client.py +17 -253
pulumi_vault/aws/auth_backend_config_identity.py +4 -0
pulumi_vault/aws/auth_backend_identity_whitelist.py +10 -6
pulumi_vault/aws/auth_backend_login.py +8 -0
pulumi_vault/aws/auth_backend_role.py +186 -63
pulumi_vault/aws/auth_backend_roletag_blacklist.py +10 -6
pulumi_vault/aws/auth_backend_sts_role.py +4 -0
pulumi_vault/aws/secret_backend_role.py +4 -56
pulumi_vault/aws/secret_backend_static_role.py +4 -2
pulumi_vault/azure/auth_backend_config.py +10 -139
pulumi_vault/azure/auth_backend_role.py +186 -63
pulumi_vault/azure/backend.py +22 -217
pulumi_vault/azure/backend_role.py +18 -14
pulumi_vault/azure/get_access_credentials.py +4 -0
pulumi_vault/cert_auth_backend_role.py +208 -75
pulumi_vault/consul/secret_backend.py +18 -10
pulumi_vault/consul/secret_backend_role.py +4 -2
pulumi_vault/database/_inputs.py +784 -522
pulumi_vault/database/outputs.py +784 -522
pulumi_vault/database/secret_backend_connection.py +4 -2
pulumi_vault/database/secret_backend_role.py +4 -4
pulumi_vault/database/secret_backend_static_role.py +8 -10
pulumi_vault/database/secrets_mount.py +4 -286
pulumi_vault/egp_policy.py +8 -4
pulumi_vault/gcp/auth_backend.py +18 -226
pulumi_vault/gcp/auth_backend_role.py +264 -63
pulumi_vault/gcp/get_auth_backend_role.py +4 -0
pulumi_vault/gcp/secret_backend.py +9 -275
pulumi_vault/gcp/secret_impersonated_account.py +14 -12
pulumi_vault/gcp/secret_roleset.py +6 -4
pulumi_vault/gcp/secret_static_account.py +16 -14
pulumi_vault/generic/endpoint.py +8 -4
pulumi_vault/generic/get_secret.py +4 -40
pulumi_vault/get_auth_backend.py +4 -0
pulumi_vault/get_auth_backends.py +8 -0
pulumi_vault/get_namespace.py +12 -0
pulumi_vault/get_namespaces.py +12 -4
pulumi_vault/get_nomad_access_token.py +4 -0
pulumi_vault/get_policy_document.py +8 -8
pulumi_vault/get_raft_autopilot_state.py +4 -0
pulumi_vault/github/auth_backend.py +4 -0
pulumi_vault/github/team.py +6 -2
pulumi_vault/github/user.py +6 -2
pulumi_vault/identity/entity.py +8 -6
pulumi_vault/identity/entity_alias.py +8 -6
pulumi_vault/identity/entity_policies.py +12 -12
pulumi_vault/identity/get_entity.py +4 -0
pulumi_vault/identity/get_group.py +4 -0
pulumi_vault/identity/get_oidc_client_creds.py +4 -2
pulumi_vault/identity/get_oidc_openid_config.py +6 -10
pulumi_vault/identity/get_oidc_public_keys.py +6 -10
pulumi_vault/identity/group.py +42 -38
pulumi_vault/identity/group_alias.py +4 -2
pulumi_vault/identity/group_member_entity_ids.py +16 -12
pulumi_vault/identity/group_member_group_ids.py +20 -24
pulumi_vault/identity/group_policies.py +8 -4
pulumi_vault/identity/mfa_duo.py +8 -4
pulumi_vault/identity/mfa_login_enforcement.py +8 -8
pulumi_vault/identity/mfa_okta.py +8 -4
pulumi_vault/identity/mfa_pingid.py +4 -0
pulumi_vault/identity/mfa_totp.py +4 -0
pulumi_vault/identity/oidc.py +4 -0
pulumi_vault/identity/oidc_assignment.py +6 -10
pulumi_vault/identity/oidc_client.py +10 -10
pulumi_vault/identity/oidc_key.py +12 -16
pulumi_vault/identity/oidc_key_allowed_client_id.py +12 -16
pulumi_vault/identity/oidc_provider.py +16 -22
pulumi_vault/identity/oidc_role.py +20 -28
pulumi_vault/identity/oidc_scope.py +8 -6
pulumi_vault/jwt/auth_backend.py +32 -20
pulumi_vault/jwt/auth_backend_role.py +225 -91
pulumi_vault/kmip/secret_backend.py +14 -10
pulumi_vault/kmip/secret_role.py +4 -0
pulumi_vault/kmip/secret_scope.py +4 -0
pulumi_vault/kubernetes/auth_backend_config.py +4 -0
pulumi_vault/kubernetes/auth_backend_role.py +172 -56
pulumi_vault/kubernetes/get_service_account_token.py +8 -8
pulumi_vault/kubernetes/secret_backend.py +8 -288
pulumi_vault/kubernetes/secret_backend_role.py +24 -24
pulumi_vault/kv/get_secret.py +4 -0
pulumi_vault/kv/get_secret_subkeys_v2.py +6 -4
pulumi_vault/kv/get_secret_v2.py +0 -58
pulumi_vault/kv/get_secrets_list.py +8 -4
pulumi_vault/kv/get_secrets_list_v2.py +12 -14
pulumi_vault/kv/secret.py +4 -0
pulumi_vault/kv/secret_backend_v2.py +4 -0
pulumi_vault/kv/secret_v2.py +4 -2
pulumi_vault/ldap/auth_backend.py +161 -66
pulumi_vault/ldap/auth_backend_group.py +4 -0
pulumi_vault/ldap/auth_backend_user.py +4 -0
pulumi_vault/ldap/secret_backend.py +8 -286
pulumi_vault/ldap/secret_backend_dynamic_role.py +4 -0
pulumi_vault/ldap/secret_backend_library_set.py +4 -2
pulumi_vault/ldap/secret_backend_static_role.py +4 -0
pulumi_vault/managed/_inputs.py +132 -84
pulumi_vault/managed/keys.py +28 -7
pulumi_vault/managed/outputs.py +132 -84
pulumi_vault/mfa_duo.py +6 -4
pulumi_vault/mfa_okta.py +6 -4
pulumi_vault/mfa_pingid.py +6 -4
pulumi_vault/mfa_totp.py +12 -10
pulumi_vault/mongodbatlas/secret_backend.py +4 -0
pulumi_vault/mongodbatlas/secret_role.py +4 -2
pulumi_vault/mount.py +42 -350
pulumi_vault/nomad_secret_backend.py +8 -4
pulumi_vault/nomad_secret_role.py +4 -0
pulumi_vault/okta/_inputs.py +8 -8
pulumi_vault/okta/auth_backend.py +10 -459
pulumi_vault/okta/auth_backend_group.py +4 -0
pulumi_vault/okta/auth_backend_user.py +4 -0
pulumi_vault/okta/outputs.py +8 -8
pulumi_vault/outputs.py +20 -0
pulumi_vault/password_policy.py +8 -6
pulumi_vault/pkisecret/__init__.py +0 -2
pulumi_vault/pkisecret/_inputs.py +0 -30
pulumi_vault/pkisecret/backend_config_cluster.py +4 -0
pulumi_vault/pkisecret/get_backend_issuer.py +0 -36
pulumi_vault/pkisecret/get_backend_issuers.py +4 -0
pulumi_vault/pkisecret/get_backend_key.py +6 -2
pulumi_vault/pkisecret/get_backend_keys.py +4 -0
pulumi_vault/pkisecret/outputs.py +0 -54
pulumi_vault/pkisecret/secret_backend_cert.py +8 -6
pulumi_vault/pkisecret/secret_backend_config_ca.py +8 -4
pulumi_vault/pkisecret/secret_backend_config_issuers.py +4 -0
pulumi_vault/pkisecret/secret_backend_config_urls.py +4 -0
pulumi_vault/pkisecret/secret_backend_crl_config.py +6 -2
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +8 -4
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +14 -10
pulumi_vault/pkisecret/secret_backend_issuer.py +4 -0
pulumi_vault/pkisecret/secret_backend_role.py +4 -2
pulumi_vault/pkisecret/secret_backend_root_cert.py +8 -4
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +10 -6
pulumi_vault/pkisecret/secret_backend_sign.py +8 -6
pulumi_vault/provider.py +8 -0
pulumi_vault/pulumi-plugin.json +1 -2
pulumi_vault/quota_lease_count.py +8 -53
pulumi_vault/quota_rate_limit.py +4 -49
pulumi_vault/rabbitmq/secret_backend.py +8 -4
pulumi_vault/rabbitmq/secret_backend_role.py +4 -2
pulumi_vault/raft_autopilot.py +4 -0
pulumi_vault/raft_snapshot_agent_config.py +304 -109
pulumi_vault/rgp_policy.py +6 -2
pulumi_vault/saml/auth_backend.py +12 -8
pulumi_vault/saml/auth_backend_role.py +178 -64
pulumi_vault/secrets/sync_association.py +10 -12
pulumi_vault/secrets/sync_aws_destination.py +8 -6
pulumi_vault/secrets/sync_azure_destination.py +12 -10
pulumi_vault/secrets/sync_config.py +6 -2
pulumi_vault/secrets/sync_gcp_destination.py +6 -6
pulumi_vault/secrets/sync_gh_destination.py +8 -6
pulumi_vault/secrets/sync_github_apps.py +8 -8
pulumi_vault/secrets/sync_vercel_destination.py +8 -6
pulumi_vault/ssh/_inputs.py +32 -6
pulumi_vault/ssh/outputs.py +32 -6
pulumi_vault/ssh/secret_backend_ca.py +4 -94
pulumi_vault/ssh/secret_backend_role.py +4 -4
pulumi_vault/terraformcloud/secret_backend.py +56 -0
pulumi_vault/terraformcloud/secret_creds.py +17 -2
pulumi_vault/terraformcloud/secret_role.py +69 -2
pulumi_vault/token.py +18 -14
pulumi_vault/tokenauth/auth_backend_role.py +180 -64
pulumi_vault/transform/alphabet.py +6 -4
pulumi_vault/transform/get_decode.py +4 -4
pulumi_vault/transform/get_encode.py +4 -4
pulumi_vault/transform/role.py +6 -4
pulumi_vault/transform/template.py +4 -4
pulumi_vault/transit/get_decrypt.py +20 -4
pulumi_vault/transit/get_encrypt.py +14 -0
pulumi_vault/transit/secret_backend_key.py +6 -6
pulumi_vault/transit/secret_cache_config.py +4 -0
{pulumi_vault-6.2.0.dist-info → pulumi_vault-6.2.0a1712731873.dist-info}/METADATA +1 -1
pulumi_vault-6.2.0a1712731873.dist-info/RECORD +252 -0
{pulumi_vault-6.2.0.dist-info → pulumi_vault-6.2.0a1712731873.dist-info}/WHEEL +1 -1
pulumi_vault/pkisecret/backend_config_est.py +0 -614
pulumi_vault/pkisecret/get_backend_config_est.py +0 -233
pulumi_vault/plugin.py +0 -590
pulumi_vault/plugin_pinned_version.py +0 -293
pulumi_vault-6.2.0.dist-info/RECORD +0 -256
{pulumi_vault-6.2.0.dist-info → pulumi_vault-6.2.0a1712731873.dist-info}/top_level.txt +0 -0

pulumi_vault/mount.py CHANGED Viewed

@@ -17,39 +17,26 @@ class MountArgs:
                  path: pulumi.Input[str],
                  type: pulumi.Input[str],
                  allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
-                 delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  external_entropy_access: Optional[pulumi.Input[bool]] = None,
-                 identity_token_key: Optional[pulumi.Input[str]] = None,
-                 listing_visibility: Optional[pulumi.Input[str]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
-                 passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 plugin_version: Optional[pulumi.Input[str]] = None,
                  seal_wrap: Optional[pulumi.Input[bool]] = None):
         """
         The set of arguments for constructing a Mount resource.
         :param pulumi.Input[str] path: Where the secret backend will be mounted
         :param pulumi.Input[str] type: Type of the backend, such as "aws"
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_managed_keys: Set of managed key registry entry names that the mount in question is allowed to access
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_response_headers: List of headers to allow, allowing a plugin to include
-               them in the response.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
         :param pulumi.Input[int] default_lease_ttl_seconds: Default lease duration for tokens and secrets in seconds
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] delegated_auth_accessors: List of allowed authentication mount accessors the
-               backend can request delegated authentication for.
         :param pulumi.Input[str] description: Human-friendly description of the mount
         :param pulumi.Input[bool] external_entropy_access: Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
-        :param pulumi.Input[str] identity_token_key: The key to use for signing plugin workload identity tokens. If
-               not provided, this will default to Vault's OIDC default key.
-        :param pulumi.Input[str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
         :param pulumi.Input[bool] local: Boolean flag that can be explicitly set to true to enforce local mount in HA environment
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for tokens and secrets in seconds
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
@@ -57,35 +44,22 @@ class MountArgs:
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] passthrough_request_headers: List of headers to allow and pass from the request to
-               the plugin.
-        :param pulumi.Input[str] plugin_version: Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
-               If unspecified, the server will select any matching unversioned plugin that may have been
-               registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
         :param pulumi.Input[bool] seal_wrap: Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
         """
         pulumi.set(__self__, "path", path)
         pulumi.set(__self__, "type", type)
         if allowed_managed_keys is not None:
             pulumi.set(__self__, "allowed_managed_keys", allowed_managed_keys)
-        if allowed_response_headers is not None:
-            pulumi.set(__self__, "allowed_response_headers", allowed_response_headers)
         if audit_non_hmac_request_keys is not None:
             pulumi.set(__self__, "audit_non_hmac_request_keys", audit_non_hmac_request_keys)
         if audit_non_hmac_response_keys is not None:
             pulumi.set(__self__, "audit_non_hmac_response_keys", audit_non_hmac_response_keys)
         if default_lease_ttl_seconds is not None:
             pulumi.set(__self__, "default_lease_ttl_seconds", default_lease_ttl_seconds)
-        if delegated_auth_accessors is not None:
-            pulumi.set(__self__, "delegated_auth_accessors", delegated_auth_accessors)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if external_entropy_access is not None:
             pulumi.set(__self__, "external_entropy_access", external_entropy_access)
-        if identity_token_key is not None:
-            pulumi.set(__self__, "identity_token_key", identity_token_key)
-        if listing_visibility is not None:
-            pulumi.set(__self__, "listing_visibility", listing_visibility)
         if local is not None:
             pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
@@ -94,10 +68,6 @@ class MountArgs:
             pulumi.set(__self__, "namespace", namespace)
         if options is not None:
             pulumi.set(__self__, "options", options)
-        if passthrough_request_headers is not None:
-            pulumi.set(__self__, "passthrough_request_headers", passthrough_request_headers)
-        if plugin_version is not None:
-            pulumi.set(__self__, "plugin_version", plugin_version)
         if seal_wrap is not None:
             pulumi.set(__self__, "seal_wrap", seal_wrap)
@@ -137,19 +107,6 @@ class MountArgs:
     def allowed_managed_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "allowed_managed_keys", value)
-    @property
-    @pulumi.getter(name="allowedResponseHeaders")
-    def allowed_response_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
-        """
-        List of headers to allow, allowing a plugin to include
-        them in the response.
-        """
-        return pulumi.get(self, "allowed_response_headers")
-    @allowed_response_headers.setter
-    def allowed_response_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "allowed_response_headers", value)
     @property
     @pulumi.getter(name="auditNonHmacRequestKeys")
     def audit_non_hmac_request_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -186,19 +143,6 @@ class MountArgs:
     def default_lease_ttl_seconds(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "default_lease_ttl_seconds", value)
-    @property
-    @pulumi.getter(name="delegatedAuthAccessors")
-    def delegated_auth_accessors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
-        """
-        List of allowed authentication mount accessors the
-        backend can request delegated authentication for.
-        """
-        return pulumi.get(self, "delegated_auth_accessors")
-    @delegated_auth_accessors.setter
-    def delegated_auth_accessors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "delegated_auth_accessors", value)
     @property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[str]]:
@@ -223,31 +167,6 @@ class MountArgs:
     def external_entropy_access(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "external_entropy_access", value)
-    @property
-    @pulumi.getter(name="identityTokenKey")
-    def identity_token_key(self) -> Optional[pulumi.Input[str]]:
-        """
-        The key to use for signing plugin workload identity tokens. If
-        not provided, this will default to Vault's OIDC default key.
-        """
-        return pulumi.get(self, "identity_token_key")
-    @identity_token_key.setter
-    def identity_token_key(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "identity_token_key", value)
-    @property
-    @pulumi.getter(name="listingVisibility")
-    def listing_visibility(self) -> Optional[pulumi.Input[str]]:
-        """
-        Specifies whether to show this mount in the UI-specific listing endpoint
-        """
-        return pulumi.get(self, "listing_visibility")
-    @listing_visibility.setter
-    def listing_visibility(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "listing_visibility", value)
     @property
     @pulumi.getter
     def local(self) -> Optional[pulumi.Input[bool]]:
@@ -299,33 +218,6 @@ class MountArgs:
     def options(self, value: Optional[pulumi.Input[Mapping[str, Any]]]):
         pulumi.set(self, "options", value)
-    @property
-    @pulumi.getter(name="passthroughRequestHeaders")
-    def passthrough_request_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
-        """
-        List of headers to allow and pass from the request to
-        the plugin.
-        """
-        return pulumi.get(self, "passthrough_request_headers")
-    @passthrough_request_headers.setter
-    def passthrough_request_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "passthrough_request_headers", value)
-    @property
-    @pulumi.getter(name="pluginVersion")
-    def plugin_version(self) -> Optional[pulumi.Input[str]]:
-        """
-        Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
-        If unspecified, the server will select any matching unversioned plugin that may have been
-        registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
-        """
-        return pulumi.get(self, "plugin_version")
-    @plugin_version.setter
-    def plugin_version(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "plugin_version", value)
     @property
     @pulumi.getter(name="sealWrap")
     def seal_wrap(self) -> Optional[pulumi.Input[bool]]:
@@ -344,40 +236,27 @@ class _MountState:
     def __init__(__self__, *,
                  accessor: Optional[pulumi.Input[str]] = None,
                  allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
-                 delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  external_entropy_access: Optional[pulumi.Input[bool]] = None,
-                 identity_token_key: Optional[pulumi.Input[str]] = None,
-                 listing_visibility: Optional[pulumi.Input[str]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
-                 passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  path: Optional[pulumi.Input[str]] = None,
-                 plugin_version: Optional[pulumi.Input[str]] = None,
                  seal_wrap: Optional[pulumi.Input[bool]] = None,
                  type: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering Mount resources.
         :param pulumi.Input[str] accessor: The accessor for this mount.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_managed_keys: Set of managed key registry entry names that the mount in question is allowed to access
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_response_headers: List of headers to allow, allowing a plugin to include
-               them in the response.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
         :param pulumi.Input[int] default_lease_ttl_seconds: Default lease duration for tokens and secrets in seconds
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] delegated_auth_accessors: List of allowed authentication mount accessors the
-               backend can request delegated authentication for.
         :param pulumi.Input[str] description: Human-friendly description of the mount
         :param pulumi.Input[bool] external_entropy_access: Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
-        :param pulumi.Input[str] identity_token_key: The key to use for signing plugin workload identity tokens. If
-               not provided, this will default to Vault's OIDC default key.
-        :param pulumi.Input[str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
         :param pulumi.Input[bool] local: Boolean flag that can be explicitly set to true to enforce local mount in HA environment
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for tokens and secrets in seconds
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
@@ -385,12 +264,7 @@ class _MountState:
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] passthrough_request_headers: List of headers to allow and pass from the request to
-               the plugin.
         :param pulumi.Input[str] path: Where the secret backend will be mounted
-        :param pulumi.Input[str] plugin_version: Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
-               If unspecified, the server will select any matching unversioned plugin that may have been
-               registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
         :param pulumi.Input[bool] seal_wrap: Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
         :param pulumi.Input[str] type: Type of the backend, such as "aws"
         """
@@ -398,24 +272,16 @@ class _MountState:
             pulumi.set(__self__, "accessor", accessor)
         if allowed_managed_keys is not None:
             pulumi.set(__self__, "allowed_managed_keys", allowed_managed_keys)
-        if allowed_response_headers is not None:
-            pulumi.set(__self__, "allowed_response_headers", allowed_response_headers)
         if audit_non_hmac_request_keys is not None:
             pulumi.set(__self__, "audit_non_hmac_request_keys", audit_non_hmac_request_keys)
         if audit_non_hmac_response_keys is not None:
             pulumi.set(__self__, "audit_non_hmac_response_keys", audit_non_hmac_response_keys)
         if default_lease_ttl_seconds is not None:
             pulumi.set(__self__, "default_lease_ttl_seconds", default_lease_ttl_seconds)
-        if delegated_auth_accessors is not None:
-            pulumi.set(__self__, "delegated_auth_accessors", delegated_auth_accessors)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if external_entropy_access is not None:
             pulumi.set(__self__, "external_entropy_access", external_entropy_access)
-        if identity_token_key is not None:
-            pulumi.set(__self__, "identity_token_key", identity_token_key)
-        if listing_visibility is not None:
-            pulumi.set(__self__, "listing_visibility", listing_visibility)
         if local is not None:
             pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
@@ -424,12 +290,8 @@ class _MountState:
             pulumi.set(__self__, "namespace", namespace)
         if options is not None:
             pulumi.set(__self__, "options", options)
-        if passthrough_request_headers is not None:
-            pulumi.set(__self__, "passthrough_request_headers", passthrough_request_headers)
         if path is not None:
             pulumi.set(__self__, "path", path)
-        if plugin_version is not None:
-            pulumi.set(__self__, "plugin_version", plugin_version)
         if seal_wrap is not None:
             pulumi.set(__self__, "seal_wrap", seal_wrap)
         if type is not None:
@@ -459,19 +321,6 @@ class _MountState:
     def allowed_managed_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
         pulumi.set(self, "allowed_managed_keys", value)
-    @property
-    @pulumi.getter(name="allowedResponseHeaders")
-    def allowed_response_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
-        """
-        List of headers to allow, allowing a plugin to include
-        them in the response.
-        """
-        return pulumi.get(self, "allowed_response_headers")
-    @allowed_response_headers.setter
-    def allowed_response_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "allowed_response_headers", value)
     @property
     @pulumi.getter(name="auditNonHmacRequestKeys")
     def audit_non_hmac_request_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
@@ -508,19 +357,6 @@ class _MountState:
     def default_lease_ttl_seconds(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "default_lease_ttl_seconds", value)
-    @property
-    @pulumi.getter(name="delegatedAuthAccessors")
-    def delegated_auth_accessors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
-        """
-        List of allowed authentication mount accessors the
-        backend can request delegated authentication for.
-        """
-        return pulumi.get(self, "delegated_auth_accessors")
-    @delegated_auth_accessors.setter
-    def delegated_auth_accessors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "delegated_auth_accessors", value)
     @property
     @pulumi.getter
     def description(self) -> Optional[pulumi.Input[str]]:
@@ -545,31 +381,6 @@ class _MountState:
     def external_entropy_access(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "external_entropy_access", value)
-    @property
-    @pulumi.getter(name="identityTokenKey")
-    def identity_token_key(self) -> Optional[pulumi.Input[str]]:
-        """
-        The key to use for signing plugin workload identity tokens. If
-        not provided, this will default to Vault's OIDC default key.
-        """
-        return pulumi.get(self, "identity_token_key")
-    @identity_token_key.setter
-    def identity_token_key(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "identity_token_key", value)
-    @property
-    @pulumi.getter(name="listingVisibility")
-    def listing_visibility(self) -> Optional[pulumi.Input[str]]:
-        """
-        Specifies whether to show this mount in the UI-specific listing endpoint
-        """
-        return pulumi.get(self, "listing_visibility")
-    @listing_visibility.setter
-    def listing_visibility(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "listing_visibility", value)
     @property
     @pulumi.getter
     def local(self) -> Optional[pulumi.Input[bool]]:
@@ -621,19 +432,6 @@ class _MountState:
     def options(self, value: Optional[pulumi.Input[Mapping[str, Any]]]):
         pulumi.set(self, "options", value)
-    @property
-    @pulumi.getter(name="passthroughRequestHeaders")
-    def passthrough_request_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
-        """
-        List of headers to allow and pass from the request to
-        the plugin.
-        """
-        return pulumi.get(self, "passthrough_request_headers")
-    @passthrough_request_headers.setter
-    def passthrough_request_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]):
-        pulumi.set(self, "passthrough_request_headers", value)
     @property
     @pulumi.getter
     def path(self) -> Optional[pulumi.Input[str]]:
@@ -646,20 +444,6 @@ class _MountState:
     def path(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "path", value)
-    @property
-    @pulumi.getter(name="pluginVersion")
-    def plugin_version(self) -> Optional[pulumi.Input[str]]:
-        """
-        Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
-        If unspecified, the server will select any matching unversioned plugin that may have been
-        registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
-        """
-        return pulumi.get(self, "plugin_version")
-    @plugin_version.setter
-    def plugin_version(self, value: Optional[pulumi.Input[str]]):
-        pulumi.set(self, "plugin_version", value)
     @property
     @pulumi.getter(name="sealWrap")
     def seal_wrap(self) -> Optional[pulumi.Input[bool]]:
@@ -691,22 +475,16 @@ class Mount(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
-                 delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  external_entropy_access: Optional[pulumi.Input[bool]] = None,
-                 identity_token_key: Optional[pulumi.Input[str]] = None,
-                 listing_visibility: Optional[pulumi.Input[str]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
-                 passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  path: Optional[pulumi.Input[str]] = None,
-                 plugin_version: Optional[pulumi.Input[str]] = None,
                  seal_wrap: Optional[pulumi.Input[bool]] = None,
                  type: Optional[pulumi.Input[str]] = None,
                  __props__=None):
@@ -715,54 +493,62 @@ class Mount(pulumi.CustomResource):
         ## Example Usage
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         example = vault.Mount("example",
+            description="This is an example mount",
             path="dummy",
-            type="generic",
-            description="This is an example mount")
+            type="generic")
         ```
+        <!--End PulumiCodeChooser -->
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         kvv2_example = vault.Mount("kvv2-example",
-            path="version2-example",
-            type="kv-v2",
+            description="This is an example KV Version 2 secret engine mount",
             options={
-                "version": "2",
                 "type": "kv-v2",
+                "version": "2",
             },
-            description="This is an example KV Version 2 secret engine mount")
+            path="version2-example",
+            type="kv-v2")
         ```
+        <!--End PulumiCodeChooser -->
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         transit_example = vault.Mount("transit-example",
-            path="transit-example",
-            type="transit",
             description="This is an example transit secret engine mount",
             options={
                 "convergent_encryption": False,
-            })
+            },
+            path="transit-example",
+            type="transit")
         ```
+        <!--End PulumiCodeChooser -->
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         pki_example = vault.Mount("pki-example",
-            path="pki-example",
-            type="pki",
-            description="This is an example PKI mount",
             default_lease_ttl_seconds=3600,
-            max_lease_ttl_seconds=86400)
+            description="This is an example PKI mount",
+            max_lease_ttl_seconds=86400,
+            path="pki-example",
+            type="pki")
         ```
+        <!--End PulumiCodeChooser -->
         ## Import
@@ -775,18 +561,11 @@ class Mount(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_managed_keys: Set of managed key registry entry names that the mount in question is allowed to access
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_response_headers: List of headers to allow, allowing a plugin to include
-               them in the response.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
         :param pulumi.Input[int] default_lease_ttl_seconds: Default lease duration for tokens and secrets in seconds
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] delegated_auth_accessors: List of allowed authentication mount accessors the
-               backend can request delegated authentication for.
         :param pulumi.Input[str] description: Human-friendly description of the mount
         :param pulumi.Input[bool] external_entropy_access: Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
-        :param pulumi.Input[str] identity_token_key: The key to use for signing plugin workload identity tokens. If
-               not provided, this will default to Vault's OIDC default key.
-        :param pulumi.Input[str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
         :param pulumi.Input[bool] local: Boolean flag that can be explicitly set to true to enforce local mount in HA environment
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for tokens and secrets in seconds
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
@@ -794,12 +573,7 @@ class Mount(pulumi.CustomResource):
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] passthrough_request_headers: List of headers to allow and pass from the request to
-               the plugin.
         :param pulumi.Input[str] path: Where the secret backend will be mounted
-        :param pulumi.Input[str] plugin_version: Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
-               If unspecified, the server will select any matching unversioned plugin that may have been
-               registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
         :param pulumi.Input[bool] seal_wrap: Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
         :param pulumi.Input[str] type: Type of the backend, such as "aws"
         """
@@ -814,54 +588,62 @@ class Mount(pulumi.CustomResource):
         ## Example Usage
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         example = vault.Mount("example",
+            description="This is an example mount",
             path="dummy",
-            type="generic",
-            description="This is an example mount")
+            type="generic")
         ```
+        <!--End PulumiCodeChooser -->
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         kvv2_example = vault.Mount("kvv2-example",
-            path="version2-example",
-            type="kv-v2",
+            description="This is an example KV Version 2 secret engine mount",
             options={
-                "version": "2",
                 "type": "kv-v2",
+                "version": "2",
             },
-            description="This is an example KV Version 2 secret engine mount")
+            path="version2-example",
+            type="kv-v2")
         ```
+        <!--End PulumiCodeChooser -->
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         transit_example = vault.Mount("transit-example",
-            path="transit-example",
-            type="transit",
             description="This is an example transit secret engine mount",
             options={
                 "convergent_encryption": False,
-            })
+            },
+            path="transit-example",
+            type="transit")
         ```
+        <!--End PulumiCodeChooser -->
+        <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
         import pulumi_vault as vault
         pki_example = vault.Mount("pki-example",
-            path="pki-example",
-            type="pki",
-            description="This is an example PKI mount",
             default_lease_ttl_seconds=3600,
-            max_lease_ttl_seconds=86400)
+            description="This is an example PKI mount",
+            max_lease_ttl_seconds=86400,
+            path="pki-example",
+            type="pki")
         ```
+        <!--End PulumiCodeChooser -->
         ## Import
@@ -887,22 +669,16 @@ class Mount(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-                 allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
-                 delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  description: Optional[pulumi.Input[str]] = None,
                  external_entropy_access: Optional[pulumi.Input[bool]] = None,
-                 identity_token_key: Optional[pulumi.Input[str]] = None,
-                 listing_visibility: Optional[pulumi.Input[str]] = None,
                  local: Optional[pulumi.Input[bool]] = None,
                  max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
                  namespace: Optional[pulumi.Input[str]] = None,
                  options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
-                 passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  path: Optional[pulumi.Input[str]] = None,
-                 plugin_version: Optional[pulumi.Input[str]] = None,
                  seal_wrap: Optional[pulumi.Input[bool]] = None,
                  type: Optional[pulumi.Input[str]] = None,
                  __props__=None):
@@ -915,24 +691,18 @@ class Mount(pulumi.CustomResource):
             __props__ = MountArgs.__new__(MountArgs)
             __props__.__dict__["allowed_managed_keys"] = allowed_managed_keys
-            __props__.__dict__["allowed_response_headers"] = allowed_response_headers
             __props__.__dict__["audit_non_hmac_request_keys"] = audit_non_hmac_request_keys
             __props__.__dict__["audit_non_hmac_response_keys"] = audit_non_hmac_response_keys
             __props__.__dict__["default_lease_ttl_seconds"] = default_lease_ttl_seconds
-            __props__.__dict__["delegated_auth_accessors"] = delegated_auth_accessors
             __props__.__dict__["description"] = description
             __props__.__dict__["external_entropy_access"] = external_entropy_access
-            __props__.__dict__["identity_token_key"] = identity_token_key
-            __props__.__dict__["listing_visibility"] = listing_visibility
             __props__.__dict__["local"] = local
             __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
             __props__.__dict__["namespace"] = namespace
             __props__.__dict__["options"] = options
-            __props__.__dict__["passthrough_request_headers"] = passthrough_request_headers
             if path is None and not opts.urn:
                 raise TypeError("Missing required property 'path'")
             __props__.__dict__["path"] = path
-            __props__.__dict__["plugin_version"] = plugin_version
             __props__.__dict__["seal_wrap"] = seal_wrap
             if type is None and not opts.urn:
                 raise TypeError("Missing required property 'type'")
@@ -950,22 +720,16 @@ class Mount(pulumi.CustomResource):
             opts: Optional[pulumi.ResourceOptions] = None,
             accessor: Optional[pulumi.Input[str]] = None,
             allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
-            allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
             audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
             audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
             default_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
-            delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
             description: Optional[pulumi.Input[str]] = None,
             external_entropy_access: Optional[pulumi.Input[bool]] = None,
-            identity_token_key: Optional[pulumi.Input[str]] = None,
-            listing_visibility: Optional[pulumi.Input[str]] = None,
             local: Optional[pulumi.Input[bool]] = None,
             max_lease_ttl_seconds: Optional[pulumi.Input[int]] = None,
             namespace: Optional[pulumi.Input[str]] = None,
             options: Optional[pulumi.Input[Mapping[str, Any]]] = None,
-            passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
             path: Optional[pulumi.Input[str]] = None,
-            plugin_version: Optional[pulumi.Input[str]] = None,
             seal_wrap: Optional[pulumi.Input[bool]] = None,
             type: Optional[pulumi.Input[str]] = None) -> 'Mount':
         """
@@ -977,18 +741,11 @@ class Mount(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[str] accessor: The accessor for this mount.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_managed_keys: Set of managed key registry entry names that the mount in question is allowed to access
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] allowed_response_headers: List of headers to allow, allowing a plugin to include
-               them in the response.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
         :param pulumi.Input[int] default_lease_ttl_seconds: Default lease duration for tokens and secrets in seconds
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] delegated_auth_accessors: List of allowed authentication mount accessors the
-               backend can request delegated authentication for.
         :param pulumi.Input[str] description: Human-friendly description of the mount
         :param pulumi.Input[bool] external_entropy_access: Boolean flag that can be explicitly set to true to enable the secrets engine to access Vault's external entropy source
-        :param pulumi.Input[str] identity_token_key: The key to use for signing plugin workload identity tokens. If
-               not provided, this will default to Vault's OIDC default key.
-        :param pulumi.Input[str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
         :param pulumi.Input[bool] local: Boolean flag that can be explicitly set to true to enforce local mount in HA environment
         :param pulumi.Input[int] max_lease_ttl_seconds: Maximum possible lease duration for tokens and secrets in seconds
         :param pulumi.Input[str] namespace: The namespace to provision the resource in.
@@ -996,12 +753,7 @@ class Mount(pulumi.CustomResource):
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
         :param pulumi.Input[Mapping[str, Any]] options: Specifies mount type specific options that are passed to the backend
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] passthrough_request_headers: List of headers to allow and pass from the request to
-               the plugin.
         :param pulumi.Input[str] path: Where the secret backend will be mounted
-        :param pulumi.Input[str] plugin_version: Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
-               If unspecified, the server will select any matching unversioned plugin that may have been
-               registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
         :param pulumi.Input[bool] seal_wrap: Boolean flag that can be explicitly set to true to enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
         :param pulumi.Input[str] type: Type of the backend, such as "aws"
         """
@@ -1011,22 +763,16 @@ class Mount(pulumi.CustomResource):
         __props__.__dict__["accessor"] = accessor
         __props__.__dict__["allowed_managed_keys"] = allowed_managed_keys
-        __props__.__dict__["allowed_response_headers"] = allowed_response_headers
         __props__.__dict__["audit_non_hmac_request_keys"] = audit_non_hmac_request_keys
         __props__.__dict__["audit_non_hmac_response_keys"] = audit_non_hmac_response_keys
         __props__.__dict__["default_lease_ttl_seconds"] = default_lease_ttl_seconds
-        __props__.__dict__["delegated_auth_accessors"] = delegated_auth_accessors
         __props__.__dict__["description"] = description
         __props__.__dict__["external_entropy_access"] = external_entropy_access
-        __props__.__dict__["identity_token_key"] = identity_token_key
-        __props__.__dict__["listing_visibility"] = listing_visibility
         __props__.__dict__["local"] = local
         __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
         __props__.__dict__["namespace"] = namespace
         __props__.__dict__["options"] = options
-        __props__.__dict__["passthrough_request_headers"] = passthrough_request_headers
         __props__.__dict__["path"] = path
-        __props__.__dict__["plugin_version"] = plugin_version
         __props__.__dict__["seal_wrap"] = seal_wrap
         __props__.__dict__["type"] = type
         return Mount(resource_name, opts=opts, __props__=__props__)
@@ -1047,15 +793,6 @@ class Mount(pulumi.CustomResource):
         """
         return pulumi.get(self, "allowed_managed_keys")
-    @property
-    @pulumi.getter(name="allowedResponseHeaders")
-    def allowed_response_headers(self) -> pulumi.Output[Optional[Sequence[str]]]:
-        """
-        List of headers to allow, allowing a plugin to include
-        them in the response.
-        """
-        return pulumi.get(self, "allowed_response_headers")
     @property
     @pulumi.getter(name="auditNonHmacRequestKeys")
     def audit_non_hmac_request_keys(self) -> pulumi.Output[Sequence[str]]:
@@ -1080,15 +817,6 @@ class Mount(pulumi.CustomResource):
         """
         return pulumi.get(self, "default_lease_ttl_seconds")
-    @property
-    @pulumi.getter(name="delegatedAuthAccessors")
-    def delegated_auth_accessors(self) -> pulumi.Output[Optional[Sequence[str]]]:
-        """
-        List of allowed authentication mount accessors the
-        backend can request delegated authentication for.
-        """
-        return pulumi.get(self, "delegated_auth_accessors")
     @property
     @pulumi.getter
     def description(self) -> pulumi.Output[Optional[str]]:
@@ -1105,23 +833,6 @@ class Mount(pulumi.CustomResource):
         """
         return pulumi.get(self, "external_entropy_access")
-    @property
-    @pulumi.getter(name="identityTokenKey")
-    def identity_token_key(self) -> pulumi.Output[Optional[str]]:
-        """
-        The key to use for signing plugin workload identity tokens. If
-        not provided, this will default to Vault's OIDC default key.
-        """
-        return pulumi.get(self, "identity_token_key")
-    @property
-    @pulumi.getter(name="listingVisibility")
-    def listing_visibility(self) -> pulumi.Output[Optional[str]]:
-        """
-        Specifies whether to show this mount in the UI-specific listing endpoint
-        """
-        return pulumi.get(self, "listing_visibility")
     @property
     @pulumi.getter
     def local(self) -> pulumi.Output[Optional[bool]]:
@@ -1157,15 +868,6 @@ class Mount(pulumi.CustomResource):
         """
         return pulumi.get(self, "options")
-    @property
-    @pulumi.getter(name="passthroughRequestHeaders")
-    def passthrough_request_headers(self) -> pulumi.Output[Optional[Sequence[str]]]:
-        """
-        List of headers to allow and pass from the request to
-        the plugin.
-        """
-        return pulumi.get(self, "passthrough_request_headers")
     @property
     @pulumi.getter
     def path(self) -> pulumi.Output[str]:
@@ -1174,16 +876,6 @@ class Mount(pulumi.CustomResource):
         """
         return pulumi.get(self, "path")
-    @property
-    @pulumi.getter(name="pluginVersion")
-    def plugin_version(self) -> pulumi.Output[Optional[str]]:
-        """
-        Specifies the semantic version of the plugin to use, e.g. "v1.0.0".
-        If unspecified, the server will select any matching unversioned plugin that may have been
-        registered, the latest versioned plugin registered, or a built-in plugin in that order of precedence.
-        """
-        return pulumi.get(self, "plugin_version")
     @property
     @pulumi.getter(name="sealWrap")
     def seal_wrap(self) -> pulumi.Output[bool]:

pulumi-vault 6.2.0__py3-none-any.whl → 6.2.0a1712731873__py3-none-any.whl

pulumi-vault 6.2.0py3-none-any.whl → 6.2.0a1712731873py3-none-any.whl