pulumi-vault 6.2.0a1712991499__py3-none-any.whl → 6.2.0a1713561465__py3-none-any.whl

pulumi_vault/identity/oidc_provider.py

@@ -279,15 +279,18 @@ class OidcProvider(pulumi.CustomResource):
         import json
         import pulumi_vault as vault
 
-        test_oidc_key = vault.identity.OidcKey("testOidcKey",
+        test = vault.identity.OidcKey("test",
+            name="my-key",
             allowed_client_ids=["*"],
             rotation_period=3600,
             verification_ttl=3600)
-        test_oidc_assignment = vault.identity.OidcAssignment("testOidcAssignment",
+        test_oidc_assignment = vault.identity.OidcAssignment("test",
+            name="my-assignment",
             entity_ids=["fake-ascbascas-2231a-sdfaa"],
             group_ids=["fake-sajkdsad-32414-sfsada"])
-        test_oidc_client = vault.identity.OidcClient("testOidcClient",
-            key=test_oidc_key.name,
+        test_oidc_client = vault.identity.OidcClient("test",
+            name="application",
+            key=test.name,
             redirect_uris=[
                 "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
                 "http://127.0.0.1:8251/callback",
@@ -296,12 +299,14 @@ class OidcProvider(pulumi.CustomResource):
             assignments=[test_oidc_assignment.name],
             id_token_ttl=2400,
             access_token_ttl=7200)
-        test_oidc_scope = vault.identity.OidcScope("testOidcScope",
+        test_oidc_scope = vault.identity.OidcScope("test",
+            name="groups",
             template=json.dumps({
                 "groups": "{{identity.entity.groups.names}}",
             }),
             description="Groups scope.")
-        test_oidc_provider = vault.identity.OidcProvider("testOidcProvider",
+        test_oidc_provider = vault.identity.OidcProvider("test",
+            name="my-provider",
             https_enabled=False,
             issuer_host="127.0.0.1:8200",
             allowed_client_ids=[test_oidc_client.client_id],
@@ -348,15 +353,18 @@ class OidcProvider(pulumi.CustomResource):
         import json
         import pulumi_vault as vault
 
-        test_oidc_key = vault.identity.OidcKey("testOidcKey",
+        test = vault.identity.OidcKey("test",
+            name="my-key",
             allowed_client_ids=["*"],
             rotation_period=3600,
             verification_ttl=3600)
-        test_oidc_assignment = vault.identity.OidcAssignment("testOidcAssignment",
+        test_oidc_assignment = vault.identity.OidcAssignment("test",
+            name="my-assignment",
             entity_ids=["fake-ascbascas-2231a-sdfaa"],
             group_ids=["fake-sajkdsad-32414-sfsada"])
-        test_oidc_client = vault.identity.OidcClient("testOidcClient",
-            key=test_oidc_key.name,
+        test_oidc_client = vault.identity.OidcClient("test",
+            name="application",
+            key=test.name,
             redirect_uris=[
                 "http://127.0.0.1:9200/v1/auth-methods/oidc:authenticate:callback",
                 "http://127.0.0.1:8251/callback",
@@ -365,12 +373,14 @@ class OidcProvider(pulumi.CustomResource):
             assignments=[test_oidc_assignment.name],
             id_token_ttl=2400,
             access_token_ttl=7200)
-        test_oidc_scope = vault.identity.OidcScope("testOidcScope",
+        test_oidc_scope = vault.identity.OidcScope("test",
+            name="groups",
             template=json.dumps({
                 "groups": "{{identity.entity.groups.names}}",
             }),
             description="Groups scope.")
-        test_oidc_provider = vault.identity.OidcProvider("testOidcProvider",
+        test_oidc_provider = vault.identity.OidcProvider("test",
+            name="my-provider",
             https_enabled=False,
             issuer_host="127.0.0.1:8200",
             allowed_client_ids=[test_oidc_client.client_id],

pulumi_vault/identity/oidc_role.py

@@ -276,11 +276,15 @@ class OidcRole(pulumi.CustomResource):
         import pulumi_vault as vault
 
         config = pulumi.Config()
+        # Name of the OIDC Key
         key = config.get("key")
         if key is None:
             key = "key"
-        role = vault.identity.OidcRole("role", key=key)
-        key_oidc_key = vault.identity.OidcKey("keyOidcKey",
+        role = vault.identity.OidcRole("role",
+            name="role",
+            key=key)
+        key_oidc_key = vault.identity.OidcKey("key",
+            name=key,
             algorithm="RS256",
             allowed_client_ids=[role.client_id])
         ```
@@ -295,11 +299,15 @@ class OidcRole(pulumi.CustomResource):
         import pulumi
         import pulumi_vault as vault
 
-        key = vault.identity.OidcKey("key", algorithm="RS256")
-        role_oidc_role = vault.identity.OidcRole("roleOidcRole", key=key.name)
-        role_oidc_key_allowed_client_id = vault.identity.OidcKeyAllowedClientID("roleOidcKeyAllowedClientID",
+        key = vault.identity.OidcKey("key",
+            name="key",
+            algorithm="RS256")
+        role = vault.identity.OidcRole("role",
+            name="role",
+            key=key.name)
+        role_oidc_key_allowed_client_id = vault.identity.OidcKeyAllowedClientID("role",
             key_name=key.name,
-            allowed_client_id=role_oidc_role.client_id)
+            allowed_client_id=role.client_id)
         ```
         <!--End PulumiCodeChooser -->
 
@@ -348,11 +356,15 @@ class OidcRole(pulumi.CustomResource):
         import pulumi_vault as vault
 
         config = pulumi.Config()
+        # Name of the OIDC Key
         key = config.get("key")
         if key is None:
             key = "key"
-        role = vault.identity.OidcRole("role", key=key)
-        key_oidc_key = vault.identity.OidcKey("keyOidcKey",
+        role = vault.identity.OidcRole("role",
+            name="role",
+            key=key)
+        key_oidc_key = vault.identity.OidcKey("key",
+            name=key,
             algorithm="RS256",
             allowed_client_ids=[role.client_id])
         ```
@@ -367,11 +379,15 @@ class OidcRole(pulumi.CustomResource):
         import pulumi
         import pulumi_vault as vault
 
-        key = vault.identity.OidcKey("key", algorithm="RS256")
-        role_oidc_role = vault.identity.OidcRole("roleOidcRole", key=key.name)
-        role_oidc_key_allowed_client_id = vault.identity.OidcKeyAllowedClientID("roleOidcKeyAllowedClientID",
+        key = vault.identity.OidcKey("key",
+            name="key",
+            algorithm="RS256")
+        role = vault.identity.OidcRole("role",
+            name="role",
+            key=key.name)
+        role_oidc_key_allowed_client_id = vault.identity.OidcKeyAllowedClientID("role",
             key_name=key.name,
-            allowed_client_id=role_oidc_role.client_id)
+            allowed_client_id=role.client_id)
         ```
         <!--End PulumiCodeChooser -->
 

pulumi_vault/identity/oidc_scope.py

@@ -189,8 +189,9 @@ class OidcScope(pulumi.CustomResource):
         import pulumi_vault as vault
 
         groups = vault.identity.OidcScope("groups",
-            description="Vault OIDC Groups Scope",
-            template="{\\"groups\\":{{identity.entity.groups.names}}}")
+            name="groups",
+            template="{\\"groups\\":{{identity.entity.groups.names}}}",
+            description="Vault OIDC Groups Scope")
         ```
         <!--End PulumiCodeChooser -->
 
@@ -230,8 +231,9 @@ class OidcScope(pulumi.CustomResource):
         import pulumi_vault as vault
 
         groups = vault.identity.OidcScope("groups",
-            description="Vault OIDC Groups Scope",
-            template="{\\"groups\\":{{identity.entity.groups.names}}}")
+            name="groups",
+            template="{\\"groups\\":{{identity.entity.groups.names}}}",
+            description="Vault OIDC Groups Scope")
         ```
         <!--End PulumiCodeChooser -->
 

pulumi_vault/jwt/auth_backend.py

@@ -782,10 +782,10 @@ class AuthBackend(pulumi.CustomResource):
         import pulumi_vault as vault
 
         example = vault.jwt.AuthBackend("example",
-            bound_issuer="https://myco.auth0.com/",
             description="Demonstration of the Terraform JWT auth backend",
+            path="jwt",
             oidc_discovery_url="https://myco.auth0.com/",
-            path="jwt")
+            bound_issuer="https://myco.auth0.com/")
         ```
         <!--End PulumiCodeChooser -->
 
@@ -797,16 +797,16 @@ class AuthBackend(pulumi.CustomResource):
         import pulumi_vault as vault
 
         example = vault.jwt.AuthBackend("example",
-            bound_issuer="https://myco.auth0.com/",
             description="Demonstration of the Terraform JWT auth backend",
+            path="oidc",
+            type="oidc",
+            oidc_discovery_url="https://myco.auth0.com/",
             oidc_client_id="1234567890",
             oidc_client_secret="secret123456",
-            oidc_discovery_url="https://myco.auth0.com/",
-            path="oidc",
+            bound_issuer="https://myco.auth0.com/",
             tune=vault.jwt.AuthBackendTuneArgs(
                 listing_visibility="unauth",
-            ),
-            type="oidc")
+            ))
         ```
         <!--End PulumiCodeChooser -->
 
@@ -821,13 +821,13 @@ class AuthBackend(pulumi.CustomResource):
             description="OIDC backend",
             oidc_discovery_url="https://accounts.google.com",
             path="oidc",
+            type="oidc",
             provider_config={
+                "provider": "gsuite",
                 "fetch_groups": "true",
                 "fetch_user_info": "true",
                 "groups_recurse_max_depth": "1",
-                "provider": "gsuite",
-            },
-            type="oidc")
+            })
         ```
         <!--End PulumiCodeChooser -->
 
@@ -895,10 +895,10 @@ class AuthBackend(pulumi.CustomResource):
         import pulumi_vault as vault
 
         example = vault.jwt.AuthBackend("example",
-            bound_issuer="https://myco.auth0.com/",
             description="Demonstration of the Terraform JWT auth backend",
+            path="jwt",
             oidc_discovery_url="https://myco.auth0.com/",
-            path="jwt")
+            bound_issuer="https://myco.auth0.com/")
         ```
         <!--End PulumiCodeChooser -->
 
@@ -910,16 +910,16 @@ class AuthBackend(pulumi.CustomResource):
         import pulumi_vault as vault
 
         example = vault.jwt.AuthBackend("example",
-            bound_issuer="https://myco.auth0.com/",
             description="Demonstration of the Terraform JWT auth backend",
+            path="oidc",
+            type="oidc",
+            oidc_discovery_url="https://myco.auth0.com/",
             oidc_client_id="1234567890",
             oidc_client_secret="secret123456",
-            oidc_discovery_url="https://myco.auth0.com/",
-            path="oidc",
+            bound_issuer="https://myco.auth0.com/",
             tune=vault.jwt.AuthBackendTuneArgs(
                 listing_visibility="unauth",
-            ),
-            type="oidc")
+            ))
         ```
         <!--End PulumiCodeChooser -->
 
@@ -934,13 +934,13 @@ class AuthBackend(pulumi.CustomResource):
             description="OIDC backend",
             oidc_discovery_url="https://accounts.google.com",
             path="oidc",
+            type="oidc",
             provider_config={
+                "provider": "gsuite",
                 "fetch_groups": "true",
                 "fetch_user_info": "true",
                 "groups_recurse_max_depth": "1",
-                "provider": "gsuite",
-            },
-            type="oidc")
+            })
         ```
         <!--End PulumiCodeChooser -->
 

pulumi_vault/kmip/secret_backend.py

@@ -494,17 +494,17 @@ class SecretBackend(pulumi.CustomResource):
         import pulumi_vault as vault
 
         default = vault.kmip.SecretBackend("default",
-            default_tls_client_key_bits=4096,
-            default_tls_client_key_type="rsa",
-            default_tls_client_ttl=86400,
+            path="kmip",
             description="Vault KMIP backend",
             listen_addrs=[
                 "127.0.0.1:5696",
                 "127.0.0.1:8080",
             ],
-            path="kmip",
+            tls_ca_key_type="rsa",
             tls_ca_key_bits=4096,
-            tls_ca_key_type="rsa")
+            default_tls_client_key_type="rsa",
+            default_tls_client_key_bits=4096,
+            default_tls_client_ttl=86400)
         ```
         <!--End PulumiCodeChooser -->
 
@@ -556,17 +556,17 @@ class SecretBackend(pulumi.CustomResource):
         import pulumi_vault as vault
 
         default = vault.kmip.SecretBackend("default",
-            default_tls_client_key_bits=4096,
-            default_tls_client_key_type="rsa",
-            default_tls_client_ttl=86400,
+            path="kmip",
             description="Vault KMIP backend",
             listen_addrs=[
                 "127.0.0.1:5696",
                 "127.0.0.1:8080",
             ],
-            path="kmip",
+            tls_ca_key_type="rsa",
             tls_ca_key_bits=4096,
-            tls_ca_key_type="rsa")
+            default_tls_client_key_type="rsa",
+            default_tls_client_key_bits=4096,
+            default_tls_client_ttl=86400)
         ```
         <!--End PulumiCodeChooser -->
 

pulumi_vault/kubernetes/get_service_account_token.py

@@ -183,17 +183,19 @@ def get_service_account_token(backend: Optional[str] = None,
     <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
+    import pulumi_std as std
     import pulumi_vault as vault
 
     config = vault.kubernetes.SecretBackend("config",
         path="kubernetes",
         description="kubernetes secrets engine description",
         kubernetes_host="https://127.0.0.1:61233",
-        kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-        service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+        kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+        service_account_jwt=std.file(input="/path/to/token").result,
         disable_local_ca_jwt=False)
     role = vault.kubernetes.SecretBackendRole("role",
         backend=config.path,
+        name="service-account-name-role",
         allowed_kubernetes_namespaces=["*"],
         token_max_ttl=43200,
         token_default_ttl=21600,
@@ -270,17 +272,19 @@ def get_service_account_token_output(backend: Optional[pulumi.Input[str]] = None
     <!--Start PulumiCodeChooser -->
     ```python
     import pulumi
+    import pulumi_std as std
     import pulumi_vault as vault
 
     config = vault.kubernetes.SecretBackend("config",
         path="kubernetes",
         description="kubernetes secrets engine description",
         kubernetes_host="https://127.0.0.1:61233",
-        kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-        service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+        kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+        service_account_jwt=std.file(input="/path/to/token").result,
         disable_local_ca_jwt=False)
     role = vault.kubernetes.SecretBackendRole("role",
         backend=config.path,
+        name="service-account-name-role",
         allowed_kubernetes_namespaces=["*"],
         token_max_ttl=43200,
         token_default_ttl=21600,

pulumi_vault/kubernetes/secret_backend.py

@@ -626,6 +626,7 @@ class SecretBackend(pulumi.CustomResource):
         <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
@@ -634,8 +635,8 @@ class SecretBackend(pulumi.CustomResource):
             default_lease_ttl_seconds=43200,
             max_lease_ttl_seconds=86400,
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         ```
         <!--End PulumiCodeChooser -->
@@ -690,6 +691,7 @@ class SecretBackend(pulumi.CustomResource):
         <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
@@ -698,8 +700,8 @@ class SecretBackend(pulumi.CustomResource):
             default_lease_ttl_seconds=43200,
             max_lease_ttl_seconds=86400,
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         ```
         <!--End PulumiCodeChooser -->

pulumi_vault/kubernetes/secret_backend_role.py

@@ -594,17 +594,19 @@ class SecretBackendRole(pulumi.CustomResource):
         <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         sa_example = vault.kubernetes.SecretBackendRole("sa-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -625,17 +627,19 @@ class SecretBackendRole(pulumi.CustomResource):
         <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         name_example = vault.kubernetes.SecretBackendRole("name-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -656,17 +660,19 @@ class SecretBackendRole(pulumi.CustomResource):
         <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         rules_example = vault.kubernetes.SecretBackendRole("rules-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -751,17 +757,19 @@ class SecretBackendRole(pulumi.CustomResource):
         <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         sa_example = vault.kubernetes.SecretBackendRole("sa-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -782,17 +790,19 @@ class SecretBackendRole(pulumi.CustomResource):
         <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         name_example = vault.kubernetes.SecretBackendRole("name-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,
@@ -813,17 +823,19 @@ class SecretBackendRole(pulumi.CustomResource):
         <!--Start PulumiCodeChooser -->
         ```python
         import pulumi
+        import pulumi_std as std
         import pulumi_vault as vault
 
         config = vault.kubernetes.SecretBackend("config",
             path="kubernetes",
             description="kubernetes secrets engine description",
             kubernetes_host="https://127.0.0.1:61233",
-            kubernetes_ca_cert=(lambda path: open(path).read())("/path/to/cert"),
-            service_account_jwt=(lambda path: open(path).read())("/path/to/token"),
+            kubernetes_ca_cert=std.file(input="/path/to/cert").result,
+            service_account_jwt=std.file(input="/path/to/token").result,
             disable_local_ca_jwt=False)
         rules_example = vault.kubernetes.SecretBackendRole("rules-example",
             backend=config.path,
+            name="service-account-name-role",
             allowed_kubernetes_namespaces=["*"],
             token_max_ttl=43200,
             token_default_ttl=21600,

pulumi_vault/kv/get_secret_subkeys_v2.py

@@ -147,8 +147,9 @@ def get_secret_subkeys_v2(depth: Optional[int] = None,
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
             "foo": "bar",
@@ -223,8 +224,9 @@ def get_secret_subkeys_v2_output(depth: Optional[pulumi.Input[Optional[int]]] =
             "version": "2",
         },
         description="KV Version 2 secret engine mount")
-    aws_secret = vault.kv.SecretV2("awsSecret",
+    aws_secret = vault.kv.SecretV2("aws_secret",
         mount=kvv2.path,
+        name="aws_secret",
         data_json=json.dumps({
             "zip": "zap",
             "foo": "bar",

pulumi_vault/kv/get_secret_v2.py

@@ -179,6 +179,37 @@ def get_secret_v2(mount: Optional[str] = None,
     """
     ## Example Usage
 
+    <!--Start PulumiCodeChooser -->
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv2 = vault.Mount("kvv2",
+        path="kvv2",
+        type="kv",
+        options={
+            "version": "2",
+        },
+        description="KV Version 2 secret engine mount")
+    example_secret_v2 = vault.kv.SecretV2("example",
+        mount=kvv2.path,
+        name="secret",
+        cas=1,
+        delete_all_versions=True,
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    example = vault.kv.get_secret_v2_output(mount=kvv2.path,
+        name=example_secret_v2.name)
+    ```
+    <!--End PulumiCodeChooser -->
+
+    ## Required Vault Capabilities
+
+    Use of this resource requires the `read` capability on the given path.
+
 
     :param str mount: Path where KV-V2 engine is mounted.
     :param str name: Full name of the secret. For a nested secret
@@ -223,6 +254,37 @@ def get_secret_v2_output(mount: Optional[pulumi.Input[str]] = None,
     """
     ## Example Usage
 
+    <!--Start PulumiCodeChooser -->
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv2 = vault.Mount("kvv2",
+        path="kvv2",
+        type="kv",
+        options={
+            "version": "2",
+        },
+        description="KV Version 2 secret engine mount")
+    example_secret_v2 = vault.kv.SecretV2("example",
+        mount=kvv2.path,
+        name="secret",
+        cas=1,
+        delete_all_versions=True,
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    example = vault.kv.get_secret_v2_output(mount=kvv2.path,
+        name=example_secret_v2.name)
+    ```
+    <!--End PulumiCodeChooser -->
+
+    ## Required Vault Capabilities
+
+    Use of this resource requires the `read` capability on the given path.
+
 
     :param str mount: Path where KV-V2 engine is mounted.
     :param str name: Full name of the secret. For a nested secret