PyPI - pulumi-vault - Versions diffs - 6.6.0a1741836364__py3-none-any.whl → 6.7.0__py3-none-any.whl - Mend

pulumi-vault 6.6.0a1741836364py3-none-any.whl → 6.7.0py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (264) hide show

pulumi_vault/__init__.py +1 -0
pulumi_vault/_inputs.py +583 -562
pulumi_vault/ad/__init__.py +1 -0
pulumi_vault/ad/get_access_credentials.py +20 -19
pulumi_vault/ad/secret_backend.py +477 -476
pulumi_vault/ad/secret_library.py +99 -98
pulumi_vault/ad/secret_role.py +85 -84
pulumi_vault/alicloud/__init__.py +1 -0
pulumi_vault/alicloud/auth_backend_role.py +183 -182
pulumi_vault/approle/__init__.py +1 -0
pulumi_vault/approle/auth_backend_login.py +106 -105
pulumi_vault/approle/auth_backend_role.py +239 -238
pulumi_vault/approle/auth_backend_role_secret_id.py +162 -161
pulumi_vault/approle/get_auth_backend_role_id.py +18 -17
pulumi_vault/audit.py +85 -84
pulumi_vault/audit_request_header.py +43 -42
pulumi_vault/auth_backend.py +106 -105
pulumi_vault/aws/__init__.py +1 -0
pulumi_vault/aws/auth_backend_cert.py +71 -70
pulumi_vault/aws/auth_backend_client.py +253 -252
pulumi_vault/aws/auth_backend_config_identity.py +85 -84
pulumi_vault/aws/auth_backend_identity_whitelist.py +57 -56
pulumi_vault/aws/auth_backend_login.py +209 -208
pulumi_vault/aws/auth_backend_role.py +400 -399
pulumi_vault/aws/auth_backend_role_tag.py +127 -126
pulumi_vault/aws/auth_backend_roletag_blacklist.py +57 -56
pulumi_vault/aws/auth_backend_sts_role.py +71 -70
pulumi_vault/aws/get_access_credentials.py +44 -43
pulumi_vault/aws/get_static_access_credentials.py +13 -12
pulumi_vault/aws/secret_backend.py +337 -336
pulumi_vault/aws/secret_backend_role.py +211 -210
pulumi_vault/aws/secret_backend_static_role.py +113 -112
pulumi_vault/azure/__init__.py +1 -0
pulumi_vault/azure/_inputs.py +21 -20
pulumi_vault/azure/auth_backend_config.py +183 -182
pulumi_vault/azure/auth_backend_role.py +253 -252
pulumi_vault/azure/backend.py +239 -238
pulumi_vault/azure/backend_role.py +188 -140
pulumi_vault/azure/get_access_credentials.py +58 -57
pulumi_vault/azure/outputs.py +11 -10
pulumi_vault/cert_auth_backend_role.py +365 -364
pulumi_vault/config/__init__.py +1 -0
pulumi_vault/config/__init__.pyi +1 -0
pulumi_vault/config/_inputs.py +11 -10
pulumi_vault/config/outputs.py +287 -286
pulumi_vault/config/ui_custom_message.py +113 -112
pulumi_vault/config/vars.py +1 -0
pulumi_vault/consul/__init__.py +1 -0
pulumi_vault/consul/secret_backend.py +197 -196
pulumi_vault/consul/secret_backend_role.py +183 -182
pulumi_vault/database/__init__.py +1 -0
pulumi_vault/database/_inputs.py +2525 -2524
pulumi_vault/database/outputs.py +1529 -1528
pulumi_vault/database/secret_backend_connection.py +169 -168
pulumi_vault/database/secret_backend_role.py +169 -168
pulumi_vault/database/secret_backend_static_role.py +179 -178
pulumi_vault/database/secrets_mount.py +267 -266
pulumi_vault/egp_policy.py +71 -70
pulumi_vault/gcp/__init__.py +1 -0
pulumi_vault/gcp/_inputs.py +82 -81
pulumi_vault/gcp/auth_backend.py +260 -259
pulumi_vault/gcp/auth_backend_role.py +281 -280
pulumi_vault/gcp/get_auth_backend_role.py +70 -69
pulumi_vault/gcp/outputs.py +50 -49
pulumi_vault/gcp/secret_backend.py +232 -231
pulumi_vault/gcp/secret_impersonated_account.py +92 -91
pulumi_vault/gcp/secret_roleset.py +92 -91
pulumi_vault/gcp/secret_static_account.py +92 -91
pulumi_vault/generic/__init__.py +1 -0
pulumi_vault/generic/endpoint.py +113 -112
pulumi_vault/generic/get_secret.py +28 -27
pulumi_vault/generic/secret.py +78 -77
pulumi_vault/get_auth_backend.py +19 -18
pulumi_vault/get_auth_backends.py +14 -13
pulumi_vault/get_namespace.py +15 -14
pulumi_vault/get_namespaces.py +68 -18
pulumi_vault/get_nomad_access_token.py +19 -18
pulumi_vault/get_policy_document.py +6 -5
pulumi_vault/get_raft_autopilot_state.py +18 -17
pulumi_vault/github/__init__.py +1 -0
pulumi_vault/github/_inputs.py +42 -41
pulumi_vault/github/auth_backend.py +232 -231
pulumi_vault/github/outputs.py +26 -25
pulumi_vault/github/team.py +57 -56
pulumi_vault/github/user.py +57 -56
pulumi_vault/identity/__init__.py +1 -0
pulumi_vault/identity/entity.py +85 -84
pulumi_vault/identity/entity_alias.py +71 -70
pulumi_vault/identity/entity_policies.py +64 -63
pulumi_vault/identity/get_entity.py +43 -42
pulumi_vault/identity/get_group.py +50 -49
pulumi_vault/identity/get_oidc_client_creds.py +14 -13
pulumi_vault/identity/get_oidc_openid_config.py +24 -23
pulumi_vault/identity/get_oidc_public_keys.py +13 -12
pulumi_vault/identity/group.py +141 -140
pulumi_vault/identity/group_alias.py +57 -56
pulumi_vault/identity/group_member_entity_ids.py +57 -56
pulumi_vault/identity/group_member_group_ids.py +57 -56
pulumi_vault/identity/group_policies.py +64 -63
pulumi_vault/identity/mfa_duo.py +148 -147
pulumi_vault/identity/mfa_login_enforcement.py +120 -119
pulumi_vault/identity/mfa_okta.py +134 -133
pulumi_vault/identity/mfa_pingid.py +127 -126
pulumi_vault/identity/mfa_totp.py +176 -175
pulumi_vault/identity/oidc.py +29 -28
pulumi_vault/identity/oidc_assignment.py +57 -56
pulumi_vault/identity/oidc_client.py +127 -126
pulumi_vault/identity/oidc_key.py +85 -84
pulumi_vault/identity/oidc_key_allowed_client_id.py +43 -42
pulumi_vault/identity/oidc_provider.py +92 -91
pulumi_vault/identity/oidc_role.py +85 -84
pulumi_vault/identity/oidc_scope.py +57 -56
pulumi_vault/identity/outputs.py +32 -31
pulumi_vault/jwt/__init__.py +1 -0
pulumi_vault/jwt/_inputs.py +42 -41
pulumi_vault/jwt/auth_backend.py +288 -287
pulumi_vault/jwt/auth_backend_role.py +407 -406
pulumi_vault/jwt/outputs.py +26 -25
pulumi_vault/kmip/__init__.py +1 -0
pulumi_vault/kmip/secret_backend.py +183 -182
pulumi_vault/kmip/secret_role.py +295 -294
pulumi_vault/kmip/secret_scope.py +57 -56
pulumi_vault/kubernetes/__init__.py +1 -0
pulumi_vault/kubernetes/auth_backend_config.py +141 -140
pulumi_vault/kubernetes/auth_backend_role.py +225 -224
pulumi_vault/kubernetes/get_auth_backend_config.py +47 -46
pulumi_vault/kubernetes/get_auth_backend_role.py +70 -69
pulumi_vault/kubernetes/get_service_account_token.py +38 -37
pulumi_vault/kubernetes/secret_backend.py +316 -315
pulumi_vault/kubernetes/secret_backend_role.py +197 -196
pulumi_vault/kv/__init__.py +1 -0
pulumi_vault/kv/_inputs.py +21 -20
pulumi_vault/kv/get_secret.py +17 -16
pulumi_vault/kv/get_secret_subkeys_v2.py +30 -29
pulumi_vault/kv/get_secret_v2.py +29 -28
pulumi_vault/kv/get_secrets_list.py +13 -12
pulumi_vault/kv/get_secrets_list_v2.py +19 -18
pulumi_vault/kv/outputs.py +13 -12
pulumi_vault/kv/secret.py +50 -49
pulumi_vault/kv/secret_backend_v2.py +71 -70
pulumi_vault/kv/secret_v2.py +134 -133
pulumi_vault/ldap/__init__.py +1 -0
pulumi_vault/ldap/auth_backend.py +588 -587
pulumi_vault/ldap/auth_backend_group.py +57 -56
pulumi_vault/ldap/auth_backend_user.py +71 -70
pulumi_vault/ldap/get_dynamic_credentials.py +17 -16
pulumi_vault/ldap/get_static_credentials.py +18 -17
pulumi_vault/ldap/secret_backend.py +554 -553
pulumi_vault/ldap/secret_backend_dynamic_role.py +127 -126
pulumi_vault/ldap/secret_backend_library_set.py +99 -98
pulumi_vault/ldap/secret_backend_static_role.py +99 -98
pulumi_vault/managed/__init__.py +1 -0
pulumi_vault/managed/_inputs.py +229 -228
pulumi_vault/managed/keys.py +15 -14
pulumi_vault/managed/outputs.py +139 -138
pulumi_vault/mfa_duo.py +113 -112
pulumi_vault/mfa_okta.py +113 -112
pulumi_vault/mfa_pingid.py +120 -119
pulumi_vault/mfa_totp.py +127 -126
pulumi_vault/mongodbatlas/__init__.py +1 -0
pulumi_vault/mongodbatlas/secret_backend.py +64 -63
pulumi_vault/mongodbatlas/secret_role.py +155 -154
pulumi_vault/mount.py +274 -273
pulumi_vault/namespace.py +64 -63
pulumi_vault/nomad_secret_backend.py +211 -210
pulumi_vault/nomad_secret_role.py +85 -84
pulumi_vault/okta/__init__.py +1 -0
pulumi_vault/okta/_inputs.py +26 -25
pulumi_vault/okta/auth_backend.py +274 -273
pulumi_vault/okta/auth_backend_group.py +57 -56
pulumi_vault/okta/auth_backend_user.py +71 -70
pulumi_vault/okta/outputs.py +16 -15
pulumi_vault/outputs.py +73 -60
pulumi_vault/password_policy.py +43 -42
pulumi_vault/pkisecret/__init__.py +1 -0
pulumi_vault/pkisecret/_inputs.py +31 -30
pulumi_vault/pkisecret/backend_acme_eab.py +92 -91
pulumi_vault/pkisecret/backend_config_acme.py +141 -140
pulumi_vault/pkisecret/backend_config_auto_tidy.py +323 -322
pulumi_vault/pkisecret/backend_config_cluster.py +57 -56
pulumi_vault/pkisecret/backend_config_cmpv2.py +106 -105
pulumi_vault/pkisecret/backend_config_est.py +120 -119
pulumi_vault/pkisecret/get_backend_cert_metadata.py +22 -21
pulumi_vault/pkisecret/get_backend_config_cmpv2.py +22 -21
pulumi_vault/pkisecret/get_backend_config_est.py +19 -18
pulumi_vault/pkisecret/get_backend_issuer.py +45 -44
pulumi_vault/pkisecret/get_backend_issuers.py +15 -14
pulumi_vault/pkisecret/get_backend_key.py +20 -19
pulumi_vault/pkisecret/get_backend_keys.py +15 -14
pulumi_vault/pkisecret/outputs.py +28 -27
pulumi_vault/pkisecret/secret_backend_cert.py +337 -336
pulumi_vault/pkisecret/secret_backend_config_ca.py +43 -42
pulumi_vault/pkisecret/secret_backend_config_issuers.py +57 -56
pulumi_vault/pkisecret/secret_backend_config_urls.py +85 -84
pulumi_vault/pkisecret/secret_backend_crl_config.py +197 -196
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +421 -420
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +57 -56
pulumi_vault/pkisecret/secret_backend_issuer.py +232 -231
pulumi_vault/pkisecret/secret_backend_key.py +120 -119
pulumi_vault/pkisecret/secret_backend_role.py +715 -714
pulumi_vault/pkisecret/secret_backend_root_cert.py +554 -553
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +526 -525
pulumi_vault/pkisecret/secret_backend_sign.py +281 -280
pulumi_vault/plugin.py +127 -126
pulumi_vault/plugin_pinned_version.py +43 -42
pulumi_vault/policy.py +43 -42
pulumi_vault/provider.py +120 -119
pulumi_vault/pulumi-plugin.json +1 -1
pulumi_vault/quota_lease_count.py +85 -84
pulumi_vault/quota_rate_limit.py +113 -112
pulumi_vault/rabbitmq/__init__.py +1 -0
pulumi_vault/rabbitmq/_inputs.py +41 -40
pulumi_vault/rabbitmq/outputs.py +25 -24
pulumi_vault/rabbitmq/secret_backend.py +169 -168
pulumi_vault/rabbitmq/secret_backend_role.py +57 -56
pulumi_vault/raft_autopilot.py +113 -112
pulumi_vault/raft_snapshot_agent_config.py +393 -392
pulumi_vault/rgp_policy.py +57 -56
pulumi_vault/saml/__init__.py +1 -0
pulumi_vault/saml/auth_backend.py +155 -154
pulumi_vault/saml/auth_backend_role.py +239 -238
pulumi_vault/secrets/__init__.py +1 -0
pulumi_vault/secrets/_inputs.py +16 -15
pulumi_vault/secrets/outputs.py +10 -9
pulumi_vault/secrets/sync_association.py +71 -70
pulumi_vault/secrets/sync_aws_destination.py +148 -147
pulumi_vault/secrets/sync_azure_destination.py +148 -147
pulumi_vault/secrets/sync_config.py +43 -42
pulumi_vault/secrets/sync_gcp_destination.py +106 -105
pulumi_vault/secrets/sync_gh_destination.py +134 -133
pulumi_vault/secrets/sync_github_apps.py +64 -63
pulumi_vault/secrets/sync_vercel_destination.py +120 -119
pulumi_vault/ssh/__init__.py +1 -0
pulumi_vault/ssh/_inputs.py +11 -10
pulumi_vault/ssh/get_secret_backend_sign.py +52 -51
pulumi_vault/ssh/outputs.py +7 -6
pulumi_vault/ssh/secret_backend_ca.py +99 -98
pulumi_vault/ssh/secret_backend_role.py +365 -364
pulumi_vault/terraformcloud/__init__.py +1 -0
pulumi_vault/terraformcloud/secret_backend.py +111 -110
pulumi_vault/terraformcloud/secret_creds.py +74 -73
pulumi_vault/terraformcloud/secret_role.py +93 -92
pulumi_vault/token.py +246 -245
pulumi_vault/tokenauth/__init__.py +1 -0
pulumi_vault/tokenauth/auth_backend_role.py +267 -266
pulumi_vault/transform/__init__.py +1 -0
pulumi_vault/transform/alphabet.py +57 -56
pulumi_vault/transform/get_decode.py +47 -46
pulumi_vault/transform/get_encode.py +47 -46
pulumi_vault/transform/role.py +57 -56
pulumi_vault/transform/template.py +113 -112
pulumi_vault/transform/transformation.py +141 -140
pulumi_vault/transit/__init__.py +1 -0
pulumi_vault/transit/get_decrypt.py +18 -17
pulumi_vault/transit/get_encrypt.py +21 -20
pulumi_vault/transit/get_sign.py +54 -53
pulumi_vault/transit/get_verify.py +60 -59
pulumi_vault/transit/secret_backend_key.py +274 -273
pulumi_vault/transit/secret_cache_config.py +43 -42
{pulumi_vault-6.6.0a1741836364.dist-info → pulumi_vault-6.7.0.dist-info}/METADATA +2 -2
pulumi_vault-6.7.0.dist-info/RECORD +265 -0
{pulumi_vault-6.6.0a1741836364.dist-info → pulumi_vault-6.7.0.dist-info}/WHEEL +1 -1
pulumi_vault-6.6.0a1741836364.dist-info/RECORD +0 -265
{pulumi_vault-6.6.0a1741836364.dist-info → pulumi_vault-6.7.0.dist-info}/top_level.txt +0 -0

pulumi_vault/gcp/auth_backend.py CHANGED Viewed

@@ -2,6 +2,7 @@
 # *** WARNING: this file was generated by the Pulumi Terraform Bridge (tfgen) Tool. ***
 # *** Do not edit by hand unless you're certain you know what you are doing! ***
+import builtins
 import copy
 import warnings
 import sys
@@ -21,31 +22,31 @@ __all__ = ['AuthBackendArgs', 'AuthBackend']
 @pulumi.input_type
 class AuthBackendArgs:
     def __init__(__self__, *,
-                 client_email: Optional[pulumi.Input[str]] = None,
-                 client_id: Optional[pulumi.Input[str]] = None,
-                 credentials: Optional[pulumi.Input[str]] = None,
+                 client_email: Optional[pulumi.Input[builtins.str]] = None,
+                 client_id: Optional[pulumi.Input[builtins.str]] = None,
+                 credentials: Optional[pulumi.Input[builtins.str]] = None,
                  custom_endpoint: Optional[pulumi.Input['AuthBackendCustomEndpointArgs']] = None,
-                 description: Optional[pulumi.Input[str]] = None,
-                 disable_automated_rotation: Optional[pulumi.Input[bool]] = None,
-                 disable_remount: Optional[pulumi.Input[bool]] = None,
-                 identity_token_audience: Optional[pulumi.Input[str]] = None,
-                 identity_token_key: Optional[pulumi.Input[str]] = None,
-                 identity_token_ttl: Optional[pulumi.Input[int]] = None,
-                 local: Optional[pulumi.Input[bool]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
-                 path: Optional[pulumi.Input[str]] = None,
-                 private_key_id: Optional[pulumi.Input[str]] = None,
-                 project_id: Optional[pulumi.Input[str]] = None,
-                 rotation_period: Optional[pulumi.Input[int]] = None,
-                 rotation_schedule: Optional[pulumi.Input[str]] = None,
-                 rotation_window: Optional[pulumi.Input[int]] = None,
-                 service_account_email: Optional[pulumi.Input[str]] = None,
+                 description: Optional[pulumi.Input[builtins.str]] = None,
+                 disable_automated_rotation: Optional[pulumi.Input[builtins.bool]] = None,
+                 disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
+                 identity_token_audience: Optional[pulumi.Input[builtins.str]] = None,
+                 identity_token_key: Optional[pulumi.Input[builtins.str]] = None,
+                 identity_token_ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 local: Optional[pulumi.Input[builtins.bool]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
+                 path: Optional[pulumi.Input[builtins.str]] = None,
+                 private_key_id: Optional[pulumi.Input[builtins.str]] = None,
+                 project_id: Optional[pulumi.Input[builtins.str]] = None,
+                 rotation_period: Optional[pulumi.Input[builtins.int]] = None,
+                 rotation_schedule: Optional[pulumi.Input[builtins.str]] = None,
+                 rotation_window: Optional[pulumi.Input[builtins.int]] = None,
+                 service_account_email: Optional[pulumi.Input[builtins.str]] = None,
                  tune: Optional[pulumi.Input['AuthBackendTuneArgs']] = None):
         """
         The set of arguments for constructing a AuthBackend resource.
-        :param pulumi.Input[str] client_email: The clients email associated with the credentials
-        :param pulumi.Input[str] client_id: The Client ID of the credentials
-        :param pulumi.Input[str] credentials: A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
+        :param pulumi.Input[builtins.str] client_email: The clients email associated with the credentials
+        :param pulumi.Input[builtins.str] client_id: The Client ID of the credentials
+        :param pulumi.Input[builtins.str] credentials: A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
         :param pulumi.Input['AuthBackendCustomEndpointArgs'] custom_endpoint: Specifies overrides to
                [service endpoints](https://cloud.google.com/apis/design/glossary#api_service_endpoint)
                used when making API requests. This allows specific requests made during authentication
@@ -53,32 +54,32 @@ class AuthBackendArgs:
                environments. Requires Vault 1.11+.
                Overrides are set at the subdomain level using the following keys:
-        :param pulumi.Input[str] description: A description of the auth method.
-        :param pulumi.Input[bool] disable_automated_rotation: Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
+        :param pulumi.Input[builtins.str] description: A description of the auth method.
+        :param pulumi.Input[builtins.bool] disable_automated_rotation: Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
+        :param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
-        :param pulumi.Input[str] identity_token_audience: The audience claim value for plugin identity
+        :param pulumi.Input[builtins.str] identity_token_audience: The audience claim value for plugin identity
                tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
                Mutually exclusive with `credentials`.  Requires Vault 1.17+. *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] identity_token_key: The key to use for signing plugin identity
+        :param pulumi.Input[builtins.str] identity_token_key: The key to use for signing plugin identity
                tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
-        :param pulumi.Input[int] identity_token_ttl: The TTL of generated tokens.
-        :param pulumi.Input[bool] local: Specifies if the auth method is local only.
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.int] identity_token_ttl: The TTL of generated tokens.
+        :param pulumi.Input[builtins.bool] local: Specifies if the auth method is local only.
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] path: The path to mount the auth method — this defaults to 'gcp'.
-        :param pulumi.Input[str] private_key_id: The ID of the private key from the credentials
-        :param pulumi.Input[str] project_id: The GCP Project ID
-        :param pulumi.Input[int] rotation_period: The amount of time in seconds Vault should wait before rotating the root credential.
+        :param pulumi.Input[builtins.str] path: The path to mount the auth method — this defaults to 'gcp'.
+        :param pulumi.Input[builtins.str] private_key_id: The ID of the private key from the credentials
+        :param pulumi.Input[builtins.str] project_id: The GCP Project ID
+        :param pulumi.Input[builtins.int] rotation_period: The amount of time in seconds Vault should wait before rotating the root credential.
                A zero value tells Vault not to rotate the root credential. The minimum rotation period is 10 seconds. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[str] rotation_schedule: The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
+        :param pulumi.Input[builtins.str] rotation_schedule: The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
                defining the schedule on which Vault should rotate the root token. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[int] rotation_window: The maximum amount of time in seconds allowed to complete
+        :param pulumi.Input[builtins.int] rotation_window: The maximum amount of time in seconds allowed to complete
                a rotation when a scheduled token rotation occurs. The default rotation window is
                unbound and the minimum allowable window is `3600`. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[str] service_account_email: Service Account to impersonate for plugin workload identity federation.
+        :param pulumi.Input[builtins.str] service_account_email: Service Account to impersonate for plugin workload identity federation.
                Required with `identity_token_audience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
         :param pulumi.Input['AuthBackendTuneArgs'] tune: Extra configuration block. Structure is documented below.
@@ -127,38 +128,38 @@ class AuthBackendArgs:
     @property
     @pulumi.getter(name="clientEmail")
-    def client_email(self) -> Optional[pulumi.Input[str]]:
+    def client_email(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The clients email associated with the credentials
         """
         return pulumi.get(self, "client_email")
     @client_email.setter
-    def client_email(self, value: Optional[pulumi.Input[str]]):
+    def client_email(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "client_email", value)
     @property
     @pulumi.getter(name="clientId")
-    def client_id(self) -> Optional[pulumi.Input[str]]:
+    def client_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The Client ID of the credentials
         """
         return pulumi.get(self, "client_id")
     @client_id.setter
-    def client_id(self, value: Optional[pulumi.Input[str]]):
+    def client_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "client_id", value)
     @property
     @pulumi.getter
-    def credentials(self) -> Optional[pulumi.Input[str]]:
+    def credentials(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
         """
         return pulumi.get(self, "credentials")
     @credentials.setter
-    def credentials(self, value: Optional[pulumi.Input[str]]):
+    def credentials(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "credentials", value)
     @property
@@ -181,31 +182,31 @@ class AuthBackendArgs:
     @property
     @pulumi.getter
-    def description(self) -> Optional[pulumi.Input[str]]:
+    def description(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         A description of the auth method.
         """
         return pulumi.get(self, "description")
     @description.setter
-    def description(self, value: Optional[pulumi.Input[str]]):
+    def description(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "description", value)
     @property
     @pulumi.getter(name="disableAutomatedRotation")
-    def disable_automated_rotation(self) -> Optional[pulumi.Input[bool]]:
+    def disable_automated_rotation(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
         """
         return pulumi.get(self, "disable_automated_rotation")
     @disable_automated_rotation.setter
-    def disable_automated_rotation(self, value: Optional[pulumi.Input[bool]]):
+    def disable_automated_rotation(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "disable_automated_rotation", value)
     @property
     @pulumi.getter(name="disableRemount")
-    def disable_remount(self) -> Optional[pulumi.Input[bool]]:
+    def disable_remount(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         If set, opts out of mount migration on path updates.
         See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
@@ -213,12 +214,12 @@ class AuthBackendArgs:
         return pulumi.get(self, "disable_remount")
     @disable_remount.setter
-    def disable_remount(self, value: Optional[pulumi.Input[bool]]):
+    def disable_remount(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "disable_remount", value)
     @property
     @pulumi.getter(name="identityTokenAudience")
-    def identity_token_audience(self) -> Optional[pulumi.Input[str]]:
+    def identity_token_audience(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The audience claim value for plugin identity
         tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
@@ -227,12 +228,12 @@ class AuthBackendArgs:
         return pulumi.get(self, "identity_token_audience")
     @identity_token_audience.setter
-    def identity_token_audience(self, value: Optional[pulumi.Input[str]]):
+    def identity_token_audience(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "identity_token_audience", value)
     @property
     @pulumi.getter(name="identityTokenKey")
-    def identity_token_key(self) -> Optional[pulumi.Input[str]]:
+    def identity_token_key(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The key to use for signing plugin identity
         tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
@@ -240,36 +241,36 @@ class AuthBackendArgs:
         return pulumi.get(self, "identity_token_key")
     @identity_token_key.setter
-    def identity_token_key(self, value: Optional[pulumi.Input[str]]):
+    def identity_token_key(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "identity_token_key", value)
     @property
     @pulumi.getter(name="identityTokenTtl")
-    def identity_token_ttl(self) -> Optional[pulumi.Input[int]]:
+    def identity_token_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The TTL of generated tokens.
         """
         return pulumi.get(self, "identity_token_ttl")
     @identity_token_ttl.setter
-    def identity_token_ttl(self, value: Optional[pulumi.Input[int]]):
+    def identity_token_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "identity_token_ttl", value)
     @property
     @pulumi.getter
-    def local(self) -> Optional[pulumi.Input[bool]]:
+    def local(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Specifies if the auth method is local only.
         """
         return pulumi.get(self, "local")
     @local.setter
-    def local(self, value: Optional[pulumi.Input[bool]]):
+    def local(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "local", value)
     @property
     @pulumi.getter
-    def namespace(self) -> Optional[pulumi.Input[str]]:
+    def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -279,48 +280,48 @@ class AuthBackendArgs:
         return pulumi.get(self, "namespace")
     @namespace.setter
-    def namespace(self, value: Optional[pulumi.Input[str]]):
+    def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "namespace", value)
     @property
     @pulumi.getter
-    def path(self) -> Optional[pulumi.Input[str]]:
+    def path(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The path to mount the auth method — this defaults to 'gcp'.
         """
         return pulumi.get(self, "path")
     @path.setter
-    def path(self, value: Optional[pulumi.Input[str]]):
+    def path(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "path", value)
     @property
     @pulumi.getter(name="privateKeyId")
-    def private_key_id(self) -> Optional[pulumi.Input[str]]:
+    def private_key_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The ID of the private key from the credentials
         """
         return pulumi.get(self, "private_key_id")
     @private_key_id.setter
-    def private_key_id(self, value: Optional[pulumi.Input[str]]):
+    def private_key_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "private_key_id", value)
     @property
     @pulumi.getter(name="projectId")
-    def project_id(self) -> Optional[pulumi.Input[str]]:
+    def project_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The GCP Project ID
         """
         return pulumi.get(self, "project_id")
     @project_id.setter
-    def project_id(self, value: Optional[pulumi.Input[str]]):
+    def project_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "project_id", value)
     @property
     @pulumi.getter(name="rotationPeriod")
-    def rotation_period(self) -> Optional[pulumi.Input[int]]:
+    def rotation_period(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The amount of time in seconds Vault should wait before rotating the root credential.
         A zero value tells Vault not to rotate the root credential. The minimum rotation period is 10 seconds. Requires Vault Enterprise 1.19+.
@@ -328,12 +329,12 @@ class AuthBackendArgs:
         return pulumi.get(self, "rotation_period")
     @rotation_period.setter
-    def rotation_period(self, value: Optional[pulumi.Input[int]]):
+    def rotation_period(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "rotation_period", value)
     @property
     @pulumi.getter(name="rotationSchedule")
-    def rotation_schedule(self) -> Optional[pulumi.Input[str]]:
+    def rotation_schedule(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
         defining the schedule on which Vault should rotate the root token. Requires Vault Enterprise 1.19+.
@@ -341,12 +342,12 @@ class AuthBackendArgs:
         return pulumi.get(self, "rotation_schedule")
     @rotation_schedule.setter
-    def rotation_schedule(self, value: Optional[pulumi.Input[str]]):
+    def rotation_schedule(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "rotation_schedule", value)
     @property
     @pulumi.getter(name="rotationWindow")
-    def rotation_window(self) -> Optional[pulumi.Input[int]]:
+    def rotation_window(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The maximum amount of time in seconds allowed to complete
         a rotation when a scheduled token rotation occurs. The default rotation window is
@@ -355,12 +356,12 @@ class AuthBackendArgs:
         return pulumi.get(self, "rotation_window")
     @rotation_window.setter
-    def rotation_window(self, value: Optional[pulumi.Input[int]]):
+    def rotation_window(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "rotation_window", value)
     @property
     @pulumi.getter(name="serviceAccountEmail")
-    def service_account_email(self) -> Optional[pulumi.Input[str]]:
+    def service_account_email(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Service Account to impersonate for plugin workload identity federation.
         Required with `identity_token_audience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
@@ -368,7 +369,7 @@ class AuthBackendArgs:
         return pulumi.get(self, "service_account_email")
     @service_account_email.setter
-    def service_account_email(self, value: Optional[pulumi.Input[str]]):
+    def service_account_email(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "service_account_email", value)
     @property
@@ -389,33 +390,33 @@ class AuthBackendArgs:
 @pulumi.input_type
 class _AuthBackendState:
     def __init__(__self__, *,
-                 accessor: Optional[pulumi.Input[str]] = None,
-                 client_email: Optional[pulumi.Input[str]] = None,
-                 client_id: Optional[pulumi.Input[str]] = None,
-                 credentials: Optional[pulumi.Input[str]] = None,
+                 accessor: Optional[pulumi.Input[builtins.str]] = None,
+                 client_email: Optional[pulumi.Input[builtins.str]] = None,
+                 client_id: Optional[pulumi.Input[builtins.str]] = None,
+                 credentials: Optional[pulumi.Input[builtins.str]] = None,
                  custom_endpoint: Optional[pulumi.Input['AuthBackendCustomEndpointArgs']] = None,
-                 description: Optional[pulumi.Input[str]] = None,
-                 disable_automated_rotation: Optional[pulumi.Input[bool]] = None,
-                 disable_remount: Optional[pulumi.Input[bool]] = None,
-                 identity_token_audience: Optional[pulumi.Input[str]] = None,
-                 identity_token_key: Optional[pulumi.Input[str]] = None,
-                 identity_token_ttl: Optional[pulumi.Input[int]] = None,
-                 local: Optional[pulumi.Input[bool]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
-                 path: Optional[pulumi.Input[str]] = None,
-                 private_key_id: Optional[pulumi.Input[str]] = None,
-                 project_id: Optional[pulumi.Input[str]] = None,
-                 rotation_period: Optional[pulumi.Input[int]] = None,
-                 rotation_schedule: Optional[pulumi.Input[str]] = None,
-                 rotation_window: Optional[pulumi.Input[int]] = None,
-                 service_account_email: Optional[pulumi.Input[str]] = None,
+                 description: Optional[pulumi.Input[builtins.str]] = None,
+                 disable_automated_rotation: Optional[pulumi.Input[builtins.bool]] = None,
+                 disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
+                 identity_token_audience: Optional[pulumi.Input[builtins.str]] = None,
+                 identity_token_key: Optional[pulumi.Input[builtins.str]] = None,
+                 identity_token_ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 local: Optional[pulumi.Input[builtins.bool]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
+                 path: Optional[pulumi.Input[builtins.str]] = None,
+                 private_key_id: Optional[pulumi.Input[builtins.str]] = None,
+                 project_id: Optional[pulumi.Input[builtins.str]] = None,
+                 rotation_period: Optional[pulumi.Input[builtins.int]] = None,
+                 rotation_schedule: Optional[pulumi.Input[builtins.str]] = None,
+                 rotation_window: Optional[pulumi.Input[builtins.int]] = None,
+                 service_account_email: Optional[pulumi.Input[builtins.str]] = None,
                  tune: Optional[pulumi.Input['AuthBackendTuneArgs']] = None):
         """
         Input properties used for looking up and filtering AuthBackend resources.
-        :param pulumi.Input[str] accessor: The mount accessor related to the auth mount. It is useful for integration with [Identity Secrets Engine](https://www.vaultproject.io/docs/secrets/identity/index.html).
-        :param pulumi.Input[str] client_email: The clients email associated with the credentials
-        :param pulumi.Input[str] client_id: The Client ID of the credentials
-        :param pulumi.Input[str] credentials: A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
+        :param pulumi.Input[builtins.str] accessor: The mount accessor related to the auth mount. It is useful for integration with [Identity Secrets Engine](https://www.vaultproject.io/docs/secrets/identity/index.html).
+        :param pulumi.Input[builtins.str] client_email: The clients email associated with the credentials
+        :param pulumi.Input[builtins.str] client_id: The Client ID of the credentials
+        :param pulumi.Input[builtins.str] credentials: A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
         :param pulumi.Input['AuthBackendCustomEndpointArgs'] custom_endpoint: Specifies overrides to
                [service endpoints](https://cloud.google.com/apis/design/glossary#api_service_endpoint)
                used when making API requests. This allows specific requests made during authentication
@@ -423,32 +424,32 @@ class _AuthBackendState:
                environments. Requires Vault 1.11+.
                Overrides are set at the subdomain level using the following keys:
-        :param pulumi.Input[str] description: A description of the auth method.
-        :param pulumi.Input[bool] disable_automated_rotation: Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
+        :param pulumi.Input[builtins.str] description: A description of the auth method.
+        :param pulumi.Input[builtins.bool] disable_automated_rotation: Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
+        :param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
-        :param pulumi.Input[str] identity_token_audience: The audience claim value for plugin identity
+        :param pulumi.Input[builtins.str] identity_token_audience: The audience claim value for plugin identity
                tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
                Mutually exclusive with `credentials`.  Requires Vault 1.17+. *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] identity_token_key: The key to use for signing plugin identity
+        :param pulumi.Input[builtins.str] identity_token_key: The key to use for signing plugin identity
                tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
-        :param pulumi.Input[int] identity_token_ttl: The TTL of generated tokens.
-        :param pulumi.Input[bool] local: Specifies if the auth method is local only.
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.int] identity_token_ttl: The TTL of generated tokens.
+        :param pulumi.Input[builtins.bool] local: Specifies if the auth method is local only.
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] path: The path to mount the auth method — this defaults to 'gcp'.
-        :param pulumi.Input[str] private_key_id: The ID of the private key from the credentials
-        :param pulumi.Input[str] project_id: The GCP Project ID
-        :param pulumi.Input[int] rotation_period: The amount of time in seconds Vault should wait before rotating the root credential.
+        :param pulumi.Input[builtins.str] path: The path to mount the auth method — this defaults to 'gcp'.
+        :param pulumi.Input[builtins.str] private_key_id: The ID of the private key from the credentials
+        :param pulumi.Input[builtins.str] project_id: The GCP Project ID
+        :param pulumi.Input[builtins.int] rotation_period: The amount of time in seconds Vault should wait before rotating the root credential.
                A zero value tells Vault not to rotate the root credential. The minimum rotation period is 10 seconds. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[str] rotation_schedule: The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
+        :param pulumi.Input[builtins.str] rotation_schedule: The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
                defining the schedule on which Vault should rotate the root token. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[int] rotation_window: The maximum amount of time in seconds allowed to complete
+        :param pulumi.Input[builtins.int] rotation_window: The maximum amount of time in seconds allowed to complete
                a rotation when a scheduled token rotation occurs. The default rotation window is
                unbound and the minimum allowable window is `3600`. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[str] service_account_email: Service Account to impersonate for plugin workload identity federation.
+        :param pulumi.Input[builtins.str] service_account_email: Service Account to impersonate for plugin workload identity federation.
                Required with `identity_token_audience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
         :param pulumi.Input['AuthBackendTuneArgs'] tune: Extra configuration block. Structure is documented below.
@@ -499,50 +500,50 @@ class _AuthBackendState:
     @property
     @pulumi.getter
-    def accessor(self) -> Optional[pulumi.Input[str]]:
+    def accessor(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The mount accessor related to the auth mount. It is useful for integration with [Identity Secrets Engine](https://www.vaultproject.io/docs/secrets/identity/index.html).
         """
         return pulumi.get(self, "accessor")
     @accessor.setter
-    def accessor(self, value: Optional[pulumi.Input[str]]):
+    def accessor(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "accessor", value)
     @property
     @pulumi.getter(name="clientEmail")
-    def client_email(self) -> Optional[pulumi.Input[str]]:
+    def client_email(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The clients email associated with the credentials
         """
         return pulumi.get(self, "client_email")
     @client_email.setter
-    def client_email(self, value: Optional[pulumi.Input[str]]):
+    def client_email(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "client_email", value)
     @property
     @pulumi.getter(name="clientId")
-    def client_id(self) -> Optional[pulumi.Input[str]]:
+    def client_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The Client ID of the credentials
         """
         return pulumi.get(self, "client_id")
     @client_id.setter
-    def client_id(self, value: Optional[pulumi.Input[str]]):
+    def client_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "client_id", value)
     @property
     @pulumi.getter
-    def credentials(self) -> Optional[pulumi.Input[str]]:
+    def credentials(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
         """
         return pulumi.get(self, "credentials")
     @credentials.setter
-    def credentials(self, value: Optional[pulumi.Input[str]]):
+    def credentials(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "credentials", value)
     @property
@@ -565,31 +566,31 @@ class _AuthBackendState:
     @property
     @pulumi.getter
-    def description(self) -> Optional[pulumi.Input[str]]:
+    def description(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         A description of the auth method.
         """
         return pulumi.get(self, "description")
     @description.setter
-    def description(self, value: Optional[pulumi.Input[str]]):
+    def description(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "description", value)
     @property
     @pulumi.getter(name="disableAutomatedRotation")
-    def disable_automated_rotation(self) -> Optional[pulumi.Input[bool]]:
+    def disable_automated_rotation(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
         """
         return pulumi.get(self, "disable_automated_rotation")
     @disable_automated_rotation.setter
-    def disable_automated_rotation(self, value: Optional[pulumi.Input[bool]]):
+    def disable_automated_rotation(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "disable_automated_rotation", value)
     @property
     @pulumi.getter(name="disableRemount")
-    def disable_remount(self) -> Optional[pulumi.Input[bool]]:
+    def disable_remount(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         If set, opts out of mount migration on path updates.
         See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
@@ -597,12 +598,12 @@ class _AuthBackendState:
         return pulumi.get(self, "disable_remount")
     @disable_remount.setter
-    def disable_remount(self, value: Optional[pulumi.Input[bool]]):
+    def disable_remount(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "disable_remount", value)
     @property
     @pulumi.getter(name="identityTokenAudience")
-    def identity_token_audience(self) -> Optional[pulumi.Input[str]]:
+    def identity_token_audience(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The audience claim value for plugin identity
         tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
@@ -611,12 +612,12 @@ class _AuthBackendState:
         return pulumi.get(self, "identity_token_audience")
     @identity_token_audience.setter
-    def identity_token_audience(self, value: Optional[pulumi.Input[str]]):
+    def identity_token_audience(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "identity_token_audience", value)
     @property
     @pulumi.getter(name="identityTokenKey")
-    def identity_token_key(self) -> Optional[pulumi.Input[str]]:
+    def identity_token_key(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The key to use for signing plugin identity
         tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
@@ -624,36 +625,36 @@ class _AuthBackendState:
         return pulumi.get(self, "identity_token_key")
     @identity_token_key.setter
-    def identity_token_key(self, value: Optional[pulumi.Input[str]]):
+    def identity_token_key(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "identity_token_key", value)
     @property
     @pulumi.getter(name="identityTokenTtl")
-    def identity_token_ttl(self) -> Optional[pulumi.Input[int]]:
+    def identity_token_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The TTL of generated tokens.
         """
         return pulumi.get(self, "identity_token_ttl")
     @identity_token_ttl.setter
-    def identity_token_ttl(self, value: Optional[pulumi.Input[int]]):
+    def identity_token_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "identity_token_ttl", value)
     @property
     @pulumi.getter
-    def local(self) -> Optional[pulumi.Input[bool]]:
+    def local(self) -> Optional[pulumi.Input[builtins.bool]]:
         """
         Specifies if the auth method is local only.
         """
         return pulumi.get(self, "local")
     @local.setter
-    def local(self, value: Optional[pulumi.Input[bool]]):
+    def local(self, value: Optional[pulumi.Input[builtins.bool]]):
         pulumi.set(self, "local", value)
     @property
     @pulumi.getter
-    def namespace(self) -> Optional[pulumi.Input[str]]:
+    def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -663,48 +664,48 @@ class _AuthBackendState:
         return pulumi.get(self, "namespace")
     @namespace.setter
-    def namespace(self, value: Optional[pulumi.Input[str]]):
+    def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "namespace", value)
     @property
     @pulumi.getter
-    def path(self) -> Optional[pulumi.Input[str]]:
+    def path(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The path to mount the auth method — this defaults to 'gcp'.
         """
         return pulumi.get(self, "path")
     @path.setter
-    def path(self, value: Optional[pulumi.Input[str]]):
+    def path(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "path", value)
     @property
     @pulumi.getter(name="privateKeyId")
-    def private_key_id(self) -> Optional[pulumi.Input[str]]:
+    def private_key_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The ID of the private key from the credentials
         """
         return pulumi.get(self, "private_key_id")
     @private_key_id.setter
-    def private_key_id(self, value: Optional[pulumi.Input[str]]):
+    def private_key_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "private_key_id", value)
     @property
     @pulumi.getter(name="projectId")
-    def project_id(self) -> Optional[pulumi.Input[str]]:
+    def project_id(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The GCP Project ID
         """
         return pulumi.get(self, "project_id")
     @project_id.setter
-    def project_id(self, value: Optional[pulumi.Input[str]]):
+    def project_id(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "project_id", value)
     @property
     @pulumi.getter(name="rotationPeriod")
-    def rotation_period(self) -> Optional[pulumi.Input[int]]:
+    def rotation_period(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The amount of time in seconds Vault should wait before rotating the root credential.
         A zero value tells Vault not to rotate the root credential. The minimum rotation period is 10 seconds. Requires Vault Enterprise 1.19+.
@@ -712,12 +713,12 @@ class _AuthBackendState:
         return pulumi.get(self, "rotation_period")
     @rotation_period.setter
-    def rotation_period(self, value: Optional[pulumi.Input[int]]):
+    def rotation_period(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "rotation_period", value)
     @property
     @pulumi.getter(name="rotationSchedule")
-    def rotation_schedule(self) -> Optional[pulumi.Input[str]]:
+    def rotation_schedule(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
         defining the schedule on which Vault should rotate the root token. Requires Vault Enterprise 1.19+.
@@ -725,12 +726,12 @@ class _AuthBackendState:
         return pulumi.get(self, "rotation_schedule")
     @rotation_schedule.setter
-    def rotation_schedule(self, value: Optional[pulumi.Input[str]]):
+    def rotation_schedule(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "rotation_schedule", value)
     @property
     @pulumi.getter(name="rotationWindow")
-    def rotation_window(self) -> Optional[pulumi.Input[int]]:
+    def rotation_window(self) -> Optional[pulumi.Input[builtins.int]]:
         """
         The maximum amount of time in seconds allowed to complete
         a rotation when a scheduled token rotation occurs. The default rotation window is
@@ -739,12 +740,12 @@ class _AuthBackendState:
         return pulumi.get(self, "rotation_window")
     @rotation_window.setter
-    def rotation_window(self, value: Optional[pulumi.Input[int]]):
+    def rotation_window(self, value: Optional[pulumi.Input[builtins.int]]):
         pulumi.set(self, "rotation_window", value)
     @property
     @pulumi.getter(name="serviceAccountEmail")
-    def service_account_email(self) -> Optional[pulumi.Input[str]]:
+    def service_account_email(self) -> Optional[pulumi.Input[builtins.str]]:
         """
         Service Account to impersonate for plugin workload identity federation.
         Required with `identity_token_audience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
@@ -752,7 +753,7 @@ class _AuthBackendState:
         return pulumi.get(self, "service_account_email")
     @service_account_email.setter
-    def service_account_email(self, value: Optional[pulumi.Input[str]]):
+    def service_account_email(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "service_account_email", value)
     @property
@@ -775,25 +776,25 @@ class AuthBackend(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 client_email: Optional[pulumi.Input[str]] = None,
-                 client_id: Optional[pulumi.Input[str]] = None,
-                 credentials: Optional[pulumi.Input[str]] = None,
+                 client_email: Optional[pulumi.Input[builtins.str]] = None,
+                 client_id: Optional[pulumi.Input[builtins.str]] = None,
+                 credentials: Optional[pulumi.Input[builtins.str]] = None,
                  custom_endpoint: Optional[pulumi.Input[Union['AuthBackendCustomEndpointArgs', 'AuthBackendCustomEndpointArgsDict']]] = None,
-                 description: Optional[pulumi.Input[str]] = None,
-                 disable_automated_rotation: Optional[pulumi.Input[bool]] = None,
-                 disable_remount: Optional[pulumi.Input[bool]] = None,
-                 identity_token_audience: Optional[pulumi.Input[str]] = None,
-                 identity_token_key: Optional[pulumi.Input[str]] = None,
-                 identity_token_ttl: Optional[pulumi.Input[int]] = None,
-                 local: Optional[pulumi.Input[bool]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
-                 path: Optional[pulumi.Input[str]] = None,
-                 private_key_id: Optional[pulumi.Input[str]] = None,
-                 project_id: Optional[pulumi.Input[str]] = None,
-                 rotation_period: Optional[pulumi.Input[int]] = None,
-                 rotation_schedule: Optional[pulumi.Input[str]] = None,
-                 rotation_window: Optional[pulumi.Input[int]] = None,
-                 service_account_email: Optional[pulumi.Input[str]] = None,
+                 description: Optional[pulumi.Input[builtins.str]] = None,
+                 disable_automated_rotation: Optional[pulumi.Input[builtins.bool]] = None,
+                 disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
+                 identity_token_audience: Optional[pulumi.Input[builtins.str]] = None,
+                 identity_token_key: Optional[pulumi.Input[builtins.str]] = None,
+                 identity_token_ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 local: Optional[pulumi.Input[builtins.bool]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
+                 path: Optional[pulumi.Input[builtins.str]] = None,
+                 private_key_id: Optional[pulumi.Input[builtins.str]] = None,
+                 project_id: Optional[pulumi.Input[builtins.str]] = None,
+                 rotation_period: Optional[pulumi.Input[builtins.int]] = None,
+                 rotation_schedule: Optional[pulumi.Input[builtins.str]] = None,
+                 rotation_window: Optional[pulumi.Input[builtins.int]] = None,
+                 service_account_email: Optional[pulumi.Input[builtins.str]] = None,
                  tune: Optional[pulumi.Input[Union['AuthBackendTuneArgs', 'AuthBackendTuneArgsDict']]] = None,
                  __props__=None):
         """
@@ -825,9 +826,9 @@ class AuthBackend(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[str] client_email: The clients email associated with the credentials
-        :param pulumi.Input[str] client_id: The Client ID of the credentials
-        :param pulumi.Input[str] credentials: A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
+        :param pulumi.Input[builtins.str] client_email: The clients email associated with the credentials
+        :param pulumi.Input[builtins.str] client_id: The Client ID of the credentials
+        :param pulumi.Input[builtins.str] credentials: A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
         :param pulumi.Input[Union['AuthBackendCustomEndpointArgs', 'AuthBackendCustomEndpointArgsDict']] custom_endpoint: Specifies overrides to
                [service endpoints](https://cloud.google.com/apis/design/glossary#api_service_endpoint)
                used when making API requests. This allows specific requests made during authentication
@@ -835,32 +836,32 @@ class AuthBackend(pulumi.CustomResource):
                environments. Requires Vault 1.11+.
                Overrides are set at the subdomain level using the following keys:
-        :param pulumi.Input[str] description: A description of the auth method.
-        :param pulumi.Input[bool] disable_automated_rotation: Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
+        :param pulumi.Input[builtins.str] description: A description of the auth method.
+        :param pulumi.Input[builtins.bool] disable_automated_rotation: Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
+        :param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
-        :param pulumi.Input[str] identity_token_audience: The audience claim value for plugin identity
+        :param pulumi.Input[builtins.str] identity_token_audience: The audience claim value for plugin identity
                tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
                Mutually exclusive with `credentials`.  Requires Vault 1.17+. *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] identity_token_key: The key to use for signing plugin identity
+        :param pulumi.Input[builtins.str] identity_token_key: The key to use for signing plugin identity
                tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
-        :param pulumi.Input[int] identity_token_ttl: The TTL of generated tokens.
-        :param pulumi.Input[bool] local: Specifies if the auth method is local only.
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.int] identity_token_ttl: The TTL of generated tokens.
+        :param pulumi.Input[builtins.bool] local: Specifies if the auth method is local only.
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] path: The path to mount the auth method — this defaults to 'gcp'.
-        :param pulumi.Input[str] private_key_id: The ID of the private key from the credentials
-        :param pulumi.Input[str] project_id: The GCP Project ID
-        :param pulumi.Input[int] rotation_period: The amount of time in seconds Vault should wait before rotating the root credential.
+        :param pulumi.Input[builtins.str] path: The path to mount the auth method — this defaults to 'gcp'.
+        :param pulumi.Input[builtins.str] private_key_id: The ID of the private key from the credentials
+        :param pulumi.Input[builtins.str] project_id: The GCP Project ID
+        :param pulumi.Input[builtins.int] rotation_period: The amount of time in seconds Vault should wait before rotating the root credential.
                A zero value tells Vault not to rotate the root credential. The minimum rotation period is 10 seconds. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[str] rotation_schedule: The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
+        :param pulumi.Input[builtins.str] rotation_schedule: The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
                defining the schedule on which Vault should rotate the root token. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[int] rotation_window: The maximum amount of time in seconds allowed to complete
+        :param pulumi.Input[builtins.int] rotation_window: The maximum amount of time in seconds allowed to complete
                a rotation when a scheduled token rotation occurs. The default rotation window is
                unbound and the minimum allowable window is `3600`. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[str] service_account_email: Service Account to impersonate for plugin workload identity federation.
+        :param pulumi.Input[builtins.str] service_account_email: Service Account to impersonate for plugin workload identity federation.
                Required with `identity_token_audience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
         :param pulumi.Input[Union['AuthBackendTuneArgs', 'AuthBackendTuneArgsDict']] tune: Extra configuration block. Structure is documented below.
@@ -914,25 +915,25 @@ class AuthBackend(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 client_email: Optional[pulumi.Input[str]] = None,
-                 client_id: Optional[pulumi.Input[str]] = None,
-                 credentials: Optional[pulumi.Input[str]] = None,
+                 client_email: Optional[pulumi.Input[builtins.str]] = None,
+                 client_id: Optional[pulumi.Input[builtins.str]] = None,
+                 credentials: Optional[pulumi.Input[builtins.str]] = None,
                  custom_endpoint: Optional[pulumi.Input[Union['AuthBackendCustomEndpointArgs', 'AuthBackendCustomEndpointArgsDict']]] = None,
-                 description: Optional[pulumi.Input[str]] = None,
-                 disable_automated_rotation: Optional[pulumi.Input[bool]] = None,
-                 disable_remount: Optional[pulumi.Input[bool]] = None,
-                 identity_token_audience: Optional[pulumi.Input[str]] = None,
-                 identity_token_key: Optional[pulumi.Input[str]] = None,
-                 identity_token_ttl: Optional[pulumi.Input[int]] = None,
-                 local: Optional[pulumi.Input[bool]] = None,
-                 namespace: Optional[pulumi.Input[str]] = None,
-                 path: Optional[pulumi.Input[str]] = None,
-                 private_key_id: Optional[pulumi.Input[str]] = None,
-                 project_id: Optional[pulumi.Input[str]] = None,
-                 rotation_period: Optional[pulumi.Input[int]] = None,
-                 rotation_schedule: Optional[pulumi.Input[str]] = None,
-                 rotation_window: Optional[pulumi.Input[int]] = None,
-                 service_account_email: Optional[pulumi.Input[str]] = None,
+                 description: Optional[pulumi.Input[builtins.str]] = None,
+                 disable_automated_rotation: Optional[pulumi.Input[builtins.bool]] = None,
+                 disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
+                 identity_token_audience: Optional[pulumi.Input[builtins.str]] = None,
+                 identity_token_key: Optional[pulumi.Input[builtins.str]] = None,
+                 identity_token_ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 local: Optional[pulumi.Input[builtins.bool]] = None,
+                 namespace: Optional[pulumi.Input[builtins.str]] = None,
+                 path: Optional[pulumi.Input[builtins.str]] = None,
+                 private_key_id: Optional[pulumi.Input[builtins.str]] = None,
+                 project_id: Optional[pulumi.Input[builtins.str]] = None,
+                 rotation_period: Optional[pulumi.Input[builtins.int]] = None,
+                 rotation_schedule: Optional[pulumi.Input[builtins.str]] = None,
+                 rotation_window: Optional[pulumi.Input[builtins.int]] = None,
+                 service_account_email: Optional[pulumi.Input[builtins.str]] = None,
                  tune: Optional[pulumi.Input[Union['AuthBackendTuneArgs', 'AuthBackendTuneArgsDict']]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -976,26 +977,26 @@ class AuthBackend(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            accessor: Optional[pulumi.Input[str]] = None,
-            client_email: Optional[pulumi.Input[str]] = None,
-            client_id: Optional[pulumi.Input[str]] = None,
-            credentials: Optional[pulumi.Input[str]] = None,
+            accessor: Optional[pulumi.Input[builtins.str]] = None,
+            client_email: Optional[pulumi.Input[builtins.str]] = None,
+            client_id: Optional[pulumi.Input[builtins.str]] = None,
+            credentials: Optional[pulumi.Input[builtins.str]] = None,
             custom_endpoint: Optional[pulumi.Input[Union['AuthBackendCustomEndpointArgs', 'AuthBackendCustomEndpointArgsDict']]] = None,
-            description: Optional[pulumi.Input[str]] = None,
-            disable_automated_rotation: Optional[pulumi.Input[bool]] = None,
-            disable_remount: Optional[pulumi.Input[bool]] = None,
-            identity_token_audience: Optional[pulumi.Input[str]] = None,
-            identity_token_key: Optional[pulumi.Input[str]] = None,
-            identity_token_ttl: Optional[pulumi.Input[int]] = None,
-            local: Optional[pulumi.Input[bool]] = None,
-            namespace: Optional[pulumi.Input[str]] = None,
-            path: Optional[pulumi.Input[str]] = None,
-            private_key_id: Optional[pulumi.Input[str]] = None,
-            project_id: Optional[pulumi.Input[str]] = None,
-            rotation_period: Optional[pulumi.Input[int]] = None,
-            rotation_schedule: Optional[pulumi.Input[str]] = None,
-            rotation_window: Optional[pulumi.Input[int]] = None,
-            service_account_email: Optional[pulumi.Input[str]] = None,
+            description: Optional[pulumi.Input[builtins.str]] = None,
+            disable_automated_rotation: Optional[pulumi.Input[builtins.bool]] = None,
+            disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
+            identity_token_audience: Optional[pulumi.Input[builtins.str]] = None,
+            identity_token_key: Optional[pulumi.Input[builtins.str]] = None,
+            identity_token_ttl: Optional[pulumi.Input[builtins.int]] = None,
+            local: Optional[pulumi.Input[builtins.bool]] = None,
+            namespace: Optional[pulumi.Input[builtins.str]] = None,
+            path: Optional[pulumi.Input[builtins.str]] = None,
+            private_key_id: Optional[pulumi.Input[builtins.str]] = None,
+            project_id: Optional[pulumi.Input[builtins.str]] = None,
+            rotation_period: Optional[pulumi.Input[builtins.int]] = None,
+            rotation_schedule: Optional[pulumi.Input[builtins.str]] = None,
+            rotation_window: Optional[pulumi.Input[builtins.int]] = None,
+            service_account_email: Optional[pulumi.Input[builtins.str]] = None,
             tune: Optional[pulumi.Input[Union['AuthBackendTuneArgs', 'AuthBackendTuneArgsDict']]] = None) -> 'AuthBackend':
         """
         Get an existing AuthBackend resource's state with the given name, id, and optional extra
@@ -1004,10 +1005,10 @@ class AuthBackend(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[str] accessor: The mount accessor related to the auth mount. It is useful for integration with [Identity Secrets Engine](https://www.vaultproject.io/docs/secrets/identity/index.html).
-        :param pulumi.Input[str] client_email: The clients email associated with the credentials
-        :param pulumi.Input[str] client_id: The Client ID of the credentials
-        :param pulumi.Input[str] credentials: A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
+        :param pulumi.Input[builtins.str] accessor: The mount accessor related to the auth mount. It is useful for integration with [Identity Secrets Engine](https://www.vaultproject.io/docs/secrets/identity/index.html).
+        :param pulumi.Input[builtins.str] client_email: The clients email associated with the credentials
+        :param pulumi.Input[builtins.str] client_id: The Client ID of the credentials
+        :param pulumi.Input[builtins.str] credentials: A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
         :param pulumi.Input[Union['AuthBackendCustomEndpointArgs', 'AuthBackendCustomEndpointArgsDict']] custom_endpoint: Specifies overrides to
                [service endpoints](https://cloud.google.com/apis/design/glossary#api_service_endpoint)
                used when making API requests. This allows specific requests made during authentication
@@ -1015,32 +1016,32 @@ class AuthBackend(pulumi.CustomResource):
                environments. Requires Vault 1.11+.
                Overrides are set at the subdomain level using the following keys:
-        :param pulumi.Input[str] description: A description of the auth method.
-        :param pulumi.Input[bool] disable_automated_rotation: Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[bool] disable_remount: If set, opts out of mount migration on path updates.
+        :param pulumi.Input[builtins.str] description: A description of the auth method.
+        :param pulumi.Input[builtins.bool] disable_automated_rotation: Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
+        :param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
-        :param pulumi.Input[str] identity_token_audience: The audience claim value for plugin identity
+        :param pulumi.Input[builtins.str] identity_token_audience: The audience claim value for plugin identity
                tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
                Mutually exclusive with `credentials`.  Requires Vault 1.17+. *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] identity_token_key: The key to use for signing plugin identity
+        :param pulumi.Input[builtins.str] identity_token_key: The key to use for signing plugin identity
                tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
-        :param pulumi.Input[int] identity_token_ttl: The TTL of generated tokens.
-        :param pulumi.Input[bool] local: Specifies if the auth method is local only.
-        :param pulumi.Input[str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[builtins.int] identity_token_ttl: The TTL of generated tokens.
+        :param pulumi.Input[builtins.bool] local: Specifies if the auth method is local only.
+        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[str] path: The path to mount the auth method — this defaults to 'gcp'.
-        :param pulumi.Input[str] private_key_id: The ID of the private key from the credentials
-        :param pulumi.Input[str] project_id: The GCP Project ID
-        :param pulumi.Input[int] rotation_period: The amount of time in seconds Vault should wait before rotating the root credential.
+        :param pulumi.Input[builtins.str] path: The path to mount the auth method — this defaults to 'gcp'.
+        :param pulumi.Input[builtins.str] private_key_id: The ID of the private key from the credentials
+        :param pulumi.Input[builtins.str] project_id: The GCP Project ID
+        :param pulumi.Input[builtins.int] rotation_period: The amount of time in seconds Vault should wait before rotating the root credential.
                A zero value tells Vault not to rotate the root credential. The minimum rotation period is 10 seconds. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[str] rotation_schedule: The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
+        :param pulumi.Input[builtins.str] rotation_schedule: The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
                defining the schedule on which Vault should rotate the root token. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[int] rotation_window: The maximum amount of time in seconds allowed to complete
+        :param pulumi.Input[builtins.int] rotation_window: The maximum amount of time in seconds allowed to complete
                a rotation when a scheduled token rotation occurs. The default rotation window is
                unbound and the minimum allowable window is `3600`. Requires Vault Enterprise 1.19+.
-        :param pulumi.Input[str] service_account_email: Service Account to impersonate for plugin workload identity federation.
+        :param pulumi.Input[builtins.str] service_account_email: Service Account to impersonate for plugin workload identity federation.
                Required with `identity_token_audience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.
         :param pulumi.Input[Union['AuthBackendTuneArgs', 'AuthBackendTuneArgsDict']] tune: Extra configuration block. Structure is documented below.
@@ -1075,7 +1076,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def accessor(self) -> pulumi.Output[str]:
+    def accessor(self) -> pulumi.Output[builtins.str]:
         """
         The mount accessor related to the auth mount. It is useful for integration with [Identity Secrets Engine](https://www.vaultproject.io/docs/secrets/identity/index.html).
         """
@@ -1083,7 +1084,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="clientEmail")
-    def client_email(self) -> pulumi.Output[str]:
+    def client_email(self) -> pulumi.Output[builtins.str]:
         """
         The clients email associated with the credentials
         """
@@ -1091,7 +1092,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="clientId")
-    def client_id(self) -> pulumi.Output[str]:
+    def client_id(self) -> pulumi.Output[builtins.str]:
         """
         The Client ID of the credentials
         """
@@ -1099,7 +1100,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def credentials(self) -> pulumi.Output[Optional[str]]:
+    def credentials(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.
         """
@@ -1121,7 +1122,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def description(self) -> pulumi.Output[Optional[str]]:
+    def description(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         A description of the auth method.
         """
@@ -1129,7 +1130,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="disableAutomatedRotation")
-    def disable_automated_rotation(self) -> pulumi.Output[Optional[bool]]:
+    def disable_automated_rotation(self) -> pulumi.Output[Optional[builtins.bool]]:
         """
         Cancels all upcoming rotations of the root credential until unset. Requires Vault Enterprise 1.19+.
         """
@@ -1137,7 +1138,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="disableRemount")
-    def disable_remount(self) -> pulumi.Output[Optional[bool]]:
+    def disable_remount(self) -> pulumi.Output[Optional[builtins.bool]]:
         """
         If set, opts out of mount migration on path updates.
         See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
@@ -1146,7 +1147,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="identityTokenAudience")
-    def identity_token_audience(self) -> pulumi.Output[Optional[str]]:
+    def identity_token_audience(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The audience claim value for plugin identity
         tokens. Must match an allowed audience configured for the target [Workload Identity Pool](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers#prepare).
@@ -1156,7 +1157,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="identityTokenKey")
-    def identity_token_key(self) -> pulumi.Output[Optional[str]]:
+    def identity_token_key(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The key to use for signing plugin identity
         tokens. Requires Vault 1.17+. *Available only for Vault Enterprise*.
@@ -1165,7 +1166,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="identityTokenTtl")
-    def identity_token_ttl(self) -> pulumi.Output[Optional[int]]:
+    def identity_token_ttl(self) -> pulumi.Output[Optional[builtins.int]]:
         """
         The TTL of generated tokens.
         """
@@ -1173,7 +1174,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def local(self) -> pulumi.Output[Optional[bool]]:
+    def local(self) -> pulumi.Output[Optional[builtins.bool]]:
         """
         Specifies if the auth method is local only.
         """
@@ -1181,7 +1182,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def namespace(self) -> pulumi.Output[Optional[str]]:
+    def namespace(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -1192,7 +1193,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter
-    def path(self) -> pulumi.Output[Optional[str]]:
+    def path(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The path to mount the auth method — this defaults to 'gcp'.
         """
@@ -1200,7 +1201,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="privateKeyId")
-    def private_key_id(self) -> pulumi.Output[str]:
+    def private_key_id(self) -> pulumi.Output[builtins.str]:
         """
         The ID of the private key from the credentials
         """
@@ -1208,7 +1209,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="projectId")
-    def project_id(self) -> pulumi.Output[str]:
+    def project_id(self) -> pulumi.Output[builtins.str]:
         """
         The GCP Project ID
         """
@@ -1216,7 +1217,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="rotationPeriod")
-    def rotation_period(self) -> pulumi.Output[Optional[int]]:
+    def rotation_period(self) -> pulumi.Output[Optional[builtins.int]]:
         """
         The amount of time in seconds Vault should wait before rotating the root credential.
         A zero value tells Vault not to rotate the root credential. The minimum rotation period is 10 seconds. Requires Vault Enterprise 1.19+.
@@ -1225,7 +1226,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="rotationSchedule")
-    def rotation_schedule(self) -> pulumi.Output[Optional[str]]:
+    def rotation_schedule(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         The schedule, in [cron-style time format](https://en.wikipedia.org/wiki/Cron),
         defining the schedule on which Vault should rotate the root token. Requires Vault Enterprise 1.19+.
@@ -1234,7 +1235,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="rotationWindow")
-    def rotation_window(self) -> pulumi.Output[Optional[int]]:
+    def rotation_window(self) -> pulumi.Output[Optional[builtins.int]]:
         """
         The maximum amount of time in seconds allowed to complete
         a rotation when a scheduled token rotation occurs. The default rotation window is
@@ -1244,7 +1245,7 @@ class AuthBackend(pulumi.CustomResource):
     @property
     @pulumi.getter(name="serviceAccountEmail")
-    def service_account_email(self) -> pulumi.Output[Optional[str]]:
+    def service_account_email(self) -> pulumi.Output[Optional[builtins.str]]:
         """
         Service Account to impersonate for plugin workload identity federation.
         Required with `identity_token_audience`. Requires Vault 1.17+. *Available only for Vault Enterprise*.

pulumi-vault 6.6.0a1741836364__py3-none-any.whl → 6.7.0__py3-none-any.whl

pulumi-vault 6.6.0a1741836364py3-none-any.whl → 6.7.0py3-none-any.whl