pulumi-vault 6.7.0a1745304689__tar.gz → 6.7.1__tar.gz

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: pulumi_vault
-Version: 6.7.0a1745304689
+Version: 6.7.1
 Summary: A Pulumi package for creating and managing HashiCorp Vault cloud resources.
 License: Apache-2.0
 Project-URL: Homepage, https://pulumi.io

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/_inputs.py

@@ -2238,6 +2238,10 @@ if not MYPY:
         """
         A list of parameters that must be specified.
         """
+        subscribe_event_types: NotRequired[Sequence[builtins.str]]
+        """
+        A list of event types to subscribe to when using `subscribe` capability.
+        """
 elif False:
     GetPolicyDocumentRuleArgsDict: TypeAlias = Mapping[str, Any]
 
@@ -2251,7 +2255,8 @@ class GetPolicyDocumentRuleArgs:
                  description: Optional[builtins.str] = None,
                  max_wrapping_ttl: Optional[builtins.str] = None,
                  min_wrapping_ttl: Optional[builtins.str] = None,
-                 required_parameters: Optional[Sequence[builtins.str]] = None):
+                 required_parameters: Optional[Sequence[builtins.str]] = None,
+                 subscribe_event_types: Optional[Sequence[builtins.str]] = None):
         """
         :param Sequence[builtins.str] capabilities: A list of capabilities that this rule apply to `path`. For example, ["read", "write"].
         :param builtins.str path: A path in Vault that this rule applies to.
@@ -2261,6 +2266,7 @@ class GetPolicyDocumentRuleArgs:
         :param builtins.str max_wrapping_ttl: The maximum allowed TTL that clients can specify for a wrapped response.
         :param builtins.str min_wrapping_ttl: The minimum allowed TTL that clients can specify for a wrapped response.
         :param Sequence[builtins.str] required_parameters: A list of parameters that must be specified.
+        :param Sequence[builtins.str] subscribe_event_types: A list of event types to subscribe to when using `subscribe` capability.
         """
         pulumi.set(__self__, "capabilities", capabilities)
         pulumi.set(__self__, "path", path)
@@ -2276,6 +2282,8 @@ class GetPolicyDocumentRuleArgs:
             pulumi.set(__self__, "min_wrapping_ttl", min_wrapping_ttl)
         if required_parameters is not None:
             pulumi.set(__self__, "required_parameters", required_parameters)
+        if subscribe_event_types is not None:
+            pulumi.set(__self__, "subscribe_event_types", subscribe_event_types)
 
     @property
     @pulumi.getter
@@ -2373,16 +2381,28 @@ class GetPolicyDocumentRuleArgs:
     def required_parameters(self, value: Optional[Sequence[builtins.str]]):
         pulumi.set(self, "required_parameters", value)
 
+    @property
+    @pulumi.getter(name="subscribeEventTypes")
+    def subscribe_event_types(self) -> Optional[Sequence[builtins.str]]:
+        """
+        A list of event types to subscribe to when using `subscribe` capability.
+        """
+        return pulumi.get(self, "subscribe_event_types")
+
+    @subscribe_event_types.setter
+    def subscribe_event_types(self, value: Optional[Sequence[builtins.str]]):
+        pulumi.set(self, "subscribe_event_types", value)
+
 
 if not MYPY:
     class GetPolicyDocumentRuleAllowedParameterArgsDict(TypedDict):
         key: builtins.str
         """
-        name of permitted or denied parameter.
+        Name of permitted key.
         """
         values: Sequence[builtins.str]
         """
-        list of values what are permitted or denied by policy rule.
+        A list of values what are permitted by policy rule.
         """
 elif False:
     GetPolicyDocumentRuleAllowedParameterArgsDict: TypeAlias = Mapping[str, Any]
@@ -2393,8 +2413,8 @@ class GetPolicyDocumentRuleAllowedParameterArgs:
                  key: builtins.str,
                  values: Sequence[builtins.str]):
         """
-        :param builtins.str key: name of permitted or denied parameter.
-        :param Sequence[builtins.str] values: list of values what are permitted or denied by policy rule.
+        :param builtins.str key: Name of permitted key.
+        :param Sequence[builtins.str] values: A list of values what are permitted by policy rule.
         """
         pulumi.set(__self__, "key", key)
         pulumi.set(__self__, "values", values)
@@ -2403,7 +2423,7 @@ class GetPolicyDocumentRuleAllowedParameterArgs:
     @pulumi.getter
     def key(self) -> builtins.str:
         """
-        name of permitted or denied parameter.
+        Name of permitted key.
         """
         return pulumi.get(self, "key")
 
@@ -2415,7 +2435,7 @@ class GetPolicyDocumentRuleAllowedParameterArgs:
     @pulumi.getter
     def values(self) -> Sequence[builtins.str]:
         """
-        list of values what are permitted or denied by policy rule.
+        A list of values what are permitted by policy rule.
         """
         return pulumi.get(self, "values")
 
@@ -2428,11 +2448,11 @@ if not MYPY:
     class GetPolicyDocumentRuleDeniedParameterArgsDict(TypedDict):
         key: builtins.str
         """
-        name of permitted or denied parameter.
+        Name of denied key.
         """
         values: Sequence[builtins.str]
         """
-        list of values what are permitted or denied by policy rule.
+        A list of values what are denied by policy rule.
         """
 elif False:
     GetPolicyDocumentRuleDeniedParameterArgsDict: TypeAlias = Mapping[str, Any]
@@ -2443,8 +2463,8 @@ class GetPolicyDocumentRuleDeniedParameterArgs:
                  key: builtins.str,
                  values: Sequence[builtins.str]):
         """
-        :param builtins.str key: name of permitted or denied parameter.
-        :param Sequence[builtins.str] values: list of values what are permitted or denied by policy rule.
+        :param builtins.str key: Name of denied key.
+        :param Sequence[builtins.str] values: A list of values what are denied by policy rule.
         """
         pulumi.set(__self__, "key", key)
         pulumi.set(__self__, "values", values)
@@ -2453,7 +2473,7 @@ class GetPolicyDocumentRuleDeniedParameterArgs:
     @pulumi.getter
     def key(self) -> builtins.str:
         """
-        name of permitted or denied parameter.
+        Name of denied key.
         """
         return pulumi.get(self, "key")
 
@@ -2465,7 +2485,7 @@ class GetPolicyDocumentRuleDeniedParameterArgs:
     @pulumi.getter
     def values(self) -> Sequence[builtins.str]:
         """
-        list of values what are permitted or denied by policy rule.
+        A list of values what are denied by policy rule.
         """
         return pulumi.get(self, "values")
 

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/ad/secret_backend.py

@@ -1216,6 +1216,9 @@ class _SecretBackendState:
 
 
 class SecretBackend(pulumi.CustomResource):
+
+    pulumi_type = "vault:ad/secretBackend:SecretBackend"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/ad/secret_library.py

@@ -284,6 +284,9 @@ class _SecretLibraryState:
 
 
 class SecretLibrary(pulumi.CustomResource):
+
+    pulumi_type = "vault:ad/secretLibrary:SecretLibrary"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/ad/secret_role.py

@@ -251,6 +251,9 @@ class _SecretRoleState:
 
 
 class SecretRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:ad/secretRole:SecretRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/alicloud/auth_backend_role.py

@@ -476,6 +476,9 @@ class _AuthBackendRoleState:
 
 
 class AuthBackendRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:alicloud/authBackendRole:AuthBackendRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/approle/auth_backend_login.py

@@ -289,6 +289,9 @@ class _AuthBackendLoginState:
 
 
 class AuthBackendLogin(pulumi.CustomResource):
+
+    pulumi_type = "vault:appRole/authBackendLogin:AuthBackendLogin"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/approle/auth_backend_role.py

@@ -617,6 +617,9 @@ class _AuthBackendRoleState:
 
 
 class AuthBackendRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:appRole/authBackendRole:AuthBackendRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/approle/auth_backend_role_secret_id.py

@@ -447,6 +447,9 @@ class _AuthBackendRoleSecretIdState:
 
 
 class AuthBackendRoleSecretId(pulumi.CustomResource):
+
+    pulumi_type = "vault:appRole/authBackendRoleSecretId:AuthBackendRoleSecretId"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/audit.py

@@ -244,6 +244,9 @@ class _AuditState:
 
 
 class Audit(pulumi.CustomResource):
+
+    pulumi_type = "vault:index/audit:Audit"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/audit_request_header.py

@@ -130,6 +130,9 @@ class _AuditRequestHeaderState:
 
 
 class AuditRequestHeader(pulumi.CustomResource):
+
+    pulumi_type = "vault:index/auditRequestHeader:AuditRequestHeader"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/auth_backend.py

@@ -331,6 +331,9 @@ class _AuthBackendState:
 
 
 class AuthBackend(pulumi.CustomResource):
+
+    pulumi_type = "vault:index/authBackend:AuthBackend"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/auth_backend_cert.py

@@ -228,6 +228,9 @@ class _AuthBackendCertState:
 
 
 class AuthBackendCert(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/authBackendCert:AuthBackendCert"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/auth_backend_client.py

@@ -706,6 +706,9 @@ class _AuthBackendClientState:
 
 
 class AuthBackendClient(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/authBackendClient:AuthBackendClient"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/auth_backend_config_identity.py

@@ -254,6 +254,9 @@ class _AuthBackendConfigIdentityState:
 
 
 class AuthBackendConfigIdentity(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/authBackendConfigIdentity:AuthBackendConfigIdentity"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/auth_backend_identity_whitelist.py

@@ -186,6 +186,9 @@ class _AuthBackendIdentityWhitelistState:
 
 
 class AuthBackendIdentityWhitelist(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/authBackendIdentityWhitelist:AuthBackendIdentityWhitelist"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/auth_backend_login.py

@@ -582,6 +582,9 @@ class _AuthBackendLoginState:
 
 
 class AuthBackendLogin(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/authBackendLogin:AuthBackendLogin"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/auth_backend_role.py

@@ -1161,6 +1161,9 @@ class _AuthBackendRoleState:
 
 
 class AuthBackendRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/authBackendRole:AuthBackendRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/auth_backend_role_tag.py

@@ -341,6 +341,9 @@ class _AuthBackendRoleTagState:
 
 
 class AuthBackendRoleTag(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/authBackendRoleTag:AuthBackendRoleTag"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/auth_backend_roletag_blacklist.py

@@ -189,6 +189,9 @@ class _AuthBackendRoletagBlacklistState:
 
 
 class AuthBackendRoletagBlacklist(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/authBackendRoletagBlacklist:AuthBackendRoletagBlacklist"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/auth_backend_sts_role.py

@@ -212,6 +212,9 @@ class _AuthBackendStsRoleState:
 
 
 class AuthBackendStsRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/authBackendStsRole:AuthBackendStsRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/secret_backend.py

@@ -886,6 +886,9 @@ class _SecretBackendState:
 
 
 class SecretBackend(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/secretBackend:SecretBackend"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/secret_backend_role.py

@@ -664,6 +664,9 @@ class _SecretBackendRoleState:
 
 
 class SecretBackendRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/secretBackendRole:SecretBackendRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/aws/secret_backend_static_role.py

@@ -332,6 +332,9 @@ class _SecretBackendStaticRoleState:
 
 
 class SecretBackendStaticRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:aws/secretBackendStaticRole:SecretBackendStaticRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/azure/auth_backend_config.py

@@ -524,6 +524,9 @@ class _AuthBackendConfigState:
 
 
 class AuthBackendConfig(pulumi.CustomResource):
+
+    pulumi_type = "vault:azure/authBackendConfig:AuthBackendConfig"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/azure/auth_backend_role.py

@@ -669,6 +669,9 @@ class _AuthBackendRoleState:
 
 
 class AuthBackendRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:azure/authBackendRole:AuthBackendRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/azure/backend.py

@@ -640,6 +640,9 @@ class _BackendState:
 
 
 class Backend(pulumi.CustomResource):
+
+    pulumi_type = "vault:azure/backend:Backend"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/azure/backend_role.py

@@ -28,6 +28,7 @@ class BackendRoleArgs:
                  azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]]] = None,
                  backend: Optional[pulumi.Input[builtins.str]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
+                 explicit_max_ttl: Optional[pulumi.Input[builtins.str]] = None,
                  max_ttl: Optional[pulumi.Input[builtins.str]] = None,
                  namespace: Optional[pulumi.Input[builtins.str]] = None,
                  permanently_delete: Optional[pulumi.Input[builtins.bool]] = None,
@@ -43,6 +44,7 @@ class BackendRoleArgs:
         :param pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]] azure_roles: List of Azure roles to be assigned to the generated service principal.
         :param pulumi.Input[builtins.str] backend: Path to the mounted Azure auth backend
         :param pulumi.Input[builtins.str] description: Human-friendly description of the mount for the backend.
+        :param pulumi.Input[builtins.str] explicit_max_ttl: Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
         :param pulumi.Input[builtins.str] max_ttl: Specifies the maximum TTL for service principals generated using this role. Accepts time
                suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
         :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
@@ -68,6 +70,8 @@ class BackendRoleArgs:
             pulumi.set(__self__, "backend", backend)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if explicit_max_ttl is not None:
+            pulumi.set(__self__, "explicit_max_ttl", explicit_max_ttl)
         if max_ttl is not None:
             pulumi.set(__self__, "max_ttl", max_ttl)
         if namespace is not None:
@@ -154,6 +158,18 @@ class BackendRoleArgs:
     def description(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "description", value)
 
+    @property
+    @pulumi.getter(name="explicitMaxTtl")
+    def explicit_max_ttl(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
+        """
+        return pulumi.get(self, "explicit_max_ttl")
+
+    @explicit_max_ttl.setter
+    def explicit_max_ttl(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "explicit_max_ttl", value)
+
     @property
     @pulumi.getter(name="maxTtl")
     def max_ttl(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -242,6 +258,7 @@ class _BackendRoleState:
                  azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]]] = None,
                  backend: Optional[pulumi.Input[builtins.str]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
+                 explicit_max_ttl: Optional[pulumi.Input[builtins.str]] = None,
                  max_ttl: Optional[pulumi.Input[builtins.str]] = None,
                  namespace: Optional[pulumi.Input[builtins.str]] = None,
                  permanently_delete: Optional[pulumi.Input[builtins.bool]] = None,
@@ -257,6 +274,7 @@ class _BackendRoleState:
         :param pulumi.Input[Sequence[pulumi.Input['BackendRoleAzureRoleArgs']]] azure_roles: List of Azure roles to be assigned to the generated service principal.
         :param pulumi.Input[builtins.str] backend: Path to the mounted Azure auth backend
         :param pulumi.Input[builtins.str] description: Human-friendly description of the mount for the backend.
+        :param pulumi.Input[builtins.str] explicit_max_ttl: Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
         :param pulumi.Input[builtins.str] max_ttl: Specifies the maximum TTL for service principals generated using this role. Accepts time
                suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
         :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
@@ -282,6 +300,8 @@ class _BackendRoleState:
             pulumi.set(__self__, "backend", backend)
         if description is not None:
             pulumi.set(__self__, "description", description)
+        if explicit_max_ttl is not None:
+            pulumi.set(__self__, "explicit_max_ttl", explicit_max_ttl)
         if max_ttl is not None:
             pulumi.set(__self__, "max_ttl", max_ttl)
         if namespace is not None:
@@ -358,6 +378,18 @@ class _BackendRoleState:
     def description(self, value: Optional[pulumi.Input[builtins.str]]):
         pulumi.set(self, "description", value)
 
+    @property
+    @pulumi.getter(name="explicitMaxTtl")
+    def explicit_max_ttl(self) -> Optional[pulumi.Input[builtins.str]]:
+        """
+        Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
+        """
+        return pulumi.get(self, "explicit_max_ttl")
+
+    @explicit_max_ttl.setter
+    def explicit_max_ttl(self, value: Optional[pulumi.Input[builtins.str]]):
+        pulumi.set(self, "explicit_max_ttl", value)
+
     @property
     @pulumi.getter(name="maxTtl")
     def max_ttl(self) -> Optional[pulumi.Input[builtins.str]]:
@@ -451,6 +483,9 @@ class _BackendRoleState:
 
 
 class BackendRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:azure/backendRole:BackendRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,
@@ -460,6 +495,7 @@ class BackendRole(pulumi.CustomResource):
                  azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]]] = None,
                  backend: Optional[pulumi.Input[builtins.str]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
+                 explicit_max_ttl: Optional[pulumi.Input[builtins.str]] = None,
                  max_ttl: Optional[pulumi.Input[builtins.str]] = None,
                  namespace: Optional[pulumi.Input[builtins.str]] = None,
                  permanently_delete: Optional[pulumi.Input[builtins.bool]] = None,
@@ -510,6 +546,7 @@ class BackendRole(pulumi.CustomResource):
         :param pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]] azure_roles: List of Azure roles to be assigned to the generated service principal.
         :param pulumi.Input[builtins.str] backend: Path to the mounted Azure auth backend
         :param pulumi.Input[builtins.str] description: Human-friendly description of the mount for the backend.
+        :param pulumi.Input[builtins.str] explicit_max_ttl: Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
         :param pulumi.Input[builtins.str] max_ttl: Specifies the maximum TTL for service principals generated using this role. Accepts time
                suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
         :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
@@ -585,6 +622,7 @@ class BackendRole(pulumi.CustomResource):
                  azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]]] = None,
                  backend: Optional[pulumi.Input[builtins.str]] = None,
                  description: Optional[pulumi.Input[builtins.str]] = None,
+                 explicit_max_ttl: Optional[pulumi.Input[builtins.str]] = None,
                  max_ttl: Optional[pulumi.Input[builtins.str]] = None,
                  namespace: Optional[pulumi.Input[builtins.str]] = None,
                  permanently_delete: Optional[pulumi.Input[builtins.bool]] = None,
@@ -606,6 +644,7 @@ class BackendRole(pulumi.CustomResource):
             __props__.__dict__["azure_roles"] = azure_roles
             __props__.__dict__["backend"] = backend
             __props__.__dict__["description"] = description
+            __props__.__dict__["explicit_max_ttl"] = explicit_max_ttl
             __props__.__dict__["max_ttl"] = max_ttl
             __props__.__dict__["namespace"] = namespace
             __props__.__dict__["permanently_delete"] = permanently_delete
@@ -630,6 +669,7 @@ class BackendRole(pulumi.CustomResource):
             azure_roles: Optional[pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]]] = None,
             backend: Optional[pulumi.Input[builtins.str]] = None,
             description: Optional[pulumi.Input[builtins.str]] = None,
+            explicit_max_ttl: Optional[pulumi.Input[builtins.str]] = None,
             max_ttl: Optional[pulumi.Input[builtins.str]] = None,
             namespace: Optional[pulumi.Input[builtins.str]] = None,
             permanently_delete: Optional[pulumi.Input[builtins.bool]] = None,
@@ -650,6 +690,7 @@ class BackendRole(pulumi.CustomResource):
         :param pulumi.Input[Sequence[pulumi.Input[Union['BackendRoleAzureRoleArgs', 'BackendRoleAzureRoleArgsDict']]]] azure_roles: List of Azure roles to be assigned to the generated service principal.
         :param pulumi.Input[builtins.str] backend: Path to the mounted Azure auth backend
         :param pulumi.Input[builtins.str] description: Human-friendly description of the mount for the backend.
+        :param pulumi.Input[builtins.str] explicit_max_ttl: Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
         :param pulumi.Input[builtins.str] max_ttl: Specifies the maximum TTL for service principals generated using this role. Accepts time
                suffixed strings ("1h") or an integer number of seconds. Defaults to the system/engine max TTL time.
         :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
@@ -674,6 +715,7 @@ class BackendRole(pulumi.CustomResource):
         __props__.__dict__["azure_roles"] = azure_roles
         __props__.__dict__["backend"] = backend
         __props__.__dict__["description"] = description
+        __props__.__dict__["explicit_max_ttl"] = explicit_max_ttl
         __props__.__dict__["max_ttl"] = max_ttl
         __props__.__dict__["namespace"] = namespace
         __props__.__dict__["permanently_delete"] = permanently_delete
@@ -724,6 +766,14 @@ class BackendRole(pulumi.CustomResource):
         """
         return pulumi.get(self, "description")
 
+    @property
+    @pulumi.getter(name="explicitMaxTtl")
+    def explicit_max_ttl(self) -> pulumi.Output[Optional[builtins.str]]:
+        """
+        Specifies the explicit maximum lifetime of the lease and service principal generated using this role. If not set or set to 0, will use the system default (10 years). Requires Vault 1.18+.
+        """
+        return pulumi.get(self, "explicit_max_ttl")
+
     @property
     @pulumi.getter(name="maxTtl")
     def max_ttl(self) -> pulumi.Output[Optional[builtins.str]]:

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/cert_auth_backend_role.py

@@ -929,6 +929,9 @@ class _CertAuthBackendRoleState:
 
 
 class CertAuthBackendRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:index/certAuthBackendRole:CertAuthBackendRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/config/ui_custom_message.py

@@ -321,6 +321,9 @@ class _UiCustomMessageState:
 
 
 class UiCustomMessage(pulumi.CustomResource):
+
+    pulumi_type = "vault:config/uiCustomMessage:UiCustomMessage"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/consul/secret_backend.py

@@ -513,6 +513,9 @@ class _SecretBackendState:
 
 
 class SecretBackend(pulumi.CustomResource):
+
+    pulumi_type = "vault:consul/secretBackend:SecretBackend"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/consul/secret_backend_role.py

@@ -490,6 +490,9 @@ class _SecretBackendRoleState:
 
 
 class SecretBackendRole(pulumi.CustomResource):
+
+    pulumi_type = "vault:consul/secretBackendRole:SecretBackendRole"
+
     @overload
     def __init__(__self__,
                  resource_name: str,

{pulumi_vault-6.7.0a1745304689 → pulumi_vault-6.7.1}/pulumi_vault/database/secret_backend_connection.py

@@ -1039,6 +1039,9 @@ class _SecretBackendConnectionState:
 
 
 class SecretBackendConnection(pulumi.CustomResource):
+
+    pulumi_type = "vault:database/secretBackendConnection:SecretBackendConnection"
+
     @overload
     def __init__(__self__,
                  resource_name: str,