PyPI - pulumi-vault - Versions diffs - 7.1.0__py3-none-any.whl → 7.2.0__py3-none-any.whl - Mend

pulumi-vault 7.1.0py3-none-any.whl → 7.2.0py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (269) hide show

pulumi_vault/__init__.py +19 -1
pulumi_vault/_inputs.py +873 -673
pulumi_vault/ad/__init__.py +1 -1
pulumi_vault/ad/get_access_credentials.py +27 -28
pulumi_vault/ad/secret_backend.py +579 -580
pulumi_vault/ad/secret_library.py +120 -121
pulumi_vault/ad/secret_role.py +104 -105
pulumi_vault/alicloud/__init__.py +1 -1
pulumi_vault/alicloud/auth_backend_role.py +222 -223
pulumi_vault/approle/__init__.py +1 -1
pulumi_vault/approle/auth_backend_login.py +138 -139
pulumi_vault/approle/auth_backend_role.py +292 -293
pulumi_vault/approle/auth_backend_role_secret_id.py +202 -203
pulumi_vault/approle/get_auth_backend_role_id.py +23 -24
pulumi_vault/audit.py +103 -104
pulumi_vault/audit_request_header.py +52 -53
pulumi_vault/auth_backend.py +132 -133
pulumi_vault/aws/__init__.py +1 -1
pulumi_vault/aws/auth_backend_cert.py +86 -87
pulumi_vault/aws/auth_backend_client.py +307 -308
pulumi_vault/aws/auth_backend_config_identity.py +103 -104
pulumi_vault/aws/auth_backend_identity_whitelist.py +69 -70
pulumi_vault/aws/auth_backend_login.py +258 -259
pulumi_vault/aws/auth_backend_role.py +486 -487
pulumi_vault/aws/auth_backend_role_tag.py +155 -156
pulumi_vault/aws/auth_backend_roletag_blacklist.py +69 -70
pulumi_vault/aws/auth_backend_sts_role.py +86 -87
pulumi_vault/aws/get_access_credentials.py +59 -60
pulumi_vault/aws/get_static_access_credentials.py +19 -20
pulumi_vault/aws/secret_backend.py +1016 -439
pulumi_vault/aws/secret_backend_role.py +256 -257
pulumi_vault/aws/secret_backend_static_role.py +137 -138
pulumi_vault/azure/__init__.py +1 -1
pulumi_vault/azure/_inputs.py +26 -27
pulumi_vault/azure/auth_backend_config.py +222 -223
pulumi_vault/azure/auth_backend_role.py +307 -308
pulumi_vault/azure/backend.py +1057 -285
pulumi_vault/azure/backend_role.py +194 -195
pulumi_vault/azure/get_access_credentials.py +75 -76
pulumi_vault/azure/outputs.py +16 -17
pulumi_vault/cert_auth_backend_role.py +443 -444
pulumi_vault/config/__init__.py +1 -1
pulumi_vault/config/__init__.pyi +1 -2
pulumi_vault/config/_inputs.py +13 -14
pulumi_vault/config/outputs.py +380 -381
pulumi_vault/config/ui_custom_message.py +140 -141
pulumi_vault/config/vars.py +31 -32
pulumi_vault/consul/__init__.py +1 -1
pulumi_vault/consul/secret_backend.py +887 -256
pulumi_vault/consul/secret_backend_role.py +222 -223
pulumi_vault/database/__init__.py +1 -1
pulumi_vault/database/_inputs.py +3167 -3168
pulumi_vault/database/outputs.py +2123 -2124
pulumi_vault/database/secret_backend_connection.py +259 -260
pulumi_vault/database/secret_backend_role.py +205 -206
pulumi_vault/database/secret_backend_static_role.py +218 -219
pulumi_vault/database/secrets_mount.py +426 -380
pulumi_vault/egp_policy.py +86 -87
pulumi_vault/gcp/__init__.py +1 -1
pulumi_vault/gcp/_inputs.py +98 -99
pulumi_vault/gcp/auth_backend.py +322 -323
pulumi_vault/gcp/auth_backend_role.py +347 -348
pulumi_vault/gcp/get_auth_backend_role.py +91 -92
pulumi_vault/gcp/outputs.py +66 -67
pulumi_vault/gcp/secret_backend.py +878 -336
pulumi_vault/gcp/secret_impersonated_account.py +112 -113
pulumi_vault/gcp/secret_roleset.py +115 -116
pulumi_vault/gcp/secret_static_account.py +115 -116
pulumi_vault/generic/__init__.py +1 -1
pulumi_vault/generic/endpoint.py +138 -139
pulumi_vault/generic/get_secret.py +39 -40
pulumi_vault/generic/secret.py +95 -96
pulumi_vault/get_auth_backend.py +29 -30
pulumi_vault/get_auth_backends.py +19 -20
pulumi_vault/get_namespace.py +21 -22
pulumi_vault/get_namespaces.py +19 -20
pulumi_vault/get_nomad_access_token.py +25 -26
pulumi_vault/get_policy_document.py +10 -11
pulumi_vault/get_raft_autopilot_state.py +31 -32
pulumi_vault/github/__init__.py +1 -1
pulumi_vault/github/_inputs.py +50 -51
pulumi_vault/github/auth_backend.py +285 -286
pulumi_vault/github/outputs.py +34 -35
pulumi_vault/github/team.py +69 -70
pulumi_vault/github/user.py +69 -70
pulumi_vault/identity/__init__.py +1 -1
pulumi_vault/identity/entity.py +103 -104
pulumi_vault/identity/entity_alias.py +86 -87
pulumi_vault/identity/entity_policies.py +78 -79
pulumi_vault/identity/get_entity.py +62 -63
pulumi_vault/identity/get_group.py +75 -76
pulumi_vault/identity/get_oidc_client_creds.py +19 -20
pulumi_vault/identity/get_oidc_openid_config.py +39 -40
pulumi_vault/identity/get_oidc_public_keys.py +17 -18
pulumi_vault/identity/group.py +171 -172
pulumi_vault/identity/group_alias.py +69 -70
pulumi_vault/identity/group_member_entity_ids.py +69 -70
pulumi_vault/identity/group_member_group_ids.py +69 -70
pulumi_vault/identity/group_policies.py +78 -79
pulumi_vault/identity/mfa_duo.py +183 -184
pulumi_vault/identity/mfa_login_enforcement.py +147 -148
pulumi_vault/identity/mfa_okta.py +166 -167
pulumi_vault/identity/mfa_pingid.py +160 -161
pulumi_vault/identity/mfa_totp.py +217 -218
pulumi_vault/identity/oidc.py +35 -36
pulumi_vault/identity/oidc_assignment.py +69 -70
pulumi_vault/identity/oidc_client.py +155 -156
pulumi_vault/identity/oidc_key.py +103 -104
pulumi_vault/identity/oidc_key_allowed_client_id.py +52 -53
pulumi_vault/identity/oidc_provider.py +112 -113
pulumi_vault/identity/oidc_role.py +103 -104
pulumi_vault/identity/oidc_scope.py +69 -70
pulumi_vault/identity/outputs.py +42 -43
pulumi_vault/jwt/__init__.py +1 -1
pulumi_vault/jwt/_inputs.py +50 -51
pulumi_vault/jwt/auth_backend.py +400 -354
pulumi_vault/jwt/auth_backend_role.py +494 -495
pulumi_vault/jwt/outputs.py +34 -35
pulumi_vault/kmip/__init__.py +1 -1
pulumi_vault/kmip/secret_backend.py +1006 -227
pulumi_vault/kmip/secret_role.py +358 -359
pulumi_vault/kmip/secret_scope.py +69 -70
pulumi_vault/kubernetes/__init__.py +1 -1
pulumi_vault/kubernetes/auth_backend_config.py +171 -172
pulumi_vault/kubernetes/auth_backend_role.py +273 -274
pulumi_vault/kubernetes/get_auth_backend_config.py +57 -58
pulumi_vault/kubernetes/get_auth_backend_role.py +87 -88
pulumi_vault/kubernetes/get_service_account_token.py +51 -52
pulumi_vault/kubernetes/secret_backend.py +431 -385
pulumi_vault/kubernetes/secret_backend_role.py +239 -240
pulumi_vault/kv/__init__.py +1 -1
pulumi_vault/kv/_inputs.py +25 -26
pulumi_vault/kv/get_secret.py +25 -26
pulumi_vault/kv/get_secret_subkeys_v2.py +39 -40
pulumi_vault/kv/get_secret_v2.py +41 -42
pulumi_vault/kv/get_secrets_list.py +17 -18
pulumi_vault/kv/get_secrets_list_v2.py +25 -26
pulumi_vault/kv/outputs.py +17 -18
pulumi_vault/kv/secret.py +61 -62
pulumi_vault/kv/secret_backend_v2.py +86 -87
pulumi_vault/kv/secret_v2.py +184 -185
pulumi_vault/ldap/__init__.py +1 -1
pulumi_vault/ldap/auth_backend.py +716 -717
pulumi_vault/ldap/auth_backend_group.py +69 -70
pulumi_vault/ldap/auth_backend_user.py +86 -87
pulumi_vault/ldap/get_dynamic_credentials.py +27 -28
pulumi_vault/ldap/get_static_credentials.py +29 -30
pulumi_vault/ldap/secret_backend.py +732 -693
pulumi_vault/ldap/secret_backend_dynamic_role.py +154 -155
pulumi_vault/ldap/secret_backend_library_set.py +120 -121
pulumi_vault/ldap/secret_backend_static_role.py +120 -121
pulumi_vault/managed/__init__.py +1 -1
pulumi_vault/managed/_inputs.py +274 -275
pulumi_vault/managed/keys.py +27 -28
pulumi_vault/managed/outputs.py +184 -185
pulumi_vault/mfa_duo.py +137 -138
pulumi_vault/mfa_okta.py +137 -138
pulumi_vault/mfa_pingid.py +149 -150
pulumi_vault/mfa_totp.py +154 -155
pulumi_vault/mongodbatlas/__init__.py +1 -1
pulumi_vault/mongodbatlas/secret_backend.py +78 -79
pulumi_vault/mongodbatlas/secret_role.py +188 -189
pulumi_vault/mount.py +380 -334
pulumi_vault/namespace.py +78 -79
pulumi_vault/nomad_secret_backend.py +909 -271
pulumi_vault/nomad_secret_role.py +103 -104
pulumi_vault/oci_auth_backend.py +683 -0
pulumi_vault/oci_auth_backend_role.py +798 -0
pulumi_vault/okta/__init__.py +1 -1
pulumi_vault/okta/_inputs.py +31 -32
pulumi_vault/okta/auth_backend.py +305 -306
pulumi_vault/okta/auth_backend_group.py +69 -70
pulumi_vault/okta/auth_backend_user.py +86 -87
pulumi_vault/okta/outputs.py +21 -22
pulumi_vault/outputs.py +234 -82
pulumi_vault/pkisecret/__init__.py +1 -1
pulumi_vault/pkisecret/_inputs.py +55 -56
pulumi_vault/pkisecret/backend_acme_eab.py +116 -117
pulumi_vault/pkisecret/backend_config_acme.py +175 -176
pulumi_vault/pkisecret/backend_config_auto_tidy.py +394 -395
pulumi_vault/pkisecret/backend_config_cluster.py +71 -72
pulumi_vault/pkisecret/backend_config_cmpv2.py +132 -133
pulumi_vault/pkisecret/backend_config_est.py +149 -150
pulumi_vault/pkisecret/backend_config_scep.py +205 -159
pulumi_vault/pkisecret/get_backend_cert_metadata.py +37 -38
pulumi_vault/pkisecret/get_backend_config_cmpv2.py +32 -33
pulumi_vault/pkisecret/get_backend_config_est.py +30 -31
pulumi_vault/pkisecret/get_backend_config_scep.py +50 -31
pulumi_vault/pkisecret/get_backend_issuer.py +63 -64
pulumi_vault/pkisecret/get_backend_issuers.py +23 -24
pulumi_vault/pkisecret/get_backend_key.py +29 -30
pulumi_vault/pkisecret/get_backend_keys.py +23 -24
pulumi_vault/pkisecret/outputs.py +61 -62
pulumi_vault/pkisecret/secret_backend_cert.py +415 -416
pulumi_vault/pkisecret/secret_backend_config_ca.py +54 -55
pulumi_vault/pkisecret/secret_backend_config_issuers.py +75 -76
pulumi_vault/pkisecret/secret_backend_config_urls.py +105 -106
pulumi_vault/pkisecret/secret_backend_crl_config.py +241 -242
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +515 -516
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +78 -79
pulumi_vault/pkisecret/secret_backend_issuer.py +286 -287
pulumi_vault/pkisecret/secret_backend_key.py +146 -147
pulumi_vault/pkisecret/secret_backend_role.py +873 -874
pulumi_vault/pkisecret/secret_backend_root_cert.py +677 -678
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +660 -661
pulumi_vault/pkisecret/secret_backend_sign.py +346 -347
pulumi_vault/plugin.py +154 -155
pulumi_vault/plugin_pinned_version.py +52 -53
pulumi_vault/policy.py +52 -53
pulumi_vault/provider.py +160 -161
pulumi_vault/pulumi-plugin.json +1 -1
pulumi_vault/quota_lease_count.py +103 -104
pulumi_vault/quota_rate_limit.py +171 -172
pulumi_vault/rabbitmq/__init__.py +1 -1
pulumi_vault/rabbitmq/_inputs.py +50 -51
pulumi_vault/rabbitmq/outputs.py +34 -35
pulumi_vault/rabbitmq/secret_backend.py +902 -231
pulumi_vault/rabbitmq/secret_backend_role.py +79 -80
pulumi_vault/raft_autopilot.py +137 -138
pulumi_vault/raft_snapshot_agent_config.py +477 -478
pulumi_vault/rgp_policy.py +69 -70
pulumi_vault/saml/__init__.py +1 -1
pulumi_vault/saml/auth_backend.py +188 -189
pulumi_vault/saml/auth_backend_role.py +290 -291
pulumi_vault/scep_auth_backend_role.py +252 -253
pulumi_vault/secrets/__init__.py +1 -1
pulumi_vault/secrets/_inputs.py +19 -20
pulumi_vault/secrets/outputs.py +13 -14
pulumi_vault/secrets/sync_association.py +88 -89
pulumi_vault/secrets/sync_aws_destination.py +180 -181
pulumi_vault/secrets/sync_azure_destination.py +180 -181
pulumi_vault/secrets/sync_config.py +52 -53
pulumi_vault/secrets/sync_gcp_destination.py +129 -130
pulumi_vault/secrets/sync_gh_destination.py +163 -164
pulumi_vault/secrets/sync_github_apps.py +78 -79
pulumi_vault/secrets/sync_vercel_destination.py +146 -147
pulumi_vault/ssh/__init__.py +1 -1
pulumi_vault/ssh/_inputs.py +13 -14
pulumi_vault/ssh/get_secret_backend_sign.py +65 -66
pulumi_vault/ssh/outputs.py +9 -10
pulumi_vault/ssh/secret_backend_ca.py +217 -124
pulumi_vault/ssh/secret_backend_role.py +446 -447
pulumi_vault/terraformcloud/__init__.py +1 -1
pulumi_vault/terraformcloud/secret_backend.py +833 -155
pulumi_vault/terraformcloud/secret_creds.py +93 -94
pulumi_vault/terraformcloud/secret_role.py +117 -118
pulumi_vault/token.py +301 -302
pulumi_vault/tokenauth/__init__.py +1 -1
pulumi_vault/tokenauth/auth_backend_role.py +324 -325
pulumi_vault/transform/__init__.py +1 -1
pulumi_vault/transform/alphabet.py +69 -70
pulumi_vault/transform/get_decode.py +57 -58
pulumi_vault/transform/get_encode.py +57 -58
pulumi_vault/transform/role.py +69 -70
pulumi_vault/transform/template.py +137 -138
pulumi_vault/transform/transformation.py +171 -172
pulumi_vault/transit/__init__.py +1 -1
pulumi_vault/transit/get_cmac.py +47 -48
pulumi_vault/transit/get_decrypt.py +25 -26
pulumi_vault/transit/get_encrypt.py +29 -30
pulumi_vault/transit/get_sign.py +71 -72
pulumi_vault/transit/get_verify.py +83 -84
pulumi_vault/transit/secret_backend_key.py +377 -350
pulumi_vault/transit/secret_cache_config.py +52 -53
{pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/METADATA +1 -1
pulumi_vault-7.2.0.dist-info/RECORD +270 -0
pulumi_vault-7.1.0.dist-info/RECORD +0 -268
{pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/WHEEL +0 -0
{pulumi_vault-7.1.0.dist-info → pulumi_vault-7.2.0.dist-info}/top_level.txt +0 -0

pulumi_vault/nomad_secret_backend.py CHANGED Viewed

@@ -2,8 +2,7 @@
 # *** WARNING: this file was generated by pulumi-language-python. ***
 # *** Do not edit by hand unless you're certain you know what you are doing! ***
-import builtins
-import copy
+import builtins as _builtins
 import warnings
 import sys
 import pulumi
@@ -20,51 +19,85 @@ __all__ = ['NomadSecretBackendArgs', 'NomadSecretBackend']
 @pulumi.input_type
 class NomadSecretBackendArgs:
     def __init__(__self__, *,
-                 address: Optional[pulumi.Input[builtins.str]] = None,
-                 backend: Optional[pulumi.Input[builtins.str]] = None,
-                 ca_cert: Optional[pulumi.Input[builtins.str]] = None,
-                 client_cert: Optional[pulumi.Input[builtins.str]] = None,
-                 client_key: Optional[pulumi.Input[builtins.str]] = None,
-                 default_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-                 description: Optional[pulumi.Input[builtins.str]] = None,
-                 disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
-                 local: Optional[pulumi.Input[builtins.bool]] = None,
-                 max_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-                 max_token_name_length: Optional[pulumi.Input[builtins.int]] = None,
-                 max_ttl: Optional[pulumi.Input[builtins.int]] = None,
-                 namespace: Optional[pulumi.Input[builtins.str]] = None,
-                 token: Optional[pulumi.Input[builtins.str]] = None,
-                 ttl: Optional[pulumi.Input[builtins.int]] = None):
+                 address: Optional[pulumi.Input[_builtins.str]] = None,
+                 allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[_builtins.str]] = None,
+                 ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 default_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+                 delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 description: Optional[pulumi.Input[_builtins.str]] = None,
+                 disable_remount: Optional[pulumi.Input[_builtins.bool]] = None,
+                 external_entropy_access: Optional[pulumi.Input[_builtins.bool]] = None,
+                 force_no_cache: Optional[pulumi.Input[_builtins.bool]] = None,
+                 identity_token_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 listing_visibility: Optional[pulumi.Input[_builtins.str]] = None,
+                 local: Optional[pulumi.Input[_builtins.bool]] = None,
+                 max_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+                 max_token_name_length: Optional[pulumi.Input[_builtins.int]] = None,
+                 max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 options: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+                 passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 plugin_version: Optional[pulumi.Input[_builtins.str]] = None,
+                 seal_wrap: Optional[pulumi.Input[_builtins.bool]] = None,
+                 token: Optional[pulumi.Input[_builtins.str]] = None,
+                 ttl: Optional[pulumi.Input[_builtins.int]] = None):
         """
         The set of arguments for constructing a NomadSecretBackend resource.
-        :param pulumi.Input[builtins.str] address: Specifies the address of the Nomad instance, provided
+        :param pulumi.Input[_builtins.str] address: Specifies the address of the Nomad instance, provided
                as "protocol://host:port" like "http://127.0.0.1:4646".
-        :param pulumi.Input[builtins.str] backend: The unique path this backend should be mounted at. Must
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_managed_keys: List of managed key registry entry names that the mount in question is allowed to access
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_response_headers: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
+        :param pulumi.Input[_builtins.str] backend: The unique path this backend should be mounted at. Must
                not begin or end with a `/`. Defaults to `nomad`.
-        :param pulumi.Input[builtins.str] ca_cert: CA certificate to use when verifying the Nomad server certificate, must be
+        :param pulumi.Input[_builtins.str] ca_cert: CA certificate to use when verifying the Nomad server certificate, must be
                x509 PEM encoded.
-        :param pulumi.Input[builtins.str] client_cert: Client certificate to provide to the Nomad server, must be x509 PEM encoded.
-        :param pulumi.Input[builtins.str] client_key: Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
-        :param pulumi.Input[builtins.int] default_lease_ttl_seconds: Default lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.str] description: Human-friendly description of the mount for the Active Directory backend.
-        :param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
+        :param pulumi.Input[_builtins.str] client_cert: Client certificate to provide to the Nomad server, must be x509 PEM encoded.
+        :param pulumi.Input[_builtins.str] client_key: Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
+        :param pulumi.Input[_builtins.int] default_lease_ttl_seconds: Default lease duration for secrets in seconds.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] delegated_auth_accessors: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[_builtins.str] description: Human-friendly description of the mount for the backend.
+        :param pulumi.Input[_builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
-        :param pulumi.Input[builtins.bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
-               replication.Tolerance duration to use when checking the last rotation time.
-        :param pulumi.Input[builtins.int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.int] max_token_name_length: Specifies the maximum length to use for the name of the Nomad token
+        :param pulumi.Input[_builtins.bool] external_entropy_access: Enable the secrets engine to access Vault's external entropy source
+        :param pulumi.Input[_builtins.bool] force_no_cache: If set to true, disables caching.
+        :param pulumi.Input[_builtins.str] identity_token_key: The key to use for signing plugin workload identity tokens
+        :param pulumi.Input[_builtins.str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
+        :param pulumi.Input[_builtins.bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by replication. Tolerance duration to
+               use when checking the last rotation time.
+        :param pulumi.Input[_builtins.int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
+        :param pulumi.Input[_builtins.int] max_token_name_length: Specifies the maximum length to use for the name of the Nomad token
                generated with Generate Credential. If omitted, 0 is used and ignored, defaulting to the max value allowed
                by the Nomad version.
-        :param pulumi.Input[builtins.int] max_ttl: Maximum possible lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[_builtins.int] max_ttl: Maximum possible lease duration for secrets in seconds.
+        :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[builtins.str] token: Specifies the Nomad Management token to use.
-        :param pulumi.Input[builtins.int] ttl: Specifies the ttl of the lease for the generated token.
+        :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] options: Specifies mount type specific options that are passed to the backend
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] passthrough_request_headers: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[_builtins.str] plugin_version: Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
+        :param pulumi.Input[_builtins.bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        :param pulumi.Input[_builtins.str] token: Specifies the Nomad Management token to use.
+        :param pulumi.Input[_builtins.int] ttl: Specifies the ttl of the lease for the generated token.
         """
         if address is not None:
             pulumi.set(__self__, "address", address)
+        if allowed_managed_keys is not None:
+            pulumi.set(__self__, "allowed_managed_keys", allowed_managed_keys)
+        if allowed_response_headers is not None:
+            pulumi.set(__self__, "allowed_response_headers", allowed_response_headers)
+        if audit_non_hmac_request_keys is not None:
+            pulumi.set(__self__, "audit_non_hmac_request_keys", audit_non_hmac_request_keys)
+        if audit_non_hmac_response_keys is not None:
+            pulumi.set(__self__, "audit_non_hmac_response_keys", audit_non_hmac_response_keys)
         if backend is not None:
             pulumi.set(__self__, "backend", backend)
         if ca_cert is not None:
@@ -75,10 +108,20 @@ class NomadSecretBackendArgs:
             pulumi.set(__self__, "client_key", client_key)
         if default_lease_ttl_seconds is not None:
             pulumi.set(__self__, "default_lease_ttl_seconds", default_lease_ttl_seconds)
+        if delegated_auth_accessors is not None:
+            pulumi.set(__self__, "delegated_auth_accessors", delegated_auth_accessors)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if disable_remount is not None:
             pulumi.set(__self__, "disable_remount", disable_remount)
+        if external_entropy_access is not None:
+            pulumi.set(__self__, "external_entropy_access", external_entropy_access)
+        if force_no_cache is not None:
+            pulumi.set(__self__, "force_no_cache", force_no_cache)
+        if identity_token_key is not None:
+            pulumi.set(__self__, "identity_token_key", identity_token_key)
+        if listing_visibility is not None:
+            pulumi.set(__self__, "listing_visibility", listing_visibility)
         if local is not None:
             pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
@@ -89,14 +132,22 @@ class NomadSecretBackendArgs:
             pulumi.set(__self__, "max_ttl", max_ttl)
         if namespace is not None:
             pulumi.set(__self__, "namespace", namespace)
+        if options is not None:
+            pulumi.set(__self__, "options", options)
+        if passthrough_request_headers is not None:
+            pulumi.set(__self__, "passthrough_request_headers", passthrough_request_headers)
+        if plugin_version is not None:
+            pulumi.set(__self__, "plugin_version", plugin_version)
+        if seal_wrap is not None:
+            pulumi.set(__self__, "seal_wrap", seal_wrap)
         if token is not None:
             pulumi.set(__self__, "token", token)
         if ttl is not None:
             pulumi.set(__self__, "ttl", ttl)
-    @property
+    @_builtins.property
     @pulumi.getter
-    def address(self) -> Optional[pulumi.Input[builtins.str]]:
+    def address(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Specifies the address of the Nomad instance, provided
         as "protocol://host:port" like "http://127.0.0.1:4646".
@@ -104,12 +155,60 @@ class NomadSecretBackendArgs:
         return pulumi.get(self, "address")
     @address.setter
-    def address(self, value: Optional[pulumi.Input[builtins.str]]):
+    def address(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "address", value)
-    @property
+    @_builtins.property
+    @pulumi.getter(name="allowedManagedKeys")
+    def allowed_managed_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of managed key registry entry names that the mount in question is allowed to access
+        """
+        return pulumi.get(self, "allowed_managed_keys")
+    @allowed_managed_keys.setter
+    def allowed_managed_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "allowed_managed_keys", value)
+    @_builtins.property
+    @pulumi.getter(name="allowedResponseHeaders")
+    def allowed_response_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of headers to allow and pass from the request to the plugin
+        """
+        return pulumi.get(self, "allowed_response_headers")
+    @allowed_response_headers.setter
+    def allowed_response_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "allowed_response_headers", value)
+    @_builtins.property
+    @pulumi.getter(name="auditNonHmacRequestKeys")
+    def audit_non_hmac_request_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
+        """
+        return pulumi.get(self, "audit_non_hmac_request_keys")
+    @audit_non_hmac_request_keys.setter
+    def audit_non_hmac_request_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "audit_non_hmac_request_keys", value)
+    @_builtins.property
+    @pulumi.getter(name="auditNonHmacResponseKeys")
+    def audit_non_hmac_response_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
+        """
+        return pulumi.get(self, "audit_non_hmac_response_keys")
+    @audit_non_hmac_response_keys.setter
+    def audit_non_hmac_response_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "audit_non_hmac_response_keys", value)
+    @_builtins.property
     @pulumi.getter
-    def backend(self) -> Optional[pulumi.Input[builtins.str]]:
+    def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         The unique path this backend should be mounted at. Must
         not begin or end with a `/`. Defaults to `nomad`.
@@ -117,12 +216,12 @@ class NomadSecretBackendArgs:
         return pulumi.get(self, "backend")
     @backend.setter
-    def backend(self, value: Optional[pulumi.Input[builtins.str]]):
+    def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "backend", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="caCert")
-    def ca_cert(self) -> Optional[pulumi.Input[builtins.str]]:
+    def ca_cert(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         CA certificate to use when verifying the Nomad server certificate, must be
         x509 PEM encoded.
@@ -130,60 +229,72 @@ class NomadSecretBackendArgs:
         return pulumi.get(self, "ca_cert")
     @ca_cert.setter
-    def ca_cert(self, value: Optional[pulumi.Input[builtins.str]]):
+    def ca_cert(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "ca_cert", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="clientCert")
-    def client_cert(self) -> Optional[pulumi.Input[builtins.str]]:
+    def client_cert(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Client certificate to provide to the Nomad server, must be x509 PEM encoded.
         """
         return pulumi.get(self, "client_cert")
     @client_cert.setter
-    def client_cert(self, value: Optional[pulumi.Input[builtins.str]]):
+    def client_cert(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "client_cert", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="clientKey")
-    def client_key(self) -> Optional[pulumi.Input[builtins.str]]:
+    def client_key(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
         """
         return pulumi.get(self, "client_key")
     @client_key.setter
-    def client_key(self, value: Optional[pulumi.Input[builtins.str]]):
+    def client_key(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "client_key", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="defaultLeaseTtlSeconds")
-    def default_lease_ttl_seconds(self) -> Optional[pulumi.Input[builtins.int]]:
+    def default_lease_ttl_seconds(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Default lease duration for secrets in seconds.
         """
         return pulumi.get(self, "default_lease_ttl_seconds")
     @default_lease_ttl_seconds.setter
-    def default_lease_ttl_seconds(self, value: Optional[pulumi.Input[builtins.int]]):
+    def default_lease_ttl_seconds(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "default_lease_ttl_seconds", value)
-    @property
+    @_builtins.property
+    @pulumi.getter(name="delegatedAuthAccessors")
+    def delegated_auth_accessors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of headers to allow and pass from the request to the plugin
+        """
+        return pulumi.get(self, "delegated_auth_accessors")
+    @delegated_auth_accessors.setter
+    def delegated_auth_accessors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "delegated_auth_accessors", value)
+    @_builtins.property
     @pulumi.getter
-    def description(self) -> Optional[pulumi.Input[builtins.str]]:
+    def description(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        Human-friendly description of the mount for the Active Directory backend.
+        Human-friendly description of the mount for the backend.
         """
         return pulumi.get(self, "description")
     @description.setter
-    def description(self, value: Optional[pulumi.Input[builtins.str]]):
+    def description(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "description", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="disableRemount")
-    def disable_remount(self) -> Optional[pulumi.Input[builtins.bool]]:
+    def disable_remount(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
         If set, opts out of mount migration on path updates.
         See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
@@ -191,37 +302,85 @@ class NomadSecretBackendArgs:
         return pulumi.get(self, "disable_remount")
     @disable_remount.setter
-    def disable_remount(self, value: Optional[pulumi.Input[builtins.bool]]):
+    def disable_remount(self, value: Optional[pulumi.Input[_builtins.bool]]):
         pulumi.set(self, "disable_remount", value)
-    @property
+    @_builtins.property
+    @pulumi.getter(name="externalEntropyAccess")
+    def external_entropy_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Enable the secrets engine to access Vault's external entropy source
+        """
+        return pulumi.get(self, "external_entropy_access")
+    @external_entropy_access.setter
+    def external_entropy_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "external_entropy_access", value)
+    @_builtins.property
+    @pulumi.getter(name="forceNoCache")
+    def force_no_cache(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        If set to true, disables caching.
+        """
+        return pulumi.get(self, "force_no_cache")
+    @force_no_cache.setter
+    def force_no_cache(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "force_no_cache", value)
+    @_builtins.property
+    @pulumi.getter(name="identityTokenKey")
+    def identity_token_key(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The key to use for signing plugin workload identity tokens
+        """
+        return pulumi.get(self, "identity_token_key")
+    @identity_token_key.setter
+    def identity_token_key(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "identity_token_key", value)
+    @_builtins.property
+    @pulumi.getter(name="listingVisibility")
+    def listing_visibility(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Specifies whether to show this mount in the UI-specific listing endpoint
+        """
+        return pulumi.get(self, "listing_visibility")
+    @listing_visibility.setter
+    def listing_visibility(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "listing_visibility", value)
+    @_builtins.property
     @pulumi.getter
-    def local(self) -> Optional[pulumi.Input[builtins.bool]]:
+    def local(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
-        Mark the secrets engine as local-only. Local engines are not replicated or removed by
-        replication.Tolerance duration to use when checking the last rotation time.
+        Mark the secrets engine as local-only. Local engines are not replicated or removed by replication. Tolerance duration to
+        use when checking the last rotation time.
         """
         return pulumi.get(self, "local")
     @local.setter
-    def local(self, value: Optional[pulumi.Input[builtins.bool]]):
+    def local(self, value: Optional[pulumi.Input[_builtins.bool]]):
         pulumi.set(self, "local", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="maxLeaseTtlSeconds")
-    def max_lease_ttl_seconds(self) -> Optional[pulumi.Input[builtins.int]]:
+    def max_lease_ttl_seconds(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Maximum possible lease duration for secrets in seconds.
         """
         return pulumi.get(self, "max_lease_ttl_seconds")
     @max_lease_ttl_seconds.setter
-    def max_lease_ttl_seconds(self, value: Optional[pulumi.Input[builtins.int]]):
+    def max_lease_ttl_seconds(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "max_lease_ttl_seconds", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="maxTokenNameLength")
-    def max_token_name_length(self) -> Optional[pulumi.Input[builtins.int]]:
+    def max_token_name_length(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Specifies the maximum length to use for the name of the Nomad token
         generated with Generate Credential. If omitted, 0 is used and ignored, defaulting to the max value allowed
@@ -230,24 +389,24 @@ class NomadSecretBackendArgs:
         return pulumi.get(self, "max_token_name_length")
     @max_token_name_length.setter
-    def max_token_name_length(self, value: Optional[pulumi.Input[builtins.int]]):
+    def max_token_name_length(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "max_token_name_length", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="maxTtl")
-    def max_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
+    def max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Maximum possible lease duration for secrets in seconds.
         """
         return pulumi.get(self, "max_ttl")
     @max_ttl.setter
-    def max_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
+    def max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "max_ttl", value)
-    @property
+    @_builtins.property
     @pulumi.getter
-    def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
+    def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -257,82 +416,168 @@ class NomadSecretBackendArgs:
         return pulumi.get(self, "namespace")
     @namespace.setter
-    def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
+    def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "namespace", value)
-    @property
+    @_builtins.property
+    @pulumi.getter
+    def options(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies mount type specific options that are passed to the backend
+        """
+        return pulumi.get(self, "options")
+    @options.setter
+    def options(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "options", value)
+    @_builtins.property
+    @pulumi.getter(name="passthroughRequestHeaders")
+    def passthrough_request_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of headers to allow and pass from the request to the plugin
+        """
+        return pulumi.get(self, "passthrough_request_headers")
+    @passthrough_request_headers.setter
+    def passthrough_request_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "passthrough_request_headers", value)
+    @_builtins.property
+    @pulumi.getter(name="pluginVersion")
+    def plugin_version(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
+        """
+        return pulumi.get(self, "plugin_version")
+    @plugin_version.setter
+    def plugin_version(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "plugin_version", value)
+    @_builtins.property
+    @pulumi.getter(name="sealWrap")
+    def seal_wrap(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        """
+        return pulumi.get(self, "seal_wrap")
+    @seal_wrap.setter
+    def seal_wrap(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "seal_wrap", value)
+    @_builtins.property
     @pulumi.getter
-    def token(self) -> Optional[pulumi.Input[builtins.str]]:
+    def token(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Specifies the Nomad Management token to use.
         """
         return pulumi.get(self, "token")
     @token.setter
-    def token(self, value: Optional[pulumi.Input[builtins.str]]):
+    def token(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "token", value)
-    @property
+    @_builtins.property
     @pulumi.getter
-    def ttl(self) -> Optional[pulumi.Input[builtins.int]]:
+    def ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Specifies the ttl of the lease for the generated token.
         """
         return pulumi.get(self, "ttl")
     @ttl.setter
-    def ttl(self, value: Optional[pulumi.Input[builtins.int]]):
+    def ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "ttl", value)
 @pulumi.input_type
 class _NomadSecretBackendState:
     def __init__(__self__, *,
-                 address: Optional[pulumi.Input[builtins.str]] = None,
-                 backend: Optional[pulumi.Input[builtins.str]] = None,
-                 ca_cert: Optional[pulumi.Input[builtins.str]] = None,
-                 client_cert: Optional[pulumi.Input[builtins.str]] = None,
-                 client_key: Optional[pulumi.Input[builtins.str]] = None,
-                 default_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-                 description: Optional[pulumi.Input[builtins.str]] = None,
-                 disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
-                 local: Optional[pulumi.Input[builtins.bool]] = None,
-                 max_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-                 max_token_name_length: Optional[pulumi.Input[builtins.int]] = None,
-                 max_ttl: Optional[pulumi.Input[builtins.int]] = None,
-                 namespace: Optional[pulumi.Input[builtins.str]] = None,
-                 token: Optional[pulumi.Input[builtins.str]] = None,
-                 ttl: Optional[pulumi.Input[builtins.int]] = None):
+                 accessor: Optional[pulumi.Input[_builtins.str]] = None,
+                 address: Optional[pulumi.Input[_builtins.str]] = None,
+                 allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[_builtins.str]] = None,
+                 ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 default_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+                 delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 description: Optional[pulumi.Input[_builtins.str]] = None,
+                 disable_remount: Optional[pulumi.Input[_builtins.bool]] = None,
+                 external_entropy_access: Optional[pulumi.Input[_builtins.bool]] = None,
+                 force_no_cache: Optional[pulumi.Input[_builtins.bool]] = None,
+                 identity_token_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 listing_visibility: Optional[pulumi.Input[_builtins.str]] = None,
+                 local: Optional[pulumi.Input[_builtins.bool]] = None,
+                 max_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+                 max_token_name_length: Optional[pulumi.Input[_builtins.int]] = None,
+                 max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 options: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+                 passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 plugin_version: Optional[pulumi.Input[_builtins.str]] = None,
+                 seal_wrap: Optional[pulumi.Input[_builtins.bool]] = None,
+                 token: Optional[pulumi.Input[_builtins.str]] = None,
+                 ttl: Optional[pulumi.Input[_builtins.int]] = None):
         """
         Input properties used for looking up and filtering NomadSecretBackend resources.
-        :param pulumi.Input[builtins.str] address: Specifies the address of the Nomad instance, provided
+        :param pulumi.Input[_builtins.str] accessor: Accessor of the mount
+        :param pulumi.Input[_builtins.str] address: Specifies the address of the Nomad instance, provided
                as "protocol://host:port" like "http://127.0.0.1:4646".
-        :param pulumi.Input[builtins.str] backend: The unique path this backend should be mounted at. Must
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_managed_keys: List of managed key registry entry names that the mount in question is allowed to access
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_response_headers: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
+        :param pulumi.Input[_builtins.str] backend: The unique path this backend should be mounted at. Must
                not begin or end with a `/`. Defaults to `nomad`.
-        :param pulumi.Input[builtins.str] ca_cert: CA certificate to use when verifying the Nomad server certificate, must be
+        :param pulumi.Input[_builtins.str] ca_cert: CA certificate to use when verifying the Nomad server certificate, must be
                x509 PEM encoded.
-        :param pulumi.Input[builtins.str] client_cert: Client certificate to provide to the Nomad server, must be x509 PEM encoded.
-        :param pulumi.Input[builtins.str] client_key: Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
-        :param pulumi.Input[builtins.int] default_lease_ttl_seconds: Default lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.str] description: Human-friendly description of the mount for the Active Directory backend.
-        :param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
+        :param pulumi.Input[_builtins.str] client_cert: Client certificate to provide to the Nomad server, must be x509 PEM encoded.
+        :param pulumi.Input[_builtins.str] client_key: Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
+        :param pulumi.Input[_builtins.int] default_lease_ttl_seconds: Default lease duration for secrets in seconds.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] delegated_auth_accessors: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[_builtins.str] description: Human-friendly description of the mount for the backend.
+        :param pulumi.Input[_builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
-        :param pulumi.Input[builtins.bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
-               replication.Tolerance duration to use when checking the last rotation time.
-        :param pulumi.Input[builtins.int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.int] max_token_name_length: Specifies the maximum length to use for the name of the Nomad token
+        :param pulumi.Input[_builtins.bool] external_entropy_access: Enable the secrets engine to access Vault's external entropy source
+        :param pulumi.Input[_builtins.bool] force_no_cache: If set to true, disables caching.
+        :param pulumi.Input[_builtins.str] identity_token_key: The key to use for signing plugin workload identity tokens
+        :param pulumi.Input[_builtins.str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
+        :param pulumi.Input[_builtins.bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by replication. Tolerance duration to
+               use when checking the last rotation time.
+        :param pulumi.Input[_builtins.int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
+        :param pulumi.Input[_builtins.int] max_token_name_length: Specifies the maximum length to use for the name of the Nomad token
                generated with Generate Credential. If omitted, 0 is used and ignored, defaulting to the max value allowed
                by the Nomad version.
-        :param pulumi.Input[builtins.int] max_ttl: Maximum possible lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[_builtins.int] max_ttl: Maximum possible lease duration for secrets in seconds.
+        :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[builtins.str] token: Specifies the Nomad Management token to use.
-        :param pulumi.Input[builtins.int] ttl: Specifies the ttl of the lease for the generated token.
-        """
+        :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] options: Specifies mount type specific options that are passed to the backend
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] passthrough_request_headers: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[_builtins.str] plugin_version: Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
+        :param pulumi.Input[_builtins.bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        :param pulumi.Input[_builtins.str] token: Specifies the Nomad Management token to use.
+        :param pulumi.Input[_builtins.int] ttl: Specifies the ttl of the lease for the generated token.
+        """
+        if accessor is not None:
+            pulumi.set(__self__, "accessor", accessor)
         if address is not None:
             pulumi.set(__self__, "address", address)
+        if allowed_managed_keys is not None:
+            pulumi.set(__self__, "allowed_managed_keys", allowed_managed_keys)
+        if allowed_response_headers is not None:
+            pulumi.set(__self__, "allowed_response_headers", allowed_response_headers)
+        if audit_non_hmac_request_keys is not None:
+            pulumi.set(__self__, "audit_non_hmac_request_keys", audit_non_hmac_request_keys)
+        if audit_non_hmac_response_keys is not None:
+            pulumi.set(__self__, "audit_non_hmac_response_keys", audit_non_hmac_response_keys)
         if backend is not None:
             pulumi.set(__self__, "backend", backend)
         if ca_cert is not None:
@@ -343,10 +588,20 @@ class _NomadSecretBackendState:
             pulumi.set(__self__, "client_key", client_key)
         if default_lease_ttl_seconds is not None:
             pulumi.set(__self__, "default_lease_ttl_seconds", default_lease_ttl_seconds)
+        if delegated_auth_accessors is not None:
+            pulumi.set(__self__, "delegated_auth_accessors", delegated_auth_accessors)
         if description is not None:
             pulumi.set(__self__, "description", description)
         if disable_remount is not None:
             pulumi.set(__self__, "disable_remount", disable_remount)
+        if external_entropy_access is not None:
+            pulumi.set(__self__, "external_entropy_access", external_entropy_access)
+        if force_no_cache is not None:
+            pulumi.set(__self__, "force_no_cache", force_no_cache)
+        if identity_token_key is not None:
+            pulumi.set(__self__, "identity_token_key", identity_token_key)
+        if listing_visibility is not None:
+            pulumi.set(__self__, "listing_visibility", listing_visibility)
         if local is not None:
             pulumi.set(__self__, "local", local)
         if max_lease_ttl_seconds is not None:
@@ -357,14 +612,34 @@ class _NomadSecretBackendState:
             pulumi.set(__self__, "max_ttl", max_ttl)
         if namespace is not None:
             pulumi.set(__self__, "namespace", namespace)
+        if options is not None:
+            pulumi.set(__self__, "options", options)
+        if passthrough_request_headers is not None:
+            pulumi.set(__self__, "passthrough_request_headers", passthrough_request_headers)
+        if plugin_version is not None:
+            pulumi.set(__self__, "plugin_version", plugin_version)
+        if seal_wrap is not None:
+            pulumi.set(__self__, "seal_wrap", seal_wrap)
         if token is not None:
             pulumi.set(__self__, "token", token)
         if ttl is not None:
             pulumi.set(__self__, "ttl", ttl)
-    @property
+    @_builtins.property
+    @pulumi.getter
+    def accessor(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Accessor of the mount
+        """
+        return pulumi.get(self, "accessor")
+    @accessor.setter
+    def accessor(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "accessor", value)
+    @_builtins.property
     @pulumi.getter
-    def address(self) -> Optional[pulumi.Input[builtins.str]]:
+    def address(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Specifies the address of the Nomad instance, provided
         as "protocol://host:port" like "http://127.0.0.1:4646".
@@ -372,12 +647,60 @@ class _NomadSecretBackendState:
         return pulumi.get(self, "address")
     @address.setter
-    def address(self, value: Optional[pulumi.Input[builtins.str]]):
+    def address(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "address", value)
-    @property
+    @_builtins.property
+    @pulumi.getter(name="allowedManagedKeys")
+    def allowed_managed_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of managed key registry entry names that the mount in question is allowed to access
+        """
+        return pulumi.get(self, "allowed_managed_keys")
+    @allowed_managed_keys.setter
+    def allowed_managed_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "allowed_managed_keys", value)
+    @_builtins.property
+    @pulumi.getter(name="allowedResponseHeaders")
+    def allowed_response_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of headers to allow and pass from the request to the plugin
+        """
+        return pulumi.get(self, "allowed_response_headers")
+    @allowed_response_headers.setter
+    def allowed_response_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "allowed_response_headers", value)
+    @_builtins.property
+    @pulumi.getter(name="auditNonHmacRequestKeys")
+    def audit_non_hmac_request_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
+        """
+        return pulumi.get(self, "audit_non_hmac_request_keys")
+    @audit_non_hmac_request_keys.setter
+    def audit_non_hmac_request_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "audit_non_hmac_request_keys", value)
+    @_builtins.property
+    @pulumi.getter(name="auditNonHmacResponseKeys")
+    def audit_non_hmac_response_keys(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
+        """
+        return pulumi.get(self, "audit_non_hmac_response_keys")
+    @audit_non_hmac_response_keys.setter
+    def audit_non_hmac_response_keys(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "audit_non_hmac_response_keys", value)
+    @_builtins.property
     @pulumi.getter
-    def backend(self) -> Optional[pulumi.Input[builtins.str]]:
+    def backend(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         The unique path this backend should be mounted at. Must
         not begin or end with a `/`. Defaults to `nomad`.
@@ -385,12 +708,12 @@ class _NomadSecretBackendState:
         return pulumi.get(self, "backend")
     @backend.setter
-    def backend(self, value: Optional[pulumi.Input[builtins.str]]):
+    def backend(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "backend", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="caCert")
-    def ca_cert(self) -> Optional[pulumi.Input[builtins.str]]:
+    def ca_cert(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         CA certificate to use when verifying the Nomad server certificate, must be
         x509 PEM encoded.
@@ -398,60 +721,72 @@ class _NomadSecretBackendState:
         return pulumi.get(self, "ca_cert")
     @ca_cert.setter
-    def ca_cert(self, value: Optional[pulumi.Input[builtins.str]]):
+    def ca_cert(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "ca_cert", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="clientCert")
-    def client_cert(self) -> Optional[pulumi.Input[builtins.str]]:
+    def client_cert(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Client certificate to provide to the Nomad server, must be x509 PEM encoded.
         """
         return pulumi.get(self, "client_cert")
     @client_cert.setter
-    def client_cert(self, value: Optional[pulumi.Input[builtins.str]]):
+    def client_cert(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "client_cert", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="clientKey")
-    def client_key(self) -> Optional[pulumi.Input[builtins.str]]:
+    def client_key(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
         """
         return pulumi.get(self, "client_key")
     @client_key.setter
-    def client_key(self, value: Optional[pulumi.Input[builtins.str]]):
+    def client_key(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "client_key", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="defaultLeaseTtlSeconds")
-    def default_lease_ttl_seconds(self) -> Optional[pulumi.Input[builtins.int]]:
+    def default_lease_ttl_seconds(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Default lease duration for secrets in seconds.
         """
         return pulumi.get(self, "default_lease_ttl_seconds")
     @default_lease_ttl_seconds.setter
-    def default_lease_ttl_seconds(self, value: Optional[pulumi.Input[builtins.int]]):
+    def default_lease_ttl_seconds(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "default_lease_ttl_seconds", value)
-    @property
+    @_builtins.property
+    @pulumi.getter(name="delegatedAuthAccessors")
+    def delegated_auth_accessors(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of headers to allow and pass from the request to the plugin
+        """
+        return pulumi.get(self, "delegated_auth_accessors")
+    @delegated_auth_accessors.setter
+    def delegated_auth_accessors(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "delegated_auth_accessors", value)
+    @_builtins.property
     @pulumi.getter
-    def description(self) -> Optional[pulumi.Input[builtins.str]]:
+    def description(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        Human-friendly description of the mount for the Active Directory backend.
+        Human-friendly description of the mount for the backend.
         """
         return pulumi.get(self, "description")
     @description.setter
-    def description(self, value: Optional[pulumi.Input[builtins.str]]):
+    def description(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "description", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="disableRemount")
-    def disable_remount(self) -> Optional[pulumi.Input[builtins.bool]]:
+    def disable_remount(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
         If set, opts out of mount migration on path updates.
         See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
@@ -459,37 +794,85 @@ class _NomadSecretBackendState:
         return pulumi.get(self, "disable_remount")
     @disable_remount.setter
-    def disable_remount(self, value: Optional[pulumi.Input[builtins.bool]]):
+    def disable_remount(self, value: Optional[pulumi.Input[_builtins.bool]]):
         pulumi.set(self, "disable_remount", value)
-    @property
+    @_builtins.property
+    @pulumi.getter(name="externalEntropyAccess")
+    def external_entropy_access(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Enable the secrets engine to access Vault's external entropy source
+        """
+        return pulumi.get(self, "external_entropy_access")
+    @external_entropy_access.setter
+    def external_entropy_access(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "external_entropy_access", value)
+    @_builtins.property
+    @pulumi.getter(name="forceNoCache")
+    def force_no_cache(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        If set to true, disables caching.
+        """
+        return pulumi.get(self, "force_no_cache")
+    @force_no_cache.setter
+    def force_no_cache(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "force_no_cache", value)
+    @_builtins.property
+    @pulumi.getter(name="identityTokenKey")
+    def identity_token_key(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The key to use for signing plugin workload identity tokens
+        """
+        return pulumi.get(self, "identity_token_key")
+    @identity_token_key.setter
+    def identity_token_key(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "identity_token_key", value)
+    @_builtins.property
+    @pulumi.getter(name="listingVisibility")
+    def listing_visibility(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Specifies whether to show this mount in the UI-specific listing endpoint
+        """
+        return pulumi.get(self, "listing_visibility")
+    @listing_visibility.setter
+    def listing_visibility(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "listing_visibility", value)
+    @_builtins.property
     @pulumi.getter
-    def local(self) -> Optional[pulumi.Input[builtins.bool]]:
+    def local(self) -> Optional[pulumi.Input[_builtins.bool]]:
         """
-        Mark the secrets engine as local-only. Local engines are not replicated or removed by
-        replication.Tolerance duration to use when checking the last rotation time.
+        Mark the secrets engine as local-only. Local engines are not replicated or removed by replication. Tolerance duration to
+        use when checking the last rotation time.
         """
         return pulumi.get(self, "local")
     @local.setter
-    def local(self, value: Optional[pulumi.Input[builtins.bool]]):
+    def local(self, value: Optional[pulumi.Input[_builtins.bool]]):
         pulumi.set(self, "local", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="maxLeaseTtlSeconds")
-    def max_lease_ttl_seconds(self) -> Optional[pulumi.Input[builtins.int]]:
+    def max_lease_ttl_seconds(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Maximum possible lease duration for secrets in seconds.
         """
         return pulumi.get(self, "max_lease_ttl_seconds")
     @max_lease_ttl_seconds.setter
-    def max_lease_ttl_seconds(self, value: Optional[pulumi.Input[builtins.int]]):
+    def max_lease_ttl_seconds(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "max_lease_ttl_seconds", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="maxTokenNameLength")
-    def max_token_name_length(self) -> Optional[pulumi.Input[builtins.int]]:
+    def max_token_name_length(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Specifies the maximum length to use for the name of the Nomad token
         generated with Generate Credential. If omitted, 0 is used and ignored, defaulting to the max value allowed
@@ -498,24 +881,24 @@ class _NomadSecretBackendState:
         return pulumi.get(self, "max_token_name_length")
     @max_token_name_length.setter
-    def max_token_name_length(self, value: Optional[pulumi.Input[builtins.int]]):
+    def max_token_name_length(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "max_token_name_length", value)
-    @property
+    @_builtins.property
     @pulumi.getter(name="maxTtl")
-    def max_ttl(self) -> Optional[pulumi.Input[builtins.int]]:
+    def max_ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Maximum possible lease duration for secrets in seconds.
         """
         return pulumi.get(self, "max_ttl")
     @max_ttl.setter
-    def max_ttl(self, value: Optional[pulumi.Input[builtins.int]]):
+    def max_ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "max_ttl", value)
-    @property
+    @_builtins.property
     @pulumi.getter
-    def namespace(self) -> Optional[pulumi.Input[builtins.str]]:
+    def namespace(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -525,31 +908,79 @@ class _NomadSecretBackendState:
         return pulumi.get(self, "namespace")
     @namespace.setter
-    def namespace(self, value: Optional[pulumi.Input[builtins.str]]):
+    def namespace(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "namespace", value)
-    @property
+    @_builtins.property
     @pulumi.getter
-    def token(self) -> Optional[pulumi.Input[builtins.str]]:
+    def options(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
+        """
+        Specifies mount type specific options that are passed to the backend
+        """
+        return pulumi.get(self, "options")
+    @options.setter
+    def options(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "options", value)
+    @_builtins.property
+    @pulumi.getter(name="passthroughRequestHeaders")
+    def passthrough_request_headers(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of headers to allow and pass from the request to the plugin
+        """
+        return pulumi.get(self, "passthrough_request_headers")
+    @passthrough_request_headers.setter
+    def passthrough_request_headers(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "passthrough_request_headers", value)
+    @_builtins.property
+    @pulumi.getter(name="pluginVersion")
+    def plugin_version(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
+        """
+        return pulumi.get(self, "plugin_version")
+    @plugin_version.setter
+    def plugin_version(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "plugin_version", value)
+    @_builtins.property
+    @pulumi.getter(name="sealWrap")
+    def seal_wrap(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        """
+        return pulumi.get(self, "seal_wrap")
+    @seal_wrap.setter
+    def seal_wrap(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "seal_wrap", value)
+    @_builtins.property
+    @pulumi.getter
+    def token(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
         Specifies the Nomad Management token to use.
         """
         return pulumi.get(self, "token")
     @token.setter
-    def token(self, value: Optional[pulumi.Input[builtins.str]]):
+    def token(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "token", value)
-    @property
+    @_builtins.property
     @pulumi.getter
-    def ttl(self) -> Optional[pulumi.Input[builtins.int]]:
+    def ttl(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
         Specifies the ttl of the lease for the generated token.
         """
         return pulumi.get(self, "ttl")
     @ttl.setter
-    def ttl(self, value: Optional[pulumi.Input[builtins.int]]):
+    def ttl(self, value: Optional[pulumi.Input[_builtins.int]]):
         pulumi.set(self, "ttl", value)
@@ -559,21 +990,34 @@ class NomadSecretBackend(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 address: Optional[pulumi.Input[builtins.str]] = None,
-                 backend: Optional[pulumi.Input[builtins.str]] = None,
-                 ca_cert: Optional[pulumi.Input[builtins.str]] = None,
-                 client_cert: Optional[pulumi.Input[builtins.str]] = None,
-                 client_key: Optional[pulumi.Input[builtins.str]] = None,
-                 default_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-                 description: Optional[pulumi.Input[builtins.str]] = None,
-                 disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
-                 local: Optional[pulumi.Input[builtins.bool]] = None,
-                 max_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-                 max_token_name_length: Optional[pulumi.Input[builtins.int]] = None,
-                 max_ttl: Optional[pulumi.Input[builtins.int]] = None,
-                 namespace: Optional[pulumi.Input[builtins.str]] = None,
-                 token: Optional[pulumi.Input[builtins.str]] = None,
-                 ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 address: Optional[pulumi.Input[_builtins.str]] = None,
+                 allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[_builtins.str]] = None,
+                 ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 default_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+                 delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 description: Optional[pulumi.Input[_builtins.str]] = None,
+                 disable_remount: Optional[pulumi.Input[_builtins.bool]] = None,
+                 external_entropy_access: Optional[pulumi.Input[_builtins.bool]] = None,
+                 force_no_cache: Optional[pulumi.Input[_builtins.bool]] = None,
+                 identity_token_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 listing_visibility: Optional[pulumi.Input[_builtins.str]] = None,
+                 local: Optional[pulumi.Input[_builtins.bool]] = None,
+                 max_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+                 max_token_name_length: Optional[pulumi.Input[_builtins.int]] = None,
+                 max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 options: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+                 passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 plugin_version: Optional[pulumi.Input[_builtins.str]] = None,
+                 seal_wrap: Optional[pulumi.Input[_builtins.bool]] = None,
+                 token: Optional[pulumi.Input[_builtins.str]] = None,
+                 ttl: Optional[pulumi.Input[_builtins.int]] = None,
                  __props__=None):
         """
         ## Example Usage
@@ -603,31 +1047,44 @@ class NomadSecretBackend(pulumi.CustomResource):
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[builtins.str] address: Specifies the address of the Nomad instance, provided
+        :param pulumi.Input[_builtins.str] address: Specifies the address of the Nomad instance, provided
                as "protocol://host:port" like "http://127.0.0.1:4646".
-        :param pulumi.Input[builtins.str] backend: The unique path this backend should be mounted at. Must
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_managed_keys: List of managed key registry entry names that the mount in question is allowed to access
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_response_headers: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
+        :param pulumi.Input[_builtins.str] backend: The unique path this backend should be mounted at. Must
                not begin or end with a `/`. Defaults to `nomad`.
-        :param pulumi.Input[builtins.str] ca_cert: CA certificate to use when verifying the Nomad server certificate, must be
+        :param pulumi.Input[_builtins.str] ca_cert: CA certificate to use when verifying the Nomad server certificate, must be
                x509 PEM encoded.
-        :param pulumi.Input[builtins.str] client_cert: Client certificate to provide to the Nomad server, must be x509 PEM encoded.
-        :param pulumi.Input[builtins.str] client_key: Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
-        :param pulumi.Input[builtins.int] default_lease_ttl_seconds: Default lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.str] description: Human-friendly description of the mount for the Active Directory backend.
-        :param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
+        :param pulumi.Input[_builtins.str] client_cert: Client certificate to provide to the Nomad server, must be x509 PEM encoded.
+        :param pulumi.Input[_builtins.str] client_key: Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
+        :param pulumi.Input[_builtins.int] default_lease_ttl_seconds: Default lease duration for secrets in seconds.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] delegated_auth_accessors: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[_builtins.str] description: Human-friendly description of the mount for the backend.
+        :param pulumi.Input[_builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
-        :param pulumi.Input[builtins.bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
-               replication.Tolerance duration to use when checking the last rotation time.
-        :param pulumi.Input[builtins.int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.int] max_token_name_length: Specifies the maximum length to use for the name of the Nomad token
+        :param pulumi.Input[_builtins.bool] external_entropy_access: Enable the secrets engine to access Vault's external entropy source
+        :param pulumi.Input[_builtins.bool] force_no_cache: If set to true, disables caching.
+        :param pulumi.Input[_builtins.str] identity_token_key: The key to use for signing plugin workload identity tokens
+        :param pulumi.Input[_builtins.str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
+        :param pulumi.Input[_builtins.bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by replication. Tolerance duration to
+               use when checking the last rotation time.
+        :param pulumi.Input[_builtins.int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
+        :param pulumi.Input[_builtins.int] max_token_name_length: Specifies the maximum length to use for the name of the Nomad token
                generated with Generate Credential. If omitted, 0 is used and ignored, defaulting to the max value allowed
                by the Nomad version.
-        :param pulumi.Input[builtins.int] max_ttl: Maximum possible lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[_builtins.int] max_ttl: Maximum possible lease duration for secrets in seconds.
+        :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[builtins.str] token: Specifies the Nomad Management token to use.
-        :param pulumi.Input[builtins.int] ttl: Specifies the ttl of the lease for the generated token.
+        :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] options: Specifies mount type specific options that are passed to the backend
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] passthrough_request_headers: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[_builtins.str] plugin_version: Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
+        :param pulumi.Input[_builtins.bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        :param pulumi.Input[_builtins.str] token: Specifies the Nomad Management token to use.
+        :param pulumi.Input[_builtins.int] ttl: Specifies the ttl of the lease for the generated token.
         """
         ...
     @overload
@@ -676,21 +1133,34 @@ class NomadSecretBackend(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
-                 address: Optional[pulumi.Input[builtins.str]] = None,
-                 backend: Optional[pulumi.Input[builtins.str]] = None,
-                 ca_cert: Optional[pulumi.Input[builtins.str]] = None,
-                 client_cert: Optional[pulumi.Input[builtins.str]] = None,
-                 client_key: Optional[pulumi.Input[builtins.str]] = None,
-                 default_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-                 description: Optional[pulumi.Input[builtins.str]] = None,
-                 disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
-                 local: Optional[pulumi.Input[builtins.bool]] = None,
-                 max_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-                 max_token_name_length: Optional[pulumi.Input[builtins.int]] = None,
-                 max_ttl: Optional[pulumi.Input[builtins.int]] = None,
-                 namespace: Optional[pulumi.Input[builtins.str]] = None,
-                 token: Optional[pulumi.Input[builtins.str]] = None,
-                 ttl: Optional[pulumi.Input[builtins.int]] = None,
+                 address: Optional[pulumi.Input[_builtins.str]] = None,
+                 allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 backend: Optional[pulumi.Input[_builtins.str]] = None,
+                 ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+                 client_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 default_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+                 delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 description: Optional[pulumi.Input[_builtins.str]] = None,
+                 disable_remount: Optional[pulumi.Input[_builtins.bool]] = None,
+                 external_entropy_access: Optional[pulumi.Input[_builtins.bool]] = None,
+                 force_no_cache: Optional[pulumi.Input[_builtins.bool]] = None,
+                 identity_token_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 listing_visibility: Optional[pulumi.Input[_builtins.str]] = None,
+                 local: Optional[pulumi.Input[_builtins.bool]] = None,
+                 max_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+                 max_token_name_length: Optional[pulumi.Input[_builtins.int]] = None,
+                 max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
+                 namespace: Optional[pulumi.Input[_builtins.str]] = None,
+                 options: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+                 passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 plugin_version: Optional[pulumi.Input[_builtins.str]] = None,
+                 seal_wrap: Optional[pulumi.Input[_builtins.bool]] = None,
+                 token: Optional[pulumi.Input[_builtins.str]] = None,
+                 ttl: Optional[pulumi.Input[_builtins.int]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -701,20 +1171,34 @@ class NomadSecretBackend(pulumi.CustomResource):
             __props__ = NomadSecretBackendArgs.__new__(NomadSecretBackendArgs)
             __props__.__dict__["address"] = address
+            __props__.__dict__["allowed_managed_keys"] = allowed_managed_keys
+            __props__.__dict__["allowed_response_headers"] = allowed_response_headers
+            __props__.__dict__["audit_non_hmac_request_keys"] = audit_non_hmac_request_keys
+            __props__.__dict__["audit_non_hmac_response_keys"] = audit_non_hmac_response_keys
             __props__.__dict__["backend"] = backend
             __props__.__dict__["ca_cert"] = ca_cert
             __props__.__dict__["client_cert"] = None if client_cert is None else pulumi.Output.secret(client_cert)
             __props__.__dict__["client_key"] = None if client_key is None else pulumi.Output.secret(client_key)
             __props__.__dict__["default_lease_ttl_seconds"] = default_lease_ttl_seconds
+            __props__.__dict__["delegated_auth_accessors"] = delegated_auth_accessors
             __props__.__dict__["description"] = description
             __props__.__dict__["disable_remount"] = disable_remount
+            __props__.__dict__["external_entropy_access"] = external_entropy_access
+            __props__.__dict__["force_no_cache"] = force_no_cache
+            __props__.__dict__["identity_token_key"] = identity_token_key
+            __props__.__dict__["listing_visibility"] = listing_visibility
             __props__.__dict__["local"] = local
             __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
             __props__.__dict__["max_token_name_length"] = max_token_name_length
             __props__.__dict__["max_ttl"] = max_ttl
             __props__.__dict__["namespace"] = namespace
+            __props__.__dict__["options"] = options
+            __props__.__dict__["passthrough_request_headers"] = passthrough_request_headers
+            __props__.__dict__["plugin_version"] = plugin_version
+            __props__.__dict__["seal_wrap"] = seal_wrap
             __props__.__dict__["token"] = None if token is None else pulumi.Output.secret(token)
             __props__.__dict__["ttl"] = ttl
+            __props__.__dict__["accessor"] = None
         secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["clientCert", "clientKey", "token"])
         opts = pulumi.ResourceOptions.merge(opts, secret_opts)
         super(NomadSecretBackend, __self__).__init__(
@@ -727,21 +1211,35 @@ class NomadSecretBackend(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
-            address: Optional[pulumi.Input[builtins.str]] = None,
-            backend: Optional[pulumi.Input[builtins.str]] = None,
-            ca_cert: Optional[pulumi.Input[builtins.str]] = None,
-            client_cert: Optional[pulumi.Input[builtins.str]] = None,
-            client_key: Optional[pulumi.Input[builtins.str]] = None,
-            default_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-            description: Optional[pulumi.Input[builtins.str]] = None,
-            disable_remount: Optional[pulumi.Input[builtins.bool]] = None,
-            local: Optional[pulumi.Input[builtins.bool]] = None,
-            max_lease_ttl_seconds: Optional[pulumi.Input[builtins.int]] = None,
-            max_token_name_length: Optional[pulumi.Input[builtins.int]] = None,
-            max_ttl: Optional[pulumi.Input[builtins.int]] = None,
-            namespace: Optional[pulumi.Input[builtins.str]] = None,
-            token: Optional[pulumi.Input[builtins.str]] = None,
-            ttl: Optional[pulumi.Input[builtins.int]] = None) -> 'NomadSecretBackend':
+            accessor: Optional[pulumi.Input[_builtins.str]] = None,
+            address: Optional[pulumi.Input[_builtins.str]] = None,
+            allowed_managed_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            allowed_response_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            audit_non_hmac_request_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            audit_non_hmac_response_keys: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            backend: Optional[pulumi.Input[_builtins.str]] = None,
+            ca_cert: Optional[pulumi.Input[_builtins.str]] = None,
+            client_cert: Optional[pulumi.Input[_builtins.str]] = None,
+            client_key: Optional[pulumi.Input[_builtins.str]] = None,
+            default_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+            delegated_auth_accessors: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            description: Optional[pulumi.Input[_builtins.str]] = None,
+            disable_remount: Optional[pulumi.Input[_builtins.bool]] = None,
+            external_entropy_access: Optional[pulumi.Input[_builtins.bool]] = None,
+            force_no_cache: Optional[pulumi.Input[_builtins.bool]] = None,
+            identity_token_key: Optional[pulumi.Input[_builtins.str]] = None,
+            listing_visibility: Optional[pulumi.Input[_builtins.str]] = None,
+            local: Optional[pulumi.Input[_builtins.bool]] = None,
+            max_lease_ttl_seconds: Optional[pulumi.Input[_builtins.int]] = None,
+            max_token_name_length: Optional[pulumi.Input[_builtins.int]] = None,
+            max_ttl: Optional[pulumi.Input[_builtins.int]] = None,
+            namespace: Optional[pulumi.Input[_builtins.str]] = None,
+            options: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+            passthrough_request_headers: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            plugin_version: Optional[pulumi.Input[_builtins.str]] = None,
+            seal_wrap: Optional[pulumi.Input[_builtins.bool]] = None,
+            token: Optional[pulumi.Input[_builtins.str]] = None,
+            ttl: Optional[pulumi.Input[_builtins.int]] = None) -> 'NomadSecretBackend':
         """
         Get an existing NomadSecretBackend resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -749,141 +1247,249 @@ class NomadSecretBackend(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[builtins.str] address: Specifies the address of the Nomad instance, provided
+        :param pulumi.Input[_builtins.str] accessor: Accessor of the mount
+        :param pulumi.Input[_builtins.str] address: Specifies the address of the Nomad instance, provided
                as "protocol://host:port" like "http://127.0.0.1:4646".
-        :param pulumi.Input[builtins.str] backend: The unique path this backend should be mounted at. Must
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_managed_keys: List of managed key registry entry names that the mount in question is allowed to access
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] allowed_response_headers: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audit_non_hmac_request_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] audit_non_hmac_response_keys: Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
+        :param pulumi.Input[_builtins.str] backend: The unique path this backend should be mounted at. Must
                not begin or end with a `/`. Defaults to `nomad`.
-        :param pulumi.Input[builtins.str] ca_cert: CA certificate to use when verifying the Nomad server certificate, must be
+        :param pulumi.Input[_builtins.str] ca_cert: CA certificate to use when verifying the Nomad server certificate, must be
                x509 PEM encoded.
-        :param pulumi.Input[builtins.str] client_cert: Client certificate to provide to the Nomad server, must be x509 PEM encoded.
-        :param pulumi.Input[builtins.str] client_key: Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
-        :param pulumi.Input[builtins.int] default_lease_ttl_seconds: Default lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.str] description: Human-friendly description of the mount for the Active Directory backend.
-        :param pulumi.Input[builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
+        :param pulumi.Input[_builtins.str] client_cert: Client certificate to provide to the Nomad server, must be x509 PEM encoded.
+        :param pulumi.Input[_builtins.str] client_key: Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
+        :param pulumi.Input[_builtins.int] default_lease_ttl_seconds: Default lease duration for secrets in seconds.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] delegated_auth_accessors: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[_builtins.str] description: Human-friendly description of the mount for the backend.
+        :param pulumi.Input[_builtins.bool] disable_remount: If set, opts out of mount migration on path updates.
                See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
-        :param pulumi.Input[builtins.bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by
-               replication.Tolerance duration to use when checking the last rotation time.
-        :param pulumi.Input[builtins.int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.int] max_token_name_length: Specifies the maximum length to use for the name of the Nomad token
+        :param pulumi.Input[_builtins.bool] external_entropy_access: Enable the secrets engine to access Vault's external entropy source
+        :param pulumi.Input[_builtins.bool] force_no_cache: If set to true, disables caching.
+        :param pulumi.Input[_builtins.str] identity_token_key: The key to use for signing plugin workload identity tokens
+        :param pulumi.Input[_builtins.str] listing_visibility: Specifies whether to show this mount in the UI-specific listing endpoint
+        :param pulumi.Input[_builtins.bool] local: Mark the secrets engine as local-only. Local engines are not replicated or removed by replication. Tolerance duration to
+               use when checking the last rotation time.
+        :param pulumi.Input[_builtins.int] max_lease_ttl_seconds: Maximum possible lease duration for secrets in seconds.
+        :param pulumi.Input[_builtins.int] max_token_name_length: Specifies the maximum length to use for the name of the Nomad token
                generated with Generate Credential. If omitted, 0 is used and ignored, defaulting to the max value allowed
                by the Nomad version.
-        :param pulumi.Input[builtins.int] max_ttl: Maximum possible lease duration for secrets in seconds.
-        :param pulumi.Input[builtins.str] namespace: The namespace to provision the resource in.
+        :param pulumi.Input[_builtins.int] max_ttl: Maximum possible lease duration for secrets in seconds.
+        :param pulumi.Input[_builtins.str] namespace: The namespace to provision the resource in.
                The value should not contain leading or trailing forward slashes.
                The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
                *Available only for Vault Enterprise*.
-        :param pulumi.Input[builtins.str] token: Specifies the Nomad Management token to use.
-        :param pulumi.Input[builtins.int] ttl: Specifies the ttl of the lease for the generated token.
+        :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] options: Specifies mount type specific options that are passed to the backend
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] passthrough_request_headers: List of headers to allow and pass from the request to the plugin
+        :param pulumi.Input[_builtins.str] plugin_version: Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
+        :param pulumi.Input[_builtins.bool] seal_wrap: Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        :param pulumi.Input[_builtins.str] token: Specifies the Nomad Management token to use.
+        :param pulumi.Input[_builtins.int] ttl: Specifies the ttl of the lease for the generated token.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
         __props__ = _NomadSecretBackendState.__new__(_NomadSecretBackendState)
+        __props__.__dict__["accessor"] = accessor
         __props__.__dict__["address"] = address
+        __props__.__dict__["allowed_managed_keys"] = allowed_managed_keys
+        __props__.__dict__["allowed_response_headers"] = allowed_response_headers
+        __props__.__dict__["audit_non_hmac_request_keys"] = audit_non_hmac_request_keys
+        __props__.__dict__["audit_non_hmac_response_keys"] = audit_non_hmac_response_keys
         __props__.__dict__["backend"] = backend
         __props__.__dict__["ca_cert"] = ca_cert
         __props__.__dict__["client_cert"] = client_cert
         __props__.__dict__["client_key"] = client_key
         __props__.__dict__["default_lease_ttl_seconds"] = default_lease_ttl_seconds
+        __props__.__dict__["delegated_auth_accessors"] = delegated_auth_accessors
         __props__.__dict__["description"] = description
         __props__.__dict__["disable_remount"] = disable_remount
+        __props__.__dict__["external_entropy_access"] = external_entropy_access
+        __props__.__dict__["force_no_cache"] = force_no_cache
+        __props__.__dict__["identity_token_key"] = identity_token_key
+        __props__.__dict__["listing_visibility"] = listing_visibility
         __props__.__dict__["local"] = local
         __props__.__dict__["max_lease_ttl_seconds"] = max_lease_ttl_seconds
         __props__.__dict__["max_token_name_length"] = max_token_name_length
         __props__.__dict__["max_ttl"] = max_ttl
         __props__.__dict__["namespace"] = namespace
+        __props__.__dict__["options"] = options
+        __props__.__dict__["passthrough_request_headers"] = passthrough_request_headers
+        __props__.__dict__["plugin_version"] = plugin_version
+        __props__.__dict__["seal_wrap"] = seal_wrap
         __props__.__dict__["token"] = token
         __props__.__dict__["ttl"] = ttl
         return NomadSecretBackend(resource_name, opts=opts, __props__=__props__)
-    @property
+    @_builtins.property
     @pulumi.getter
-    def address(self) -> pulumi.Output[Optional[builtins.str]]:
+    def accessor(self) -> pulumi.Output[_builtins.str]:
+        """
+        Accessor of the mount
+        """
+        return pulumi.get(self, "accessor")
+    @_builtins.property
+    @pulumi.getter
+    def address(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
         Specifies the address of the Nomad instance, provided
         as "protocol://host:port" like "http://127.0.0.1:4646".
         """
         return pulumi.get(self, "address")
-    @property
+    @_builtins.property
+    @pulumi.getter(name="allowedManagedKeys")
+    def allowed_managed_keys(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        List of managed key registry entry names that the mount in question is allowed to access
+        """
+        return pulumi.get(self, "allowed_managed_keys")
+    @_builtins.property
+    @pulumi.getter(name="allowedResponseHeaders")
+    def allowed_response_headers(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        List of headers to allow and pass from the request to the plugin
+        """
+        return pulumi.get(self, "allowed_response_headers")
+    @_builtins.property
+    @pulumi.getter(name="auditNonHmacRequestKeys")
+    def audit_non_hmac_request_keys(self) -> pulumi.Output[Sequence[_builtins.str]]:
+        """
+        Specifies the list of keys that will not be HMAC'd by audit devices in the request data object.
+        """
+        return pulumi.get(self, "audit_non_hmac_request_keys")
+    @_builtins.property
+    @pulumi.getter(name="auditNonHmacResponseKeys")
+    def audit_non_hmac_response_keys(self) -> pulumi.Output[Sequence[_builtins.str]]:
+        """
+        Specifies the list of keys that will not be HMAC'd by audit devices in the response data object.
+        """
+        return pulumi.get(self, "audit_non_hmac_response_keys")
+    @_builtins.property
     @pulumi.getter
-    def backend(self) -> pulumi.Output[Optional[builtins.str]]:
+    def backend(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
         The unique path this backend should be mounted at. Must
         not begin or end with a `/`. Defaults to `nomad`.
         """
         return pulumi.get(self, "backend")
-    @property
+    @_builtins.property
     @pulumi.getter(name="caCert")
-    def ca_cert(self) -> pulumi.Output[Optional[builtins.str]]:
+    def ca_cert(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
         CA certificate to use when verifying the Nomad server certificate, must be
         x509 PEM encoded.
         """
         return pulumi.get(self, "ca_cert")
-    @property
+    @_builtins.property
     @pulumi.getter(name="clientCert")
-    def client_cert(self) -> pulumi.Output[Optional[builtins.str]]:
+    def client_cert(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
         Client certificate to provide to the Nomad server, must be x509 PEM encoded.
         """
         return pulumi.get(self, "client_cert")
-    @property
+    @_builtins.property
     @pulumi.getter(name="clientKey")
-    def client_key(self) -> pulumi.Output[Optional[builtins.str]]:
+    def client_key(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
         Client certificate key to provide to the Nomad server, must be x509 PEM encoded.
         """
         return pulumi.get(self, "client_key")
-    @property
+    @_builtins.property
     @pulumi.getter(name="defaultLeaseTtlSeconds")
-    def default_lease_ttl_seconds(self) -> pulumi.Output[builtins.int]:
+    def default_lease_ttl_seconds(self) -> pulumi.Output[_builtins.int]:
         """
         Default lease duration for secrets in seconds.
         """
         return pulumi.get(self, "default_lease_ttl_seconds")
-    @property
+    @_builtins.property
+    @pulumi.getter(name="delegatedAuthAccessors")
+    def delegated_auth_accessors(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        List of headers to allow and pass from the request to the plugin
+        """
+        return pulumi.get(self, "delegated_auth_accessors")
+    @_builtins.property
     @pulumi.getter
-    def description(self) -> pulumi.Output[Optional[builtins.str]]:
+    def description(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
-        Human-friendly description of the mount for the Active Directory backend.
+        Human-friendly description of the mount for the backend.
         """
         return pulumi.get(self, "description")
-    @property
+    @_builtins.property
     @pulumi.getter(name="disableRemount")
-    def disable_remount(self) -> pulumi.Output[Optional[builtins.bool]]:
+    def disable_remount(self) -> pulumi.Output[Optional[_builtins.bool]]:
         """
         If set, opts out of mount migration on path updates.
         See here for more info on [Mount Migration](https://www.vaultproject.io/docs/concepts/mount-migration)
         """
         return pulumi.get(self, "disable_remount")
-    @property
+    @_builtins.property
+    @pulumi.getter(name="externalEntropyAccess")
+    def external_entropy_access(self) -> pulumi.Output[Optional[_builtins.bool]]:
+        """
+        Enable the secrets engine to access Vault's external entropy source
+        """
+        return pulumi.get(self, "external_entropy_access")
+    @_builtins.property
+    @pulumi.getter(name="forceNoCache")
+    def force_no_cache(self) -> pulumi.Output[_builtins.bool]:
+        """
+        If set to true, disables caching.
+        """
+        return pulumi.get(self, "force_no_cache")
+    @_builtins.property
+    @pulumi.getter(name="identityTokenKey")
+    def identity_token_key(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        The key to use for signing plugin workload identity tokens
+        """
+        return pulumi.get(self, "identity_token_key")
+    @_builtins.property
+    @pulumi.getter(name="listingVisibility")
+    def listing_visibility(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Specifies whether to show this mount in the UI-specific listing endpoint
+        """
+        return pulumi.get(self, "listing_visibility")
+    @_builtins.property
     @pulumi.getter
-    def local(self) -> pulumi.Output[Optional[builtins.bool]]:
+    def local(self) -> pulumi.Output[Optional[_builtins.bool]]:
         """
-        Mark the secrets engine as local-only. Local engines are not replicated or removed by
-        replication.Tolerance duration to use when checking the last rotation time.
+        Mark the secrets engine as local-only. Local engines are not replicated or removed by replication. Tolerance duration to
+        use when checking the last rotation time.
         """
         return pulumi.get(self, "local")
-    @property
+    @_builtins.property
     @pulumi.getter(name="maxLeaseTtlSeconds")
-    def max_lease_ttl_seconds(self) -> pulumi.Output[builtins.int]:
+    def max_lease_ttl_seconds(self) -> pulumi.Output[_builtins.int]:
         """
         Maximum possible lease duration for secrets in seconds.
         """
         return pulumi.get(self, "max_lease_ttl_seconds")
-    @property
+    @_builtins.property
     @pulumi.getter(name="maxTokenNameLength")
-    def max_token_name_length(self) -> pulumi.Output[builtins.int]:
+    def max_token_name_length(self) -> pulumi.Output[_builtins.int]:
         """
         Specifies the maximum length to use for the name of the Nomad token
         generated with Generate Credential. If omitted, 0 is used and ignored, defaulting to the max value allowed
@@ -891,17 +1497,17 @@ class NomadSecretBackend(pulumi.CustomResource):
         """
         return pulumi.get(self, "max_token_name_length")
-    @property
+    @_builtins.property
     @pulumi.getter(name="maxTtl")
-    def max_ttl(self) -> pulumi.Output[builtins.int]:
+    def max_ttl(self) -> pulumi.Output[_builtins.int]:
         """
         Maximum possible lease duration for secrets in seconds.
         """
         return pulumi.get(self, "max_ttl")
-    @property
+    @_builtins.property
     @pulumi.getter
-    def namespace(self) -> pulumi.Output[Optional[builtins.str]]:
+    def namespace(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
         The namespace to provision the resource in.
         The value should not contain leading or trailing forward slashes.
@@ -910,17 +1516,49 @@ class NomadSecretBackend(pulumi.CustomResource):
         """
         return pulumi.get(self, "namespace")
-    @property
+    @_builtins.property
+    @pulumi.getter
+    def options(self) -> pulumi.Output[Optional[Mapping[str, _builtins.str]]]:
+        """
+        Specifies mount type specific options that are passed to the backend
+        """
+        return pulumi.get(self, "options")
+    @_builtins.property
+    @pulumi.getter(name="passthroughRequestHeaders")
+    def passthrough_request_headers(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        List of headers to allow and pass from the request to the plugin
+        """
+        return pulumi.get(self, "passthrough_request_headers")
+    @_builtins.property
+    @pulumi.getter(name="pluginVersion")
+    def plugin_version(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Specifies the semantic version of the plugin to use, e.g. 'v1.0.0'
+        """
+        return pulumi.get(self, "plugin_version")
+    @_builtins.property
+    @pulumi.getter(name="sealWrap")
+    def seal_wrap(self) -> pulumi.Output[_builtins.bool]:
+        """
+        Enable seal wrapping for the mount, causing values stored by the mount to be wrapped by the seal's encryption capability
+        """
+        return pulumi.get(self, "seal_wrap")
+    @_builtins.property
     @pulumi.getter
-    def token(self) -> pulumi.Output[Optional[builtins.str]]:
+    def token(self) -> pulumi.Output[Optional[_builtins.str]]:
         """
         Specifies the Nomad Management token to use.
         """
         return pulumi.get(self, "token")
-    @property
+    @_builtins.property
     @pulumi.getter
-    def ttl(self) -> pulumi.Output[builtins.int]:
+    def ttl(self) -> pulumi.Output[_builtins.int]:
         """
         Specifies the ttl of the lease for the generated token.
         """

pulumi-vault 7.1.0__py3-none-any.whl → 7.2.0__py3-none-any.whl

pulumi-vault 7.1.0py3-none-any.whl → 7.2.0py3-none-any.whl