pulumi-vault 7.2.0a1753339763__py3-none-any.whl → 7.2.0a1753512474__py3-none-any.whl

pulumi_vault/gcp/get_auth_backend_role.py

@@ -2,8 +2,7 @@
 # *** WARNING: this file was generated by pulumi-language-python. ***
 # *** Do not edit by hand unless you're certain you know what you are doing! ***
 
-import builtins
-import copy
+import builtins as _builtins
 import warnings
 import sys
 import pulumi
@@ -92,88 +91,88 @@ class GetAuthBackendRoleResult:
             raise TypeError("Expected argument 'type' to be a str")
         pulumi.set(__self__, "type", type)
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def backend(self) -> Optional[builtins.str]:
+    def backend(self) -> Optional[_builtins.str]:
         return pulumi.get(self, "backend")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="boundInstanceGroups")
-    def bound_instance_groups(self) -> Sequence[builtins.str]:
+    def bound_instance_groups(self) -> Sequence[_builtins.str]:
         """
         GCP regions bound to the role. Returned when `type` is `gce`.
         """
         return pulumi.get(self, "bound_instance_groups")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="boundLabels")
-    def bound_labels(self) -> Sequence[builtins.str]:
+    def bound_labels(self) -> Sequence[_builtins.str]:
         """
         GCP labels bound to the role. Returned when `type` is `gce`.
         """
         return pulumi.get(self, "bound_labels")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="boundProjects")
-    def bound_projects(self) -> Sequence[builtins.str]:
+    def bound_projects(self) -> Sequence[_builtins.str]:
         """
         GCP projects bound to the role.
         """
         return pulumi.get(self, "bound_projects")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="boundRegions")
-    def bound_regions(self) -> Sequence[builtins.str]:
+    def bound_regions(self) -> Sequence[_builtins.str]:
         """
         GCP regions bound to the role. Returned when `type` is `gce`.
         """
         return pulumi.get(self, "bound_regions")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="boundServiceAccounts")
-    def bound_service_accounts(self) -> Sequence[builtins.str]:
+    def bound_service_accounts(self) -> Sequence[_builtins.str]:
         """
         GCP service accounts bound to the role. Returned when `type` is `iam`.
         """
         return pulumi.get(self, "bound_service_accounts")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="boundZones")
-    def bound_zones(self) -> Sequence[builtins.str]:
+    def bound_zones(self) -> Sequence[_builtins.str]:
         """
         GCP zones bound to the role. Returned when `type` is `gce`.
         """
         return pulumi.get(self, "bound_zones")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def id(self) -> builtins.str:
+    def id(self) -> _builtins.str:
         """
         The provider-assigned unique ID for this managed resource.
         """
         return pulumi.get(self, "id")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def namespace(self) -> Optional[builtins.str]:
+    def namespace(self) -> Optional[_builtins.str]:
         return pulumi.get(self, "namespace")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="roleId")
-    def role_id(self) -> builtins.str:
+    def role_id(self) -> _builtins.str:
         """
         The RoleID of the GCP role.
         """
         return pulumi.get(self, "role_id")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="roleName")
-    def role_name(self) -> builtins.str:
+    def role_name(self) -> _builtins.str:
         return pulumi.get(self, "role_name")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="tokenBoundCidrs")
-    def token_bound_cidrs(self) -> Optional[Sequence[builtins.str]]:
+    def token_bound_cidrs(self) -> Optional[Sequence[_builtins.str]]:
         """
         List of CIDR blocks; if set, specifies blocks of IP
         addresses which can authenticate successfully, and ties the resulting token to these blocks
@@ -181,9 +180,9 @@ class GetAuthBackendRoleResult:
         """
         return pulumi.get(self, "token_bound_cidrs")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="tokenExplicitMaxTtl")
-    def token_explicit_max_ttl(self) -> Optional[builtins.int]:
+    def token_explicit_max_ttl(self) -> Optional[_builtins.int]:
         """
         If set, will encode an
         [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
@@ -192,27 +191,27 @@ class GetAuthBackendRoleResult:
         """
         return pulumi.get(self, "token_explicit_max_ttl")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="tokenMaxTtl")
-    def token_max_ttl(self) -> Optional[builtins.int]:
+    def token_max_ttl(self) -> Optional[_builtins.int]:
         """
         The maximum lifetime for generated tokens in number of seconds.
         Its current value will be referenced at renewal time.
         """
         return pulumi.get(self, "token_max_ttl")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="tokenNoDefaultPolicy")
-    def token_no_default_policy(self) -> Optional[builtins.bool]:
+    def token_no_default_policy(self) -> Optional[_builtins.bool]:
         """
         If set, the default policy will not be set on
         generated tokens; otherwise it will be added to the policies set in token_policies.
         """
         return pulumi.get(self, "token_no_default_policy")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="tokenNumUses")
-    def token_num_uses(self) -> Optional[builtins.int]:
+    def token_num_uses(self) -> Optional[_builtins.int]:
         """
         The
         [period](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls),
@@ -220,9 +219,9 @@ class GetAuthBackendRoleResult:
         """
         return pulumi.get(self, "token_num_uses")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="tokenPeriod")
-    def token_period(self) -> Optional[builtins.int]:
+    def token_period(self) -> Optional[_builtins.int]:
         """
         (Optional) If set, indicates that the
         token generated using this role should never expire. The token should be renewed within the
@@ -231,27 +230,27 @@ class GetAuthBackendRoleResult:
         """
         return pulumi.get(self, "token_period")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="tokenPolicies")
-    def token_policies(self) -> Optional[Sequence[builtins.str]]:
+    def token_policies(self) -> Optional[Sequence[_builtins.str]]:
         """
         List of policies to encode onto generated tokens. Depending
         on the auth method, this list may be supplemented by user/group/other values.
         """
         return pulumi.get(self, "token_policies")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="tokenTtl")
-    def token_ttl(self) -> Optional[builtins.int]:
+    def token_ttl(self) -> Optional[_builtins.int]:
         """
         The incremental lifetime for generated tokens in number of seconds.
         Its current value will be referenced at renewal time.
         """
         return pulumi.get(self, "token_ttl")
 
-    @property
+    @_builtins.property
     @pulumi.getter(name="tokenType")
-    def token_type(self) -> Optional[builtins.str]:
+    def token_type(self) -> Optional[_builtins.str]:
         """
         The type of token that should be generated. Can be `service`,
         `batch`, or `default` to use the mount's tuned default (which unless changed will be
@@ -261,9 +260,9 @@ class GetAuthBackendRoleResult:
         """
         return pulumi.get(self, "token_type")
 
-    @property
+    @_builtins.property
     @pulumi.getter
-    def type(self) -> builtins.str:
+    def type(self) -> _builtins.str:
         """
         Type of GCP role. Expected values are `iam` or `gce`.
         """
@@ -299,18 +298,18 @@ class AwaitableGetAuthBackendRoleResult(GetAuthBackendRoleResult):
             type=self.type)
 
 
-def get_auth_backend_role(backend: Optional[builtins.str] = None,
-                          namespace: Optional[builtins.str] = None,
-                          role_name: Optional[builtins.str] = None,
-                          token_bound_cidrs: Optional[Sequence[builtins.str]] = None,
-                          token_explicit_max_ttl: Optional[builtins.int] = None,
-                          token_max_ttl: Optional[builtins.int] = None,
-                          token_no_default_policy: Optional[builtins.bool] = None,
-                          token_num_uses: Optional[builtins.int] = None,
-                          token_period: Optional[builtins.int] = None,
-                          token_policies: Optional[Sequence[builtins.str]] = None,
-                          token_ttl: Optional[builtins.int] = None,
-                          token_type: Optional[builtins.str] = None,
+def get_auth_backend_role(backend: Optional[_builtins.str] = None,
+                          namespace: Optional[_builtins.str] = None,
+                          role_name: Optional[_builtins.str] = None,
+                          token_bound_cidrs: Optional[Sequence[_builtins.str]] = None,
+                          token_explicit_max_ttl: Optional[_builtins.int] = None,
+                          token_max_ttl: Optional[_builtins.int] = None,
+                          token_no_default_policy: Optional[_builtins.bool] = None,
+                          token_num_uses: Optional[_builtins.int] = None,
+                          token_period: Optional[_builtins.int] = None,
+                          token_policies: Optional[Sequence[_builtins.str]] = None,
+                          token_ttl: Optional[_builtins.int] = None,
+                          token_type: Optional[_builtins.str] = None,
                           opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetAuthBackendRoleResult:
     """
     Reads a GCP auth role from a Vault server.
@@ -327,35 +326,35 @@ def get_auth_backend_role(backend: Optional[builtins.str] = None,
     ```
 
 
-    :param builtins.str backend: The unique name for the GCP backend from which to fetch the role. Defaults to "gcp".
-    :param builtins.str namespace: The namespace of the target resource.
+    :param _builtins.str backend: The unique name for the GCP backend from which to fetch the role. Defaults to "gcp".
+    :param _builtins.str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
            The `namespace` is always relative to the provider's configured namespace.
            *Available only for Vault Enterprise*.
-    :param builtins.str role_name: The name of the role to retrieve the Role ID for.
-    :param Sequence[builtins.str] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
+    :param _builtins.str role_name: The name of the role to retrieve the Role ID for.
+    :param Sequence[_builtins.str] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
            addresses which can authenticate successfully, and ties the resulting token to these blocks
            as well.
-    :param builtins.int token_explicit_max_ttl: If set, will encode an
+    :param _builtins.int token_explicit_max_ttl: If set, will encode an
            [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
            onto the token in number of seconds. This is a hard cap even if `token_ttl` and
            `token_max_ttl` would otherwise allow a renewal.
-    :param builtins.int token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
+    :param _builtins.int token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
            Its current value will be referenced at renewal time.
-    :param builtins.bool token_no_default_policy: If set, the default policy will not be set on
+    :param _builtins.bool token_no_default_policy: If set, the default policy will not be set on
            generated tokens; otherwise it will be added to the policies set in token_policies.
-    :param builtins.int token_num_uses: The
+    :param _builtins.int token_num_uses: The
            [period](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls),
            if any, in number of seconds to set on the token.
-    :param builtins.int token_period: (Optional) If set, indicates that the
+    :param _builtins.int token_period: (Optional) If set, indicates that the
            token generated using this role should never expire. The token should be renewed within the
            duration specified by this value. At each renewal, the token's TTL will be set to the
            value of this field. Specified in seconds.
-    :param Sequence[builtins.str] token_policies: List of policies to encode onto generated tokens. Depending
+    :param Sequence[_builtins.str] token_policies: List of policies to encode onto generated tokens. Depending
            on the auth method, this list may be supplemented by user/group/other values.
-    :param builtins.int token_ttl: The incremental lifetime for generated tokens in number of seconds.
+    :param _builtins.int token_ttl: The incremental lifetime for generated tokens in number of seconds.
            Its current value will be referenced at renewal time.
-    :param builtins.str token_type: The type of token that should be generated. Can be `service`,
+    :param _builtins.str token_type: The type of token that should be generated. Can be `service`,
            `batch`, or `default` to use the mount's tuned default (which unless changed will be
            `service` tokens). For token store roles, there are two additional possibilities:
            `default-service` and `default-batch` which specify the type to return unless the client
@@ -399,18 +398,18 @@ def get_auth_backend_role(backend: Optional[builtins.str] = None,
         token_ttl=pulumi.get(__ret__, 'token_ttl'),
         token_type=pulumi.get(__ret__, 'token_type'),
         type=pulumi.get(__ret__, 'type'))
-def get_auth_backend_role_output(backend: Optional[pulumi.Input[Optional[builtins.str]]] = None,
-                                 namespace: Optional[pulumi.Input[Optional[builtins.str]]] = None,
-                                 role_name: Optional[pulumi.Input[builtins.str]] = None,
-                                 token_bound_cidrs: Optional[pulumi.Input[Optional[Sequence[builtins.str]]]] = None,
-                                 token_explicit_max_ttl: Optional[pulumi.Input[Optional[builtins.int]]] = None,
-                                 token_max_ttl: Optional[pulumi.Input[Optional[builtins.int]]] = None,
-                                 token_no_default_policy: Optional[pulumi.Input[Optional[builtins.bool]]] = None,
-                                 token_num_uses: Optional[pulumi.Input[Optional[builtins.int]]] = None,
-                                 token_period: Optional[pulumi.Input[Optional[builtins.int]]] = None,
-                                 token_policies: Optional[pulumi.Input[Optional[Sequence[builtins.str]]]] = None,
-                                 token_ttl: Optional[pulumi.Input[Optional[builtins.int]]] = None,
-                                 token_type: Optional[pulumi.Input[Optional[builtins.str]]] = None,
+def get_auth_backend_role_output(backend: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
+                                 namespace: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
+                                 role_name: Optional[pulumi.Input[_builtins.str]] = None,
+                                 token_bound_cidrs: Optional[pulumi.Input[Optional[Sequence[_builtins.str]]]] = None,
+                                 token_explicit_max_ttl: Optional[pulumi.Input[Optional[_builtins.int]]] = None,
+                                 token_max_ttl: Optional[pulumi.Input[Optional[_builtins.int]]] = None,
+                                 token_no_default_policy: Optional[pulumi.Input[Optional[_builtins.bool]]] = None,
+                                 token_num_uses: Optional[pulumi.Input[Optional[_builtins.int]]] = None,
+                                 token_period: Optional[pulumi.Input[Optional[_builtins.int]]] = None,
+                                 token_policies: Optional[pulumi.Input[Optional[Sequence[_builtins.str]]]] = None,
+                                 token_ttl: Optional[pulumi.Input[Optional[_builtins.int]]] = None,
+                                 token_type: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
                                  opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetAuthBackendRoleResult]:
     """
     Reads a GCP auth role from a Vault server.
@@ -427,35 +426,35 @@ def get_auth_backend_role_output(backend: Optional[pulumi.Input[Optional[builtin
     ```
 
 
-    :param builtins.str backend: The unique name for the GCP backend from which to fetch the role. Defaults to "gcp".
-    :param builtins.str namespace: The namespace of the target resource.
+    :param _builtins.str backend: The unique name for the GCP backend from which to fetch the role. Defaults to "gcp".
+    :param _builtins.str namespace: The namespace of the target resource.
            The value should not contain leading or trailing forward slashes.
            The `namespace` is always relative to the provider's configured namespace.
            *Available only for Vault Enterprise*.
-    :param builtins.str role_name: The name of the role to retrieve the Role ID for.
-    :param Sequence[builtins.str] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
+    :param _builtins.str role_name: The name of the role to retrieve the Role ID for.
+    :param Sequence[_builtins.str] token_bound_cidrs: List of CIDR blocks; if set, specifies blocks of IP
            addresses which can authenticate successfully, and ties the resulting token to these blocks
            as well.
-    :param builtins.int token_explicit_max_ttl: If set, will encode an
+    :param _builtins.int token_explicit_max_ttl: If set, will encode an
            [explicit max TTL](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls)
            onto the token in number of seconds. This is a hard cap even if `token_ttl` and
            `token_max_ttl` would otherwise allow a renewal.
-    :param builtins.int token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
+    :param _builtins.int token_max_ttl: The maximum lifetime for generated tokens in number of seconds.
            Its current value will be referenced at renewal time.
-    :param builtins.bool token_no_default_policy: If set, the default policy will not be set on
+    :param _builtins.bool token_no_default_policy: If set, the default policy will not be set on
            generated tokens; otherwise it will be added to the policies set in token_policies.
-    :param builtins.int token_num_uses: The
+    :param _builtins.int token_num_uses: The
            [period](https://www.vaultproject.io/docs/concepts/tokens.html#token-time-to-live-periodic-tokens-and-explicit-max-ttls),
            if any, in number of seconds to set on the token.
-    :param builtins.int token_period: (Optional) If set, indicates that the
+    :param _builtins.int token_period: (Optional) If set, indicates that the
            token generated using this role should never expire. The token should be renewed within the
            duration specified by this value. At each renewal, the token's TTL will be set to the
            value of this field. Specified in seconds.
-    :param Sequence[builtins.str] token_policies: List of policies to encode onto generated tokens. Depending
+    :param Sequence[_builtins.str] token_policies: List of policies to encode onto generated tokens. Depending
            on the auth method, this list may be supplemented by user/group/other values.
-    :param builtins.int token_ttl: The incremental lifetime for generated tokens in number of seconds.
+    :param _builtins.int token_ttl: The incremental lifetime for generated tokens in number of seconds.
            Its current value will be referenced at renewal time.
-    :param builtins.str token_type: The type of token that should be generated. Can be `service`,
+    :param _builtins.str token_type: The type of token that should be generated. Can be `service`,
            `batch`, or `default` to use the mount's tuned default (which unless changed will be
            `service` tokens). For token store roles, there are two additional possibilities:
            `default-service` and `default-batch` which specify the type to return unless the client