pulumi-vault 7.6.0a1764657486__py3-none-any.whl

pulumi_vault/kv/__init__.py

@@ -0,0 +1,18 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+from .. import _utilities
+import typing
+# Export this package's modules as members:
+from .get_secret import *
+from .get_secret_subkeys_v2 import *
+from .get_secret_v2 import *
+from .get_secrets_list import *
+from .get_secrets_list_v2 import *
+from .secret import *
+from .secret_backend_v2 import *
+from .secret_v2 import *
+from ._inputs import *
+from . import outputs

pulumi_vault/kv/_inputs.py

@@ -0,0 +1,124 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+
+__all__ = [
+    'SecretV2CustomMetadataArgs',
+    'SecretV2CustomMetadataArgsDict',
+]
+
+MYPY = False
+
+if not MYPY:
+    class SecretV2CustomMetadataArgsDict(TypedDict):
+        cas_required: NotRequired[pulumi.Input[_builtins.bool]]
+        """
+        If true, all keys will require the cas parameter to be set on all write requests.
+        """
+        data: NotRequired[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]
+        """
+        **Deprecated. Please use new ephemeral resource `kv.SecretV2` to read back
+        secret data from Vault**. A mapping whose keys are the top-level data keys returned from
+        Vault and whose values are the corresponding values. This map can only represent string data,
+        so any non-string values returned from Vault are serialized as JSON.
+        """
+        delete_version_after: NotRequired[pulumi.Input[_builtins.int]]
+        """
+        If set, specifies the length of time before a version is deleted.
+        """
+        max_versions: NotRequired[pulumi.Input[_builtins.int]]
+        """
+        The number of versions to keep per key.
+        """
+elif False:
+    SecretV2CustomMetadataArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class SecretV2CustomMetadataArgs:
+    def __init__(__self__, *,
+                 cas_required: Optional[pulumi.Input[_builtins.bool]] = None,
+                 data: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]] = None,
+                 delete_version_after: Optional[pulumi.Input[_builtins.int]] = None,
+                 max_versions: Optional[pulumi.Input[_builtins.int]] = None):
+        """
+        :param pulumi.Input[_builtins.bool] cas_required: If true, all keys will require the cas parameter to be set on all write requests.
+        :param pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]] data: **Deprecated. Please use new ephemeral resource `kv.SecretV2` to read back
+               secret data from Vault**. A mapping whose keys are the top-level data keys returned from
+               Vault and whose values are the corresponding values. This map can only represent string data,
+               so any non-string values returned from Vault are serialized as JSON.
+        :param pulumi.Input[_builtins.int] delete_version_after: If set, specifies the length of time before a version is deleted.
+        :param pulumi.Input[_builtins.int] max_versions: The number of versions to keep per key.
+        """
+        if cas_required is not None:
+            pulumi.set(__self__, "cas_required", cas_required)
+        if data is not None:
+            pulumi.set(__self__, "data", data)
+        if delete_version_after is not None:
+            pulumi.set(__self__, "delete_version_after", delete_version_after)
+        if max_versions is not None:
+            pulumi.set(__self__, "max_versions", max_versions)
+
+    @_builtins.property
+    @pulumi.getter(name="casRequired")
+    def cas_required(self) -> Optional[pulumi.Input[_builtins.bool]]:
+        """
+        If true, all keys will require the cas parameter to be set on all write requests.
+        """
+        return pulumi.get(self, "cas_required")
+
+    @cas_required.setter
+    def cas_required(self, value: Optional[pulumi.Input[_builtins.bool]]):
+        pulumi.set(self, "cas_required", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def data(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]:
+        """
+        **Deprecated. Please use new ephemeral resource `kv.SecretV2` to read back
+        secret data from Vault**. A mapping whose keys are the top-level data keys returned from
+        Vault and whose values are the corresponding values. This map can only represent string data,
+        so any non-string values returned from Vault are serialized as JSON.
+        """
+        return pulumi.get(self, "data")
+
+    @data.setter
+    def data(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "data", value)
+
+    @_builtins.property
+    @pulumi.getter(name="deleteVersionAfter")
+    def delete_version_after(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        If set, specifies the length of time before a version is deleted.
+        """
+        return pulumi.get(self, "delete_version_after")
+
+    @delete_version_after.setter
+    def delete_version_after(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "delete_version_after", value)
+
+    @_builtins.property
+    @pulumi.getter(name="maxVersions")
+    def max_versions(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        The number of versions to keep per key.
+        """
+        return pulumi.get(self, "max_versions")
+
+    @max_versions.setter
+    def max_versions(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "max_versions", value)
+
+

pulumi_vault/kv/get_secret.py

@@ -0,0 +1,240 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+
+__all__ = [
+    'GetSecretResult',
+    'AwaitableGetSecretResult',
+    'get_secret',
+    'get_secret_output',
+]
+
+@pulumi.output_type
+class GetSecretResult:
+    """
+    A collection of values returned by getSecret.
+    """
+    def __init__(__self__, data=None, data_json=None, id=None, lease_duration=None, lease_id=None, lease_renewable=None, namespace=None, path=None):
+        if data and not isinstance(data, dict):
+            raise TypeError("Expected argument 'data' to be a dict")
+        pulumi.set(__self__, "data", data)
+        if data_json and not isinstance(data_json, str):
+            raise TypeError("Expected argument 'data_json' to be a str")
+        pulumi.set(__self__, "data_json", data_json)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if lease_duration and not isinstance(lease_duration, int):
+            raise TypeError("Expected argument 'lease_duration' to be a int")
+        pulumi.set(__self__, "lease_duration", lease_duration)
+        if lease_id and not isinstance(lease_id, str):
+            raise TypeError("Expected argument 'lease_id' to be a str")
+        pulumi.set(__self__, "lease_id", lease_id)
+        if lease_renewable and not isinstance(lease_renewable, bool):
+            raise TypeError("Expected argument 'lease_renewable' to be a bool")
+        pulumi.set(__self__, "lease_renewable", lease_renewable)
+        if namespace and not isinstance(namespace, str):
+            raise TypeError("Expected argument 'namespace' to be a str")
+        pulumi.set(__self__, "namespace", namespace)
+        if path and not isinstance(path, str):
+            raise TypeError("Expected argument 'path' to be a str")
+        pulumi.set(__self__, "path", path)
+
+    @_builtins.property
+    @pulumi.getter
+    def data(self) -> Mapping[str, _builtins.str]:
+        """
+        A mapping whose keys are the top-level data keys returned from
+        Vault and whose values are the corresponding values. This map can only
+        represent string data, so any non-string values returned from Vault are
+        serialized as JSON.
+        """
+        return pulumi.get(self, "data")
+
+    @_builtins.property
+    @pulumi.getter(name="dataJson")
+    def data_json(self) -> _builtins.str:
+        """
+        JSON-encoded string that that is
+        read as the secret data at the given path.
+        """
+        return pulumi.get(self, "data_json")
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> _builtins.str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @_builtins.property
+    @pulumi.getter(name="leaseDuration")
+    def lease_duration(self) -> _builtins.int:
+        """
+        The duration of the secret lease, in seconds. Once 
+        this time has passed any plan generated with this data may fail to apply.
+        """
+        return pulumi.get(self, "lease_duration")
+
+    @_builtins.property
+    @pulumi.getter(name="leaseId")
+    def lease_id(self) -> _builtins.str:
+        """
+        The lease identifier assigned by Vault, if any.
+        """
+        return pulumi.get(self, "lease_id")
+
+    @_builtins.property
+    @pulumi.getter(name="leaseRenewable")
+    def lease_renewable(self) -> _builtins.bool:
+        """
+        True if the duration of this lease can be extended 
+        through renewal.
+        """
+        return pulumi.get(self, "lease_renewable")
+
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> Optional[_builtins.str]:
+        return pulumi.get(self, "namespace")
+
+    @_builtins.property
+    @pulumi.getter
+    def path(self) -> _builtins.str:
+        return pulumi.get(self, "path")
+
+
+class AwaitableGetSecretResult(GetSecretResult):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetSecretResult(
+            data=self.data,
+            data_json=self.data_json,
+            id=self.id,
+            lease_duration=self.lease_duration,
+            lease_id=self.lease_id,
+            lease_renewable=self.lease_renewable,
+            namespace=self.namespace,
+            path=self.path)
+
+
+def get_secret(namespace: Optional[_builtins.str] = None,
+               path: Optional[_builtins.str] = None,
+               opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetSecretResult:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv1 = vault.Mount("kvv1",
+        path="kvv1",
+        type="kv",
+        options={
+            "version": "1",
+        },
+        description="KV Version 1 secret engine mount")
+    secret = vault.kv.Secret("secret",
+        path=kvv1.path.apply(lambda path: f"{path}/secret"),
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    secret_data = vault.kv.get_secret_output(path=secret.path)
+    ```
+
+    ## Required Vault Capabilities
+
+    Use of this resource requires the `read` capability on the given path.
+
+
+    :param _builtins.str namespace: The namespace of the target resource.
+           The value should not contain leading or trailing forward slashes.
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+           *Available only for Vault Enterprise*.
+    :param _builtins.str path: Full path of the KV-V1 secret.
+    """
+    __args__ = dict()
+    __args__['namespace'] = namespace
+    __args__['path'] = path
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('vault:kv/getSecret:getSecret', __args__, opts=opts, typ=GetSecretResult).value
+
+    return AwaitableGetSecretResult(
+        data=pulumi.get(__ret__, 'data'),
+        data_json=pulumi.get(__ret__, 'data_json'),
+        id=pulumi.get(__ret__, 'id'),
+        lease_duration=pulumi.get(__ret__, 'lease_duration'),
+        lease_id=pulumi.get(__ret__, 'lease_id'),
+        lease_renewable=pulumi.get(__ret__, 'lease_renewable'),
+        namespace=pulumi.get(__ret__, 'namespace'),
+        path=pulumi.get(__ret__, 'path'))
+def get_secret_output(namespace: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
+                      path: Optional[pulumi.Input[_builtins.str]] = None,
+                      opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetSecretResult]:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv1 = vault.Mount("kvv1",
+        path="kvv1",
+        type="kv",
+        options={
+            "version": "1",
+        },
+        description="KV Version 1 secret engine mount")
+    secret = vault.kv.Secret("secret",
+        path=kvv1.path.apply(lambda path: f"{path}/secret"),
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    secret_data = vault.kv.get_secret_output(path=secret.path)
+    ```
+
+    ## Required Vault Capabilities
+
+    Use of this resource requires the `read` capability on the given path.
+
+
+    :param _builtins.str namespace: The namespace of the target resource.
+           The value should not contain leading or trailing forward slashes.
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+           *Available only for Vault Enterprise*.
+    :param _builtins.str path: Full path of the KV-V1 secret.
+    """
+    __args__ = dict()
+    __args__['namespace'] = namespace
+    __args__['path'] = path
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('vault:kv/getSecret:getSecret', __args__, opts=opts, typ=GetSecretResult)
+    return __ret__.apply(lambda __response__: GetSecretResult(
+        data=pulumi.get(__response__, 'data'),
+        data_json=pulumi.get(__response__, 'data_json'),
+        id=pulumi.get(__response__, 'id'),
+        lease_duration=pulumi.get(__response__, 'lease_duration'),
+        lease_id=pulumi.get(__response__, 'lease_id'),
+        lease_renewable=pulumi.get(__response__, 'lease_renewable'),
+        namespace=pulumi.get(__response__, 'namespace'),
+        path=pulumi.get(__response__, 'path')))

pulumi_vault/kv/get_secret_subkeys_v2.py

@@ -0,0 +1,275 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from .. import _utilities
+
+__all__ = [
+    'GetSecretSubkeysV2Result',
+    'AwaitableGetSecretSubkeysV2Result',
+    'get_secret_subkeys_v2',
+    'get_secret_subkeys_v2_output',
+]
+
+@pulumi.output_type
+class GetSecretSubkeysV2Result:
+    """
+    A collection of values returned by getSecretSubkeysV2.
+    """
+    def __init__(__self__, data=None, data_json=None, depth=None, id=None, mount=None, name=None, namespace=None, path=None, version=None):
+        if data and not isinstance(data, dict):
+            raise TypeError("Expected argument 'data' to be a dict")
+        pulumi.set(__self__, "data", data)
+        if data_json and not isinstance(data_json, str):
+            raise TypeError("Expected argument 'data_json' to be a str")
+        pulumi.set(__self__, "data_json", data_json)
+        if depth and not isinstance(depth, int):
+            raise TypeError("Expected argument 'depth' to be a int")
+        pulumi.set(__self__, "depth", depth)
+        if id and not isinstance(id, str):
+            raise TypeError("Expected argument 'id' to be a str")
+        pulumi.set(__self__, "id", id)
+        if mount and not isinstance(mount, str):
+            raise TypeError("Expected argument 'mount' to be a str")
+        pulumi.set(__self__, "mount", mount)
+        if name and not isinstance(name, str):
+            raise TypeError("Expected argument 'name' to be a str")
+        pulumi.set(__self__, "name", name)
+        if namespace and not isinstance(namespace, str):
+            raise TypeError("Expected argument 'namespace' to be a str")
+        pulumi.set(__self__, "namespace", namespace)
+        if path and not isinstance(path, str):
+            raise TypeError("Expected argument 'path' to be a str")
+        pulumi.set(__self__, "path", path)
+        if version and not isinstance(version, int):
+            raise TypeError("Expected argument 'version' to be a int")
+        pulumi.set(__self__, "version", version)
+
+    @_builtins.property
+    @pulumi.getter
+    def data(self) -> Mapping[str, _builtins.str]:
+        """
+        Subkeys for the KV-V2 secret stored as a serialized map of strings.
+        """
+        return pulumi.get(self, "data")
+
+    @_builtins.property
+    @pulumi.getter(name="dataJson")
+    def data_json(self) -> _builtins.str:
+        """
+        Subkeys for the KV-V2 secret read from Vault.
+        """
+        return pulumi.get(self, "data_json")
+
+    @_builtins.property
+    @pulumi.getter
+    def depth(self) -> Optional[_builtins.int]:
+        return pulumi.get(self, "depth")
+
+    @_builtins.property
+    @pulumi.getter
+    def id(self) -> _builtins.str:
+        """
+        The provider-assigned unique ID for this managed resource.
+        """
+        return pulumi.get(self, "id")
+
+    @_builtins.property
+    @pulumi.getter
+    def mount(self) -> _builtins.str:
+        return pulumi.get(self, "mount")
+
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> _builtins.str:
+        return pulumi.get(self, "name")
+
+    @_builtins.property
+    @pulumi.getter
+    def namespace(self) -> Optional[_builtins.str]:
+        return pulumi.get(self, "namespace")
+
+    @_builtins.property
+    @pulumi.getter
+    def path(self) -> _builtins.str:
+        """
+        Full path where the KV-V2 secrets are listed.
+        """
+        return pulumi.get(self, "path")
+
+    @_builtins.property
+    @pulumi.getter
+    def version(self) -> Optional[_builtins.int]:
+        return pulumi.get(self, "version")
+
+
+class AwaitableGetSecretSubkeysV2Result(GetSecretSubkeysV2Result):
+    # pylint: disable=using-constant-test
+    def __await__(self):
+        if False:
+            yield self
+        return GetSecretSubkeysV2Result(
+            data=self.data,
+            data_json=self.data_json,
+            depth=self.depth,
+            id=self.id,
+            mount=self.mount,
+            name=self.name,
+            namespace=self.namespace,
+            path=self.path,
+            version=self.version)
+
+
+def get_secret_subkeys_v2(depth: Optional[_builtins.int] = None,
+                          mount: Optional[_builtins.str] = None,
+                          name: Optional[_builtins.str] = None,
+                          namespace: Optional[_builtins.str] = None,
+                          version: Optional[_builtins.int] = None,
+                          opts: Optional[pulumi.InvokeOptions] = None) -> AwaitableGetSecretSubkeysV2Result:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv2 = vault.Mount("kvv2",
+        path="kvv2",
+        type="kv",
+        options={
+            "version": "2",
+        },
+        description="KV Version 2 secret engine mount")
+    aws_secret = vault.kv.SecretV2("aws_secret",
+        mount=kvv2.path,
+        name="aws_secret",
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    test = vault.kv.get_secret_subkeys_v2_output(mount=kvv2.path,
+        name=aws_secret.name)
+    ```
+
+    ## Required Vault Capabilities
+
+    Use of this resource requires the `read` capability on the given path.
+
+
+    :param _builtins.int depth: Specifies the deepest nesting level to provide in the output.
+           If non-zero, keys that reside at the specified depth value will be
+           artificially treated as leaves and will thus be `null` even if further
+           underlying sub-keys exist.
+    :param _builtins.str mount: Path where KV-V2 engine is mounted.
+    :param _builtins.str name: Full name of the secret. For a nested secret
+           the name is the nested path excluding the mount and data
+           prefix. For example, for a secret at `kvv2/data/foo/bar/baz`
+           the name is `foo/bar/baz`.
+    :param _builtins.str namespace: The namespace of the target resource.
+           The value should not contain leading or trailing forward slashes.
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+           *Available only for Vault Enterprise*.
+    :param _builtins.int version: Specifies the version to return. If not 
+           set the latest version is returned.
+    """
+    __args__ = dict()
+    __args__['depth'] = depth
+    __args__['mount'] = mount
+    __args__['name'] = name
+    __args__['namespace'] = namespace
+    __args__['version'] = version
+    opts = pulumi.InvokeOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke('vault:kv/getSecretSubkeysV2:getSecretSubkeysV2', __args__, opts=opts, typ=GetSecretSubkeysV2Result).value
+
+    return AwaitableGetSecretSubkeysV2Result(
+        data=pulumi.get(__ret__, 'data'),
+        data_json=pulumi.get(__ret__, 'data_json'),
+        depth=pulumi.get(__ret__, 'depth'),
+        id=pulumi.get(__ret__, 'id'),
+        mount=pulumi.get(__ret__, 'mount'),
+        name=pulumi.get(__ret__, 'name'),
+        namespace=pulumi.get(__ret__, 'namespace'),
+        path=pulumi.get(__ret__, 'path'),
+        version=pulumi.get(__ret__, 'version'))
+def get_secret_subkeys_v2_output(depth: Optional[pulumi.Input[Optional[_builtins.int]]] = None,
+                                 mount: Optional[pulumi.Input[_builtins.str]] = None,
+                                 name: Optional[pulumi.Input[_builtins.str]] = None,
+                                 namespace: Optional[pulumi.Input[Optional[_builtins.str]]] = None,
+                                 version: Optional[pulumi.Input[Optional[_builtins.int]]] = None,
+                                 opts: Optional[Union[pulumi.InvokeOptions, pulumi.InvokeOutputOptions]] = None) -> pulumi.Output[GetSecretSubkeysV2Result]:
+    """
+    ## Example Usage
+
+    ```python
+    import pulumi
+    import json
+    import pulumi_vault as vault
+
+    kvv2 = vault.Mount("kvv2",
+        path="kvv2",
+        type="kv",
+        options={
+            "version": "2",
+        },
+        description="KV Version 2 secret engine mount")
+    aws_secret = vault.kv.SecretV2("aws_secret",
+        mount=kvv2.path,
+        name="aws_secret",
+        data_json=json.dumps({
+            "zip": "zap",
+            "foo": "bar",
+        }))
+    test = vault.kv.get_secret_subkeys_v2_output(mount=kvv2.path,
+        name=aws_secret.name)
+    ```
+
+    ## Required Vault Capabilities
+
+    Use of this resource requires the `read` capability on the given path.
+
+
+    :param _builtins.int depth: Specifies the deepest nesting level to provide in the output.
+           If non-zero, keys that reside at the specified depth value will be
+           artificially treated as leaves and will thus be `null` even if further
+           underlying sub-keys exist.
+    :param _builtins.str mount: Path where KV-V2 engine is mounted.
+    :param _builtins.str name: Full name of the secret. For a nested secret
+           the name is the nested path excluding the mount and data
+           prefix. For example, for a secret at `kvv2/data/foo/bar/baz`
+           the name is `foo/bar/baz`.
+    :param _builtins.str namespace: The namespace of the target resource.
+           The value should not contain leading or trailing forward slashes.
+           The `namespace` is always relative to the provider's configured [namespace](https://www.terraform.io/docs/providers/vault/index.html#namespace).
+           *Available only for Vault Enterprise*.
+    :param _builtins.int version: Specifies the version to return. If not 
+           set the latest version is returned.
+    """
+    __args__ = dict()
+    __args__['depth'] = depth
+    __args__['mount'] = mount
+    __args__['name'] = name
+    __args__['namespace'] = namespace
+    __args__['version'] = version
+    opts = pulumi.InvokeOutputOptions.merge(_utilities.get_invoke_opts_defaults(), opts)
+    __ret__ = pulumi.runtime.invoke_output('vault:kv/getSecretSubkeysV2:getSecretSubkeysV2', __args__, opts=opts, typ=GetSecretSubkeysV2Result)
+    return __ret__.apply(lambda __response__: GetSecretSubkeysV2Result(
+        data=pulumi.get(__response__, 'data'),
+        data_json=pulumi.get(__response__, 'data_json'),
+        depth=pulumi.get(__response__, 'depth'),
+        id=pulumi.get(__response__, 'id'),
+        mount=pulumi.get(__response__, 'mount'),
+        name=pulumi.get(__response__, 'name'),
+        namespace=pulumi.get(__response__, 'namespace'),
+        path=pulumi.get(__response__, 'path'),
+        version=pulumi.get(__response__, 'version')))