PyPI - pulumi-vault - Versions diffs - 7.6.0a1764657486__py3-none-any.whl - Mend

pulumi-vault 7.6.0a1764657486__py3-none-any.whl

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (274) hide show

pulumi_vault/__init__.py +1399 -0
pulumi_vault/_inputs.py +2701 -0
pulumi_vault/_utilities.py +331 -0
pulumi_vault/ad/__init__.py +12 -0
pulumi_vault/ad/get_access_credentials.py +177 -0
pulumi_vault/ad/secret_backend.py +1916 -0
pulumi_vault/ad/secret_library.py +546 -0
pulumi_vault/ad/secret_role.py +499 -0
pulumi_vault/alicloud/__init__.py +9 -0
pulumi_vault/alicloud/auth_backend_role.py +866 -0
pulumi_vault/approle/__init__.py +12 -0
pulumi_vault/approle/auth_backend_login.py +571 -0
pulumi_vault/approle/auth_backend_role.py +1082 -0
pulumi_vault/approle/auth_backend_role_secret_id.py +796 -0
pulumi_vault/approle/get_auth_backend_role_id.py +169 -0
pulumi_vault/audit.py +499 -0
pulumi_vault/audit_request_header.py +277 -0
pulumi_vault/auth_backend.py +565 -0
pulumi_vault/aws/__init__.py +22 -0
pulumi_vault/aws/auth_backend_cert.py +420 -0
pulumi_vault/aws/auth_backend_client.py +1259 -0
pulumi_vault/aws/auth_backend_config_identity.py +494 -0
pulumi_vault/aws/auth_backend_identity_whitelist.py +380 -0
pulumi_vault/aws/auth_backend_login.py +1046 -0
pulumi_vault/aws/auth_backend_role.py +1961 -0
pulumi_vault/aws/auth_backend_role_tag.py +638 -0
pulumi_vault/aws/auth_backend_roletag_blacklist.py +366 -0
pulumi_vault/aws/auth_backend_sts_role.py +414 -0
pulumi_vault/aws/get_access_credentials.py +369 -0
pulumi_vault/aws/get_static_access_credentials.py +137 -0
pulumi_vault/aws/secret_backend.py +2018 -0
pulumi_vault/aws/secret_backend_role.py +1188 -0
pulumi_vault/aws/secret_backend_static_role.py +639 -0
pulumi_vault/azure/__init__.py +15 -0
pulumi_vault/azure/_inputs.py +108 -0
pulumi_vault/azure/auth_backend_config.py +1096 -0
pulumi_vault/azure/auth_backend_role.py +1176 -0
pulumi_vault/azure/backend.py +1793 -0
pulumi_vault/azure/backend_role.py +883 -0
pulumi_vault/azure/get_access_credentials.py +400 -0
pulumi_vault/azure/outputs.py +107 -0
pulumi_vault/cert_auth_backend_role.py +1539 -0
pulumi_vault/config/__init__.py +9 -0
pulumi_vault/config/__init__.pyi +164 -0
pulumi_vault/config/_inputs.py +73 -0
pulumi_vault/config/outputs.py +1225 -0
pulumi_vault/config/ui_custom_message.py +530 -0
pulumi_vault/config/vars.py +230 -0
pulumi_vault/consul/__init__.py +10 -0
pulumi_vault/consul/secret_backend.py +1517 -0
pulumi_vault/consul/secret_backend_role.py +847 -0
pulumi_vault/database/__init__.py +14 -0
pulumi_vault/database/_inputs.py +11907 -0
pulumi_vault/database/outputs.py +8496 -0
pulumi_vault/database/secret_backend_connection.py +1676 -0
pulumi_vault/database/secret_backend_role.py +840 -0
pulumi_vault/database/secret_backend_static_role.py +881 -0
pulumi_vault/database/secrets_mount.py +2160 -0
pulumi_vault/egp_policy.py +399 -0
pulumi_vault/gcp/__init__.py +17 -0
pulumi_vault/gcp/_inputs.py +441 -0
pulumi_vault/gcp/auth_backend.py +1486 -0
pulumi_vault/gcp/auth_backend_role.py +1235 -0
pulumi_vault/gcp/get_auth_backend_role.py +514 -0
pulumi_vault/gcp/outputs.py +302 -0
pulumi_vault/gcp/secret_backend.py +1807 -0
pulumi_vault/gcp/secret_impersonated_account.py +484 -0
pulumi_vault/gcp/secret_roleset.py +554 -0
pulumi_vault/gcp/secret_static_account.py +557 -0
pulumi_vault/generic/__init__.py +11 -0
pulumi_vault/generic/endpoint.py +786 -0
pulumi_vault/generic/get_secret.py +306 -0
pulumi_vault/generic/secret.py +486 -0
pulumi_vault/get_auth_backend.py +226 -0
pulumi_vault/get_auth_backends.py +170 -0
pulumi_vault/get_namespace.py +226 -0
pulumi_vault/get_namespaces.py +202 -0
pulumi_vault/get_nomad_access_token.py +210 -0
pulumi_vault/get_policy_document.py +160 -0
pulumi_vault/get_raft_autopilot_state.py +267 -0
pulumi_vault/github/__init__.py +13 -0
pulumi_vault/github/_inputs.py +225 -0
pulumi_vault/github/auth_backend.py +1194 -0
pulumi_vault/github/outputs.py +174 -0
pulumi_vault/github/team.py +380 -0
pulumi_vault/github/user.py +380 -0
pulumi_vault/identity/__init__.py +35 -0
pulumi_vault/identity/entity.py +447 -0
pulumi_vault/identity/entity_alias.py +398 -0
pulumi_vault/identity/entity_policies.py +455 -0
pulumi_vault/identity/get_entity.py +384 -0
pulumi_vault/identity/get_group.py +467 -0
pulumi_vault/identity/get_oidc_client_creds.py +175 -0
pulumi_vault/identity/get_oidc_openid_config.py +334 -0
pulumi_vault/identity/get_oidc_public_keys.py +179 -0
pulumi_vault/identity/group.py +805 -0
pulumi_vault/identity/group_alias.py +386 -0
pulumi_vault/identity/group_member_entity_ids.py +444 -0
pulumi_vault/identity/group_member_group_ids.py +467 -0
pulumi_vault/identity/group_policies.py +471 -0
pulumi_vault/identity/mfa_duo.py +674 -0
pulumi_vault/identity/mfa_login_enforcement.py +566 -0
pulumi_vault/identity/mfa_okta.py +626 -0
pulumi_vault/identity/mfa_pingid.py +616 -0
pulumi_vault/identity/mfa_totp.py +758 -0
pulumi_vault/identity/oidc.py +268 -0
pulumi_vault/identity/oidc_assignment.py +375 -0
pulumi_vault/identity/oidc_client.py +667 -0
pulumi_vault/identity/oidc_key.py +474 -0
pulumi_vault/identity/oidc_key_allowed_client_id.py +298 -0
pulumi_vault/identity/oidc_provider.py +550 -0
pulumi_vault/identity/oidc_role.py +543 -0
pulumi_vault/identity/oidc_scope.py +355 -0
pulumi_vault/identity/outputs.py +137 -0
pulumi_vault/jwt/__init__.py +12 -0
pulumi_vault/jwt/_inputs.py +225 -0
pulumi_vault/jwt/auth_backend.py +1347 -0
pulumi_vault/jwt/auth_backend_role.py +1847 -0
pulumi_vault/jwt/outputs.py +174 -0
pulumi_vault/kmip/__init__.py +11 -0
pulumi_vault/kmip/secret_backend.py +1591 -0
pulumi_vault/kmip/secret_role.py +1194 -0
pulumi_vault/kmip/secret_scope.py +372 -0
pulumi_vault/kubernetes/__init__.py +15 -0
pulumi_vault/kubernetes/auth_backend_config.py +654 -0
pulumi_vault/kubernetes/auth_backend_role.py +1031 -0
pulumi_vault/kubernetes/get_auth_backend_config.py +280 -0
pulumi_vault/kubernetes/get_auth_backend_role.py +470 -0
pulumi_vault/kubernetes/get_service_account_token.py +344 -0
pulumi_vault/kubernetes/secret_backend.py +1341 -0
pulumi_vault/kubernetes/secret_backend_role.py +1140 -0
pulumi_vault/kv/__init__.py +18 -0
pulumi_vault/kv/_inputs.py +124 -0
pulumi_vault/kv/get_secret.py +240 -0
pulumi_vault/kv/get_secret_subkeys_v2.py +275 -0
pulumi_vault/kv/get_secret_v2.py +315 -0
pulumi_vault/kv/get_secrets_list.py +186 -0
pulumi_vault/kv/get_secrets_list_v2.py +243 -0
pulumi_vault/kv/outputs.py +102 -0
pulumi_vault/kv/secret.py +397 -0
pulumi_vault/kv/secret_backend_v2.py +455 -0
pulumi_vault/kv/secret_v2.py +970 -0
pulumi_vault/ldap/__init__.py +19 -0
pulumi_vault/ldap/_inputs.py +225 -0
pulumi_vault/ldap/auth_backend.py +2520 -0
pulumi_vault/ldap/auth_backend_group.py +386 -0
pulumi_vault/ldap/auth_backend_user.py +439 -0
pulumi_vault/ldap/get_dynamic_credentials.py +181 -0
pulumi_vault/ldap/get_static_credentials.py +192 -0
pulumi_vault/ldap/outputs.py +174 -0
pulumi_vault/ldap/secret_backend.py +2207 -0
pulumi_vault/ldap/secret_backend_dynamic_role.py +767 -0
pulumi_vault/ldap/secret_backend_library_set.py +552 -0
pulumi_vault/ldap/secret_backend_static_role.py +541 -0
pulumi_vault/managed/__init__.py +11 -0
pulumi_vault/managed/_inputs.py +944 -0
pulumi_vault/managed/keys.py +398 -0
pulumi_vault/managed/outputs.py +667 -0
pulumi_vault/mfa_duo.py +589 -0
pulumi_vault/mfa_okta.py +623 -0
pulumi_vault/mfa_pingid.py +670 -0
pulumi_vault/mfa_totp.py +620 -0
pulumi_vault/mongodbatlas/__init__.py +10 -0
pulumi_vault/mongodbatlas/secret_backend.py +388 -0
pulumi_vault/mongodbatlas/secret_role.py +726 -0
pulumi_vault/mount.py +1262 -0
pulumi_vault/namespace.py +452 -0
pulumi_vault/nomad_secret_backend.py +1559 -0
pulumi_vault/nomad_secret_role.py +489 -0
pulumi_vault/oci_auth_backend.py +676 -0
pulumi_vault/oci_auth_backend_role.py +852 -0
pulumi_vault/okta/__init__.py +13 -0
pulumi_vault/okta/_inputs.py +320 -0
pulumi_vault/okta/auth_backend.py +1231 -0
pulumi_vault/okta/auth_backend_group.py +369 -0
pulumi_vault/okta/auth_backend_user.py +416 -0
pulumi_vault/okta/outputs.py +244 -0
pulumi_vault/outputs.py +502 -0
pulumi_vault/pkisecret/__init__.py +38 -0
pulumi_vault/pkisecret/_inputs.py +270 -0
pulumi_vault/pkisecret/backend_acme_eab.py +550 -0
pulumi_vault/pkisecret/backend_config_acme.py +690 -0
pulumi_vault/pkisecret/backend_config_auto_tidy.py +1370 -0
pulumi_vault/pkisecret/backend_config_cluster.py +370 -0
pulumi_vault/pkisecret/backend_config_cmpv2.py +693 -0
pulumi_vault/pkisecret/backend_config_est.py +756 -0
pulumi_vault/pkisecret/backend_config_scep.py +738 -0
pulumi_vault/pkisecret/get_backend_cert_metadata.py +277 -0
pulumi_vault/pkisecret/get_backend_config_cmpv2.py +226 -0
pulumi_vault/pkisecret/get_backend_config_est.py +251 -0
pulumi_vault/pkisecret/get_backend_config_scep.py +271 -0
pulumi_vault/pkisecret/get_backend_issuer.py +395 -0
pulumi_vault/pkisecret/get_backend_issuers.py +192 -0
pulumi_vault/pkisecret/get_backend_key.py +211 -0
pulumi_vault/pkisecret/get_backend_keys.py +192 -0
pulumi_vault/pkisecret/outputs.py +270 -0
pulumi_vault/pkisecret/secret_backend_cert.py +1315 -0
pulumi_vault/pkisecret/secret_backend_config_ca.py +386 -0
pulumi_vault/pkisecret/secret_backend_config_issuers.py +392 -0
pulumi_vault/pkisecret/secret_backend_config_urls.py +462 -0
pulumi_vault/pkisecret/secret_backend_crl_config.py +846 -0
pulumi_vault/pkisecret/secret_backend_intermediate_cert_request.py +1629 -0
pulumi_vault/pkisecret/secret_backend_intermediate_set_signed.py +444 -0
pulumi_vault/pkisecret/secret_backend_issuer.py +1089 -0
pulumi_vault/pkisecret/secret_backend_key.py +613 -0
pulumi_vault/pkisecret/secret_backend_role.py +2694 -0
pulumi_vault/pkisecret/secret_backend_root_cert.py +2134 -0
pulumi_vault/pkisecret/secret_backend_root_sign_intermediate.py +2031 -0
pulumi_vault/pkisecret/secret_backend_sign.py +1194 -0
pulumi_vault/plugin.py +596 -0
pulumi_vault/plugin_pinned_version.py +299 -0
pulumi_vault/policy.py +279 -0
pulumi_vault/provider.py +781 -0
pulumi_vault/pulumi-plugin.json +5 -0
pulumi_vault/py.typed +0 -0
pulumi_vault/quota_lease_count.py +504 -0
pulumi_vault/quota_rate_limit.py +751 -0
pulumi_vault/rabbitmq/__init__.py +12 -0
pulumi_vault/rabbitmq/_inputs.py +235 -0
pulumi_vault/rabbitmq/outputs.py +144 -0
pulumi_vault/rabbitmq/secret_backend.py +1437 -0
pulumi_vault/rabbitmq/secret_backend_role.py +496 -0
pulumi_vault/raft_autopilot.py +609 -0
pulumi_vault/raft_snapshot_agent_config.py +1591 -0
pulumi_vault/rgp_policy.py +349 -0
pulumi_vault/saml/__init__.py +12 -0
pulumi_vault/saml/_inputs.py +225 -0
pulumi_vault/saml/auth_backend.py +811 -0
pulumi_vault/saml/auth_backend_role.py +1068 -0
pulumi_vault/saml/outputs.py +174 -0
pulumi_vault/scep_auth_backend_role.py +908 -0
pulumi_vault/secrets/__init__.py +18 -0
pulumi_vault/secrets/_inputs.py +110 -0
pulumi_vault/secrets/outputs.py +94 -0
pulumi_vault/secrets/sync_association.py +450 -0
pulumi_vault/secrets/sync_aws_destination.py +780 -0
pulumi_vault/secrets/sync_azure_destination.py +736 -0
pulumi_vault/secrets/sync_config.py +303 -0
pulumi_vault/secrets/sync_gcp_destination.py +572 -0
pulumi_vault/secrets/sync_gh_destination.py +688 -0
pulumi_vault/secrets/sync_github_apps.py +376 -0
pulumi_vault/secrets/sync_vercel_destination.py +603 -0
pulumi_vault/ssh/__init__.py +13 -0
pulumi_vault/ssh/_inputs.py +76 -0
pulumi_vault/ssh/get_secret_backend_sign.py +294 -0
pulumi_vault/ssh/outputs.py +51 -0
pulumi_vault/ssh/secret_backend_ca.py +588 -0
pulumi_vault/ssh/secret_backend_role.py +1493 -0
pulumi_vault/terraformcloud/__init__.py +11 -0
pulumi_vault/terraformcloud/secret_backend.py +1321 -0
pulumi_vault/terraformcloud/secret_creds.py +445 -0
pulumi_vault/terraformcloud/secret_role.py +563 -0
pulumi_vault/token.py +1026 -0
pulumi_vault/tokenauth/__init__.py +9 -0
pulumi_vault/tokenauth/auth_backend_role.py +1135 -0
pulumi_vault/transform/__init__.py +14 -0
pulumi_vault/transform/alphabet.py +348 -0
pulumi_vault/transform/get_decode.py +287 -0
pulumi_vault/transform/get_encode.py +291 -0
pulumi_vault/transform/role.py +350 -0
pulumi_vault/transform/template.py +592 -0
pulumi_vault/transform/transformation.py +608 -0
pulumi_vault/transit/__init__.py +15 -0
pulumi_vault/transit/get_cmac.py +256 -0
pulumi_vault/transit/get_decrypt.py +181 -0
pulumi_vault/transit/get_encrypt.py +174 -0
pulumi_vault/transit/get_sign.py +328 -0
pulumi_vault/transit/get_verify.py +373 -0
pulumi_vault/transit/secret_backend_key.py +1202 -0
pulumi_vault/transit/secret_cache_config.py +302 -0
pulumi_vault-7.6.0a1764657486.dist-info/METADATA +92 -0
pulumi_vault-7.6.0a1764657486.dist-info/RECORD +274 -0
pulumi_vault-7.6.0a1764657486.dist-info/WHEEL +5 -0
pulumi_vault-7.6.0a1764657486.dist-info/top_level.txt +1 -0

pulumi_vault/plugin.py ADDED Viewed

@@ -0,0 +1,596 @@
+# coding=utf-8
+# *** WARNING: this file was generated by pulumi-language-python. ***
+# *** Do not edit by hand unless you're certain you know what you are doing! ***
+import builtins as _builtins
+import warnings
+import sys
+import pulumi
+import pulumi.runtime
+from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
+from . import _utilities
+__all__ = ['PluginArgs', 'Plugin']
+@pulumi.input_type
+class PluginArgs:
+    def __init__(__self__, *,
+                 command: pulumi.Input[_builtins.str],
+                 sha256: pulumi.Input[_builtins.str],
+                 type: pulumi.Input[_builtins.str],
+                 args: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 envs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 name: Optional[pulumi.Input[_builtins.str]] = None,
+                 oci_image: Optional[pulumi.Input[_builtins.str]] = None,
+                 runtime: Optional[pulumi.Input[_builtins.str]] = None,
+                 version: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        The set of arguments for constructing a Plugin resource.
+        :param pulumi.Input[_builtins.str] command: Command to execute the plugin, relative to the server's configured `plugin_directory`.
+        :param pulumi.Input[_builtins.str] sha256: SHA256 sum of the plugin binary.
+        :param pulumi.Input[_builtins.str] type: Type of plugin; one of "auth", "secret", or "database".
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] args: List of additional args to pass to the plugin.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] envs: List of additional environment variables to run the plugin with in KEY=VALUE form.
+        :param pulumi.Input[_builtins.str] name: Name of the plugin.
+        :param pulumi.Input[_builtins.str] oci_image: Specifies OCI image to run. If specified, setting
+               `command`, `args`, and `env` will update the container's entrypoint, args, and
+               environment variables (append-only) respectively.
+        :param pulumi.Input[_builtins.str] runtime: Vault plugin runtime to use if `oci_image` is specified.
+        :param pulumi.Input[_builtins.str] version: Semantic version of the plugin.
+        """
+        pulumi.set(__self__, "command", command)
+        pulumi.set(__self__, "sha256", sha256)
+        pulumi.set(__self__, "type", type)
+        if args is not None:
+            pulumi.set(__self__, "args", args)
+        if envs is not None:
+            pulumi.set(__self__, "envs", envs)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if oci_image is not None:
+            pulumi.set(__self__, "oci_image", oci_image)
+        if runtime is not None:
+            pulumi.set(__self__, "runtime", runtime)
+        if version is not None:
+            pulumi.set(__self__, "version", version)
+    @_builtins.property
+    @pulumi.getter
+    def command(self) -> pulumi.Input[_builtins.str]:
+        """
+        Command to execute the plugin, relative to the server's configured `plugin_directory`.
+        """
+        return pulumi.get(self, "command")
+    @command.setter
+    def command(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "command", value)
+    @_builtins.property
+    @pulumi.getter
+    def sha256(self) -> pulumi.Input[_builtins.str]:
+        """
+        SHA256 sum of the plugin binary.
+        """
+        return pulumi.get(self, "sha256")
+    @sha256.setter
+    def sha256(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "sha256", value)
+    @_builtins.property
+    @pulumi.getter
+    def type(self) -> pulumi.Input[_builtins.str]:
+        """
+        Type of plugin; one of "auth", "secret", or "database".
+        """
+        return pulumi.get(self, "type")
+    @type.setter
+    def type(self, value: pulumi.Input[_builtins.str]):
+        pulumi.set(self, "type", value)
+    @_builtins.property
+    @pulumi.getter
+    def args(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of additional args to pass to the plugin.
+        """
+        return pulumi.get(self, "args")
+    @args.setter
+    def args(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "args", value)
+    @_builtins.property
+    @pulumi.getter
+    def envs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of additional environment variables to run the plugin with in KEY=VALUE form.
+        """
+        return pulumi.get(self, "envs")
+    @envs.setter
+    def envs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "envs", value)
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Name of the plugin.
+        """
+        return pulumi.get(self, "name")
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "name", value)
+    @_builtins.property
+    @pulumi.getter(name="ociImage")
+    def oci_image(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Specifies OCI image to run. If specified, setting
+        `command`, `args`, and `env` will update the container's entrypoint, args, and
+        environment variables (append-only) respectively.
+        """
+        return pulumi.get(self, "oci_image")
+    @oci_image.setter
+    def oci_image(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "oci_image", value)
+    @_builtins.property
+    @pulumi.getter
+    def runtime(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Vault plugin runtime to use if `oci_image` is specified.
+        """
+        return pulumi.get(self, "runtime")
+    @runtime.setter
+    def runtime(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "runtime", value)
+    @_builtins.property
+    @pulumi.getter
+    def version(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Semantic version of the plugin.
+        """
+        return pulumi.get(self, "version")
+    @version.setter
+    def version(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "version", value)
+@pulumi.input_type
+class _PluginState:
+    def __init__(__self__, *,
+                 args: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 command: Optional[pulumi.Input[_builtins.str]] = None,
+                 envs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 name: Optional[pulumi.Input[_builtins.str]] = None,
+                 oci_image: Optional[pulumi.Input[_builtins.str]] = None,
+                 runtime: Optional[pulumi.Input[_builtins.str]] = None,
+                 sha256: Optional[pulumi.Input[_builtins.str]] = None,
+                 type: Optional[pulumi.Input[_builtins.str]] = None,
+                 version: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        Input properties used for looking up and filtering Plugin resources.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] args: List of additional args to pass to the plugin.
+        :param pulumi.Input[_builtins.str] command: Command to execute the plugin, relative to the server's configured `plugin_directory`.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] envs: List of additional environment variables to run the plugin with in KEY=VALUE form.
+        :param pulumi.Input[_builtins.str] name: Name of the plugin.
+        :param pulumi.Input[_builtins.str] oci_image: Specifies OCI image to run. If specified, setting
+               `command`, `args`, and `env` will update the container's entrypoint, args, and
+               environment variables (append-only) respectively.
+        :param pulumi.Input[_builtins.str] runtime: Vault plugin runtime to use if `oci_image` is specified.
+        :param pulumi.Input[_builtins.str] sha256: SHA256 sum of the plugin binary.
+        :param pulumi.Input[_builtins.str] type: Type of plugin; one of "auth", "secret", or "database".
+        :param pulumi.Input[_builtins.str] version: Semantic version of the plugin.
+        """
+        if args is not None:
+            pulumi.set(__self__, "args", args)
+        if command is not None:
+            pulumi.set(__self__, "command", command)
+        if envs is not None:
+            pulumi.set(__self__, "envs", envs)
+        if name is not None:
+            pulumi.set(__self__, "name", name)
+        if oci_image is not None:
+            pulumi.set(__self__, "oci_image", oci_image)
+        if runtime is not None:
+            pulumi.set(__self__, "runtime", runtime)
+        if sha256 is not None:
+            pulumi.set(__self__, "sha256", sha256)
+        if type is not None:
+            pulumi.set(__self__, "type", type)
+        if version is not None:
+            pulumi.set(__self__, "version", version)
+    @_builtins.property
+    @pulumi.getter
+    def args(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of additional args to pass to the plugin.
+        """
+        return pulumi.get(self, "args")
+    @args.setter
+    def args(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "args", value)
+    @_builtins.property
+    @pulumi.getter
+    def command(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Command to execute the plugin, relative to the server's configured `plugin_directory`.
+        """
+        return pulumi.get(self, "command")
+    @command.setter
+    def command(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "command", value)
+    @_builtins.property
+    @pulumi.getter
+    def envs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]:
+        """
+        List of additional environment variables to run the plugin with in KEY=VALUE form.
+        """
+        return pulumi.get(self, "envs")
+    @envs.setter
+    def envs(self, value: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]]):
+        pulumi.set(self, "envs", value)
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Name of the plugin.
+        """
+        return pulumi.get(self, "name")
+    @name.setter
+    def name(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "name", value)
+    @_builtins.property
+    @pulumi.getter(name="ociImage")
+    def oci_image(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Specifies OCI image to run. If specified, setting
+        `command`, `args`, and `env` will update the container's entrypoint, args, and
+        environment variables (append-only) respectively.
+        """
+        return pulumi.get(self, "oci_image")
+    @oci_image.setter
+    def oci_image(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "oci_image", value)
+    @_builtins.property
+    @pulumi.getter
+    def runtime(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Vault plugin runtime to use if `oci_image` is specified.
+        """
+        return pulumi.get(self, "runtime")
+    @runtime.setter
+    def runtime(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "runtime", value)
+    @_builtins.property
+    @pulumi.getter
+    def sha256(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        SHA256 sum of the plugin binary.
+        """
+        return pulumi.get(self, "sha256")
+    @sha256.setter
+    def sha256(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "sha256", value)
+    @_builtins.property
+    @pulumi.getter
+    def type(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Type of plugin; one of "auth", "secret", or "database".
+        """
+        return pulumi.get(self, "type")
+    @type.setter
+    def type(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "type", value)
+    @_builtins.property
+    @pulumi.getter
+    def version(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Semantic version of the plugin.
+        """
+        return pulumi.get(self, "version")
+    @version.setter
+    def version(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "version", value)
+@pulumi.type_token("vault:index/plugin:Plugin")
+class Plugin(pulumi.CustomResource):
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 args: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 command: Optional[pulumi.Input[_builtins.str]] = None,
+                 envs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 name: Optional[pulumi.Input[_builtins.str]] = None,
+                 oci_image: Optional[pulumi.Input[_builtins.str]] = None,
+                 runtime: Optional[pulumi.Input[_builtins.str]] = None,
+                 sha256: Optional[pulumi.Input[_builtins.str]] = None,
+                 type: Optional[pulumi.Input[_builtins.str]] = None,
+                 version: Optional[pulumi.Input[_builtins.str]] = None,
+                 __props__=None):
+        """
+        ## Example Usage
+        ```python
+        import pulumi
+        import pulumi_vault as vault
+        jwt = vault.Plugin("jwt",
+            type="auth",
+            name="jwt",
+            command="vault-plugin-auth-jwt",
+            version="v0.17.0",
+            sha256="6bd0a803ed742aa3ce35e4fa23d2c8d550e6c1567bf63410cec489c28b68b0fc",
+            envs=["HTTP_PROXY=http://proxy.example.com:8080"])
+        jwt_auth = vault.AuthBackend("jwt_auth", type=jwt.name)
+        ```
+        ## Import
+        Plugins can be imported using `:type/name/:name` or `:type/version/:version/name/:name` as the ID if the version is non-empty, e.g.
+        ```sh
+        $ pulumi import vault:index/plugin:Plugin jwt auth/name/jwt
+        ```
+        ```sh
+        $ pulumi import vault:index/plugin:Plugin jwt auth/version/v0.17.0/name/jwt
+        ```
+        :param str resource_name: The name of the resource.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] args: List of additional args to pass to the plugin.
+        :param pulumi.Input[_builtins.str] command: Command to execute the plugin, relative to the server's configured `plugin_directory`.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] envs: List of additional environment variables to run the plugin with in KEY=VALUE form.
+        :param pulumi.Input[_builtins.str] name: Name of the plugin.
+        :param pulumi.Input[_builtins.str] oci_image: Specifies OCI image to run. If specified, setting
+               `command`, `args`, and `env` will update the container's entrypoint, args, and
+               environment variables (append-only) respectively.
+        :param pulumi.Input[_builtins.str] runtime: Vault plugin runtime to use if `oci_image` is specified.
+        :param pulumi.Input[_builtins.str] sha256: SHA256 sum of the plugin binary.
+        :param pulumi.Input[_builtins.str] type: Type of plugin; one of "auth", "secret", or "database".
+        :param pulumi.Input[_builtins.str] version: Semantic version of the plugin.
+        """
+        ...
+    @overload
+    def __init__(__self__,
+                 resource_name: str,
+                 args: PluginArgs,
+                 opts: Optional[pulumi.ResourceOptions] = None):
+        """
+        ## Example Usage
+        ```python
+        import pulumi
+        import pulumi_vault as vault
+        jwt = vault.Plugin("jwt",
+            type="auth",
+            name="jwt",
+            command="vault-plugin-auth-jwt",
+            version="v0.17.0",
+            sha256="6bd0a803ed742aa3ce35e4fa23d2c8d550e6c1567bf63410cec489c28b68b0fc",
+            envs=["HTTP_PROXY=http://proxy.example.com:8080"])
+        jwt_auth = vault.AuthBackend("jwt_auth", type=jwt.name)
+        ```
+        ## Import
+        Plugins can be imported using `:type/name/:name` or `:type/version/:version/name/:name` as the ID if the version is non-empty, e.g.
+        ```sh
+        $ pulumi import vault:index/plugin:Plugin jwt auth/name/jwt
+        ```
+        ```sh
+        $ pulumi import vault:index/plugin:Plugin jwt auth/version/v0.17.0/name/jwt
+        ```
+        :param str resource_name: The name of the resource.
+        :param PluginArgs args: The arguments to use to populate this resource's properties.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        """
+        ...
+    def __init__(__self__, resource_name: str, *args, **kwargs):
+        resource_args, opts = _utilities.get_resource_args_opts(PluginArgs, pulumi.ResourceOptions, *args, **kwargs)
+        if resource_args is not None:
+            __self__._internal_init(resource_name, opts, **resource_args.__dict__)
+        else:
+            __self__._internal_init(resource_name, *args, **kwargs)
+    def _internal_init(__self__,
+                 resource_name: str,
+                 opts: Optional[pulumi.ResourceOptions] = None,
+                 args: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 command: Optional[pulumi.Input[_builtins.str]] = None,
+                 envs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+                 name: Optional[pulumi.Input[_builtins.str]] = None,
+                 oci_image: Optional[pulumi.Input[_builtins.str]] = None,
+                 runtime: Optional[pulumi.Input[_builtins.str]] = None,
+                 sha256: Optional[pulumi.Input[_builtins.str]] = None,
+                 type: Optional[pulumi.Input[_builtins.str]] = None,
+                 version: Optional[pulumi.Input[_builtins.str]] = None,
+                 __props__=None):
+        opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
+        if not isinstance(opts, pulumi.ResourceOptions):
+            raise TypeError('Expected resource options to be a ResourceOptions instance')
+        if opts.id is None:
+            if __props__ is not None:
+                raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
+            __props__ = PluginArgs.__new__(PluginArgs)
+            __props__.__dict__["args"] = args
+            if command is None and not opts.urn:
+                raise TypeError("Missing required property 'command'")
+            __props__.__dict__["command"] = command
+            __props__.__dict__["envs"] = None if envs is None else pulumi.Output.secret(envs)
+            __props__.__dict__["name"] = name
+            __props__.__dict__["oci_image"] = oci_image
+            __props__.__dict__["runtime"] = runtime
+            if sha256 is None and not opts.urn:
+                raise TypeError("Missing required property 'sha256'")
+            __props__.__dict__["sha256"] = sha256
+            if type is None and not opts.urn:
+                raise TypeError("Missing required property 'type'")
+            __props__.__dict__["type"] = type
+            __props__.__dict__["version"] = version
+        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["envs"])
+        opts = pulumi.ResourceOptions.merge(opts, secret_opts)
+        super(Plugin, __self__).__init__(
+            'vault:index/plugin:Plugin',
+            resource_name,
+            __props__,
+            opts)
+    @staticmethod
+    def get(resource_name: str,
+            id: pulumi.Input[str],
+            opts: Optional[pulumi.ResourceOptions] = None,
+            args: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            command: Optional[pulumi.Input[_builtins.str]] = None,
+            envs: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
+            name: Optional[pulumi.Input[_builtins.str]] = None,
+            oci_image: Optional[pulumi.Input[_builtins.str]] = None,
+            runtime: Optional[pulumi.Input[_builtins.str]] = None,
+            sha256: Optional[pulumi.Input[_builtins.str]] = None,
+            type: Optional[pulumi.Input[_builtins.str]] = None,
+            version: Optional[pulumi.Input[_builtins.str]] = None) -> 'Plugin':
+        """
+        Get an existing Plugin resource's state with the given name, id, and optional extra
+        properties used to qualify the lookup.
+        :param str resource_name: The unique name of the resulting resource.
+        :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
+        :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] args: List of additional args to pass to the plugin.
+        :param pulumi.Input[_builtins.str] command: Command to execute the plugin, relative to the server's configured `plugin_directory`.
+        :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] envs: List of additional environment variables to run the plugin with in KEY=VALUE form.
+        :param pulumi.Input[_builtins.str] name: Name of the plugin.
+        :param pulumi.Input[_builtins.str] oci_image: Specifies OCI image to run. If specified, setting
+               `command`, `args`, and `env` will update the container's entrypoint, args, and
+               environment variables (append-only) respectively.
+        :param pulumi.Input[_builtins.str] runtime: Vault plugin runtime to use if `oci_image` is specified.
+        :param pulumi.Input[_builtins.str] sha256: SHA256 sum of the plugin binary.
+        :param pulumi.Input[_builtins.str] type: Type of plugin; one of "auth", "secret", or "database".
+        :param pulumi.Input[_builtins.str] version: Semantic version of the plugin.
+        """
+        opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
+        __props__ = _PluginState.__new__(_PluginState)
+        __props__.__dict__["args"] = args
+        __props__.__dict__["command"] = command
+        __props__.__dict__["envs"] = envs
+        __props__.__dict__["name"] = name
+        __props__.__dict__["oci_image"] = oci_image
+        __props__.__dict__["runtime"] = runtime
+        __props__.__dict__["sha256"] = sha256
+        __props__.__dict__["type"] = type
+        __props__.__dict__["version"] = version
+        return Plugin(resource_name, opts=opts, __props__=__props__)
+    @_builtins.property
+    @pulumi.getter
+    def args(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        List of additional args to pass to the plugin.
+        """
+        return pulumi.get(self, "args")
+    @_builtins.property
+    @pulumi.getter
+    def command(self) -> pulumi.Output[_builtins.str]:
+        """
+        Command to execute the plugin, relative to the server's configured `plugin_directory`.
+        """
+        return pulumi.get(self, "command")
+    @_builtins.property
+    @pulumi.getter
+    def envs(self) -> pulumi.Output[Optional[Sequence[_builtins.str]]]:
+        """
+        List of additional environment variables to run the plugin with in KEY=VALUE form.
+        """
+        return pulumi.get(self, "envs")
+    @_builtins.property
+    @pulumi.getter
+    def name(self) -> pulumi.Output[_builtins.str]:
+        """
+        Name of the plugin.
+        """
+        return pulumi.get(self, "name")
+    @_builtins.property
+    @pulumi.getter(name="ociImage")
+    def oci_image(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Specifies OCI image to run. If specified, setting
+        `command`, `args`, and `env` will update the container's entrypoint, args, and
+        environment variables (append-only) respectively.
+        """
+        return pulumi.get(self, "oci_image")
+    @_builtins.property
+    @pulumi.getter
+    def runtime(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Vault plugin runtime to use if `oci_image` is specified.
+        """
+        return pulumi.get(self, "runtime")
+    @_builtins.property
+    @pulumi.getter
+    def sha256(self) -> pulumi.Output[_builtins.str]:
+        """
+        SHA256 sum of the plugin binary.
+        """
+        return pulumi.get(self, "sha256")
+    @_builtins.property
+    @pulumi.getter
+    def type(self) -> pulumi.Output[_builtins.str]:
+        """
+        Type of plugin; one of "auth", "secret", or "database".
+        """
+        return pulumi.get(self, "type")
+    @_builtins.property
+    @pulumi.getter
+    def version(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        Semantic version of the plugin.
+        """
+        return pulumi.get(self, "version")