then you can test the authentication flow locally by getting a jwt issued by pulumi cloud and running locally:

export VAULT_ADDR="<YOUR_VAULT_ADDR>"
export VAULT_NAMESPACE="<YOUR_VAULT_NAMESPACE>"
vault write auth/jwt/login role=example-role-1 jwt=<PULUMI_CLOUD_JWT>