def METHOD_NAME(
    vault_address: str, vault_env_namespace: str, provider_name: Optional[str] = None
) -> pulumi.ResourceTransformationResult:
    pulumi_vault_creds = read_yaml_secrets(
        Path().joinpath(
            # We are forcing the assumption that the Vault cluster is in the operations
            # environment/namespace.(TMM 2021-10-19)
            "pulumi",
            f"vault.{vault_env_namespace}.yaml",
        )
    )
    return pulumi_vault.Provider(
        provider_name or "vault-provider",
        address=vault_address,
        add_address_to_env=True,
        token="",
        auth_login_userpass=pulumi_vault.ProviderAuthLoginUserpassArgs(
            mount="pulumi",
            username=pulumi_vault_creds["auth_username"],
            password=pulumi.Output.secret(pulumi_vault_creds["auth_password"]),
        ),
    )