Skip to content

googleSecretManagerSecretVersion

A secret version resource.

\~> Warning: All arguments including payloadSecretData will be stored in the raw state as plain-text. Read more about sensitive data in state.

Example Usage - Secret Version Basic

/*Provider bindings are generated by running cdktf get.
See https://cdk.tf/provider-generation for more details.*/
import * as google from "./.gen/providers/google";
/*The following providers are missing schema information and might need manual adjustments to synthesize correctly: google.
For a more precise conversion please use the --provider flag in convert.*/
const googleSecretManagerSecretSecretBasic =
  new google.secretManagerSecret.SecretManagerSecret(this, "secret-basic", {
    labels: [
      {
        label: "my-label",
      },
    ],
    replication: [
      {
        automatic: true,
      },
    ],
    secret_id: "secret-version",
  });
new google.secretManagerSecretVersion.SecretManagerSecretVersion(
  this,
  "secret-version-basic",
  {
    secret: googleSecretManagerSecretSecretBasic.id,
    secret_data: "secret-data",
  }
);

Argument Reference

The following arguments are supported:

  • secretData - (Required) The secret data. Must be no larger than 64KiB. Note: This property is sensitive and will not be displayed in the plan.

  • secret - (Required) Secret Manager secret resource


  • enabled - (Optional) The current state of the SecretVersion.

Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

  • id - an identifier for the resource with format {{name}}

  • name - The resource name of the SecretVersion. Format: projects/{{project}}/secrets/{{secretId}}/versions/{{version}}

  • version - The version of the Secret.

  • createTime - The time at which the Secret was created.

  • destroyTime - The time at which the Secret was destroyed. Only present if state is DESTROYED.

Timeouts

This resource provides the following Timeouts configuration options:

  • create - Default is 20 minutes.
  • delete - Default is 20 minutes.

Import

SecretVersion can be imported using any of these accepted formats:

$ terraform import google_secret_manager_secret_version.default projects/{{project}}/secrets/{{secret_id}}/versions/{{version}}