secret-manager

GoogleCloudPlatform/secret-manager/google

Terraform Module HCL GOOGLE

Creates one or more Google Secret Manager secrets and manages basic permissions for them

Install

module "secret-manager" {

source = "GoogleCloudPlatform/secret-manager/google"

version = "0.9.0"

}

⭐ Source on GitHub 📦 Registry page

README

terraform-google-secret-manager This modules makes it easy to create Google Secret Manager secrets. If enabled it can enable the use of KMS keys for encrypting the secrets. Also if rotation is enabled and pubsub topics are passed in, then notification about secret rotation are sent to the pubsub topics. Here is a diagram of the resources that are deployed: !arch_diagram Usage Basic usage of this module is as follows: ``hcl module "secret-manager" { source = "GoogleCloudPlatform/secret-manager/google" version = "~> 0.9" project_id = var.project_id secrets = [ { name = "secret-1" secret_data = "secret information" }, ] } ` Functional examples are included in the examples directory. Inputs | Name | Description | Type | Default | Required | |------|-------------|------|---------|:--------:| |

Inputs (9)

Name	Type	Description	Default
project_id	string	The project ID to manage the Secret Manager resources	required
automatic_replication	map(object({ kms_key_name = st	Automatic replication parameters that will be used for defined secrets. If not p	`{}`
topics	map(list(object({ name = strin	topics that will be used for defined secrets	`{}`
add_kms_permissions	list(string)	The list of the crypto keys to give secret manager access to	`[]`
add_pubsub_permissions	list(string)	The list of the pubsub topics to give secret manager access to	`[]`
secrets	list(object({ name : strin	The list of the secrets	`[]`
labels	map(map(string))	labels to be added for the defined secrets	`{}`
secret_accessors_list	list(string)	The list of the members to allow accessing secrets	`[]`
user_managed_replication	map(list(object({ location = s	Replication parameters that will be used for defined secrets	`{}`

Outputs (2)

secret_names — The name list of Secrets

secret_versions — The name list of Secret Versions

Resources (6)

google_kms_crypto_key_iam_membergoogle_project_service_identitygoogle_pubsub_topic_iam_membergoogle_secret_manager_secretgoogle_secret_manager_secret_iam_bindinggoogle_secret_manager_secret_version

Topics & Tags

gcp security-identity kms cft-terraform terraform-module pubsub

Details

FrameworkTerraform Module

LanguageHCL

Version0.9.0

Cloud GOOGLE

★ Stars52

Forks38

Total downloads1.4M

Inputs9

Outputs2