Google Secret Manager Secret Version

This page shows how to write Terraform for Secret Manager Secret Version and write them securely.

google_secret_manager_secret_version (Terraform)

The Secret Version in Secret Manager can be configured in Terraform with the resource name google_secret_manager_secret_version. The following sections describe 5 examples of how to use the resource and its parameters.

Example Usage from GitHub

ssm.tf#L17
resource "google_secret_manager_secret_version" "aws-secret-version" {
  secret = google_secret_manager_secret.aws-secret.id

  secret_data = var.aws_secret_key
}

main.tf#L441
resource "google_secret_manager_secret_version" "auto_mystudies_sql_default_user_password_data" {
  provider = google-beta

  secret      = google_secret_manager_secret.auto_mystudies_sql_default_user_password.id
  secret_data = random_password.passwords["mystudies_sql_default_user_password"].result
}
main.tf#L441
resource "google_secret_manager_secret_version" "auto_mystudies_sql_default_user_password_data" {
  provider = google-beta

  secret      = google_secret_manager_secret.auto_mystudies_sql_default_user_password.id
  secret_data = random_password.passwords["mystudies_sql_default_user_password"].result
}
main.tf#L345
resource "google_secret_manager_secret_version" "auto_mystudies_sql_default_user_password_data" {
  provider = google-beta

  secret      = google_secret_manager_secret.auto_mystudies_sql_default_user_password.id
  secret_data = random_password.passwords["mystudies_sql_default_user_password"].result
}
main.tf#L441
resource "google_secret_manager_secret_version" "auto_mystudies_sql_default_user_password_data" {
  provider = google-beta

  secret      = google_secret_manager_secret.auto_mystudies_sql_default_user_password.id
  secret_data = random_password.passwords["mystudies_sql_default_user_password"].result
}

Review your Terraform file for Google best practices

Shisho Cloud, our free checker to make sure your Terraform configuration follows best practices, is available (beta).

Parameters

The time at which the Secret was created.

The time at which the Secret was destroyed. Only present if state is DESTROYED.

The current state of the SecretVersion.

  • id optional computed - string
  • name optional computed - string

The resource name of the SecretVersion. Format: 'projects/[[project]]/secrets/[[secret_id]]/versions/[[version]]'

Secret Manager secret resource

The secret data. Must be no larger than 64KiB.

Explanation in Terraform Registry

A secret version resource.

Warning: All arguments including payload.secret_data will be stored in the raw state as plain-text. Read more about sensitive data in state.

Frequently asked questions

What is Google Secret Manager Secret Version?

Google Secret Manager Secret Version is a resource for Secret Manager of Google Cloud Platform. Settings can be wrote in Terraform.

Where can I find the example code for the Google Secret Manager Secret Version?

For Terraform, the ninginx/my-blog-nest, nseblu/elo-mystudies and Simsulation/budstudies source code examples are useful. See the Terraform Example section for further details.

security-icon

Automate config file reviews on your commits

Fix issues in your infrastructure as code with auto-generated patches.