Documentation ¶
Index ¶
- type LookupSecretVersionArgs
- type LookupSecretVersionResult
- type Secret
- func (*Secret) ElementType() reflect.Type
- func (i *Secret) ToSecretOutput() SecretOutput
- func (i *Secret) ToSecretOutputWithContext(ctx context.Context) SecretOutput
- func (i *Secret) ToSecretPtrOutput() SecretPtrOutput
- func (i *Secret) ToSecretPtrOutputWithContext(ctx context.Context) SecretPtrOutput
- type SecretArgs
- type SecretArray
- type SecretArrayInput
- type SecretArrayOutput
- type SecretIamBinding
- func (*SecretIamBinding) ElementType() reflect.Type
- func (i *SecretIamBinding) ToSecretIamBindingOutput() SecretIamBindingOutput
- func (i *SecretIamBinding) ToSecretIamBindingOutputWithContext(ctx context.Context) SecretIamBindingOutput
- func (i *SecretIamBinding) ToSecretIamBindingPtrOutput() SecretIamBindingPtrOutput
- func (i *SecretIamBinding) ToSecretIamBindingPtrOutputWithContext(ctx context.Context) SecretIamBindingPtrOutput
- type SecretIamBindingArgs
- type SecretIamBindingArray
- type SecretIamBindingArrayInput
- type SecretIamBindingArrayOutput
- func (SecretIamBindingArrayOutput) ElementType() reflect.Type
- func (o SecretIamBindingArrayOutput) Index(i pulumi.IntInput) SecretIamBindingOutput
- func (o SecretIamBindingArrayOutput) ToSecretIamBindingArrayOutput() SecretIamBindingArrayOutput
- func (o SecretIamBindingArrayOutput) ToSecretIamBindingArrayOutputWithContext(ctx context.Context) SecretIamBindingArrayOutput
- type SecretIamBindingCondition
- type SecretIamBindingConditionArgs
- func (SecretIamBindingConditionArgs) ElementType() reflect.Type
- func (i SecretIamBindingConditionArgs) ToSecretIamBindingConditionOutput() SecretIamBindingConditionOutput
- func (i SecretIamBindingConditionArgs) ToSecretIamBindingConditionOutputWithContext(ctx context.Context) SecretIamBindingConditionOutput
- func (i SecretIamBindingConditionArgs) ToSecretIamBindingConditionPtrOutput() SecretIamBindingConditionPtrOutput
- func (i SecretIamBindingConditionArgs) ToSecretIamBindingConditionPtrOutputWithContext(ctx context.Context) SecretIamBindingConditionPtrOutput
- type SecretIamBindingConditionInput
- type SecretIamBindingConditionOutput
- func (o SecretIamBindingConditionOutput) Description() pulumi.StringPtrOutput
- func (SecretIamBindingConditionOutput) ElementType() reflect.Type
- func (o SecretIamBindingConditionOutput) Expression() pulumi.StringOutput
- func (o SecretIamBindingConditionOutput) Title() pulumi.StringOutput
- func (o SecretIamBindingConditionOutput) ToSecretIamBindingConditionOutput() SecretIamBindingConditionOutput
- func (o SecretIamBindingConditionOutput) ToSecretIamBindingConditionOutputWithContext(ctx context.Context) SecretIamBindingConditionOutput
- func (o SecretIamBindingConditionOutput) ToSecretIamBindingConditionPtrOutput() SecretIamBindingConditionPtrOutput
- func (o SecretIamBindingConditionOutput) ToSecretIamBindingConditionPtrOutputWithContext(ctx context.Context) SecretIamBindingConditionPtrOutput
- type SecretIamBindingConditionPtrInput
- type SecretIamBindingConditionPtrOutput
- func (o SecretIamBindingConditionPtrOutput) Description() pulumi.StringPtrOutput
- func (o SecretIamBindingConditionPtrOutput) Elem() SecretIamBindingConditionOutput
- func (SecretIamBindingConditionPtrOutput) ElementType() reflect.Type
- func (o SecretIamBindingConditionPtrOutput) Expression() pulumi.StringPtrOutput
- func (o SecretIamBindingConditionPtrOutput) Title() pulumi.StringPtrOutput
- func (o SecretIamBindingConditionPtrOutput) ToSecretIamBindingConditionPtrOutput() SecretIamBindingConditionPtrOutput
- func (o SecretIamBindingConditionPtrOutput) ToSecretIamBindingConditionPtrOutputWithContext(ctx context.Context) SecretIamBindingConditionPtrOutput
- type SecretIamBindingInput
- type SecretIamBindingMap
- type SecretIamBindingMapInput
- type SecretIamBindingMapOutput
- func (SecretIamBindingMapOutput) ElementType() reflect.Type
- func (o SecretIamBindingMapOutput) MapIndex(k pulumi.StringInput) SecretIamBindingOutput
- func (o SecretIamBindingMapOutput) ToSecretIamBindingMapOutput() SecretIamBindingMapOutput
- func (o SecretIamBindingMapOutput) ToSecretIamBindingMapOutputWithContext(ctx context.Context) SecretIamBindingMapOutput
- type SecretIamBindingOutput
- func (SecretIamBindingOutput) ElementType() reflect.Type
- func (o SecretIamBindingOutput) ToSecretIamBindingOutput() SecretIamBindingOutput
- func (o SecretIamBindingOutput) ToSecretIamBindingOutputWithContext(ctx context.Context) SecretIamBindingOutput
- func (o SecretIamBindingOutput) ToSecretIamBindingPtrOutput() SecretIamBindingPtrOutput
- func (o SecretIamBindingOutput) ToSecretIamBindingPtrOutputWithContext(ctx context.Context) SecretIamBindingPtrOutput
- type SecretIamBindingPtrInput
- type SecretIamBindingPtrOutput
- type SecretIamBindingState
- type SecretIamMember
- func (*SecretIamMember) ElementType() reflect.Type
- func (i *SecretIamMember) ToSecretIamMemberOutput() SecretIamMemberOutput
- func (i *SecretIamMember) ToSecretIamMemberOutputWithContext(ctx context.Context) SecretIamMemberOutput
- func (i *SecretIamMember) ToSecretIamMemberPtrOutput() SecretIamMemberPtrOutput
- func (i *SecretIamMember) ToSecretIamMemberPtrOutputWithContext(ctx context.Context) SecretIamMemberPtrOutput
- type SecretIamMemberArgs
- type SecretIamMemberArray
- type SecretIamMemberArrayInput
- type SecretIamMemberArrayOutput
- func (SecretIamMemberArrayOutput) ElementType() reflect.Type
- func (o SecretIamMemberArrayOutput) Index(i pulumi.IntInput) SecretIamMemberOutput
- func (o SecretIamMemberArrayOutput) ToSecretIamMemberArrayOutput() SecretIamMemberArrayOutput
- func (o SecretIamMemberArrayOutput) ToSecretIamMemberArrayOutputWithContext(ctx context.Context) SecretIamMemberArrayOutput
- type SecretIamMemberCondition
- type SecretIamMemberConditionArgs
- func (SecretIamMemberConditionArgs) ElementType() reflect.Type
- func (i SecretIamMemberConditionArgs) ToSecretIamMemberConditionOutput() SecretIamMemberConditionOutput
- func (i SecretIamMemberConditionArgs) ToSecretIamMemberConditionOutputWithContext(ctx context.Context) SecretIamMemberConditionOutput
- func (i SecretIamMemberConditionArgs) ToSecretIamMemberConditionPtrOutput() SecretIamMemberConditionPtrOutput
- func (i SecretIamMemberConditionArgs) ToSecretIamMemberConditionPtrOutputWithContext(ctx context.Context) SecretIamMemberConditionPtrOutput
- type SecretIamMemberConditionInput
- type SecretIamMemberConditionOutput
- func (o SecretIamMemberConditionOutput) Description() pulumi.StringPtrOutput
- func (SecretIamMemberConditionOutput) ElementType() reflect.Type
- func (o SecretIamMemberConditionOutput) Expression() pulumi.StringOutput
- func (o SecretIamMemberConditionOutput) Title() pulumi.StringOutput
- func (o SecretIamMemberConditionOutput) ToSecretIamMemberConditionOutput() SecretIamMemberConditionOutput
- func (o SecretIamMemberConditionOutput) ToSecretIamMemberConditionOutputWithContext(ctx context.Context) SecretIamMemberConditionOutput
- func (o SecretIamMemberConditionOutput) ToSecretIamMemberConditionPtrOutput() SecretIamMemberConditionPtrOutput
- func (o SecretIamMemberConditionOutput) ToSecretIamMemberConditionPtrOutputWithContext(ctx context.Context) SecretIamMemberConditionPtrOutput
- type SecretIamMemberConditionPtrInput
- type SecretIamMemberConditionPtrOutput
- func (o SecretIamMemberConditionPtrOutput) Description() pulumi.StringPtrOutput
- func (o SecretIamMemberConditionPtrOutput) Elem() SecretIamMemberConditionOutput
- func (SecretIamMemberConditionPtrOutput) ElementType() reflect.Type
- func (o SecretIamMemberConditionPtrOutput) Expression() pulumi.StringPtrOutput
- func (o SecretIamMemberConditionPtrOutput) Title() pulumi.StringPtrOutput
- func (o SecretIamMemberConditionPtrOutput) ToSecretIamMemberConditionPtrOutput() SecretIamMemberConditionPtrOutput
- func (o SecretIamMemberConditionPtrOutput) ToSecretIamMemberConditionPtrOutputWithContext(ctx context.Context) SecretIamMemberConditionPtrOutput
- type SecretIamMemberInput
- type SecretIamMemberMap
- type SecretIamMemberMapInput
- type SecretIamMemberMapOutput
- func (SecretIamMemberMapOutput) ElementType() reflect.Type
- func (o SecretIamMemberMapOutput) MapIndex(k pulumi.StringInput) SecretIamMemberOutput
- func (o SecretIamMemberMapOutput) ToSecretIamMemberMapOutput() SecretIamMemberMapOutput
- func (o SecretIamMemberMapOutput) ToSecretIamMemberMapOutputWithContext(ctx context.Context) SecretIamMemberMapOutput
- type SecretIamMemberOutput
- func (SecretIamMemberOutput) ElementType() reflect.Type
- func (o SecretIamMemberOutput) ToSecretIamMemberOutput() SecretIamMemberOutput
- func (o SecretIamMemberOutput) ToSecretIamMemberOutputWithContext(ctx context.Context) SecretIamMemberOutput
- func (o SecretIamMemberOutput) ToSecretIamMemberPtrOutput() SecretIamMemberPtrOutput
- func (o SecretIamMemberOutput) ToSecretIamMemberPtrOutputWithContext(ctx context.Context) SecretIamMemberPtrOutput
- type SecretIamMemberPtrInput
- type SecretIamMemberPtrOutput
- type SecretIamMemberState
- type SecretIamPolicy
- func (*SecretIamPolicy) ElementType() reflect.Type
- func (i *SecretIamPolicy) ToSecretIamPolicyOutput() SecretIamPolicyOutput
- func (i *SecretIamPolicy) ToSecretIamPolicyOutputWithContext(ctx context.Context) SecretIamPolicyOutput
- func (i *SecretIamPolicy) ToSecretIamPolicyPtrOutput() SecretIamPolicyPtrOutput
- func (i *SecretIamPolicy) ToSecretIamPolicyPtrOutputWithContext(ctx context.Context) SecretIamPolicyPtrOutput
- type SecretIamPolicyArgs
- type SecretIamPolicyArray
- type SecretIamPolicyArrayInput
- type SecretIamPolicyArrayOutput
- func (SecretIamPolicyArrayOutput) ElementType() reflect.Type
- func (o SecretIamPolicyArrayOutput) Index(i pulumi.IntInput) SecretIamPolicyOutput
- func (o SecretIamPolicyArrayOutput) ToSecretIamPolicyArrayOutput() SecretIamPolicyArrayOutput
- func (o SecretIamPolicyArrayOutput) ToSecretIamPolicyArrayOutputWithContext(ctx context.Context) SecretIamPolicyArrayOutput
- type SecretIamPolicyInput
- type SecretIamPolicyMap
- type SecretIamPolicyMapInput
- type SecretIamPolicyMapOutput
- func (SecretIamPolicyMapOutput) ElementType() reflect.Type
- func (o SecretIamPolicyMapOutput) MapIndex(k pulumi.StringInput) SecretIamPolicyOutput
- func (o SecretIamPolicyMapOutput) ToSecretIamPolicyMapOutput() SecretIamPolicyMapOutput
- func (o SecretIamPolicyMapOutput) ToSecretIamPolicyMapOutputWithContext(ctx context.Context) SecretIamPolicyMapOutput
- type SecretIamPolicyOutput
- func (SecretIamPolicyOutput) ElementType() reflect.Type
- func (o SecretIamPolicyOutput) ToSecretIamPolicyOutput() SecretIamPolicyOutput
- func (o SecretIamPolicyOutput) ToSecretIamPolicyOutputWithContext(ctx context.Context) SecretIamPolicyOutput
- func (o SecretIamPolicyOutput) ToSecretIamPolicyPtrOutput() SecretIamPolicyPtrOutput
- func (o SecretIamPolicyOutput) ToSecretIamPolicyPtrOutputWithContext(ctx context.Context) SecretIamPolicyPtrOutput
- type SecretIamPolicyPtrInput
- type SecretIamPolicyPtrOutput
- type SecretIamPolicyState
- type SecretInput
- type SecretMap
- type SecretMapInput
- type SecretMapOutput
- type SecretOutput
- func (SecretOutput) ElementType() reflect.Type
- func (o SecretOutput) ToSecretOutput() SecretOutput
- func (o SecretOutput) ToSecretOutputWithContext(ctx context.Context) SecretOutput
- func (o SecretOutput) ToSecretPtrOutput() SecretPtrOutput
- func (o SecretOutput) ToSecretPtrOutputWithContext(ctx context.Context) SecretPtrOutput
- type SecretPtrInput
- type SecretPtrOutput
- type SecretReplication
- type SecretReplicationArgs
- func (SecretReplicationArgs) ElementType() reflect.Type
- func (i SecretReplicationArgs) ToSecretReplicationOutput() SecretReplicationOutput
- func (i SecretReplicationArgs) ToSecretReplicationOutputWithContext(ctx context.Context) SecretReplicationOutput
- func (i SecretReplicationArgs) ToSecretReplicationPtrOutput() SecretReplicationPtrOutput
- func (i SecretReplicationArgs) ToSecretReplicationPtrOutputWithContext(ctx context.Context) SecretReplicationPtrOutput
- type SecretReplicationInput
- type SecretReplicationOutput
- func (o SecretReplicationOutput) Automatic() pulumi.BoolPtrOutput
- func (SecretReplicationOutput) ElementType() reflect.Type
- func (o SecretReplicationOutput) ToSecretReplicationOutput() SecretReplicationOutput
- func (o SecretReplicationOutput) ToSecretReplicationOutputWithContext(ctx context.Context) SecretReplicationOutput
- func (o SecretReplicationOutput) ToSecretReplicationPtrOutput() SecretReplicationPtrOutput
- func (o SecretReplicationOutput) ToSecretReplicationPtrOutputWithContext(ctx context.Context) SecretReplicationPtrOutput
- func (o SecretReplicationOutput) UserManaged() SecretReplicationUserManagedPtrOutput
- type SecretReplicationPtrInput
- type SecretReplicationPtrOutput
- func (o SecretReplicationPtrOutput) Automatic() pulumi.BoolPtrOutput
- func (o SecretReplicationPtrOutput) Elem() SecretReplicationOutput
- func (SecretReplicationPtrOutput) ElementType() reflect.Type
- func (o SecretReplicationPtrOutput) ToSecretReplicationPtrOutput() SecretReplicationPtrOutput
- func (o SecretReplicationPtrOutput) ToSecretReplicationPtrOutputWithContext(ctx context.Context) SecretReplicationPtrOutput
- func (o SecretReplicationPtrOutput) UserManaged() SecretReplicationUserManagedPtrOutput
- type SecretReplicationUserManaged
- type SecretReplicationUserManagedArgs
- func (SecretReplicationUserManagedArgs) ElementType() reflect.Type
- func (i SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedOutput() SecretReplicationUserManagedOutput
- func (i SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedOutputWithContext(ctx context.Context) SecretReplicationUserManagedOutput
- func (i SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedPtrOutput() SecretReplicationUserManagedPtrOutput
- func (i SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedPtrOutputWithContext(ctx context.Context) SecretReplicationUserManagedPtrOutput
- type SecretReplicationUserManagedInput
- type SecretReplicationUserManagedOutput
- func (SecretReplicationUserManagedOutput) ElementType() reflect.Type
- func (o SecretReplicationUserManagedOutput) Replicas() SecretReplicationUserManagedReplicaArrayOutput
- func (o SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedOutput() SecretReplicationUserManagedOutput
- func (o SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedOutputWithContext(ctx context.Context) SecretReplicationUserManagedOutput
- func (o SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedPtrOutput() SecretReplicationUserManagedPtrOutput
- func (o SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedPtrOutputWithContext(ctx context.Context) SecretReplicationUserManagedPtrOutput
- type SecretReplicationUserManagedPtrInput
- type SecretReplicationUserManagedPtrOutput
- func (o SecretReplicationUserManagedPtrOutput) Elem() SecretReplicationUserManagedOutput
- func (SecretReplicationUserManagedPtrOutput) ElementType() reflect.Type
- func (o SecretReplicationUserManagedPtrOutput) Replicas() SecretReplicationUserManagedReplicaArrayOutput
- func (o SecretReplicationUserManagedPtrOutput) ToSecretReplicationUserManagedPtrOutput() SecretReplicationUserManagedPtrOutput
- func (o SecretReplicationUserManagedPtrOutput) ToSecretReplicationUserManagedPtrOutputWithContext(ctx context.Context) SecretReplicationUserManagedPtrOutput
- type SecretReplicationUserManagedReplica
- type SecretReplicationUserManagedReplicaArgs
- func (SecretReplicationUserManagedReplicaArgs) ElementType() reflect.Type
- func (i SecretReplicationUserManagedReplicaArgs) ToSecretReplicationUserManagedReplicaOutput() SecretReplicationUserManagedReplicaOutput
- func (i SecretReplicationUserManagedReplicaArgs) ToSecretReplicationUserManagedReplicaOutputWithContext(ctx context.Context) SecretReplicationUserManagedReplicaOutput
- type SecretReplicationUserManagedReplicaArray
- func (SecretReplicationUserManagedReplicaArray) ElementType() reflect.Type
- func (i SecretReplicationUserManagedReplicaArray) ToSecretReplicationUserManagedReplicaArrayOutput() SecretReplicationUserManagedReplicaArrayOutput
- func (i SecretReplicationUserManagedReplicaArray) ToSecretReplicationUserManagedReplicaArrayOutputWithContext(ctx context.Context) SecretReplicationUserManagedReplicaArrayOutput
- type SecretReplicationUserManagedReplicaArrayInput
- type SecretReplicationUserManagedReplicaArrayOutput
- func (SecretReplicationUserManagedReplicaArrayOutput) ElementType() reflect.Type
- func (o SecretReplicationUserManagedReplicaArrayOutput) Index(i pulumi.IntInput) SecretReplicationUserManagedReplicaOutput
- func (o SecretReplicationUserManagedReplicaArrayOutput) ToSecretReplicationUserManagedReplicaArrayOutput() SecretReplicationUserManagedReplicaArrayOutput
- func (o SecretReplicationUserManagedReplicaArrayOutput) ToSecretReplicationUserManagedReplicaArrayOutputWithContext(ctx context.Context) SecretReplicationUserManagedReplicaArrayOutput
- type SecretReplicationUserManagedReplicaInput
- type SecretReplicationUserManagedReplicaOutput
- func (SecretReplicationUserManagedReplicaOutput) ElementType() reflect.Type
- func (o SecretReplicationUserManagedReplicaOutput) Location() pulumi.StringOutput
- func (o SecretReplicationUserManagedReplicaOutput) ToSecretReplicationUserManagedReplicaOutput() SecretReplicationUserManagedReplicaOutput
- func (o SecretReplicationUserManagedReplicaOutput) ToSecretReplicationUserManagedReplicaOutputWithContext(ctx context.Context) SecretReplicationUserManagedReplicaOutput
- type SecretState
- type SecretVersion
- func (*SecretVersion) ElementType() reflect.Type
- func (i *SecretVersion) ToSecretVersionOutput() SecretVersionOutput
- func (i *SecretVersion) ToSecretVersionOutputWithContext(ctx context.Context) SecretVersionOutput
- func (i *SecretVersion) ToSecretVersionPtrOutput() SecretVersionPtrOutput
- func (i *SecretVersion) ToSecretVersionPtrOutputWithContext(ctx context.Context) SecretVersionPtrOutput
- type SecretVersionArgs
- type SecretVersionArray
- type SecretVersionArrayInput
- type SecretVersionArrayOutput
- func (SecretVersionArrayOutput) ElementType() reflect.Type
- func (o SecretVersionArrayOutput) Index(i pulumi.IntInput) SecretVersionOutput
- func (o SecretVersionArrayOutput) ToSecretVersionArrayOutput() SecretVersionArrayOutput
- func (o SecretVersionArrayOutput) ToSecretVersionArrayOutputWithContext(ctx context.Context) SecretVersionArrayOutput
- type SecretVersionInput
- type SecretVersionMap
- type SecretVersionMapInput
- type SecretVersionMapOutput
- func (SecretVersionMapOutput) ElementType() reflect.Type
- func (o SecretVersionMapOutput) MapIndex(k pulumi.StringInput) SecretVersionOutput
- func (o SecretVersionMapOutput) ToSecretVersionMapOutput() SecretVersionMapOutput
- func (o SecretVersionMapOutput) ToSecretVersionMapOutputWithContext(ctx context.Context) SecretVersionMapOutput
- type SecretVersionOutput
- func (SecretVersionOutput) ElementType() reflect.Type
- func (o SecretVersionOutput) ToSecretVersionOutput() SecretVersionOutput
- func (o SecretVersionOutput) ToSecretVersionOutputWithContext(ctx context.Context) SecretVersionOutput
- func (o SecretVersionOutput) ToSecretVersionPtrOutput() SecretVersionPtrOutput
- func (o SecretVersionOutput) ToSecretVersionPtrOutputWithContext(ctx context.Context) SecretVersionPtrOutput
- type SecretVersionPtrInput
- type SecretVersionPtrOutput
- type SecretVersionState
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
This section is empty.
Types ¶
type LookupSecretVersionArgs ¶
type LookupSecretVersionArgs struct { // The project to get the secret version for. If it // is not provided, the provider project is used. Project *string `pulumi:"project"` // The secret to get the secret version for. Secret string `pulumi:"secret"` // The version of the secret to get. If it // is not provided, the latest version is retrieved. Version *string `pulumi:"version"` }
A collection of arguments for invoking getSecretVersion.
type LookupSecretVersionResult ¶
type LookupSecretVersionResult struct { // The time at which the Secret was created. CreateTime string `pulumi:"createTime"` // The time at which the Secret was destroyed. Only present if state is DESTROYED. DestroyTime string `pulumi:"destroyTime"` // True if the current state of the SecretVersion is enabled. Enabled bool `pulumi:"enabled"` // The provider-assigned unique ID for this managed resource. Id string `pulumi:"id"` // The resource name of the SecretVersion. Format: // `projects/{{project}}/secrets/{{secret_id}}/versions/{{version}}` Name string `pulumi:"name"` Project string `pulumi:"project"` Secret string `pulumi:"secret"` // The secret data. No larger than 64KiB. SecretData string `pulumi:"secretData"` Version string `pulumi:"version"` }
A collection of values returned by getSecretVersion.
func LookupSecretVersion ¶
func LookupSecretVersion(ctx *pulumi.Context, args *LookupSecretVersionArgs, opts ...pulumi.InvokeOption) (*LookupSecretVersionResult, error)
Get a Secret Manager secret's version. For more information see the [official documentation](https://cloud.google.com/secret-manager/docs/) and [API](https://cloud.google.com/secret-manager/docs/reference/rest/v1/projects.secrets.versions).
## Example Usage
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { _, err := secretmanager.LookupSecretVersion(ctx, &secretmanager.LookupSecretVersionArgs{ Secret: "my-secret", }, nil) if err != nil { return err } return nil }) }
```
type Secret ¶
type Secret struct { pulumi.CustomResourceState // The time at which the Secret was created. CreateTime pulumi.StringOutput `pulumi:"createTime"` // The labels assigned to this Secret. // Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes, // and must conform to the following PCRE regular expression: [\p{Ll}\p{Lo}][\p{Ll}\p{Lo}\p{N}_-]{0,62} // Label values must be between 0 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes, // and must conform to the following PCRE regular expression: [\p{Ll}\p{Lo}\p{N}_-]{0,63} // No more than 64 labels can be assigned to a given resource. // An object containing a list of "key": value pairs. Example: // { "name": "wrench", "mass": "1.3kg", "count": "3" }. Labels pulumi.StringMapOutput `pulumi:"labels"` // The resource name of the Secret. Format: 'projects/{{project}}/secrets/{{secret_id}}' Name pulumi.StringOutput `pulumi:"name"` // The ID of the project in which the resource belongs. // If it is not provided, the provider project is used. Project pulumi.StringOutput `pulumi:"project"` // The replication policy of the secret data attached to the Secret. It cannot be changed // after the Secret has been created. // Structure is documented below. Replication SecretReplicationOutput `pulumi:"replication"` // This must be unique within the project. SecretId pulumi.StringOutput `pulumi:"secretId"` }
A Secret is a logical secret whose value and versions can be accessed.
To get more information about Secret, see:
* [API documentation](https://cloud.google.com/secret-manager/docs/reference/rest/v1/projects.secrets)
## Example Usage ### Secret Config Basic
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { _, err := secretmanager.NewSecret(ctx, "secret_basic", &secretmanager.SecretArgs{ Labels: pulumi.StringMap{ "label": pulumi.String("my-label"), }, Replication: &secretmanager.SecretReplicationArgs{ UserManaged: &secretmanager.SecretReplicationUserManagedArgs{ Replicas: secretmanager.SecretReplicationUserManagedReplicaArray{ &secretmanager.SecretReplicationUserManagedReplicaArgs{ Location: pulumi.String("us-central1"), }, &secretmanager.SecretReplicationUserManagedReplicaArgs{ Location: pulumi.String("us-east1"), }, }, }, }, SecretId: pulumi.String("secret"), }) if err != nil { return err } return nil }) }
```
## Import
Secret can be imported using any of these accepted formats ¶
```sh
$ pulumi import gcp:secretmanager/secret:Secret default projects/{{project}}/secrets/{{secret_id}}
```
```sh
$ pulumi import gcp:secretmanager/secret:Secret default {{project}}/{{secret_id}}
```
```sh
$ pulumi import gcp:secretmanager/secret:Secret default {{secret_id}}
```
func GetSecret ¶
func GetSecret(ctx *pulumi.Context, name string, id pulumi.IDInput, state *SecretState, opts ...pulumi.ResourceOption) (*Secret, error)
GetSecret gets an existing Secret resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewSecret ¶
func NewSecret(ctx *pulumi.Context, name string, args *SecretArgs, opts ...pulumi.ResourceOption) (*Secret, error)
NewSecret registers a new resource with the given unique name, arguments, and options.
func (*Secret) ElementType ¶
func (*Secret) ToSecretOutput ¶
func (i *Secret) ToSecretOutput() SecretOutput
func (*Secret) ToSecretOutputWithContext ¶
func (i *Secret) ToSecretOutputWithContext(ctx context.Context) SecretOutput
func (*Secret) ToSecretPtrOutput ¶
func (i *Secret) ToSecretPtrOutput() SecretPtrOutput
func (*Secret) ToSecretPtrOutputWithContext ¶
func (i *Secret) ToSecretPtrOutputWithContext(ctx context.Context) SecretPtrOutput
type SecretArgs ¶
type SecretArgs struct { // The labels assigned to this Secret. // Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes, // and must conform to the following PCRE regular expression: [\p{Ll}\p{Lo}][\p{Ll}\p{Lo}\p{N}_-]{0,62} // Label values must be between 0 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes, // and must conform to the following PCRE regular expression: [\p{Ll}\p{Lo}\p{N}_-]{0,63} // No more than 64 labels can be assigned to a given resource. // An object containing a list of "key": value pairs. Example: // { "name": "wrench", "mass": "1.3kg", "count": "3" }. Labels pulumi.StringMapInput // The ID of the project in which the resource belongs. // If it is not provided, the provider project is used. Project pulumi.StringPtrInput // The replication policy of the secret data attached to the Secret. It cannot be changed // after the Secret has been created. // Structure is documented below. Replication SecretReplicationInput // This must be unique within the project. SecretId pulumi.StringInput }
The set of arguments for constructing a Secret resource.
func (SecretArgs) ElementType ¶
func (SecretArgs) ElementType() reflect.Type
type SecretArray ¶
type SecretArray []SecretInput
func (SecretArray) ElementType ¶
func (SecretArray) ElementType() reflect.Type
func (SecretArray) ToSecretArrayOutput ¶
func (i SecretArray) ToSecretArrayOutput() SecretArrayOutput
func (SecretArray) ToSecretArrayOutputWithContext ¶
func (i SecretArray) ToSecretArrayOutputWithContext(ctx context.Context) SecretArrayOutput
type SecretArrayInput ¶
type SecretArrayInput interface { pulumi.Input ToSecretArrayOutput() SecretArrayOutput ToSecretArrayOutputWithContext(context.Context) SecretArrayOutput }
SecretArrayInput is an input type that accepts SecretArray and SecretArrayOutput values. You can construct a concrete instance of `SecretArrayInput` via:
SecretArray{ SecretArgs{...} }
type SecretArrayOutput ¶
type SecretArrayOutput struct{ *pulumi.OutputState }
func (SecretArrayOutput) ElementType ¶
func (SecretArrayOutput) ElementType() reflect.Type
func (SecretArrayOutput) Index ¶
func (o SecretArrayOutput) Index(i pulumi.IntInput) SecretOutput
func (SecretArrayOutput) ToSecretArrayOutput ¶
func (o SecretArrayOutput) ToSecretArrayOutput() SecretArrayOutput
func (SecretArrayOutput) ToSecretArrayOutputWithContext ¶
func (o SecretArrayOutput) ToSecretArrayOutputWithContext(ctx context.Context) SecretArrayOutput
type SecretIamBinding ¶
type SecretIamBinding struct { pulumi.CustomResourceState Condition SecretIamBindingConditionPtrOutput `pulumi:"condition"` // (Computed) The etag of the IAM policy. Etag pulumi.StringOutput `pulumi:"etag"` Members pulumi.StringArrayOutput `pulumi:"members"` // The ID of the project in which the resource belongs. // If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used. Project pulumi.StringOutput `pulumi:"project"` // The role that should be applied. Only one // `secretmanager.SecretIamBinding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role pulumi.StringOutput `pulumi:"role"` SecretId pulumi.StringOutput `pulumi:"secretId"` }
Three different resources help you manage your IAM policy for Secret Manager Secret. Each of these resources serves a different use case:
* `secretmanager.SecretIamPolicy`: Authoritative. Sets the IAM policy for the secret and replaces any existing policy already attached. * `secretmanager.SecretIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the secret are preserved. * `secretmanager.SecretIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the secret are preserved.
> **Note:** `secretmanager.SecretIamPolicy` **cannot** be used in conjunction with `secretmanager.SecretIamBinding` and `secretmanager.SecretIamMember` or they will fight over what your policy should be.
> **Note:** `secretmanager.SecretIamBinding` resources **can be** used in conjunction with `secretmanager.SecretIamMember` resources **only if** they do not grant privilege to the same role.
## google\_secret\_manager\_secret\_iam\_policy
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/organizations" "github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{ Bindings: []organizations.GetIAMPolicyBinding{ organizations.GetIAMPolicyBinding{ Role: "roles/secretmanager.secretAccessor", Members: []string{ "user:jane@example.com", }, }, }, }, nil) if err != nil { return err } _, err = secretmanager.NewSecretIamPolicy(ctx, "policy", &secretmanager.SecretIamPolicyArgs{ Project: pulumi.Any(google_secret_manager_secret.Secret - basic.Project), SecretId: pulumi.Any(google_secret_manager_secret.Secret - basic.Secret_id), PolicyData: pulumi.String(admin.PolicyData), }) if err != nil { return err } return nil }) }
```
## google\_secret\_manager\_secret\_iam\_binding
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { _, err := secretmanager.NewSecretIamBinding(ctx, "binding", &secretmanager.SecretIamBindingArgs{ Project: pulumi.Any(google_secret_manager_secret.Secret - basic.Project), SecretId: pulumi.Any(google_secret_manager_secret.Secret - basic.Secret_id), Role: pulumi.String("roles/secretmanager.secretAccessor"), Members: pulumi.StringArray{ pulumi.String("user:jane@example.com"), }, }) if err != nil { return err } return nil }) }
```
## google\_secret\_manager\_secret\_iam\_member
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { _, err := secretmanager.NewSecretIamMember(ctx, "member", &secretmanager.SecretIamMemberArgs{ Project: pulumi.Any(google_secret_manager_secret.Secret - basic.Project), SecretId: pulumi.Any(google_secret_manager_secret.Secret - basic.Secret_id), Role: pulumi.String("roles/secretmanager.secretAccessor"), Member: pulumi.String("user:jane@example.com"), }) if err != nil { return err } return nil }) }
```
## Import
For all import syntaxes, the "resource in question" can take any of the following forms* projects/{{project}}/secrets/{{secret_id}} * {{project}}/{{secret_id}} * {{secret_id}} Any variables not passed in the import command will be taken from the provider configuration. Secret Manager secret IAM resources can be imported using the resource identifiers, role, and member. IAM member imports use space-delimited identifiersthe resource in question, the role, and the member identity, e.g.
```sh
$ pulumi import gcp:secretmanager/secretIamBinding:SecretIamBinding editor "projects/{{project}}/secrets/{{secret_id}} roles/secretmanager.secretAccessor user:jane@example.com"
```
IAM binding imports use space-delimited identifiersthe resource in question and the role, e.g.
```sh
$ pulumi import gcp:secretmanager/secretIamBinding:SecretIamBinding editor "projects/{{project}}/secrets/{{secret_id}} roles/secretmanager.secretAccessor"
```
IAM policy imports use the identifier of the resource in question, e.g.
```sh
$ pulumi import gcp:secretmanager/secretIamBinding:SecretIamBinding editor projects/{{project}}/secrets/{{secret_id}}
```
-> **Custom Roles**If you're importing a IAM resource with a custom role, make sure to use the
full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
func GetSecretIamBinding ¶
func GetSecretIamBinding(ctx *pulumi.Context, name string, id pulumi.IDInput, state *SecretIamBindingState, opts ...pulumi.ResourceOption) (*SecretIamBinding, error)
GetSecretIamBinding gets an existing SecretIamBinding resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewSecretIamBinding ¶
func NewSecretIamBinding(ctx *pulumi.Context, name string, args *SecretIamBindingArgs, opts ...pulumi.ResourceOption) (*SecretIamBinding, error)
NewSecretIamBinding registers a new resource with the given unique name, arguments, and options.
func (*SecretIamBinding) ElementType ¶
func (*SecretIamBinding) ElementType() reflect.Type
func (*SecretIamBinding) ToSecretIamBindingOutput ¶
func (i *SecretIamBinding) ToSecretIamBindingOutput() SecretIamBindingOutput
func (*SecretIamBinding) ToSecretIamBindingOutputWithContext ¶
func (i *SecretIamBinding) ToSecretIamBindingOutputWithContext(ctx context.Context) SecretIamBindingOutput
func (*SecretIamBinding) ToSecretIamBindingPtrOutput ¶
func (i *SecretIamBinding) ToSecretIamBindingPtrOutput() SecretIamBindingPtrOutput
func (*SecretIamBinding) ToSecretIamBindingPtrOutputWithContext ¶
func (i *SecretIamBinding) ToSecretIamBindingPtrOutputWithContext(ctx context.Context) SecretIamBindingPtrOutput
type SecretIamBindingArgs ¶
type SecretIamBindingArgs struct { Condition SecretIamBindingConditionPtrInput Members pulumi.StringArrayInput // The ID of the project in which the resource belongs. // If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used. Project pulumi.StringPtrInput // The role that should be applied. Only one // `secretmanager.SecretIamBinding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role pulumi.StringInput SecretId pulumi.StringInput }
The set of arguments for constructing a SecretIamBinding resource.
func (SecretIamBindingArgs) ElementType ¶
func (SecretIamBindingArgs) ElementType() reflect.Type
type SecretIamBindingArray ¶
type SecretIamBindingArray []SecretIamBindingInput
func (SecretIamBindingArray) ElementType ¶
func (SecretIamBindingArray) ElementType() reflect.Type
func (SecretIamBindingArray) ToSecretIamBindingArrayOutput ¶
func (i SecretIamBindingArray) ToSecretIamBindingArrayOutput() SecretIamBindingArrayOutput
func (SecretIamBindingArray) ToSecretIamBindingArrayOutputWithContext ¶
func (i SecretIamBindingArray) ToSecretIamBindingArrayOutputWithContext(ctx context.Context) SecretIamBindingArrayOutput
type SecretIamBindingArrayInput ¶
type SecretIamBindingArrayInput interface { pulumi.Input ToSecretIamBindingArrayOutput() SecretIamBindingArrayOutput ToSecretIamBindingArrayOutputWithContext(context.Context) SecretIamBindingArrayOutput }
SecretIamBindingArrayInput is an input type that accepts SecretIamBindingArray and SecretIamBindingArrayOutput values. You can construct a concrete instance of `SecretIamBindingArrayInput` via:
SecretIamBindingArray{ SecretIamBindingArgs{...} }
type SecretIamBindingArrayOutput ¶
type SecretIamBindingArrayOutput struct{ *pulumi.OutputState }
func (SecretIamBindingArrayOutput) ElementType ¶
func (SecretIamBindingArrayOutput) ElementType() reflect.Type
func (SecretIamBindingArrayOutput) Index ¶
func (o SecretIamBindingArrayOutput) Index(i pulumi.IntInput) SecretIamBindingOutput
func (SecretIamBindingArrayOutput) ToSecretIamBindingArrayOutput ¶
func (o SecretIamBindingArrayOutput) ToSecretIamBindingArrayOutput() SecretIamBindingArrayOutput
func (SecretIamBindingArrayOutput) ToSecretIamBindingArrayOutputWithContext ¶
func (o SecretIamBindingArrayOutput) ToSecretIamBindingArrayOutputWithContext(ctx context.Context) SecretIamBindingArrayOutput
type SecretIamBindingConditionArgs ¶
type SecretIamBindingConditionArgs struct { Description pulumi.StringPtrInput `pulumi:"description"` Expression pulumi.StringInput `pulumi:"expression"` Title pulumi.StringInput `pulumi:"title"` }
func (SecretIamBindingConditionArgs) ElementType ¶
func (SecretIamBindingConditionArgs) ElementType() reflect.Type
func (SecretIamBindingConditionArgs) ToSecretIamBindingConditionOutput ¶
func (i SecretIamBindingConditionArgs) ToSecretIamBindingConditionOutput() SecretIamBindingConditionOutput
func (SecretIamBindingConditionArgs) ToSecretIamBindingConditionOutputWithContext ¶
func (i SecretIamBindingConditionArgs) ToSecretIamBindingConditionOutputWithContext(ctx context.Context) SecretIamBindingConditionOutput
func (SecretIamBindingConditionArgs) ToSecretIamBindingConditionPtrOutput ¶
func (i SecretIamBindingConditionArgs) ToSecretIamBindingConditionPtrOutput() SecretIamBindingConditionPtrOutput
func (SecretIamBindingConditionArgs) ToSecretIamBindingConditionPtrOutputWithContext ¶
func (i SecretIamBindingConditionArgs) ToSecretIamBindingConditionPtrOutputWithContext(ctx context.Context) SecretIamBindingConditionPtrOutput
type SecretIamBindingConditionInput ¶
type SecretIamBindingConditionInput interface { pulumi.Input ToSecretIamBindingConditionOutput() SecretIamBindingConditionOutput ToSecretIamBindingConditionOutputWithContext(context.Context) SecretIamBindingConditionOutput }
SecretIamBindingConditionInput is an input type that accepts SecretIamBindingConditionArgs and SecretIamBindingConditionOutput values. You can construct a concrete instance of `SecretIamBindingConditionInput` via:
SecretIamBindingConditionArgs{...}
type SecretIamBindingConditionOutput ¶
type SecretIamBindingConditionOutput struct{ *pulumi.OutputState }
func (SecretIamBindingConditionOutput) Description ¶
func (o SecretIamBindingConditionOutput) Description() pulumi.StringPtrOutput
func (SecretIamBindingConditionOutput) ElementType ¶
func (SecretIamBindingConditionOutput) ElementType() reflect.Type
func (SecretIamBindingConditionOutput) Expression ¶
func (o SecretIamBindingConditionOutput) Expression() pulumi.StringOutput
func (SecretIamBindingConditionOutput) Title ¶
func (o SecretIamBindingConditionOutput) Title() pulumi.StringOutput
func (SecretIamBindingConditionOutput) ToSecretIamBindingConditionOutput ¶
func (o SecretIamBindingConditionOutput) ToSecretIamBindingConditionOutput() SecretIamBindingConditionOutput
func (SecretIamBindingConditionOutput) ToSecretIamBindingConditionOutputWithContext ¶
func (o SecretIamBindingConditionOutput) ToSecretIamBindingConditionOutputWithContext(ctx context.Context) SecretIamBindingConditionOutput
func (SecretIamBindingConditionOutput) ToSecretIamBindingConditionPtrOutput ¶
func (o SecretIamBindingConditionOutput) ToSecretIamBindingConditionPtrOutput() SecretIamBindingConditionPtrOutput
func (SecretIamBindingConditionOutput) ToSecretIamBindingConditionPtrOutputWithContext ¶
func (o SecretIamBindingConditionOutput) ToSecretIamBindingConditionPtrOutputWithContext(ctx context.Context) SecretIamBindingConditionPtrOutput
type SecretIamBindingConditionPtrInput ¶
type SecretIamBindingConditionPtrInput interface { pulumi.Input ToSecretIamBindingConditionPtrOutput() SecretIamBindingConditionPtrOutput ToSecretIamBindingConditionPtrOutputWithContext(context.Context) SecretIamBindingConditionPtrOutput }
SecretIamBindingConditionPtrInput is an input type that accepts SecretIamBindingConditionArgs, SecretIamBindingConditionPtr and SecretIamBindingConditionPtrOutput values. You can construct a concrete instance of `SecretIamBindingConditionPtrInput` via:
SecretIamBindingConditionArgs{...} or: nil
func SecretIamBindingConditionPtr ¶
func SecretIamBindingConditionPtr(v *SecretIamBindingConditionArgs) SecretIamBindingConditionPtrInput
type SecretIamBindingConditionPtrOutput ¶
type SecretIamBindingConditionPtrOutput struct{ *pulumi.OutputState }
func (SecretIamBindingConditionPtrOutput) Description ¶
func (o SecretIamBindingConditionPtrOutput) Description() pulumi.StringPtrOutput
func (SecretIamBindingConditionPtrOutput) Elem ¶
func (o SecretIamBindingConditionPtrOutput) Elem() SecretIamBindingConditionOutput
func (SecretIamBindingConditionPtrOutput) ElementType ¶
func (SecretIamBindingConditionPtrOutput) ElementType() reflect.Type
func (SecretIamBindingConditionPtrOutput) Expression ¶
func (o SecretIamBindingConditionPtrOutput) Expression() pulumi.StringPtrOutput
func (SecretIamBindingConditionPtrOutput) Title ¶
func (o SecretIamBindingConditionPtrOutput) Title() pulumi.StringPtrOutput
func (SecretIamBindingConditionPtrOutput) ToSecretIamBindingConditionPtrOutput ¶
func (o SecretIamBindingConditionPtrOutput) ToSecretIamBindingConditionPtrOutput() SecretIamBindingConditionPtrOutput
func (SecretIamBindingConditionPtrOutput) ToSecretIamBindingConditionPtrOutputWithContext ¶
func (o SecretIamBindingConditionPtrOutput) ToSecretIamBindingConditionPtrOutputWithContext(ctx context.Context) SecretIamBindingConditionPtrOutput
type SecretIamBindingInput ¶
type SecretIamBindingInput interface { pulumi.Input ToSecretIamBindingOutput() SecretIamBindingOutput ToSecretIamBindingOutputWithContext(ctx context.Context) SecretIamBindingOutput }
type SecretIamBindingMap ¶
type SecretIamBindingMap map[string]SecretIamBindingInput
func (SecretIamBindingMap) ElementType ¶
func (SecretIamBindingMap) ElementType() reflect.Type
func (SecretIamBindingMap) ToSecretIamBindingMapOutput ¶
func (i SecretIamBindingMap) ToSecretIamBindingMapOutput() SecretIamBindingMapOutput
func (SecretIamBindingMap) ToSecretIamBindingMapOutputWithContext ¶
func (i SecretIamBindingMap) ToSecretIamBindingMapOutputWithContext(ctx context.Context) SecretIamBindingMapOutput
type SecretIamBindingMapInput ¶
type SecretIamBindingMapInput interface { pulumi.Input ToSecretIamBindingMapOutput() SecretIamBindingMapOutput ToSecretIamBindingMapOutputWithContext(context.Context) SecretIamBindingMapOutput }
SecretIamBindingMapInput is an input type that accepts SecretIamBindingMap and SecretIamBindingMapOutput values. You can construct a concrete instance of `SecretIamBindingMapInput` via:
SecretIamBindingMap{ "key": SecretIamBindingArgs{...} }
type SecretIamBindingMapOutput ¶
type SecretIamBindingMapOutput struct{ *pulumi.OutputState }
func (SecretIamBindingMapOutput) ElementType ¶
func (SecretIamBindingMapOutput) ElementType() reflect.Type
func (SecretIamBindingMapOutput) MapIndex ¶
func (o SecretIamBindingMapOutput) MapIndex(k pulumi.StringInput) SecretIamBindingOutput
func (SecretIamBindingMapOutput) ToSecretIamBindingMapOutput ¶
func (o SecretIamBindingMapOutput) ToSecretIamBindingMapOutput() SecretIamBindingMapOutput
func (SecretIamBindingMapOutput) ToSecretIamBindingMapOutputWithContext ¶
func (o SecretIamBindingMapOutput) ToSecretIamBindingMapOutputWithContext(ctx context.Context) SecretIamBindingMapOutput
type SecretIamBindingOutput ¶
type SecretIamBindingOutput struct {
*pulumi.OutputState
}
func (SecretIamBindingOutput) ElementType ¶
func (SecretIamBindingOutput) ElementType() reflect.Type
func (SecretIamBindingOutput) ToSecretIamBindingOutput ¶
func (o SecretIamBindingOutput) ToSecretIamBindingOutput() SecretIamBindingOutput
func (SecretIamBindingOutput) ToSecretIamBindingOutputWithContext ¶
func (o SecretIamBindingOutput) ToSecretIamBindingOutputWithContext(ctx context.Context) SecretIamBindingOutput
func (SecretIamBindingOutput) ToSecretIamBindingPtrOutput ¶
func (o SecretIamBindingOutput) ToSecretIamBindingPtrOutput() SecretIamBindingPtrOutput
func (SecretIamBindingOutput) ToSecretIamBindingPtrOutputWithContext ¶
func (o SecretIamBindingOutput) ToSecretIamBindingPtrOutputWithContext(ctx context.Context) SecretIamBindingPtrOutput
type SecretIamBindingPtrInput ¶
type SecretIamBindingPtrInput interface { pulumi.Input ToSecretIamBindingPtrOutput() SecretIamBindingPtrOutput ToSecretIamBindingPtrOutputWithContext(ctx context.Context) SecretIamBindingPtrOutput }
type SecretIamBindingPtrOutput ¶
type SecretIamBindingPtrOutput struct {
*pulumi.OutputState
}
func (SecretIamBindingPtrOutput) ElementType ¶
func (SecretIamBindingPtrOutput) ElementType() reflect.Type
func (SecretIamBindingPtrOutput) ToSecretIamBindingPtrOutput ¶
func (o SecretIamBindingPtrOutput) ToSecretIamBindingPtrOutput() SecretIamBindingPtrOutput
func (SecretIamBindingPtrOutput) ToSecretIamBindingPtrOutputWithContext ¶
func (o SecretIamBindingPtrOutput) ToSecretIamBindingPtrOutputWithContext(ctx context.Context) SecretIamBindingPtrOutput
type SecretIamBindingState ¶
type SecretIamBindingState struct { Condition SecretIamBindingConditionPtrInput // (Computed) The etag of the IAM policy. Etag pulumi.StringPtrInput Members pulumi.StringArrayInput // The ID of the project in which the resource belongs. // If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used. Project pulumi.StringPtrInput // The role that should be applied. Only one // `secretmanager.SecretIamBinding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role pulumi.StringPtrInput SecretId pulumi.StringPtrInput }
func (SecretIamBindingState) ElementType ¶
func (SecretIamBindingState) ElementType() reflect.Type
type SecretIamMember ¶
type SecretIamMember struct { pulumi.CustomResourceState Condition SecretIamMemberConditionPtrOutput `pulumi:"condition"` // (Computed) The etag of the IAM policy. Etag pulumi.StringOutput `pulumi:"etag"` Member pulumi.StringOutput `pulumi:"member"` // The ID of the project in which the resource belongs. // If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used. Project pulumi.StringOutput `pulumi:"project"` // The role that should be applied. Only one // `secretmanager.SecretIamBinding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role pulumi.StringOutput `pulumi:"role"` SecretId pulumi.StringOutput `pulumi:"secretId"` }
Three different resources help you manage your IAM policy for Secret Manager Secret. Each of these resources serves a different use case:
* `secretmanager.SecretIamPolicy`: Authoritative. Sets the IAM policy for the secret and replaces any existing policy already attached. * `secretmanager.SecretIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the secret are preserved. * `secretmanager.SecretIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the secret are preserved.
> **Note:** `secretmanager.SecretIamPolicy` **cannot** be used in conjunction with `secretmanager.SecretIamBinding` and `secretmanager.SecretIamMember` or they will fight over what your policy should be.
> **Note:** `secretmanager.SecretIamBinding` resources **can be** used in conjunction with `secretmanager.SecretIamMember` resources **only if** they do not grant privilege to the same role.
## google\_secret\_manager\_secret\_iam\_policy
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/organizations" "github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{ Bindings: []organizations.GetIAMPolicyBinding{ organizations.GetIAMPolicyBinding{ Role: "roles/secretmanager.secretAccessor", Members: []string{ "user:jane@example.com", }, }, }, }, nil) if err != nil { return err } _, err = secretmanager.NewSecretIamPolicy(ctx, "policy", &secretmanager.SecretIamPolicyArgs{ Project: pulumi.Any(google_secret_manager_secret.Secret - basic.Project), SecretId: pulumi.Any(google_secret_manager_secret.Secret - basic.Secret_id), PolicyData: pulumi.String(admin.PolicyData), }) if err != nil { return err } return nil }) }
```
## google\_secret\_manager\_secret\_iam\_binding
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { _, err := secretmanager.NewSecretIamBinding(ctx, "binding", &secretmanager.SecretIamBindingArgs{ Project: pulumi.Any(google_secret_manager_secret.Secret - basic.Project), SecretId: pulumi.Any(google_secret_manager_secret.Secret - basic.Secret_id), Role: pulumi.String("roles/secretmanager.secretAccessor"), Members: pulumi.StringArray{ pulumi.String("user:jane@example.com"), }, }) if err != nil { return err } return nil }) }
```
## google\_secret\_manager\_secret\_iam\_member
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { _, err := secretmanager.NewSecretIamMember(ctx, "member", &secretmanager.SecretIamMemberArgs{ Project: pulumi.Any(google_secret_manager_secret.Secret - basic.Project), SecretId: pulumi.Any(google_secret_manager_secret.Secret - basic.Secret_id), Role: pulumi.String("roles/secretmanager.secretAccessor"), Member: pulumi.String("user:jane@example.com"), }) if err != nil { return err } return nil }) }
```
## Import
For all import syntaxes, the "resource in question" can take any of the following forms* projects/{{project}}/secrets/{{secret_id}} * {{project}}/{{secret_id}} * {{secret_id}} Any variables not passed in the import command will be taken from the provider configuration. Secret Manager secret IAM resources can be imported using the resource identifiers, role, and member. IAM member imports use space-delimited identifiersthe resource in question, the role, and the member identity, e.g.
```sh
$ pulumi import gcp:secretmanager/secretIamMember:SecretIamMember editor "projects/{{project}}/secrets/{{secret_id}} roles/secretmanager.secretAccessor user:jane@example.com"
```
IAM binding imports use space-delimited identifiersthe resource in question and the role, e.g.
```sh
$ pulumi import gcp:secretmanager/secretIamMember:SecretIamMember editor "projects/{{project}}/secrets/{{secret_id}} roles/secretmanager.secretAccessor"
```
IAM policy imports use the identifier of the resource in question, e.g.
```sh
$ pulumi import gcp:secretmanager/secretIamMember:SecretIamMember editor projects/{{project}}/secrets/{{secret_id}}
```
-> **Custom Roles**If you're importing a IAM resource with a custom role, make sure to use the
full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
func GetSecretIamMember ¶
func GetSecretIamMember(ctx *pulumi.Context, name string, id pulumi.IDInput, state *SecretIamMemberState, opts ...pulumi.ResourceOption) (*SecretIamMember, error)
GetSecretIamMember gets an existing SecretIamMember resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewSecretIamMember ¶
func NewSecretIamMember(ctx *pulumi.Context, name string, args *SecretIamMemberArgs, opts ...pulumi.ResourceOption) (*SecretIamMember, error)
NewSecretIamMember registers a new resource with the given unique name, arguments, and options.
func (*SecretIamMember) ElementType ¶
func (*SecretIamMember) ElementType() reflect.Type
func (*SecretIamMember) ToSecretIamMemberOutput ¶
func (i *SecretIamMember) ToSecretIamMemberOutput() SecretIamMemberOutput
func (*SecretIamMember) ToSecretIamMemberOutputWithContext ¶
func (i *SecretIamMember) ToSecretIamMemberOutputWithContext(ctx context.Context) SecretIamMemberOutput
func (*SecretIamMember) ToSecretIamMemberPtrOutput ¶
func (i *SecretIamMember) ToSecretIamMemberPtrOutput() SecretIamMemberPtrOutput
func (*SecretIamMember) ToSecretIamMemberPtrOutputWithContext ¶
func (i *SecretIamMember) ToSecretIamMemberPtrOutputWithContext(ctx context.Context) SecretIamMemberPtrOutput
type SecretIamMemberArgs ¶
type SecretIamMemberArgs struct { Condition SecretIamMemberConditionPtrInput Member pulumi.StringInput // The ID of the project in which the resource belongs. // If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used. Project pulumi.StringPtrInput // The role that should be applied. Only one // `secretmanager.SecretIamBinding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role pulumi.StringInput SecretId pulumi.StringInput }
The set of arguments for constructing a SecretIamMember resource.
func (SecretIamMemberArgs) ElementType ¶
func (SecretIamMemberArgs) ElementType() reflect.Type
type SecretIamMemberArray ¶
type SecretIamMemberArray []SecretIamMemberInput
func (SecretIamMemberArray) ElementType ¶
func (SecretIamMemberArray) ElementType() reflect.Type
func (SecretIamMemberArray) ToSecretIamMemberArrayOutput ¶
func (i SecretIamMemberArray) ToSecretIamMemberArrayOutput() SecretIamMemberArrayOutput
func (SecretIamMemberArray) ToSecretIamMemberArrayOutputWithContext ¶
func (i SecretIamMemberArray) ToSecretIamMemberArrayOutputWithContext(ctx context.Context) SecretIamMemberArrayOutput
type SecretIamMemberArrayInput ¶
type SecretIamMemberArrayInput interface { pulumi.Input ToSecretIamMemberArrayOutput() SecretIamMemberArrayOutput ToSecretIamMemberArrayOutputWithContext(context.Context) SecretIamMemberArrayOutput }
SecretIamMemberArrayInput is an input type that accepts SecretIamMemberArray and SecretIamMemberArrayOutput values. You can construct a concrete instance of `SecretIamMemberArrayInput` via:
SecretIamMemberArray{ SecretIamMemberArgs{...} }
type SecretIamMemberArrayOutput ¶
type SecretIamMemberArrayOutput struct{ *pulumi.OutputState }
func (SecretIamMemberArrayOutput) ElementType ¶
func (SecretIamMemberArrayOutput) ElementType() reflect.Type
func (SecretIamMemberArrayOutput) Index ¶
func (o SecretIamMemberArrayOutput) Index(i pulumi.IntInput) SecretIamMemberOutput
func (SecretIamMemberArrayOutput) ToSecretIamMemberArrayOutput ¶
func (o SecretIamMemberArrayOutput) ToSecretIamMemberArrayOutput() SecretIamMemberArrayOutput
func (SecretIamMemberArrayOutput) ToSecretIamMemberArrayOutputWithContext ¶
func (o SecretIamMemberArrayOutput) ToSecretIamMemberArrayOutputWithContext(ctx context.Context) SecretIamMemberArrayOutput
type SecretIamMemberConditionArgs ¶
type SecretIamMemberConditionArgs struct { Description pulumi.StringPtrInput `pulumi:"description"` Expression pulumi.StringInput `pulumi:"expression"` Title pulumi.StringInput `pulumi:"title"` }
func (SecretIamMemberConditionArgs) ElementType ¶
func (SecretIamMemberConditionArgs) ElementType() reflect.Type
func (SecretIamMemberConditionArgs) ToSecretIamMemberConditionOutput ¶
func (i SecretIamMemberConditionArgs) ToSecretIamMemberConditionOutput() SecretIamMemberConditionOutput
func (SecretIamMemberConditionArgs) ToSecretIamMemberConditionOutputWithContext ¶
func (i SecretIamMemberConditionArgs) ToSecretIamMemberConditionOutputWithContext(ctx context.Context) SecretIamMemberConditionOutput
func (SecretIamMemberConditionArgs) ToSecretIamMemberConditionPtrOutput ¶
func (i SecretIamMemberConditionArgs) ToSecretIamMemberConditionPtrOutput() SecretIamMemberConditionPtrOutput
func (SecretIamMemberConditionArgs) ToSecretIamMemberConditionPtrOutputWithContext ¶
func (i SecretIamMemberConditionArgs) ToSecretIamMemberConditionPtrOutputWithContext(ctx context.Context) SecretIamMemberConditionPtrOutput
type SecretIamMemberConditionInput ¶
type SecretIamMemberConditionInput interface { pulumi.Input ToSecretIamMemberConditionOutput() SecretIamMemberConditionOutput ToSecretIamMemberConditionOutputWithContext(context.Context) SecretIamMemberConditionOutput }
SecretIamMemberConditionInput is an input type that accepts SecretIamMemberConditionArgs and SecretIamMemberConditionOutput values. You can construct a concrete instance of `SecretIamMemberConditionInput` via:
SecretIamMemberConditionArgs{...}
type SecretIamMemberConditionOutput ¶
type SecretIamMemberConditionOutput struct{ *pulumi.OutputState }
func (SecretIamMemberConditionOutput) Description ¶
func (o SecretIamMemberConditionOutput) Description() pulumi.StringPtrOutput
func (SecretIamMemberConditionOutput) ElementType ¶
func (SecretIamMemberConditionOutput) ElementType() reflect.Type
func (SecretIamMemberConditionOutput) Expression ¶
func (o SecretIamMemberConditionOutput) Expression() pulumi.StringOutput
func (SecretIamMemberConditionOutput) Title ¶
func (o SecretIamMemberConditionOutput) Title() pulumi.StringOutput
func (SecretIamMemberConditionOutput) ToSecretIamMemberConditionOutput ¶
func (o SecretIamMemberConditionOutput) ToSecretIamMemberConditionOutput() SecretIamMemberConditionOutput
func (SecretIamMemberConditionOutput) ToSecretIamMemberConditionOutputWithContext ¶
func (o SecretIamMemberConditionOutput) ToSecretIamMemberConditionOutputWithContext(ctx context.Context) SecretIamMemberConditionOutput
func (SecretIamMemberConditionOutput) ToSecretIamMemberConditionPtrOutput ¶
func (o SecretIamMemberConditionOutput) ToSecretIamMemberConditionPtrOutput() SecretIamMemberConditionPtrOutput
func (SecretIamMemberConditionOutput) ToSecretIamMemberConditionPtrOutputWithContext ¶
func (o SecretIamMemberConditionOutput) ToSecretIamMemberConditionPtrOutputWithContext(ctx context.Context) SecretIamMemberConditionPtrOutput
type SecretIamMemberConditionPtrInput ¶
type SecretIamMemberConditionPtrInput interface { pulumi.Input ToSecretIamMemberConditionPtrOutput() SecretIamMemberConditionPtrOutput ToSecretIamMemberConditionPtrOutputWithContext(context.Context) SecretIamMemberConditionPtrOutput }
SecretIamMemberConditionPtrInput is an input type that accepts SecretIamMemberConditionArgs, SecretIamMemberConditionPtr and SecretIamMemberConditionPtrOutput values. You can construct a concrete instance of `SecretIamMemberConditionPtrInput` via:
SecretIamMemberConditionArgs{...} or: nil
func SecretIamMemberConditionPtr ¶
func SecretIamMemberConditionPtr(v *SecretIamMemberConditionArgs) SecretIamMemberConditionPtrInput
type SecretIamMemberConditionPtrOutput ¶
type SecretIamMemberConditionPtrOutput struct{ *pulumi.OutputState }
func (SecretIamMemberConditionPtrOutput) Description ¶
func (o SecretIamMemberConditionPtrOutput) Description() pulumi.StringPtrOutput
func (SecretIamMemberConditionPtrOutput) Elem ¶
func (o SecretIamMemberConditionPtrOutput) Elem() SecretIamMemberConditionOutput
func (SecretIamMemberConditionPtrOutput) ElementType ¶
func (SecretIamMemberConditionPtrOutput) ElementType() reflect.Type
func (SecretIamMemberConditionPtrOutput) Expression ¶
func (o SecretIamMemberConditionPtrOutput) Expression() pulumi.StringPtrOutput
func (SecretIamMemberConditionPtrOutput) Title ¶
func (o SecretIamMemberConditionPtrOutput) Title() pulumi.StringPtrOutput
func (SecretIamMemberConditionPtrOutput) ToSecretIamMemberConditionPtrOutput ¶
func (o SecretIamMemberConditionPtrOutput) ToSecretIamMemberConditionPtrOutput() SecretIamMemberConditionPtrOutput
func (SecretIamMemberConditionPtrOutput) ToSecretIamMemberConditionPtrOutputWithContext ¶
func (o SecretIamMemberConditionPtrOutput) ToSecretIamMemberConditionPtrOutputWithContext(ctx context.Context) SecretIamMemberConditionPtrOutput
type SecretIamMemberInput ¶
type SecretIamMemberInput interface { pulumi.Input ToSecretIamMemberOutput() SecretIamMemberOutput ToSecretIamMemberOutputWithContext(ctx context.Context) SecretIamMemberOutput }
type SecretIamMemberMap ¶
type SecretIamMemberMap map[string]SecretIamMemberInput
func (SecretIamMemberMap) ElementType ¶
func (SecretIamMemberMap) ElementType() reflect.Type
func (SecretIamMemberMap) ToSecretIamMemberMapOutput ¶
func (i SecretIamMemberMap) ToSecretIamMemberMapOutput() SecretIamMemberMapOutput
func (SecretIamMemberMap) ToSecretIamMemberMapOutputWithContext ¶
func (i SecretIamMemberMap) ToSecretIamMemberMapOutputWithContext(ctx context.Context) SecretIamMemberMapOutput
type SecretIamMemberMapInput ¶
type SecretIamMemberMapInput interface { pulumi.Input ToSecretIamMemberMapOutput() SecretIamMemberMapOutput ToSecretIamMemberMapOutputWithContext(context.Context) SecretIamMemberMapOutput }
SecretIamMemberMapInput is an input type that accepts SecretIamMemberMap and SecretIamMemberMapOutput values. You can construct a concrete instance of `SecretIamMemberMapInput` via:
SecretIamMemberMap{ "key": SecretIamMemberArgs{...} }
type SecretIamMemberMapOutput ¶
type SecretIamMemberMapOutput struct{ *pulumi.OutputState }
func (SecretIamMemberMapOutput) ElementType ¶
func (SecretIamMemberMapOutput) ElementType() reflect.Type
func (SecretIamMemberMapOutput) MapIndex ¶
func (o SecretIamMemberMapOutput) MapIndex(k pulumi.StringInput) SecretIamMemberOutput
func (SecretIamMemberMapOutput) ToSecretIamMemberMapOutput ¶
func (o SecretIamMemberMapOutput) ToSecretIamMemberMapOutput() SecretIamMemberMapOutput
func (SecretIamMemberMapOutput) ToSecretIamMemberMapOutputWithContext ¶
func (o SecretIamMemberMapOutput) ToSecretIamMemberMapOutputWithContext(ctx context.Context) SecretIamMemberMapOutput
type SecretIamMemberOutput ¶
type SecretIamMemberOutput struct {
*pulumi.OutputState
}
func (SecretIamMemberOutput) ElementType ¶
func (SecretIamMemberOutput) ElementType() reflect.Type
func (SecretIamMemberOutput) ToSecretIamMemberOutput ¶
func (o SecretIamMemberOutput) ToSecretIamMemberOutput() SecretIamMemberOutput
func (SecretIamMemberOutput) ToSecretIamMemberOutputWithContext ¶
func (o SecretIamMemberOutput) ToSecretIamMemberOutputWithContext(ctx context.Context) SecretIamMemberOutput
func (SecretIamMemberOutput) ToSecretIamMemberPtrOutput ¶
func (o SecretIamMemberOutput) ToSecretIamMemberPtrOutput() SecretIamMemberPtrOutput
func (SecretIamMemberOutput) ToSecretIamMemberPtrOutputWithContext ¶
func (o SecretIamMemberOutput) ToSecretIamMemberPtrOutputWithContext(ctx context.Context) SecretIamMemberPtrOutput
type SecretIamMemberPtrInput ¶
type SecretIamMemberPtrInput interface { pulumi.Input ToSecretIamMemberPtrOutput() SecretIamMemberPtrOutput ToSecretIamMemberPtrOutputWithContext(ctx context.Context) SecretIamMemberPtrOutput }
type SecretIamMemberPtrOutput ¶
type SecretIamMemberPtrOutput struct {
*pulumi.OutputState
}
func (SecretIamMemberPtrOutput) ElementType ¶
func (SecretIamMemberPtrOutput) ElementType() reflect.Type
func (SecretIamMemberPtrOutput) ToSecretIamMemberPtrOutput ¶
func (o SecretIamMemberPtrOutput) ToSecretIamMemberPtrOutput() SecretIamMemberPtrOutput
func (SecretIamMemberPtrOutput) ToSecretIamMemberPtrOutputWithContext ¶
func (o SecretIamMemberPtrOutput) ToSecretIamMemberPtrOutputWithContext(ctx context.Context) SecretIamMemberPtrOutput
type SecretIamMemberState ¶
type SecretIamMemberState struct { Condition SecretIamMemberConditionPtrInput // (Computed) The etag of the IAM policy. Etag pulumi.StringPtrInput Member pulumi.StringPtrInput // The ID of the project in which the resource belongs. // If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used. Project pulumi.StringPtrInput // The role that should be applied. Only one // `secretmanager.SecretIamBinding` can be used per role. Note that custom roles must be of the format // `[projects|organizations]/{parent-name}/roles/{role-name}`. Role pulumi.StringPtrInput SecretId pulumi.StringPtrInput }
func (SecretIamMemberState) ElementType ¶
func (SecretIamMemberState) ElementType() reflect.Type
type SecretIamPolicy ¶
type SecretIamPolicy struct { pulumi.CustomResourceState // (Computed) The etag of the IAM policy. Etag pulumi.StringOutput `pulumi:"etag"` // The policy data generated by // a `organizations.getIAMPolicy` data source. PolicyData pulumi.StringOutput `pulumi:"policyData"` // The ID of the project in which the resource belongs. // If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used. Project pulumi.StringOutput `pulumi:"project"` SecretId pulumi.StringOutput `pulumi:"secretId"` }
Three different resources help you manage your IAM policy for Secret Manager Secret. Each of these resources serves a different use case:
* `secretmanager.SecretIamPolicy`: Authoritative. Sets the IAM policy for the secret and replaces any existing policy already attached. * `secretmanager.SecretIamBinding`: Authoritative for a given role. Updates the IAM policy to grant a role to a list of members. Other roles within the IAM policy for the secret are preserved. * `secretmanager.SecretIamMember`: Non-authoritative. Updates the IAM policy to grant a role to a new member. Other members for the role for the secret are preserved.
> **Note:** `secretmanager.SecretIamPolicy` **cannot** be used in conjunction with `secretmanager.SecretIamBinding` and `secretmanager.SecretIamMember` or they will fight over what your policy should be.
> **Note:** `secretmanager.SecretIamBinding` resources **can be** used in conjunction with `secretmanager.SecretIamMember` resources **only if** they do not grant privilege to the same role.
## google\_secret\_manager\_secret\_iam\_policy
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/organizations" "github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { admin, err := organizations.LookupIAMPolicy(ctx, &organizations.LookupIAMPolicyArgs{ Bindings: []organizations.GetIAMPolicyBinding{ organizations.GetIAMPolicyBinding{ Role: "roles/secretmanager.secretAccessor", Members: []string{ "user:jane@example.com", }, }, }, }, nil) if err != nil { return err } _, err = secretmanager.NewSecretIamPolicy(ctx, "policy", &secretmanager.SecretIamPolicyArgs{ Project: pulumi.Any(google_secret_manager_secret.Secret - basic.Project), SecretId: pulumi.Any(google_secret_manager_secret.Secret - basic.Secret_id), PolicyData: pulumi.String(admin.PolicyData), }) if err != nil { return err } return nil }) }
```
## google\_secret\_manager\_secret\_iam\_binding
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { _, err := secretmanager.NewSecretIamBinding(ctx, "binding", &secretmanager.SecretIamBindingArgs{ Project: pulumi.Any(google_secret_manager_secret.Secret - basic.Project), SecretId: pulumi.Any(google_secret_manager_secret.Secret - basic.Secret_id), Role: pulumi.String("roles/secretmanager.secretAccessor"), Members: pulumi.StringArray{ pulumi.String("user:jane@example.com"), }, }) if err != nil { return err } return nil }) }
```
## google\_secret\_manager\_secret\_iam\_member
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { _, err := secretmanager.NewSecretIamMember(ctx, "member", &secretmanager.SecretIamMemberArgs{ Project: pulumi.Any(google_secret_manager_secret.Secret - basic.Project), SecretId: pulumi.Any(google_secret_manager_secret.Secret - basic.Secret_id), Role: pulumi.String("roles/secretmanager.secretAccessor"), Member: pulumi.String("user:jane@example.com"), }) if err != nil { return err } return nil }) }
```
## Import
For all import syntaxes, the "resource in question" can take any of the following forms* projects/{{project}}/secrets/{{secret_id}} * {{project}}/{{secret_id}} * {{secret_id}} Any variables not passed in the import command will be taken from the provider configuration. Secret Manager secret IAM resources can be imported using the resource identifiers, role, and member. IAM member imports use space-delimited identifiersthe resource in question, the role, and the member identity, e.g.
```sh
$ pulumi import gcp:secretmanager/secretIamPolicy:SecretIamPolicy editor "projects/{{project}}/secrets/{{secret_id}} roles/secretmanager.secretAccessor user:jane@example.com"
```
IAM binding imports use space-delimited identifiersthe resource in question and the role, e.g.
```sh
$ pulumi import gcp:secretmanager/secretIamPolicy:SecretIamPolicy editor "projects/{{project}}/secrets/{{secret_id}} roles/secretmanager.secretAccessor"
```
IAM policy imports use the identifier of the resource in question, e.g.
```sh
$ pulumi import gcp:secretmanager/secretIamPolicy:SecretIamPolicy editor projects/{{project}}/secrets/{{secret_id}}
```
-> **Custom Roles**If you're importing a IAM resource with a custom role, make sure to use the
full name of the custom role, e.g. `[projects/my-project|organizations/my-org]/roles/my-custom-role`.
func GetSecretIamPolicy ¶
func GetSecretIamPolicy(ctx *pulumi.Context, name string, id pulumi.IDInput, state *SecretIamPolicyState, opts ...pulumi.ResourceOption) (*SecretIamPolicy, error)
GetSecretIamPolicy gets an existing SecretIamPolicy resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewSecretIamPolicy ¶
func NewSecretIamPolicy(ctx *pulumi.Context, name string, args *SecretIamPolicyArgs, opts ...pulumi.ResourceOption) (*SecretIamPolicy, error)
NewSecretIamPolicy registers a new resource with the given unique name, arguments, and options.
func (*SecretIamPolicy) ElementType ¶
func (*SecretIamPolicy) ElementType() reflect.Type
func (*SecretIamPolicy) ToSecretIamPolicyOutput ¶
func (i *SecretIamPolicy) ToSecretIamPolicyOutput() SecretIamPolicyOutput
func (*SecretIamPolicy) ToSecretIamPolicyOutputWithContext ¶
func (i *SecretIamPolicy) ToSecretIamPolicyOutputWithContext(ctx context.Context) SecretIamPolicyOutput
func (*SecretIamPolicy) ToSecretIamPolicyPtrOutput ¶
func (i *SecretIamPolicy) ToSecretIamPolicyPtrOutput() SecretIamPolicyPtrOutput
func (*SecretIamPolicy) ToSecretIamPolicyPtrOutputWithContext ¶
func (i *SecretIamPolicy) ToSecretIamPolicyPtrOutputWithContext(ctx context.Context) SecretIamPolicyPtrOutput
type SecretIamPolicyArgs ¶
type SecretIamPolicyArgs struct { // The policy data generated by // a `organizations.getIAMPolicy` data source. PolicyData pulumi.StringInput // The ID of the project in which the resource belongs. // If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used. Project pulumi.StringPtrInput SecretId pulumi.StringInput }
The set of arguments for constructing a SecretIamPolicy resource.
func (SecretIamPolicyArgs) ElementType ¶
func (SecretIamPolicyArgs) ElementType() reflect.Type
type SecretIamPolicyArray ¶
type SecretIamPolicyArray []SecretIamPolicyInput
func (SecretIamPolicyArray) ElementType ¶
func (SecretIamPolicyArray) ElementType() reflect.Type
func (SecretIamPolicyArray) ToSecretIamPolicyArrayOutput ¶
func (i SecretIamPolicyArray) ToSecretIamPolicyArrayOutput() SecretIamPolicyArrayOutput
func (SecretIamPolicyArray) ToSecretIamPolicyArrayOutputWithContext ¶
func (i SecretIamPolicyArray) ToSecretIamPolicyArrayOutputWithContext(ctx context.Context) SecretIamPolicyArrayOutput
type SecretIamPolicyArrayInput ¶
type SecretIamPolicyArrayInput interface { pulumi.Input ToSecretIamPolicyArrayOutput() SecretIamPolicyArrayOutput ToSecretIamPolicyArrayOutputWithContext(context.Context) SecretIamPolicyArrayOutput }
SecretIamPolicyArrayInput is an input type that accepts SecretIamPolicyArray and SecretIamPolicyArrayOutput values. You can construct a concrete instance of `SecretIamPolicyArrayInput` via:
SecretIamPolicyArray{ SecretIamPolicyArgs{...} }
type SecretIamPolicyArrayOutput ¶
type SecretIamPolicyArrayOutput struct{ *pulumi.OutputState }
func (SecretIamPolicyArrayOutput) ElementType ¶
func (SecretIamPolicyArrayOutput) ElementType() reflect.Type
func (SecretIamPolicyArrayOutput) Index ¶
func (o SecretIamPolicyArrayOutput) Index(i pulumi.IntInput) SecretIamPolicyOutput
func (SecretIamPolicyArrayOutput) ToSecretIamPolicyArrayOutput ¶
func (o SecretIamPolicyArrayOutput) ToSecretIamPolicyArrayOutput() SecretIamPolicyArrayOutput
func (SecretIamPolicyArrayOutput) ToSecretIamPolicyArrayOutputWithContext ¶
func (o SecretIamPolicyArrayOutput) ToSecretIamPolicyArrayOutputWithContext(ctx context.Context) SecretIamPolicyArrayOutput
type SecretIamPolicyInput ¶
type SecretIamPolicyInput interface { pulumi.Input ToSecretIamPolicyOutput() SecretIamPolicyOutput ToSecretIamPolicyOutputWithContext(ctx context.Context) SecretIamPolicyOutput }
type SecretIamPolicyMap ¶
type SecretIamPolicyMap map[string]SecretIamPolicyInput
func (SecretIamPolicyMap) ElementType ¶
func (SecretIamPolicyMap) ElementType() reflect.Type
func (SecretIamPolicyMap) ToSecretIamPolicyMapOutput ¶
func (i SecretIamPolicyMap) ToSecretIamPolicyMapOutput() SecretIamPolicyMapOutput
func (SecretIamPolicyMap) ToSecretIamPolicyMapOutputWithContext ¶
func (i SecretIamPolicyMap) ToSecretIamPolicyMapOutputWithContext(ctx context.Context) SecretIamPolicyMapOutput
type SecretIamPolicyMapInput ¶
type SecretIamPolicyMapInput interface { pulumi.Input ToSecretIamPolicyMapOutput() SecretIamPolicyMapOutput ToSecretIamPolicyMapOutputWithContext(context.Context) SecretIamPolicyMapOutput }
SecretIamPolicyMapInput is an input type that accepts SecretIamPolicyMap and SecretIamPolicyMapOutput values. You can construct a concrete instance of `SecretIamPolicyMapInput` via:
SecretIamPolicyMap{ "key": SecretIamPolicyArgs{...} }
type SecretIamPolicyMapOutput ¶
type SecretIamPolicyMapOutput struct{ *pulumi.OutputState }
func (SecretIamPolicyMapOutput) ElementType ¶
func (SecretIamPolicyMapOutput) ElementType() reflect.Type
func (SecretIamPolicyMapOutput) MapIndex ¶
func (o SecretIamPolicyMapOutput) MapIndex(k pulumi.StringInput) SecretIamPolicyOutput
func (SecretIamPolicyMapOutput) ToSecretIamPolicyMapOutput ¶
func (o SecretIamPolicyMapOutput) ToSecretIamPolicyMapOutput() SecretIamPolicyMapOutput
func (SecretIamPolicyMapOutput) ToSecretIamPolicyMapOutputWithContext ¶
func (o SecretIamPolicyMapOutput) ToSecretIamPolicyMapOutputWithContext(ctx context.Context) SecretIamPolicyMapOutput
type SecretIamPolicyOutput ¶
type SecretIamPolicyOutput struct {
*pulumi.OutputState
}
func (SecretIamPolicyOutput) ElementType ¶
func (SecretIamPolicyOutput) ElementType() reflect.Type
func (SecretIamPolicyOutput) ToSecretIamPolicyOutput ¶
func (o SecretIamPolicyOutput) ToSecretIamPolicyOutput() SecretIamPolicyOutput
func (SecretIamPolicyOutput) ToSecretIamPolicyOutputWithContext ¶
func (o SecretIamPolicyOutput) ToSecretIamPolicyOutputWithContext(ctx context.Context) SecretIamPolicyOutput
func (SecretIamPolicyOutput) ToSecretIamPolicyPtrOutput ¶
func (o SecretIamPolicyOutput) ToSecretIamPolicyPtrOutput() SecretIamPolicyPtrOutput
func (SecretIamPolicyOutput) ToSecretIamPolicyPtrOutputWithContext ¶
func (o SecretIamPolicyOutput) ToSecretIamPolicyPtrOutputWithContext(ctx context.Context) SecretIamPolicyPtrOutput
type SecretIamPolicyPtrInput ¶
type SecretIamPolicyPtrInput interface { pulumi.Input ToSecretIamPolicyPtrOutput() SecretIamPolicyPtrOutput ToSecretIamPolicyPtrOutputWithContext(ctx context.Context) SecretIamPolicyPtrOutput }
type SecretIamPolicyPtrOutput ¶
type SecretIamPolicyPtrOutput struct {
*pulumi.OutputState
}
func (SecretIamPolicyPtrOutput) ElementType ¶
func (SecretIamPolicyPtrOutput) ElementType() reflect.Type
func (SecretIamPolicyPtrOutput) ToSecretIamPolicyPtrOutput ¶
func (o SecretIamPolicyPtrOutput) ToSecretIamPolicyPtrOutput() SecretIamPolicyPtrOutput
func (SecretIamPolicyPtrOutput) ToSecretIamPolicyPtrOutputWithContext ¶
func (o SecretIamPolicyPtrOutput) ToSecretIamPolicyPtrOutputWithContext(ctx context.Context) SecretIamPolicyPtrOutput
type SecretIamPolicyState ¶
type SecretIamPolicyState struct { // (Computed) The etag of the IAM policy. Etag pulumi.StringPtrInput // The policy data generated by // a `organizations.getIAMPolicy` data source. PolicyData pulumi.StringPtrInput // The ID of the project in which the resource belongs. // If it is not provided, the project will be parsed from the identifier of the parent resource. If no project is provided in the parent identifier and no project is specified, the provider project is used. Project pulumi.StringPtrInput SecretId pulumi.StringPtrInput }
func (SecretIamPolicyState) ElementType ¶
func (SecretIamPolicyState) ElementType() reflect.Type
type SecretInput ¶
type SecretInput interface { pulumi.Input ToSecretOutput() SecretOutput ToSecretOutputWithContext(ctx context.Context) SecretOutput }
type SecretMap ¶
type SecretMap map[string]SecretInput
func (SecretMap) ElementType ¶
func (SecretMap) ToSecretMapOutput ¶
func (i SecretMap) ToSecretMapOutput() SecretMapOutput
func (SecretMap) ToSecretMapOutputWithContext ¶
func (i SecretMap) ToSecretMapOutputWithContext(ctx context.Context) SecretMapOutput
type SecretMapInput ¶
type SecretMapInput interface { pulumi.Input ToSecretMapOutput() SecretMapOutput ToSecretMapOutputWithContext(context.Context) SecretMapOutput }
SecretMapInput is an input type that accepts SecretMap and SecretMapOutput values. You can construct a concrete instance of `SecretMapInput` via:
SecretMap{ "key": SecretArgs{...} }
type SecretMapOutput ¶
type SecretMapOutput struct{ *pulumi.OutputState }
func (SecretMapOutput) ElementType ¶
func (SecretMapOutput) ElementType() reflect.Type
func (SecretMapOutput) MapIndex ¶
func (o SecretMapOutput) MapIndex(k pulumi.StringInput) SecretOutput
func (SecretMapOutput) ToSecretMapOutput ¶
func (o SecretMapOutput) ToSecretMapOutput() SecretMapOutput
func (SecretMapOutput) ToSecretMapOutputWithContext ¶
func (o SecretMapOutput) ToSecretMapOutputWithContext(ctx context.Context) SecretMapOutput
type SecretOutput ¶
type SecretOutput struct {
*pulumi.OutputState
}
func (SecretOutput) ElementType ¶
func (SecretOutput) ElementType() reflect.Type
func (SecretOutput) ToSecretOutput ¶
func (o SecretOutput) ToSecretOutput() SecretOutput
func (SecretOutput) ToSecretOutputWithContext ¶
func (o SecretOutput) ToSecretOutputWithContext(ctx context.Context) SecretOutput
func (SecretOutput) ToSecretPtrOutput ¶
func (o SecretOutput) ToSecretPtrOutput() SecretPtrOutput
func (SecretOutput) ToSecretPtrOutputWithContext ¶
func (o SecretOutput) ToSecretPtrOutputWithContext(ctx context.Context) SecretPtrOutput
type SecretPtrInput ¶
type SecretPtrInput interface { pulumi.Input ToSecretPtrOutput() SecretPtrOutput ToSecretPtrOutputWithContext(ctx context.Context) SecretPtrOutput }
type SecretPtrOutput ¶
type SecretPtrOutput struct {
*pulumi.OutputState
}
func (SecretPtrOutput) ElementType ¶
func (SecretPtrOutput) ElementType() reflect.Type
func (SecretPtrOutput) ToSecretPtrOutput ¶
func (o SecretPtrOutput) ToSecretPtrOutput() SecretPtrOutput
func (SecretPtrOutput) ToSecretPtrOutputWithContext ¶
func (o SecretPtrOutput) ToSecretPtrOutputWithContext(ctx context.Context) SecretPtrOutput
type SecretReplication ¶
type SecretReplication struct { // The Secret will automatically be replicated without any restrictions. Automatic *bool `pulumi:"automatic"` // The Secret will automatically be replicated without any restrictions. // Structure is documented below. UserManaged *SecretReplicationUserManaged `pulumi:"userManaged"` }
type SecretReplicationArgs ¶
type SecretReplicationArgs struct { // The Secret will automatically be replicated without any restrictions. Automatic pulumi.BoolPtrInput `pulumi:"automatic"` // The Secret will automatically be replicated without any restrictions. // Structure is documented below. UserManaged SecretReplicationUserManagedPtrInput `pulumi:"userManaged"` }
func (SecretReplicationArgs) ElementType ¶
func (SecretReplicationArgs) ElementType() reflect.Type
func (SecretReplicationArgs) ToSecretReplicationOutput ¶
func (i SecretReplicationArgs) ToSecretReplicationOutput() SecretReplicationOutput
func (SecretReplicationArgs) ToSecretReplicationOutputWithContext ¶
func (i SecretReplicationArgs) ToSecretReplicationOutputWithContext(ctx context.Context) SecretReplicationOutput
func (SecretReplicationArgs) ToSecretReplicationPtrOutput ¶
func (i SecretReplicationArgs) ToSecretReplicationPtrOutput() SecretReplicationPtrOutput
func (SecretReplicationArgs) ToSecretReplicationPtrOutputWithContext ¶
func (i SecretReplicationArgs) ToSecretReplicationPtrOutputWithContext(ctx context.Context) SecretReplicationPtrOutput
type SecretReplicationInput ¶
type SecretReplicationInput interface { pulumi.Input ToSecretReplicationOutput() SecretReplicationOutput ToSecretReplicationOutputWithContext(context.Context) SecretReplicationOutput }
SecretReplicationInput is an input type that accepts SecretReplicationArgs and SecretReplicationOutput values. You can construct a concrete instance of `SecretReplicationInput` via:
SecretReplicationArgs{...}
type SecretReplicationOutput ¶
type SecretReplicationOutput struct{ *pulumi.OutputState }
func (SecretReplicationOutput) Automatic ¶
func (o SecretReplicationOutput) Automatic() pulumi.BoolPtrOutput
The Secret will automatically be replicated without any restrictions.
func (SecretReplicationOutput) ElementType ¶
func (SecretReplicationOutput) ElementType() reflect.Type
func (SecretReplicationOutput) ToSecretReplicationOutput ¶
func (o SecretReplicationOutput) ToSecretReplicationOutput() SecretReplicationOutput
func (SecretReplicationOutput) ToSecretReplicationOutputWithContext ¶
func (o SecretReplicationOutput) ToSecretReplicationOutputWithContext(ctx context.Context) SecretReplicationOutput
func (SecretReplicationOutput) ToSecretReplicationPtrOutput ¶
func (o SecretReplicationOutput) ToSecretReplicationPtrOutput() SecretReplicationPtrOutput
func (SecretReplicationOutput) ToSecretReplicationPtrOutputWithContext ¶
func (o SecretReplicationOutput) ToSecretReplicationPtrOutputWithContext(ctx context.Context) SecretReplicationPtrOutput
func (SecretReplicationOutput) UserManaged ¶
func (o SecretReplicationOutput) UserManaged() SecretReplicationUserManagedPtrOutput
The Secret will automatically be replicated without any restrictions. Structure is documented below.
type SecretReplicationPtrInput ¶
type SecretReplicationPtrInput interface { pulumi.Input ToSecretReplicationPtrOutput() SecretReplicationPtrOutput ToSecretReplicationPtrOutputWithContext(context.Context) SecretReplicationPtrOutput }
SecretReplicationPtrInput is an input type that accepts SecretReplicationArgs, SecretReplicationPtr and SecretReplicationPtrOutput values. You can construct a concrete instance of `SecretReplicationPtrInput` via:
SecretReplicationArgs{...} or: nil
func SecretReplicationPtr ¶
func SecretReplicationPtr(v *SecretReplicationArgs) SecretReplicationPtrInput
type SecretReplicationPtrOutput ¶
type SecretReplicationPtrOutput struct{ *pulumi.OutputState }
func (SecretReplicationPtrOutput) Automatic ¶
func (o SecretReplicationPtrOutput) Automatic() pulumi.BoolPtrOutput
The Secret will automatically be replicated without any restrictions.
func (SecretReplicationPtrOutput) Elem ¶
func (o SecretReplicationPtrOutput) Elem() SecretReplicationOutput
func (SecretReplicationPtrOutput) ElementType ¶
func (SecretReplicationPtrOutput) ElementType() reflect.Type
func (SecretReplicationPtrOutput) ToSecretReplicationPtrOutput ¶
func (o SecretReplicationPtrOutput) ToSecretReplicationPtrOutput() SecretReplicationPtrOutput
func (SecretReplicationPtrOutput) ToSecretReplicationPtrOutputWithContext ¶
func (o SecretReplicationPtrOutput) ToSecretReplicationPtrOutputWithContext(ctx context.Context) SecretReplicationPtrOutput
func (SecretReplicationPtrOutput) UserManaged ¶
func (o SecretReplicationPtrOutput) UserManaged() SecretReplicationUserManagedPtrOutput
The Secret will automatically be replicated without any restrictions. Structure is documented below.
type SecretReplicationUserManaged ¶
type SecretReplicationUserManaged struct { // The list of Replicas for this Secret. Cannot be empty. // Structure is documented below. Replicas []SecretReplicationUserManagedReplica `pulumi:"replicas"` }
type SecretReplicationUserManagedArgs ¶
type SecretReplicationUserManagedArgs struct { // The list of Replicas for this Secret. Cannot be empty. // Structure is documented below. Replicas SecretReplicationUserManagedReplicaArrayInput `pulumi:"replicas"` }
func (SecretReplicationUserManagedArgs) ElementType ¶
func (SecretReplicationUserManagedArgs) ElementType() reflect.Type
func (SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedOutput ¶
func (i SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedOutput() SecretReplicationUserManagedOutput
func (SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedOutputWithContext ¶
func (i SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedOutputWithContext(ctx context.Context) SecretReplicationUserManagedOutput
func (SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedPtrOutput ¶
func (i SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedPtrOutput() SecretReplicationUserManagedPtrOutput
func (SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedPtrOutputWithContext ¶
func (i SecretReplicationUserManagedArgs) ToSecretReplicationUserManagedPtrOutputWithContext(ctx context.Context) SecretReplicationUserManagedPtrOutput
type SecretReplicationUserManagedInput ¶
type SecretReplicationUserManagedInput interface { pulumi.Input ToSecretReplicationUserManagedOutput() SecretReplicationUserManagedOutput ToSecretReplicationUserManagedOutputWithContext(context.Context) SecretReplicationUserManagedOutput }
SecretReplicationUserManagedInput is an input type that accepts SecretReplicationUserManagedArgs and SecretReplicationUserManagedOutput values. You can construct a concrete instance of `SecretReplicationUserManagedInput` via:
SecretReplicationUserManagedArgs{...}
type SecretReplicationUserManagedOutput ¶
type SecretReplicationUserManagedOutput struct{ *pulumi.OutputState }
func (SecretReplicationUserManagedOutput) ElementType ¶
func (SecretReplicationUserManagedOutput) ElementType() reflect.Type
func (SecretReplicationUserManagedOutput) Replicas ¶
func (o SecretReplicationUserManagedOutput) Replicas() SecretReplicationUserManagedReplicaArrayOutput
The list of Replicas for this Secret. Cannot be empty. Structure is documented below.
func (SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedOutput ¶
func (o SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedOutput() SecretReplicationUserManagedOutput
func (SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedOutputWithContext ¶
func (o SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedOutputWithContext(ctx context.Context) SecretReplicationUserManagedOutput
func (SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedPtrOutput ¶
func (o SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedPtrOutput() SecretReplicationUserManagedPtrOutput
func (SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedPtrOutputWithContext ¶
func (o SecretReplicationUserManagedOutput) ToSecretReplicationUserManagedPtrOutputWithContext(ctx context.Context) SecretReplicationUserManagedPtrOutput
type SecretReplicationUserManagedPtrInput ¶
type SecretReplicationUserManagedPtrInput interface { pulumi.Input ToSecretReplicationUserManagedPtrOutput() SecretReplicationUserManagedPtrOutput ToSecretReplicationUserManagedPtrOutputWithContext(context.Context) SecretReplicationUserManagedPtrOutput }
SecretReplicationUserManagedPtrInput is an input type that accepts SecretReplicationUserManagedArgs, SecretReplicationUserManagedPtr and SecretReplicationUserManagedPtrOutput values. You can construct a concrete instance of `SecretReplicationUserManagedPtrInput` via:
SecretReplicationUserManagedArgs{...} or: nil
func SecretReplicationUserManagedPtr ¶
func SecretReplicationUserManagedPtr(v *SecretReplicationUserManagedArgs) SecretReplicationUserManagedPtrInput
type SecretReplicationUserManagedPtrOutput ¶
type SecretReplicationUserManagedPtrOutput struct{ *pulumi.OutputState }
func (SecretReplicationUserManagedPtrOutput) ElementType ¶
func (SecretReplicationUserManagedPtrOutput) ElementType() reflect.Type
func (SecretReplicationUserManagedPtrOutput) Replicas ¶
func (o SecretReplicationUserManagedPtrOutput) Replicas() SecretReplicationUserManagedReplicaArrayOutput
The list of Replicas for this Secret. Cannot be empty. Structure is documented below.
func (SecretReplicationUserManagedPtrOutput) ToSecretReplicationUserManagedPtrOutput ¶
func (o SecretReplicationUserManagedPtrOutput) ToSecretReplicationUserManagedPtrOutput() SecretReplicationUserManagedPtrOutput
func (SecretReplicationUserManagedPtrOutput) ToSecretReplicationUserManagedPtrOutputWithContext ¶
func (o SecretReplicationUserManagedPtrOutput) ToSecretReplicationUserManagedPtrOutputWithContext(ctx context.Context) SecretReplicationUserManagedPtrOutput
type SecretReplicationUserManagedReplica ¶
type SecretReplicationUserManagedReplica struct { // The canonical IDs of the location to replicate data. For example: "us-east1". Location string `pulumi:"location"` }
type SecretReplicationUserManagedReplicaArgs ¶
type SecretReplicationUserManagedReplicaArgs struct { // The canonical IDs of the location to replicate data. For example: "us-east1". Location pulumi.StringInput `pulumi:"location"` }
func (SecretReplicationUserManagedReplicaArgs) ElementType ¶
func (SecretReplicationUserManagedReplicaArgs) ElementType() reflect.Type
func (SecretReplicationUserManagedReplicaArgs) ToSecretReplicationUserManagedReplicaOutput ¶
func (i SecretReplicationUserManagedReplicaArgs) ToSecretReplicationUserManagedReplicaOutput() SecretReplicationUserManagedReplicaOutput
func (SecretReplicationUserManagedReplicaArgs) ToSecretReplicationUserManagedReplicaOutputWithContext ¶
func (i SecretReplicationUserManagedReplicaArgs) ToSecretReplicationUserManagedReplicaOutputWithContext(ctx context.Context) SecretReplicationUserManagedReplicaOutput
type SecretReplicationUserManagedReplicaArray ¶
type SecretReplicationUserManagedReplicaArray []SecretReplicationUserManagedReplicaInput
func (SecretReplicationUserManagedReplicaArray) ElementType ¶
func (SecretReplicationUserManagedReplicaArray) ElementType() reflect.Type
func (SecretReplicationUserManagedReplicaArray) ToSecretReplicationUserManagedReplicaArrayOutput ¶
func (i SecretReplicationUserManagedReplicaArray) ToSecretReplicationUserManagedReplicaArrayOutput() SecretReplicationUserManagedReplicaArrayOutput
func (SecretReplicationUserManagedReplicaArray) ToSecretReplicationUserManagedReplicaArrayOutputWithContext ¶
func (i SecretReplicationUserManagedReplicaArray) ToSecretReplicationUserManagedReplicaArrayOutputWithContext(ctx context.Context) SecretReplicationUserManagedReplicaArrayOutput
type SecretReplicationUserManagedReplicaArrayInput ¶
type SecretReplicationUserManagedReplicaArrayInput interface { pulumi.Input ToSecretReplicationUserManagedReplicaArrayOutput() SecretReplicationUserManagedReplicaArrayOutput ToSecretReplicationUserManagedReplicaArrayOutputWithContext(context.Context) SecretReplicationUserManagedReplicaArrayOutput }
SecretReplicationUserManagedReplicaArrayInput is an input type that accepts SecretReplicationUserManagedReplicaArray and SecretReplicationUserManagedReplicaArrayOutput values. You can construct a concrete instance of `SecretReplicationUserManagedReplicaArrayInput` via:
SecretReplicationUserManagedReplicaArray{ SecretReplicationUserManagedReplicaArgs{...} }
type SecretReplicationUserManagedReplicaArrayOutput ¶
type SecretReplicationUserManagedReplicaArrayOutput struct{ *pulumi.OutputState }
func (SecretReplicationUserManagedReplicaArrayOutput) ElementType ¶
func (SecretReplicationUserManagedReplicaArrayOutput) ElementType() reflect.Type
func (SecretReplicationUserManagedReplicaArrayOutput) ToSecretReplicationUserManagedReplicaArrayOutput ¶
func (o SecretReplicationUserManagedReplicaArrayOutput) ToSecretReplicationUserManagedReplicaArrayOutput() SecretReplicationUserManagedReplicaArrayOutput
func (SecretReplicationUserManagedReplicaArrayOutput) ToSecretReplicationUserManagedReplicaArrayOutputWithContext ¶
func (o SecretReplicationUserManagedReplicaArrayOutput) ToSecretReplicationUserManagedReplicaArrayOutputWithContext(ctx context.Context) SecretReplicationUserManagedReplicaArrayOutput
type SecretReplicationUserManagedReplicaInput ¶
type SecretReplicationUserManagedReplicaInput interface { pulumi.Input ToSecretReplicationUserManagedReplicaOutput() SecretReplicationUserManagedReplicaOutput ToSecretReplicationUserManagedReplicaOutputWithContext(context.Context) SecretReplicationUserManagedReplicaOutput }
SecretReplicationUserManagedReplicaInput is an input type that accepts SecretReplicationUserManagedReplicaArgs and SecretReplicationUserManagedReplicaOutput values. You can construct a concrete instance of `SecretReplicationUserManagedReplicaInput` via:
SecretReplicationUserManagedReplicaArgs{...}
type SecretReplicationUserManagedReplicaOutput ¶
type SecretReplicationUserManagedReplicaOutput struct{ *pulumi.OutputState }
func (SecretReplicationUserManagedReplicaOutput) ElementType ¶
func (SecretReplicationUserManagedReplicaOutput) ElementType() reflect.Type
func (SecretReplicationUserManagedReplicaOutput) Location ¶
func (o SecretReplicationUserManagedReplicaOutput) Location() pulumi.StringOutput
The canonical IDs of the location to replicate data. For example: "us-east1".
func (SecretReplicationUserManagedReplicaOutput) ToSecretReplicationUserManagedReplicaOutput ¶
func (o SecretReplicationUserManagedReplicaOutput) ToSecretReplicationUserManagedReplicaOutput() SecretReplicationUserManagedReplicaOutput
func (SecretReplicationUserManagedReplicaOutput) ToSecretReplicationUserManagedReplicaOutputWithContext ¶
func (o SecretReplicationUserManagedReplicaOutput) ToSecretReplicationUserManagedReplicaOutputWithContext(ctx context.Context) SecretReplicationUserManagedReplicaOutput
type SecretState ¶
type SecretState struct { // The time at which the Secret was created. CreateTime pulumi.StringPtrInput // The labels assigned to this Secret. // Label keys must be between 1 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes, // and must conform to the following PCRE regular expression: [\p{Ll}\p{Lo}][\p{Ll}\p{Lo}\p{N}_-]{0,62} // Label values must be between 0 and 63 characters long, have a UTF-8 encoding of maximum 128 bytes, // and must conform to the following PCRE regular expression: [\p{Ll}\p{Lo}\p{N}_-]{0,63} // No more than 64 labels can be assigned to a given resource. // An object containing a list of "key": value pairs. Example: // { "name": "wrench", "mass": "1.3kg", "count": "3" }. Labels pulumi.StringMapInput // The resource name of the Secret. Format: 'projects/{{project}}/secrets/{{secret_id}}' Name pulumi.StringPtrInput // The ID of the project in which the resource belongs. // If it is not provided, the provider project is used. Project pulumi.StringPtrInput // The replication policy of the secret data attached to the Secret. It cannot be changed // after the Secret has been created. // Structure is documented below. Replication SecretReplicationPtrInput // This must be unique within the project. SecretId pulumi.StringPtrInput }
func (SecretState) ElementType ¶
func (SecretState) ElementType() reflect.Type
type SecretVersion ¶
type SecretVersion struct { pulumi.CustomResourceState // The time at which the Secret was created. CreateTime pulumi.StringOutput `pulumi:"createTime"` // The time at which the Secret was destroyed. Only present if state is DESTROYED. DestroyTime pulumi.StringOutput `pulumi:"destroyTime"` // The current state of the SecretVersion. Enabled pulumi.BoolPtrOutput `pulumi:"enabled"` // The resource name of the SecretVersion. Format: 'projects/{{project}}/secrets/{{secret_id}}/versions/{{version}}' Name pulumi.StringOutput `pulumi:"name"` // Secret Manager secret resource Secret pulumi.StringOutput `pulumi:"secret"` // The secret data. Must be no larger than 64KiB. // **Note**: This property is sensitive and will not be displayed in the plan. SecretData pulumi.StringPtrOutput `pulumi:"secretData"` }
A secret version resource.
> **Warning:** All arguments including `payload.secret_data` will be stored in the raw state as plain-text.
## Example Usage ### Secret Version Basic
```go package main
import (
"github.com/pulumi/pulumi-gcp/sdk/v5/go/gcp/secretmanager" "github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() { pulumi.Run(func(ctx *pulumi.Context) error { _, err := secretmanager.NewSecret(ctx, "secret_basic", &secretmanager.SecretArgs{ SecretId: pulumi.String("secret-version"), Labels: pulumi.StringMap{ "label": pulumi.String("my-label"), }, Replication: &secretmanager.SecretReplicationArgs{ Automatic: pulumi.Bool(true), }, }) if err != nil { return err } _, err = secretmanager.NewSecretVersion(ctx, "secret_version_basic", &secretmanager.SecretVersionArgs{ Secret: secret_basic.ID(), SecretData: pulumi.String("secret-data"), }) if err != nil { return err } return nil }) }
```
## Import
SecretVersion can be imported using any of these accepted formats ¶
```sh
$ pulumi import gcp:secretmanager/secretVersion:SecretVersion default {{name}}/{{name}}
```
func GetSecretVersion ¶
func GetSecretVersion(ctx *pulumi.Context, name string, id pulumi.IDInput, state *SecretVersionState, opts ...pulumi.ResourceOption) (*SecretVersion, error)
GetSecretVersion gets an existing SecretVersion resource's state with the given name, ID, and optional state properties that are used to uniquely qualify the lookup (nil if not required).
func NewSecretVersion ¶
func NewSecretVersion(ctx *pulumi.Context, name string, args *SecretVersionArgs, opts ...pulumi.ResourceOption) (*SecretVersion, error)
NewSecretVersion registers a new resource with the given unique name, arguments, and options.
func (*SecretVersion) ElementType ¶
func (*SecretVersion) ElementType() reflect.Type
func (*SecretVersion) ToSecretVersionOutput ¶
func (i *SecretVersion) ToSecretVersionOutput() SecretVersionOutput
func (*SecretVersion) ToSecretVersionOutputWithContext ¶
func (i *SecretVersion) ToSecretVersionOutputWithContext(ctx context.Context) SecretVersionOutput
func (*SecretVersion) ToSecretVersionPtrOutput ¶
func (i *SecretVersion) ToSecretVersionPtrOutput() SecretVersionPtrOutput
func (*SecretVersion) ToSecretVersionPtrOutputWithContext ¶
func (i *SecretVersion) ToSecretVersionPtrOutputWithContext(ctx context.Context) SecretVersionPtrOutput
type SecretVersionArgs ¶
type SecretVersionArgs struct { // The current state of the SecretVersion. Enabled pulumi.BoolPtrInput // Secret Manager secret resource Secret pulumi.StringInput // The secret data. Must be no larger than 64KiB. // **Note**: This property is sensitive and will not be displayed in the plan. SecretData pulumi.StringPtrInput }
The set of arguments for constructing a SecretVersion resource.
func (SecretVersionArgs) ElementType ¶
func (SecretVersionArgs) ElementType() reflect.Type
type SecretVersionArray ¶
type SecretVersionArray []SecretVersionInput
func (SecretVersionArray) ElementType ¶
func (SecretVersionArray) ElementType() reflect.Type
func (SecretVersionArray) ToSecretVersionArrayOutput ¶
func (i SecretVersionArray) ToSecretVersionArrayOutput() SecretVersionArrayOutput
func (SecretVersionArray) ToSecretVersionArrayOutputWithContext ¶
func (i SecretVersionArray) ToSecretVersionArrayOutputWithContext(ctx context.Context) SecretVersionArrayOutput
type SecretVersionArrayInput ¶
type SecretVersionArrayInput interface { pulumi.Input ToSecretVersionArrayOutput() SecretVersionArrayOutput ToSecretVersionArrayOutputWithContext(context.Context) SecretVersionArrayOutput }
SecretVersionArrayInput is an input type that accepts SecretVersionArray and SecretVersionArrayOutput values. You can construct a concrete instance of `SecretVersionArrayInput` via:
SecretVersionArray{ SecretVersionArgs{...} }
type SecretVersionArrayOutput ¶
type SecretVersionArrayOutput struct{ *pulumi.OutputState }
func (SecretVersionArrayOutput) ElementType ¶
func (SecretVersionArrayOutput) ElementType() reflect.Type
func (SecretVersionArrayOutput) Index ¶
func (o SecretVersionArrayOutput) Index(i pulumi.IntInput) SecretVersionOutput
func (SecretVersionArrayOutput) ToSecretVersionArrayOutput ¶
func (o SecretVersionArrayOutput) ToSecretVersionArrayOutput() SecretVersionArrayOutput
func (SecretVersionArrayOutput) ToSecretVersionArrayOutputWithContext ¶
func (o SecretVersionArrayOutput) ToSecretVersionArrayOutputWithContext(ctx context.Context) SecretVersionArrayOutput
type SecretVersionInput ¶
type SecretVersionInput interface { pulumi.Input ToSecretVersionOutput() SecretVersionOutput ToSecretVersionOutputWithContext(ctx context.Context) SecretVersionOutput }
type SecretVersionMap ¶
type SecretVersionMap map[string]SecretVersionInput
func (SecretVersionMap) ElementType ¶
func (SecretVersionMap) ElementType() reflect.Type
func (SecretVersionMap) ToSecretVersionMapOutput ¶
func (i SecretVersionMap) ToSecretVersionMapOutput() SecretVersionMapOutput
func (SecretVersionMap) ToSecretVersionMapOutputWithContext ¶
func (i SecretVersionMap) ToSecretVersionMapOutputWithContext(ctx context.Context) SecretVersionMapOutput
type SecretVersionMapInput ¶
type SecretVersionMapInput interface { pulumi.Input ToSecretVersionMapOutput() SecretVersionMapOutput ToSecretVersionMapOutputWithContext(context.Context) SecretVersionMapOutput }
SecretVersionMapInput is an input type that accepts SecretVersionMap and SecretVersionMapOutput values. You can construct a concrete instance of `SecretVersionMapInput` via:
SecretVersionMap{ "key": SecretVersionArgs{...} }
type SecretVersionMapOutput ¶
type SecretVersionMapOutput struct{ *pulumi.OutputState }
func (SecretVersionMapOutput) ElementType ¶
func (SecretVersionMapOutput) ElementType() reflect.Type
func (SecretVersionMapOutput) MapIndex ¶
func (o SecretVersionMapOutput) MapIndex(k pulumi.StringInput) SecretVersionOutput
func (SecretVersionMapOutput) ToSecretVersionMapOutput ¶
func (o SecretVersionMapOutput) ToSecretVersionMapOutput() SecretVersionMapOutput
func (SecretVersionMapOutput) ToSecretVersionMapOutputWithContext ¶
func (o SecretVersionMapOutput) ToSecretVersionMapOutputWithContext(ctx context.Context) SecretVersionMapOutput
type SecretVersionOutput ¶
type SecretVersionOutput struct {
*pulumi.OutputState
}
func (SecretVersionOutput) ElementType ¶
func (SecretVersionOutput) ElementType() reflect.Type
func (SecretVersionOutput) ToSecretVersionOutput ¶
func (o SecretVersionOutput) ToSecretVersionOutput() SecretVersionOutput
func (SecretVersionOutput) ToSecretVersionOutputWithContext ¶
func (o SecretVersionOutput) ToSecretVersionOutputWithContext(ctx context.Context) SecretVersionOutput
func (SecretVersionOutput) ToSecretVersionPtrOutput ¶
func (o SecretVersionOutput) ToSecretVersionPtrOutput() SecretVersionPtrOutput
func (SecretVersionOutput) ToSecretVersionPtrOutputWithContext ¶
func (o SecretVersionOutput) ToSecretVersionPtrOutputWithContext(ctx context.Context) SecretVersionPtrOutput
type SecretVersionPtrInput ¶
type SecretVersionPtrInput interface { pulumi.Input ToSecretVersionPtrOutput() SecretVersionPtrOutput ToSecretVersionPtrOutputWithContext(ctx context.Context) SecretVersionPtrOutput }
type SecretVersionPtrOutput ¶
type SecretVersionPtrOutput struct {
*pulumi.OutputState
}
func (SecretVersionPtrOutput) ElementType ¶
func (SecretVersionPtrOutput) ElementType() reflect.Type
func (SecretVersionPtrOutput) ToSecretVersionPtrOutput ¶
func (o SecretVersionPtrOutput) ToSecretVersionPtrOutput() SecretVersionPtrOutput
func (SecretVersionPtrOutput) ToSecretVersionPtrOutputWithContext ¶
func (o SecretVersionPtrOutput) ToSecretVersionPtrOutputWithContext(ctx context.Context) SecretVersionPtrOutput
type SecretVersionState ¶
type SecretVersionState struct { // The time at which the Secret was created. CreateTime pulumi.StringPtrInput // The time at which the Secret was destroyed. Only present if state is DESTROYED. DestroyTime pulumi.StringPtrInput // The current state of the SecretVersion. Enabled pulumi.BoolPtrInput // The resource name of the SecretVersion. Format: 'projects/{{project}}/secrets/{{secret_id}}/versions/{{version}}' Name pulumi.StringPtrInput // Secret Manager secret resource Secret pulumi.StringPtrInput // The secret data. Must be no larger than 64KiB. // **Note**: This property is sensitive and will not be displayed in the plan. SecretData pulumi.StringPtrInput }
func (SecretVersionState) ElementType ¶
func (SecretVersionState) ElementType() reflect.Type