GoogleCloudPlatform/secret-manager
Creates one or more Google Secret Manager secrets and manages basic permissions.
About
Creates one or more Google Secret Manager secrets and manages basic permissions.
Maintained by GoogleCloudPlatform on the Terraform Registry. Latest version 0.10.0, 2.4M downloads. Requires providers: google >= 4.83.0, < 8; google-beta >= 4.83.0, < 8.
Deploy creates a StackGuardian workflow from the module's GitHub repository, pinned to this version. You set the inputs, see the plan, then approve the apply.
Use cases
- Customer-managed keys with rotation turned on from day one.
- Secrets referenced by workflows, never stored in repositories.
- One key and secret layout shared by every environment.
Inputs
Required inputs:
project_id— string
10 inputs, 2 outputs in total. The full list, with defaults and descriptions, is on the registry page.
What it creates
google_secret_manager_secretgoogle_secret_manager_secret_versiongoogle_secret_manager_secret_iam_bindinggoogle_kms_crypto_key_iam_membergoogle_pubsub_topic_iam_membergoogle_project_service_identity
How it runs on StackGuardian
Terraform workflow from the module's GitHub repository: plan, policy check, approval, then apply.
Approvals happen in StackGuardian. An agent can never approve its own run. Every run keeps its plan, policy results and approver in the audit log.