terraform-provider/crossplane/secret_sync/secret_sync_1password/resource.tf

terraform {
  required_providers {
    kms = {
      # version = <latest version>
      source = "hanzokms/kms"
    }
  }
}

provider "kms" {
  host = "https://kms.hanzo.ai" # Only required if using self hosted instance of Hanzo KMS, default is https://kms.hanzo.ai
  auth = {
    universal = {
      client_id     = "<machine-identity-client-id>"
      client_secret = "<machine-identity-client-secret>"
    }
  }
}



resource "kms_secret_sync_1password" "one-password-secret-sync-demo" {
  name          = "1password-secret-sync-demo"
  description   = "This is a demo 1Password Secret Sync."
  project_id    = "<project-id>"
  environment   = "<environment-slug>"
  secret_path   = "<secret-path>"
  connection_id = "<app-connection-id>"

  sync_options = "{\"initialSyncBehavior\": \"<initial-sync-behavior>\", \"keySchema\": \"<key-schema>\"}"

  destination_config = "{\"vaultId\": \"<vault-id>\", \"valueLabel\": \"<value-label>\"}"
}