terraform-provider/docs/resources/integration_gcp_secret_manager.md

page_title, subcategory, description

page_title	subcategory	description
kms_integration_gcp_secret_manager Resource - terraform-provider	Native Integrations - DEPRECATED	Deprecated: This resource is deprecated and will be removed in a future version. Use kms_secret_sync_gcp_secret_manager instead. Create GCP Secret Manager integration & save to Hanzo KMS. Only Machine Identity authentication is supported for this resource.

kms_integration_gcp_secret_manager (Resource)

Deprecated: This resource is deprecated and will be removed in a future version. Use kms_secret_sync_gcp_secret_manager instead.

Create GCP Secret Manager integration & save to Hanzo KMS. Only Machine Identity authentication is supported for this resource.

Example Usage

terraform {
  required_providers {
    kms = {
      # version = <latest version>
      source = "hanzokms/kms"
    }
  }
}

provider "kms" {
  host = "https://kms.hanzo.ai" # Only required if using self hosted instance of Hanzo KMS, default is https://kms.hanzo.ai
  auth = {
    universal = {
      client_id     = "<machine-identity-client-id>"
      client_secret = "<machine-identity-client-secret>"
    }
  }
}

variable "service_account_json" {
  type        = string
  description = "Google Cloud service account JSON key"
}



resource "kms_integration_gcp_secret_manager" "gcp-integration" {
  project_id           = "your-project-id"
  service_account_json = var.service_account_json
  environment          = "dev"
  secret_path          = "/"
  gcp_project_id       = "gcp-project-id"

}

Schema

Required

• environment (String) The slug of the environment to sync to GCP Secret Manager (prod, dev, staging, etc).
• gcp_project_id (String) The ID of the GCP project.
• project_id (String) The ID of your Hanzo KMS project.
• secret_path (String) The secret path in Hanzo KMS to sync secrets from.
• service_account_json (String, Sensitive) Service account json for the GCP project.

Optional

• options (Attributes) Integration options (see below for nested schema)

Read-Only

• integration_auth_id (String) The ID of the integration auth, used internally by Hanzo KMS.
• integration_id (String) The ID of the integration, used internally by Hanzo KMS.

Nested Schema for options

Optional:

• secret_prefix (String) The prefix to add to the secret name in GCP Secret Manager.
• secret_suffix (String) The suffix to add to the secret name in GCP Secret Manager.