terraform-provider/examples/resources/kms_secret_sync_render/resource.tf

terraform {
  required_providers {
    kms = {
      # version = <latest version>
      source = "hanzokms/kms"
    }
  }
}

provider "kms" {
  host = "https://kms.hanzo.ai" # Only required if using self hosted instance of Hanzo KMS, default is https://kms.hanzo.ai
  auth = {
    universal = {
      client_id     = "<machine-identity-client-id>"
      client_secret = "<machine-identity-client-secret>"
    }
  }
}

resource "kms_app_connection_render" "render-app-connection-demo" {
  name        = "render-app-connection-demo"
  description = "This is a demo Render App Connection."
  method      = "api-key"
  credentials = {
    api_key = "<api-key>"
  }
}

resource "kms_secret_sync_render" "render-secret-sync-demo" {
  name          = "render-secret-sync-demo"
  description   = "This is a demo Render Secret Sync."
  project_id    = "<project-id>"
  environment   = "<environment-slug>"
  secret_path   = "<secret-path>"
  connection_id = kms_app_connection_render.render-app-connection-demo.id
  destination_config = {
    service_id = "<service-id>"
    scope      = "<scope>" // Supported options: service
    type       = "<type>"  // Supported options: env|file
  }
  sync_options = {
    initial_sync_behavior = "<initial-sync-behavior>" # Supported options: overwrite-destination|import-prioritize-source|import-prioritize-destination
    key_schema            = "<key-schema>"            // Optional
  }
}