google_secret_manager_secret_version

A secret version resource.

Open in Cloud Shell

Example Usage - Secret Version Basic

resource "google_secret_manager_secret" "secret-basic" {
  secret_id = "secret-version"

  labels = {
    label = "my-label"
  }

  replication {
    auto {}
  }
}


resource "google_secret_manager_secret_version" "secret-version-basic" {
  secret = google_secret_manager_secret.secret-basic.id

  secret_data = "secret-data"
}
Open in Cloud Shell

Example Usage - Secret Version Deletion Policy Abandon

resource "google_secret_manager_secret" "secret-basic" {
  secret_id = "secret-version"

  replication {
    user_managed {
      replicas {
        location = "us-central1"
      }
    }
  }
}

resource "google_secret_manager_secret_version" "secret-version-deletion-policy" {
  secret = google_secret_manager_secret.secret-basic.id

  secret_data = "secret-data"
  deletion_policy = "ABANDON"
}
Open in Cloud Shell

Example Usage - Secret Version Deletion Policy Disable

resource "google_secret_manager_secret" "secret-basic" {
  secret_id = "secret-version"

  replication {
    user_managed {
      replicas {
        location = "us-central1"
      }
    }
  }
}

resource "google_secret_manager_secret_version" "secret-version-deletion-policy" {
  secret = google_secret_manager_secret.secret-basic.id

  secret_data = "secret-data"
  deletion_policy = "DISABLE"
}
Open in Cloud Shell

Example Usage - Secret Version With Base64 String Secret Data

resource "google_secret_manager_secret" "secret-basic" {
  secret_id = "secret-version"

  replication {
    user_managed {
      replicas {
        location = "us-central1"
      }
    }
  }
}

resource "google_secret_manager_secret_version" "secret-version-base64" {
  secret = google_secret_manager_secret.secret-basic.id

  is_secret_data_base64 = true
  secret_data = filebase64("secret-data.pfx")
}

Argument Reference

The following arguments are supported:


Attributes Reference

In addition to the arguments listed above, the following computed attributes are exported:

Timeouts

This resource provides the following Timeouts configuration options:

Import

SecretVersion can be imported using any of these accepted formats:

In Terraform v1.5.0 and later, use an import block to import SecretVersion using one of the formats above. For example:

import {
  id = "projects/{{project}}/secrets/{{secret_id}}/versions/{{version}}"
  to = google_secret_manager_secret_version.default
}

When using the terraform import command, SecretVersion can be imported using one of the formats above. For example:

$ terraform import google_secret_manager_secret_version.default projects/{{project}}/secrets/{{secret_id}}/versions/{{version}}