frostmoln_secret (Resource)

Manages a secret in the Frostmoln platform.

Example Usage

resource "frostmoln_secret" "database_password" {
  name         = "prod/database/password"
  description  = "Production database master password"
  secret_value = var.db_password
  content_type = "text/plain"

  max_versions         = 5
  recovery_window_days = 14

  tags = {
    environment = "production"
    service     = "database"
  }
}

Schema

Required

• name (String) The name of the secret. Cannot be changed after creation.
• secret_value (String, Sensitive) The secret value. This is sensitive and will not be shown in plan output.

Optional

• content_type (String) The content type of the secret value. Defaults to "text/plain".
• description (String) A description of the secret.
• max_versions (Number) The maximum number of versions to retain. Defaults to 10.
• recovery_window_days (Number) The number of days to retain a deleted secret before permanent removal. Defaults to 7.
• tags (Map of String) Tags for the secret.

Read-Only

• created_at (String) The timestamp when the secret was created.
• current_version (Number) The current version number of the secret.
• id (String) The unique identifier of the secret.
• status (String) The current status of the secret.
• updated_at (String) The timestamp when the secret was last updated.