Switch sctfe_ecdsa_p256_private_key to use write-only arguments

roger2hk · roger2hk · commit 806cfebc73e7 · 2025-04-03T09:58:37.000Z
diff --git a/deployment/modules/gcp/secretmanager/main.tf b/deployment/modules/gcp/secretmanager/main.tf
@@ -2,7 +2,7 @@ terraform {
   required_providers {
     google = {
       source  = "registry.terraform.io/hashicorp/google"
-      version = "6.12.0"
+      version = "6.28.0"
     }
   }
 }
@@ -48,8 +48,8 @@ resource "google_secret_manager_secret" "sctfe_ecdsa_p256_private_key" {
   depends_on = [google_project_service.secretmanager_googleapis_com]
 }
 
-resource "google_secret_manager_secret_version" "sctfe_ecdsa_p256_private_key" {
-  secret = google_secret_manager_secret.sctfe_ecdsa_p256_private_key.id
-
-  secret_data = var.tls_private_key_ecdsa_p256_private_key_pem
+ephemeral "google_secret_manager_secret_version" "sctfe_ecdsa_p256_private_key" {
+  secret                 = google_secret_manager_secret.sctfe_ecdsa_p256_private_key.id
+  secret_data_wo_version = 1
+  secret_data_wo         = var.tls_private_key_ecdsa_p256_private_key_pem
 }

Original file line number	Diff line number	Diff line change
`@@ -2,7 +2,7 @@ terraform {`
`2`	`2`	`required_providers {`
`3`	`3`	`google = {`
`4`	`4`	`source = "registry.terraform.io/hashicorp/google"`
`5`		`- version = "6.12.0"`
	`5`	`+ version = "6.28.0"`
`6`	`6`	`}`
`7`	`7`	`}`
`8`	`8`	`}`
`@@ -48,8 +48,8 @@ resource "google_secret_manager_secret" "sctfe_ecdsa_p256_private_key" {`
`48`	`48`	`depends_on = [google_project_service.secretmanager_googleapis_com]`
`49`	`49`	`}`
`50`	`50`
`51`		`-resource "google_secret_manager_secret_version" "sctfe_ecdsa_p256_private_key" {`
`52`		`- secret = google_secret_manager_secret.sctfe_ecdsa_p256_private_key.id`
`53`		`-`
`54`		`- secret_data = var.tls_private_key_ecdsa_p256_private_key_pem`
	`51`	`+ephemeral "google_secret_manager_secret_version" "sctfe_ecdsa_p256_private_key" {`
	`52`	`+ secret = google_secret_manager_secret.sctfe_ecdsa_p256_private_key.id`
	`53`	`+ secret_data_wo_version = 1`
	`54`	`+ secret_data_wo = var.tls_private_key_ecdsa_p256_private_key_pem`
`55`	`55`	`}`