Secret resource

docs/resources/secret.md

@@ -0,0 +1,53 @@
+---
+# generated by https://github.com/hashicorp/terraform-plugin-docs
+page_title: "identitycloud_secret Resource - terraform-provider-identitycloud"
+subcategory: ""
+description: |-
+  Resource to create and manage a secret.
+---
+
+# identitycloud_secret (Resource)
+
+Resource to create and manage a secret.
+
+## Example Usage
+
+```terraform
+resource "identitycloud_secret" "example" {
+  variable_id  = "esv-mysecret1"
+  description  = "My secret"
+  encoding     = "generic"
+  value_base64 = base64encode("secretvalue")
+}
+```
+
+<!-- schema generated by tfplugindocs -->
+## Schema
+
+### Required
+
+- `encoding` (String) Type of base64 encoding used by the secret. Changing this value requires replacement of the resource. Supported values are `generic`, `pem`, `base64hmac`, `base64aes`.
+- `secret_id` (String) ID of the secret. Must match the regex pattern `^esv-[a-z0-9_-]{1,124}$`.
+- `use_in_placeholders` (Boolean) Whether the secret is used in placeholders. Changing this value requires replacement of the resource.
+- `value_base64` (String) Base64 encoded value of the secret. Changing this value requires replacement of the resource.
+
+### Optional
+
+- `description` (String) Description of the secret.
+
+### Read-Only
+
+- `active_version` (String) Active version of the secret.
+- `id` (String) ID of the secret.
+- `last_change_date` (String) Date of the last change to the secret.
+- `last_changed_by` (String) User who last changed the secret.
+- `loaded` (Boolean) Whether the secret is loaded.
+- `loaded_version` (String) Version of the secret that is loaded.
+
+## Import
+
+Import is supported using the following syntax:
+
+```shell
+terraform import identitycloud_secret.example secret_id
+```

docs/resources/variable.md

@@ -17,7 +17,7 @@ resource "identitycloud_variable" "example" {
   variable_id     = "esv-myvariable1"
   description     = "My variable"
   expression_type = "list"
-  value_base64    = "ZGF0YQ=="
+  value_base64    = base64encode("[]")
 }
 ```
 
@@ -28,7 +28,7 @@ resource "identitycloud_variable" "example" {
 
 - `expression_type` (String) The type of variable expression. Supported values are `string`, `list`, `array`, `object`, `bool`, `int`, `number`, `base64encodedinlined`, `keyvaluelist`.
 - `value_base64` (String) Base64 encoded value of the variable.
-- `variable_id` (String) ID of the variable
+- `variable_id` (String) ID of the variable. Must match the regex `^esv-[a-z0-9_-]{1,124}$`.
 
 ### Optional
 

examples/resources/identitycloud_secret/import.sh

@@ -0,0 +1 @@
+terraform import identitycloud_secret.example secret_id

examples/resources/identitycloud_secret/resource.tf

@@ -0,0 +1,6 @@
+resource "identitycloud_secret" "example" {
+  variable_id  = "esv-mysecret1"
+  description  = "My secret"
+  encoding     = "generic"
+  value_base64 = base64encode("secretvalue")
+}

examples/resources/identitycloud_variable/resource.tf

@@ -2,5 +2,5 @@ resource "identitycloud_variable" "example" {
   variable_id     = "esv-myvariable1"
   description     = "My variable"
   expression_type = "list"
-  value_base64    = "ZGF0YQ=="
+  value_base64    = base64encode("[]")
 }

internal/provider/provider.go

@@ -20,6 +20,7 @@ import (
 	"github.com/pingidentity/terraform-provider-identitycloud/internal/resource/cookiedomains"
 	"github.com/pingidentity/terraform-provider-identitycloud/internal/resource/csrs"
 	"github.com/pingidentity/terraform-provider-identitycloud/internal/resource/customdomains"
+	"github.com/pingidentity/terraform-provider-identitycloud/internal/resource/secrets"
 	"github.com/pingidentity/terraform-provider-identitycloud/internal/resource/variable"
 	internaltypes "github.com/pingidentity/terraform-provider-identitycloud/internal/types"
 	"github.com/pingidentity/terraform-provider-identitycloud/internal/utils"
@@ -179,6 +180,7 @@ func (p *identityCloudProvider) Resources(_ context.Context) []func() resource.R
 		cookiedomains.CookieDomainsResource,
 		csrs.CertificateSigningRequestResource,
 		customdomains.CustomDomainsResource,
+		secrets.SecretResource,
 		variable.VariableResource,
 	}
 }