Secrets Manager secret group module

This module creates a secret group in an IBM Cloud Secrets Manager instance. For more information, see Best practices for organizing secrets and assigning access.

Usage

provider "ibm" {
  ibmcloud_api_key = "XXXXXXXXXX"
  region           = "us-south"
}

module "sm_secret_group_module" {
  source                   = "terraform-ibm-modules/secrets-manager-secret-group/ibm"
  version                  = "X.X.X" # Replace "X.X.X" with a release version to lock into a specific release
  region                   = "us-south"
  secrets_manager_guid     = "79c6dxxx-xxxx-xxxx-xxxx-xxxxXX38667"
  secret_group_name        = "example-group"
  secret_group_description = "secret group description"
}

Required IAM access policies

You need the following permissions to run this module.

• Account Management
  • Resource Group service
    • Viewer platform access
• IAM Services
  • Secrets Manager service
    • Editor platform access
    • Manager service access

Requirements

Name	Version
terraform	>= 1.3.0
ibm	>= 1.70.0, <2.0.0

Modules

No modules.

Resources

Name	Type
ibm_sm_secret_group.secret_group	resource

Inputs

Name	Description	Type	Default	Required
endpoint_type	The service endpoint type to communicate with the provided secrets manager instance. Possible values are public or private	string	"public"	no
region	Region which the Secret Manager is deployed.	string	n/a	yes
secret_group_description	Description of the Secret Group to be created.	string	n/a	yes
secret_group_name	Name of the Secret Group to be created.	string	n/a	yes
secrets_manager_guid	Instance ID of Secrets Manager instance in which the Secret will be added.	string	n/a	yes

Outputs

Name	Description
secret_group_id	ID of the created Secret Group

Examples

• Basic example
• Private-Only Secret Manager example

Contributing

You can report issues and request features for this module in GitHub issues in the module repo. See Report an issue or request a feature.

To set up your local development environment, see Local development setup in the project documentation.