Google Cloud v8.14.0 published on Wednesday, Jan 15, 2025 by Pulumi
gcp.secretmanager.getRegionalSecret
Explore with Pulumi AI
Use this data source to get information about a Secret Manager Regional Secret
Example Usage
import * as pulumi from "@pulumi/pulumi";
import * as gcp from "@pulumi/gcp";
const secretDatasource = gcp.secretmanager.getRegionalSecret({
    secretId: "secretname",
    location: "us-central1",
});
import pulumi
import pulumi_gcp as gcp
secret_datasource = gcp.secretmanager.get_regional_secret(secret_id="secretname",
    location="us-central1")
package main
import (
	"github.com/pulumi/pulumi-gcp/sdk/v8/go/gcp/secretmanager"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)
func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := secretmanager.LookupRegionalSecret(ctx, &secretmanager.LookupRegionalSecretArgs{
			SecretId: "secretname",
			Location: "us-central1",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Gcp = Pulumi.Gcp;
return await Deployment.RunAsync(() => 
{
    var secretDatasource = Gcp.SecretManager.GetRegionalSecret.Invoke(new()
    {
        SecretId = "secretname",
        Location = "us-central1",
    });
});
package generated_program;
import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.gcp.secretmanager.SecretmanagerFunctions;
import com.pulumi.gcp.secretmanager.inputs.GetRegionalSecretArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;
public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }
    public static void stack(Context ctx) {
        final var secretDatasource = SecretmanagerFunctions.getRegionalSecret(GetRegionalSecretArgs.builder()
            .secretId("secretname")
            .location("us-central1")
            .build());
    }
}
variables:
  secretDatasource:
    fn::invoke:
      function: gcp:secretmanager:getRegionalSecret
      arguments:
        secretId: secretname
        location: us-central1
Using getRegionalSecret
Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.
function getRegionalSecret(args: GetRegionalSecretArgs, opts?: InvokeOptions): Promise<GetRegionalSecretResult>
function getRegionalSecretOutput(args: GetRegionalSecretOutputArgs, opts?: InvokeOptions): Output<GetRegionalSecretResult>def get_regional_secret(location: Optional[str] = None,
                        project: Optional[str] = None,
                        secret_id: Optional[str] = None,
                        opts: Optional[InvokeOptions] = None) -> GetRegionalSecretResult
def get_regional_secret_output(location: Optional[pulumi.Input[str]] = None,
                        project: Optional[pulumi.Input[str]] = None,
                        secret_id: Optional[pulumi.Input[str]] = None,
                        opts: Optional[InvokeOptions] = None) -> Output[GetRegionalSecretResult]func LookupRegionalSecret(ctx *Context, args *LookupRegionalSecretArgs, opts ...InvokeOption) (*LookupRegionalSecretResult, error)
func LookupRegionalSecretOutput(ctx *Context, args *LookupRegionalSecretOutputArgs, opts ...InvokeOption) LookupRegionalSecretResultOutput> Note: This function is named LookupRegionalSecret in the Go SDK.
public static class GetRegionalSecret 
{
    public static Task<GetRegionalSecretResult> InvokeAsync(GetRegionalSecretArgs args, InvokeOptions? opts = null)
    public static Output<GetRegionalSecretResult> Invoke(GetRegionalSecretInvokeArgs args, InvokeOptions? opts = null)
}public static CompletableFuture<GetRegionalSecretResult> getRegionalSecret(GetRegionalSecretArgs args, InvokeOptions options)
// Output-based functions aren't available in Java yet
fn::invoke:
  function: gcp:secretmanager/getRegionalSecret:getRegionalSecret
  arguments:
    # arguments dictionaryThe following arguments are supported:
getRegionalSecret Result
The following output properties are available:
- Annotations Dictionary<string, string>
 - Create
Time string - Customer
Managed List<GetEncryptions Regional Secret Customer Managed Encryption>  - Effective
Annotations Dictionary<string, string> - Effective
Labels Dictionary<string, string> - Expire
Time string - Id string
 - The provider-assigned unique ID for this managed resource.
 - Labels Dictionary<string, string>
 - Location string
 - Name string
 - Pulumi
Labels Dictionary<string, string> - Rotations
List<Get
Regional Secret Rotation>  - Secret
Id string - Topics
List<Get
Regional Secret Topic>  - Ttl string
 - Version
Aliases Dictionary<string, string> - Version
Destroy stringTtl  - Project string
 
- Annotations map[string]string
 - Create
Time string - Customer
Managed []GetEncryptions Regional Secret Customer Managed Encryption  - Effective
Annotations map[string]string - Effective
Labels map[string]string - Expire
Time string - Id string
 - The provider-assigned unique ID for this managed resource.
 - Labels map[string]string
 - Location string
 - Name string
 - Pulumi
Labels map[string]string - Rotations
[]Get
Regional Secret Rotation  - Secret
Id string - Topics
[]Get
Regional Secret Topic  - Ttl string
 - Version
Aliases map[string]string - Version
Destroy stringTtl  - Project string
 
- annotations Map<String,String>
 - create
Time String - customer
Managed List<GetEncryptions Regional Secret Customer Managed Encryption>  - effective
Annotations Map<String,String> - effective
Labels Map<String,String> - expire
Time String - id String
 - The provider-assigned unique ID for this managed resource.
 - labels Map<String,String>
 - location String
 - name String
 - pulumi
Labels Map<String,String> - rotations
List<Get
Regional Secret Rotation>  - secret
Id String - topics
List<Get
Regional Secret Topic>  - ttl String
 - version
Aliases Map<String,String> - version
Destroy StringTtl  - project String
 
- annotations {[key: string]: string}
 - create
Time string - customer
Managed GetEncryptions Regional Secret Customer Managed Encryption[]  - effective
Annotations {[key: string]: string} - effective
Labels {[key: string]: string} - expire
Time string - id string
 - The provider-assigned unique ID for this managed resource.
 - labels {[key: string]: string}
 - location string
 - name string
 - pulumi
Labels {[key: string]: string} - rotations
Get
Regional Secret Rotation[]  - secret
Id string - topics
Get
Regional Secret Topic[]  - ttl string
 - version
Aliases {[key: string]: string} - version
Destroy stringTtl  - project string
 
- annotations Mapping[str, str]
 - create_
time str - customer_
managed_ Sequence[Getencryptions Regional Secret Customer Managed Encryption]  - effective_
annotations Mapping[str, str] - effective_
labels Mapping[str, str] - expire_
time str - id str
 - The provider-assigned unique ID for this managed resource.
 - labels Mapping[str, str]
 - location str
 - name str
 - pulumi_
labels Mapping[str, str] - rotations
Sequence[Get
Regional Secret Rotation]  - secret_
id str - topics
Sequence[Get
Regional Secret Topic]  - ttl str
 - version_
aliases Mapping[str, str] - version_
destroy_ strttl  - project str
 
- annotations Map<String>
 - create
Time String - customer
Managed List<Property Map>Encryptions  - effective
Annotations Map<String> - effective
Labels Map<String> - expire
Time String - id String
 - The provider-assigned unique ID for this managed resource.
 - labels Map<String>
 - location String
 - name String
 - pulumi
Labels Map<String> - rotations List<Property Map>
 - secret
Id String - topics List<Property Map>
 - ttl String
 - version
Aliases Map<String> - version
Destroy StringTtl  - project String
 
Supporting Types
GetRegionalSecretCustomerManagedEncryption     
- Kms
Key stringName  - The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.
 
- Kms
Key stringName  - The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.
 
- kms
Key StringName  - The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.
 
- kms
Key stringName  - The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.
 
- kms_
key_ strname  - The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.
 
- kms
Key StringName  - The resource name of the Cloud KMS CryptoKey used to encrypt secret payloads.
 
GetRegionalSecretRotation   
- Next
Rotation stringTime  - Timestamp in UTC at which the Secret is scheduled to rotate. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
 - Rotation
Period string - The Duration between rotation notifications. Must be in seconds and at least 3600s (1h) and at most 3153600000s (100 years). If rotationPeriod is set, 'next_rotation_time' must be set. 'next_rotation_time' will be advanced by this period when the service automatically sends rotation notifications.
 
- Next
Rotation stringTime  - Timestamp in UTC at which the Secret is scheduled to rotate. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
 - Rotation
Period string - The Duration between rotation notifications. Must be in seconds and at least 3600s (1h) and at most 3153600000s (100 years). If rotationPeriod is set, 'next_rotation_time' must be set. 'next_rotation_time' will be advanced by this period when the service automatically sends rotation notifications.
 
- next
Rotation StringTime  - Timestamp in UTC at which the Secret is scheduled to rotate. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
 - rotation
Period String - The Duration between rotation notifications. Must be in seconds and at least 3600s (1h) and at most 3153600000s (100 years). If rotationPeriod is set, 'next_rotation_time' must be set. 'next_rotation_time' will be advanced by this period when the service automatically sends rotation notifications.
 
- next
Rotation stringTime  - Timestamp in UTC at which the Secret is scheduled to rotate. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
 - rotation
Period string - The Duration between rotation notifications. Must be in seconds and at least 3600s (1h) and at most 3153600000s (100 years). If rotationPeriod is set, 'next_rotation_time' must be set. 'next_rotation_time' will be advanced by this period when the service automatically sends rotation notifications.
 
- next_
rotation_ strtime  - Timestamp in UTC at which the Secret is scheduled to rotate. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
 - rotation_
period str - The Duration between rotation notifications. Must be in seconds and at least 3600s (1h) and at most 3153600000s (100 years). If rotationPeriod is set, 'next_rotation_time' must be set. 'next_rotation_time' will be advanced by this period when the service automatically sends rotation notifications.
 
- next
Rotation StringTime  - Timestamp in UTC at which the Secret is scheduled to rotate. A timestamp in RFC3339 UTC "Zulu" format, with nanosecond resolution and up to nine fractional digits. Examples: "2014-10-02T15:01:23Z" and "2014-10-02T15:01:23.045123456Z".
 - rotation
Period String - The Duration between rotation notifications. Must be in seconds and at least 3600s (1h) and at most 3153600000s (100 years). If rotationPeriod is set, 'next_rotation_time' must be set. 'next_rotation_time' will be advanced by this period when the service automatically sends rotation notifications.
 
GetRegionalSecretTopic   
- Name string
 - The resource name of the Pub/Sub topic that will be published to, in the following format: projects//topics/. For publication to succeed, the Secret Manager Service Agent service account must have pubsub.publisher permissions on the topic.
 
- Name string
 - The resource name of the Pub/Sub topic that will be published to, in the following format: projects//topics/. For publication to succeed, the Secret Manager Service Agent service account must have pubsub.publisher permissions on the topic.
 
- name String
 - The resource name of the Pub/Sub topic that will be published to, in the following format: projects//topics/. For publication to succeed, the Secret Manager Service Agent service account must have pubsub.publisher permissions on the topic.
 
- name string
 - The resource name of the Pub/Sub topic that will be published to, in the following format: projects//topics/. For publication to succeed, the Secret Manager Service Agent service account must have pubsub.publisher permissions on the topic.
 
- name str
 - The resource name of the Pub/Sub topic that will be published to, in the following format: projects//topics/. For publication to succeed, the Secret Manager Service Agent service account must have pubsub.publisher permissions on the topic.
 
- name String
 - The resource name of the Pub/Sub topic that will be published to, in the following format: projects//topics/. For publication to succeed, the Secret Manager Service Agent service account must have pubsub.publisher permissions on the topic.
 
Package Details
- Repository
 - Google Cloud (GCP) Classic pulumi/pulumi-gcp
 - License
 - Apache-2.0
 - Notes
 - This Pulumi package is based on the 
google-betaTerraform Provider.