» openstack_keymanager_secret_v1

Use this data source to get the ID and the payload of an available Barbican secret

» Example Usage

data "openstack_keymanager_secret_v1" "example" {
  mode        = "cbc"
  secret_type = "passphrase"
}

» Argument Reference

The following arguments are supported:

  • region - (Optional) The region in which to obtain the V1 KeyManager client. A KeyManager client is needed to fetch a secret. If omitted, the region argument of the provider is used.

  • name - (Optional) The Secret name.

  • bit_length - (Optional) The Secret bit length.

  • algorithm - (Optional) The Secret algorithm.

  • mode - (Optional) The Secret mode.

  • secret_type - (Optional) The Secret type. For more information see Secret types.

  • acl_only - (Optional) Select the Secret with an ACL that contains the user. Project scope is ignored. Defaults to false.

  • expiration_filter - (Optional) Date filter to select the Secret with expiration matching the specified criteria. See Date Filters below for more detail.

  • created_at_filter - (Optional) Date filter to select the Secret with created matching the specified criteria. See Date Filters below for more detail.

  • updated_at_filter - (Optional) Date filter to select the Secret with updated matching the specified criteria. See Date Filters below for more detail.

» Date Filters

The values for the expiration_filter, created_at_filter, and updated_at_filter parameters are comma-separated lists of time stamps in RFC3339 format. The time stamps can be prefixed with any of these comparison operators: gt: (greater-than), gte: (greater-than-or-equal), lt: (less-than), lte: (less-than-or-equal).

For example, to get a passphrase a Secret with CBC moda, that will expire in January of 2020:

data "openstack_keymanager_secret_v1" "date_filter_example" {
  mode              = "cbc"
  secret_type       = "passphrase"
  expiration_filter = "gt:2020-01-01T00:00:00Z"
}

» Attributes Reference

The following attributes are exported: