kgess-mirror/opentofu-terraform-provider-vault
1
0
Fork 0
mirror of https://github.com/opentofu/terraform-provider-vault.git synced 2026-01-11 19:46:35 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

docs: update example to use wo attribute for vault_kv_secret_v2 (#2731)

Browse source 
* update example to use wo attribute and include in docs

* changelog: use wo for vault kvv2 secret
This commit is contained in:
drewmullen 2026-01-07 15:57:52 -05:00 • committed by GitHub
parent 19053544a3
commit b187d58a04
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
2 changed files with 19 additions and 20 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
CHANGELOG.md
View file

@ -14,6 +14,8 @@ IMPROVEMENTS:
* Updated dependencies:
* `github.com/hashicorp/go-secure-stdlib/awsutil` v0.3.0 -> v2.1.1
* Docs: fix heredoc example for LDAP dynamic role LDIFs ([#2728]https://github.com/hashicorp/terraform-provider-vault/pull/2728)
* Docs: Update example to use write-only attribute ([#2731]https://github.com/hashicorp/terraform-provider-vault/pull/2731)
BUGS:

37
website/docs/r/kv_secret_v2.html.md
View file

@ -24,16 +24,17 @@ resource "vault_mount" "kvv2" {
}
resource "vault_kv_secret_v2" "example" {
mount = vault_mount.kvv2.path
name = "secret"
cas = 1
delete_all_versions = true
data_json = jsonencode(
{
zip = "zap",
foo = "bar"
}
mount = vault_mount.kvv2.path
name = "secret"
cas = 1
delete_all_versions = true
data_json_wo = jsonencode(
{
zip = "zap",
foo = "bar"
}
)
data_json_wo_version = 1
custom_metadata {
max_versions = 5
data = {
@ -73,15 +74,18 @@ The following arguments are supported:
* `delete_all_versions` - (Optional) If set to true, permanently deletes all
versions for the specified key.
* `data_json` - (Required) JSON-encoded string that will be
written as the secret data at the given path.
* `data_json` - (Optional) JSON-encoded string that will be
written as the secret data at the given path. This is required if `data_json_wo` is not set.
* `data_json_wo` - (Optional) JSON-encoded string that will be
written as the secret data at the given path. This is required if `data_json` is not set. **Note**: This property is write-only and will not be read from the API.
* `data_json_wo_version` - (Optional) The version of the `data_json_wo`. For more info see [updating write-only attributes](https://registry.terraform.io/providers/hashicorp/vault/latest/docs/guides/using_write_only_attributes.html#updating-write-only-attributes).
* `custom_metadata` - (Optional) A nested block that allows configuring metadata for the
KV secret. Refer to the
[Configuration Options](#custom-metadata-configuration-options) for more info.
* `data_json_wo_version` - (Optional) The version of the `data_json_wo`. For more info see [updating write-only attributes](https://registry.terraform.io/providers/hashicorp/vault/latest/docs/guides/using_write_only_attributes.html#updating-write-only-attributes).
## Required Vault Capabilities
Use of this resource requires the `create` or `update` capability
@ -101,13 +105,6 @@ and the `read` capability for drift detection (by default).
* `data` - (Optional) A string to string map describing the secret.
## Ephemeral Attributes Reference
The following write-only attributes are supported:
* `data_json_wo` - (Optional) JSON-encoded secret data to write to Vault. Can be updated.
**Note**: This property is write-only and will not be read from the API.
## Attributes Reference
The following attributes are exported in addition to the above: