Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Harness Provider
  3. API Docs
  4. platform
  5. GcpSecretManagerConnector
Harness v0.7.1 published on Saturday, Mar 29, 2025 by Pulumi
pulumi/pulumi-harness

harness.platform.GcpSecretManagerConnector

Explore with Pulumi AI

Harness v0.7.1 published on Saturday, Mar 29, 2025 by Pulumi
pulumi/pulumi-harness

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as harness from "@pulumi/harness";

const gcpSmManual = new harness.platform.GcpSecretManagerConnector("gcp_sm_manual", {
    identifier: "identifier",
    name: "name",
    description: "test",
    tags: ["foo:bar"],
    delegateSelectors: ["harness-delegate"],
    credentialsRef: `account.${test.id}`,
});
const gcpSmInherit = new harness.platform.GcpSecretManagerConnector("gcp_sm_inherit", {
    identifier: "identifier",
    name: "name",
    description: "test",
    tags: ["foo:bar"],
    delegateSelectors: ["harness-delegate"],
    inheritFromDelegate: true,
});
const gcpSmOidcPlatform = new harness.platform.GcpSecretManagerConnector("gcp_sm_oidc_platform", {
    identifier: "identifier",
    name: "name",
    description: "test",
    tags: ["foo:bar"],
    executeOnDelegate: false,
    oidcAuthentications: [{
        workloadPoolId: "harness-pool-test",
        providerId: "harness",
        gcpProjectId: "1234567",
        serviceAccountEmail: "harness.sample@iam.gserviceaccount.com",
    }],
});
const gcpSmOidcDelegate = new harness.platform.GcpSecretManagerConnector("gcp_sm_oidc_delegate", {
    identifier: "identifier",
    name: "name",
    description: "test",
    tags: ["foo:bar"],
    isDefault: true,
    delegateSelectors: ["harness-delegate"],
    oidcAuthentications: [{
        workloadPoolId: "harness-pool-test",
        providerId: "harness",
        gcpProjectId: "1234567",
        serviceAccountEmail: "harness.sample@iam.gserviceaccount.com",
    }],
});
Copy
import pulumi
import pulumi_harness as harness

gcp_sm_manual = harness.platform.GcpSecretManagerConnector("gcp_sm_manual",
    identifier="identifier",
    name="name",
    description="test",
    tags=["foo:bar"],
    delegate_selectors=["harness-delegate"],
    credentials_ref=f"account.{test['id']}")
gcp_sm_inherit = harness.platform.GcpSecretManagerConnector("gcp_sm_inherit",
    identifier="identifier",
    name="name",
    description="test",
    tags=["foo:bar"],
    delegate_selectors=["harness-delegate"],
    inherit_from_delegate=True)
gcp_sm_oidc_platform = harness.platform.GcpSecretManagerConnector("gcp_sm_oidc_platform",
    identifier="identifier",
    name="name",
    description="test",
    tags=["foo:bar"],
    execute_on_delegate=False,
    oidc_authentications=[{
        "workload_pool_id": "harness-pool-test",
        "provider_id": "harness",
        "gcp_project_id": "1234567",
        "service_account_email": "harness.sample@iam.gserviceaccount.com",
    }])
gcp_sm_oidc_delegate = harness.platform.GcpSecretManagerConnector("gcp_sm_oidc_delegate",
    identifier="identifier",
    name="name",
    description="test",
    tags=["foo:bar"],
    is_default=True,
    delegate_selectors=["harness-delegate"],
    oidc_authentications=[{
        "workload_pool_id": "harness-pool-test",
        "provider_id": "harness",
        "gcp_project_id": "1234567",
        "service_account_email": "harness.sample@iam.gserviceaccount.com",
    }])
Copy
package main

import (
	"fmt"

	"github.com/pulumi/pulumi-harness/sdk/go/harness/platform"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := platform.NewGcpSecretManagerConnector(ctx, "gcp_sm_manual", &platform.GcpSecretManagerConnectorArgs{
			Identifier:  pulumi.String("identifier"),
			Name:        pulumi.String("name"),
			Description: pulumi.String("test"),
			Tags: pulumi.StringArray{
				pulumi.String("foo:bar"),
			},
			DelegateSelectors: pulumi.StringArray{
				pulumi.String("harness-delegate"),
			},
			CredentialsRef: pulumi.Sprintf("account.%v", test.Id),
		})
		if err != nil {
			return err
		}
		_, err = platform.NewGcpSecretManagerConnector(ctx, "gcp_sm_inherit", &platform.GcpSecretManagerConnectorArgs{
			Identifier:  pulumi.String("identifier"),
			Name:        pulumi.String("name"),
			Description: pulumi.String("test"),
			Tags: pulumi.StringArray{
				pulumi.String("foo:bar"),
			},
			DelegateSelectors: pulumi.StringArray{
				pulumi.String("harness-delegate"),
			},
			InheritFromDelegate: pulumi.Bool(true),
		})
		if err != nil {
			return err
		}
		_, err = platform.NewGcpSecretManagerConnector(ctx, "gcp_sm_oidc_platform", &platform.GcpSecretManagerConnectorArgs{
			Identifier:  pulumi.String("identifier"),
			Name:        pulumi.String("name"),
			Description: pulumi.String("test"),
			Tags: pulumi.StringArray{
				pulumi.String("foo:bar"),
			},
			ExecuteOnDelegate: pulumi.Bool(false),
			OidcAuthentications: platform.GcpSecretManagerConnectorOidcAuthenticationArray{
				&platform.GcpSecretManagerConnectorOidcAuthenticationArgs{
					WorkloadPoolId:      pulumi.String("harness-pool-test"),
					ProviderId:          pulumi.String("harness"),
					GcpProjectId:        pulumi.String("1234567"),
					ServiceAccountEmail: pulumi.String("harness.sample@iam.gserviceaccount.com"),
				},
			},
		})
		if err != nil {
			return err
		}
		_, err = platform.NewGcpSecretManagerConnector(ctx, "gcp_sm_oidc_delegate", &platform.GcpSecretManagerConnectorArgs{
			Identifier:  pulumi.String("identifier"),
			Name:        pulumi.String("name"),
			Description: pulumi.String("test"),
			Tags: pulumi.StringArray{
				pulumi.String("foo:bar"),
			},
			IsDefault: pulumi.Bool(true),
			DelegateSelectors: pulumi.StringArray{
				pulumi.String("harness-delegate"),
			},
			OidcAuthentications: platform.GcpSecretManagerConnectorOidcAuthenticationArray{
				&platform.GcpSecretManagerConnectorOidcAuthenticationArgs{
					WorkloadPoolId:      pulumi.String("harness-pool-test"),
					ProviderId:          pulumi.String("harness"),
					GcpProjectId:        pulumi.String("1234567"),
					ServiceAccountEmail: pulumi.String("harness.sample@iam.gserviceaccount.com"),
				},
			},
		})
		if err != nil {
			return err
		}
		return nil
	})
}
Copy
using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Harness = Pulumi.Harness;

return await Deployment.RunAsync(() => 
{
    var gcpSmManual = new Harness.Platform.GcpSecretManagerConnector("gcp_sm_manual", new()
    {
        Identifier = "identifier",
        Name = "name",
        Description = "test",
        Tags = new[]
        {
            "foo:bar",
        },
        DelegateSelectors = new[]
        {
            "harness-delegate",
        },
        CredentialsRef = $"account.{test.Id}",
    });

    var gcpSmInherit = new Harness.Platform.GcpSecretManagerConnector("gcp_sm_inherit", new()
    {
        Identifier = "identifier",
        Name = "name",
        Description = "test",
        Tags = new[]
        {
            "foo:bar",
        },
        DelegateSelectors = new[]
        {
            "harness-delegate",
        },
        InheritFromDelegate = true,
    });

    var gcpSmOidcPlatform = new Harness.Platform.GcpSecretManagerConnector("gcp_sm_oidc_platform", new()
    {
        Identifier = "identifier",
        Name = "name",
        Description = "test",
        Tags = new[]
        {
            "foo:bar",
        },
        ExecuteOnDelegate = false,
        OidcAuthentications = new[]
        {
            new Harness.Platform.Inputs.GcpSecretManagerConnectorOidcAuthenticationArgs
            {
                WorkloadPoolId = "harness-pool-test",
                ProviderId = "harness",
                GcpProjectId = "1234567",
                ServiceAccountEmail = "harness.sample@iam.gserviceaccount.com",
            },
        },
    });

    var gcpSmOidcDelegate = new Harness.Platform.GcpSecretManagerConnector("gcp_sm_oidc_delegate", new()
    {
        Identifier = "identifier",
        Name = "name",
        Description = "test",
        Tags = new[]
        {
            "foo:bar",
        },
        IsDefault = true,
        DelegateSelectors = new[]
        {
            "harness-delegate",
        },
        OidcAuthentications = new[]
        {
            new Harness.Platform.Inputs.GcpSecretManagerConnectorOidcAuthenticationArgs
            {
                WorkloadPoolId = "harness-pool-test",
                ProviderId = "harness",
                GcpProjectId = "1234567",
                ServiceAccountEmail = "harness.sample@iam.gserviceaccount.com",
            },
        },
    });

});
Copy
package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.harness.platform.GcpSecretManagerConnector;
import com.pulumi.harness.platform.GcpSecretManagerConnectorArgs;
import com.pulumi.harness.platform.inputs.GcpSecretManagerConnectorOidcAuthenticationArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var gcpSmManual = new GcpSecretManagerConnector("gcpSmManual", GcpSecretManagerConnectorArgs.builder()
            .identifier("identifier")
            .name("name")
            .description("test")
            .tags("foo:bar")
            .delegateSelectors("harness-delegate")
            .credentialsRef(String.format("account.%s", test.id()))
            .build());

        var gcpSmInherit = new GcpSecretManagerConnector("gcpSmInherit", GcpSecretManagerConnectorArgs.builder()
            .identifier("identifier")
            .name("name")
            .description("test")
            .tags("foo:bar")
            .delegateSelectors("harness-delegate")
            .inheritFromDelegate(true)
            .build());

        var gcpSmOidcPlatform = new GcpSecretManagerConnector("gcpSmOidcPlatform", GcpSecretManagerConnectorArgs.builder()
            .identifier("identifier")
            .name("name")
            .description("test")
            .tags("foo:bar")
            .executeOnDelegate(false)
            .oidcAuthentications(GcpSecretManagerConnectorOidcAuthenticationArgs.builder()
                .workloadPoolId("harness-pool-test")
                .providerId("harness")
                .gcpProjectId("1234567")
                .serviceAccountEmail("harness.sample@iam.gserviceaccount.com")
                .build())
            .build());

        var gcpSmOidcDelegate = new GcpSecretManagerConnector("gcpSmOidcDelegate", GcpSecretManagerConnectorArgs.builder()
            .identifier("identifier")
            .name("name")
            .description("test")
            .tags("foo:bar")
            .isDefault(true)
            .delegateSelectors("harness-delegate")
            .oidcAuthentications(GcpSecretManagerConnectorOidcAuthenticationArgs.builder()
                .workloadPoolId("harness-pool-test")
                .providerId("harness")
                .gcpProjectId("1234567")
                .serviceAccountEmail("harness.sample@iam.gserviceaccount.com")
                .build())
            .build());

    }
}
Copy
resources:
  gcpSmManual:
    type: harness:platform:GcpSecretManagerConnector
    name: gcp_sm_manual
    properties:
      identifier: identifier
      name: name
      description: test
      tags:
        - foo:bar
      delegateSelectors:
        - harness-delegate
      credentialsRef: account.${test.id}
  gcpSmInherit:
    type: harness:platform:GcpSecretManagerConnector
    name: gcp_sm_inherit
    properties:
      identifier: identifier
      name: name
      description: test
      tags:
        - foo:bar
      delegateSelectors:
        - harness-delegate
      inheritFromDelegate: true
  gcpSmOidcPlatform:
    type: harness:platform:GcpSecretManagerConnector
    name: gcp_sm_oidc_platform
    properties:
      identifier: identifier
      name: name
      description: test
      tags:
        - foo:bar
      executeOnDelegate: false
      oidcAuthentications:
        - workloadPoolId: harness-pool-test
          providerId: harness
          gcpProjectId: '1234567'
          serviceAccountEmail: harness.sample@iam.gserviceaccount.com
  gcpSmOidcDelegate:
    type: harness:platform:GcpSecretManagerConnector
    name: gcp_sm_oidc_delegate
    properties:
      identifier: identifier
      name: name
      description: test
      tags:
        - foo:bar
      isDefault: true
      delegateSelectors:
        - harness-delegate
      oidcAuthentications:
        - workloadPoolId: harness-pool-test
          providerId: harness
          gcpProjectId: '1234567'
          serviceAccountEmail: harness.sample@iam.gserviceaccount.com
Copy

Create GcpSecretManagerConnector Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new GcpSecretManagerConnector(name: string, args: GcpSecretManagerConnectorArgs, opts?: CustomResourceOptions);
@overload
def GcpSecretManagerConnector(resource_name: str,
                              args: GcpSecretManagerConnectorArgs,
                              opts: Optional[ResourceOptions] = None)

@overload
def GcpSecretManagerConnector(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              identifier: Optional[str] = None,
                              credentials_ref: Optional[str] = None,
                              delegate_selectors: Optional[Sequence[str]] = None,
                              description: Optional[str] = None,
                              execute_on_delegate: Optional[bool] = None,
                              inherit_from_delegate: Optional[bool] = None,
                              is_default: Optional[bool] = None,
                              name: Optional[str] = None,
                              oidc_authentications: Optional[Sequence[GcpSecretManagerConnectorOidcAuthenticationArgs]] = None,
                              org_id: Optional[str] = None,
                              project_id: Optional[str] = None,
                              tags: Optional[Sequence[str]] = None)
func NewGcpSecretManagerConnector(ctx *Context, name string, args GcpSecretManagerConnectorArgs, opts ...ResourceOption) (*GcpSecretManagerConnector, error)
public GcpSecretManagerConnector(string name, GcpSecretManagerConnectorArgs args, CustomResourceOptions? opts = null)
public GcpSecretManagerConnector(String name, GcpSecretManagerConnectorArgs args)
public GcpSecretManagerConnector(String name, GcpSecretManagerConnectorArgs args, CustomResourceOptions options)

type: harness:platform:GcpSecretManagerConnector
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. GcpSecretManagerConnectorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. GcpSecretManagerConnectorArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. GcpSecretManagerConnectorArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. GcpSecretManagerConnectorArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. GcpSecretManagerConnectorArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var gcpSecretManagerConnectorResource = new Harness.Platform.GcpSecretManagerConnector("gcpSecretManagerConnectorResource", new()
{
    Identifier = "string",
    CredentialsRef = "string",
    DelegateSelectors = new[]
    {
        "string",
    },
    Description = "string",
    ExecuteOnDelegate = false,
    InheritFromDelegate = false,
    IsDefault = false,
    Name = "string",
    OidcAuthentications = new[]
    {
        new Harness.Platform.Inputs.GcpSecretManagerConnectorOidcAuthenticationArgs
        {
            GcpProjectId = "string",
            ProviderId = "string",
            ServiceAccountEmail = "string",
            WorkloadPoolId = "string",
        },
    },
    OrgId = "string",
    ProjectId = "string",
    Tags = new[]
    {
        "string",
    },
});
Copy
example, err := platform.NewGcpSecretManagerConnector(ctx, "gcpSecretManagerConnectorResource", &platform.GcpSecretManagerConnectorArgs{
	Identifier:     pulumi.String("string"),
	CredentialsRef: pulumi.String("string"),
	DelegateSelectors: pulumi.StringArray{
		pulumi.String("string"),
	},
	Description:         pulumi.String("string"),
	ExecuteOnDelegate:   pulumi.Bool(false),
	InheritFromDelegate: pulumi.Bool(false),
	IsDefault:           pulumi.Bool(false),
	Name:                pulumi.String("string"),
	OidcAuthentications: platform.GcpSecretManagerConnectorOidcAuthenticationArray{
		&platform.GcpSecretManagerConnectorOidcAuthenticationArgs{
			GcpProjectId:        pulumi.String("string"),
			ProviderId:          pulumi.String("string"),
			ServiceAccountEmail: pulumi.String("string"),
			WorkloadPoolId:      pulumi.String("string"),
		},
	},
	OrgId:     pulumi.String("string"),
	ProjectId: pulumi.String("string"),
	Tags: pulumi.StringArray{
		pulumi.String("string"),
	},
})
Copy
var gcpSecretManagerConnectorResource = new GcpSecretManagerConnector("gcpSecretManagerConnectorResource", GcpSecretManagerConnectorArgs.builder()
    .identifier("string")
    .credentialsRef("string")
    .delegateSelectors("string")
    .description("string")
    .executeOnDelegate(false)
    .inheritFromDelegate(false)
    .isDefault(false)
    .name("string")
    .oidcAuthentications(GcpSecretManagerConnectorOidcAuthenticationArgs.builder()
        .gcpProjectId("string")
        .providerId("string")
        .serviceAccountEmail("string")
        .workloadPoolId("string")
        .build())
    .orgId("string")
    .projectId("string")
    .tags("string")
    .build());
Copy
gcp_secret_manager_connector_resource = harness.platform.GcpSecretManagerConnector("gcpSecretManagerConnectorResource",
    identifier="string",
    credentials_ref="string",
    delegate_selectors=["string"],
    description="string",
    execute_on_delegate=False,
    inherit_from_delegate=False,
    is_default=False,
    name="string",
    oidc_authentications=[{
        "gcp_project_id": "string",
        "provider_id": "string",
        "service_account_email": "string",
        "workload_pool_id": "string",
    }],
    org_id="string",
    project_id="string",
    tags=["string"])
Copy
const gcpSecretManagerConnectorResource = new harness.platform.GcpSecretManagerConnector("gcpSecretManagerConnectorResource", {
    identifier: "string",
    credentialsRef: "string",
    delegateSelectors: ["string"],
    description: "string",
    executeOnDelegate: false,
    inheritFromDelegate: false,
    isDefault: false,
    name: "string",
    oidcAuthentications: [{
        gcpProjectId: "string",
        providerId: "string",
        serviceAccountEmail: "string",
        workloadPoolId: "string",
    }],
    orgId: "string",
    projectId: "string",
    tags: ["string"],
});
Copy
type: harness:platform:GcpSecretManagerConnector
properties:
    credentialsRef: string
    delegateSelectors:
        - string
    description: string
    executeOnDelegate: false
    identifier: string
    inheritFromDelegate: false
    isDefault: false
    name: string
    oidcAuthentications:
        - gcpProjectId: string
          providerId: string
          serviceAccountEmail: string
          workloadPoolId: string
    orgId: string
    projectId: string
    tags:
        - string
Copy

GcpSecretManagerConnector Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The GcpSecretManagerConnector resource accepts the following input properties:

Identifier
This property is required.
Changes to this property will trigger replacement.
string
Unique identifier of the resource.
CredentialsRef string
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
DelegateSelectors List<string>
The delegates to inherit the credentials from.
Description string
Description of the resource.
ExecuteOnDelegate bool
Execute on delegate or not.
InheritFromDelegate bool
Inherit configuration from delegate.
IsDefault bool
Set this flag to set this secret manager as default secret manager.
Name string
Name of the resource.
OidcAuthentications List<GcpSecretManagerConnectorOidcAuthentication>
Authentication using harness oidc.
OrgId string
Unique identifier of the organization.
ProjectId string
Unique identifier of the project.
Tags List<string>
Tags to associate with the resource.
Identifier
This property is required.
Changes to this property will trigger replacement.
string
Unique identifier of the resource.
CredentialsRef string
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
DelegateSelectors []string
The delegates to inherit the credentials from.
Description string
Description of the resource.
ExecuteOnDelegate bool
Execute on delegate or not.
InheritFromDelegate bool
Inherit configuration from delegate.
IsDefault bool
Set this flag to set this secret manager as default secret manager.
Name string
Name of the resource.
OidcAuthentications []GcpSecretManagerConnectorOidcAuthenticationArgs
Authentication using harness oidc.
OrgId string
Unique identifier of the organization.
ProjectId string
Unique identifier of the project.
Tags []string
Tags to associate with the resource.
identifier
This property is required.
Changes to this property will trigger replacement.
String
Unique identifier of the resource.
credentialsRef String
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
delegateSelectors List<String>
The delegates to inherit the credentials from.
description String
Description of the resource.
executeOnDelegate Boolean
Execute on delegate or not.
inheritFromDelegate Boolean
Inherit configuration from delegate.
isDefault Boolean
Set this flag to set this secret manager as default secret manager.
name String
Name of the resource.
oidcAuthentications List<GcpSecretManagerConnectorOidcAuthentication>
Authentication using harness oidc.
orgId String
Unique identifier of the organization.
projectId String
Unique identifier of the project.
tags List<String>
Tags to associate with the resource.
identifier
This property is required.
Changes to this property will trigger replacement.
string
Unique identifier of the resource.
credentialsRef string
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
delegateSelectors string[]
The delegates to inherit the credentials from.
description string
Description of the resource.
executeOnDelegate boolean
Execute on delegate or not.
inheritFromDelegate boolean
Inherit configuration from delegate.
isDefault boolean
Set this flag to set this secret manager as default secret manager.
name string
Name of the resource.
oidcAuthentications GcpSecretManagerConnectorOidcAuthentication[]
Authentication using harness oidc.
orgId string
Unique identifier of the organization.
projectId string
Unique identifier of the project.
tags string[]
Tags to associate with the resource.
identifier
This property is required.
Changes to this property will trigger replacement.
str
Unique identifier of the resource.
credentials_ref str
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
delegate_selectors Sequence[str]
The delegates to inherit the credentials from.
description str
Description of the resource.
execute_on_delegate bool
Execute on delegate or not.
inherit_from_delegate bool
Inherit configuration from delegate.
is_default bool
Set this flag to set this secret manager as default secret manager.
name str
Name of the resource.
oidc_authentications Sequence[GcpSecretManagerConnectorOidcAuthenticationArgs]
Authentication using harness oidc.
org_id str
Unique identifier of the organization.
project_id str
Unique identifier of the project.
tags Sequence[str]
Tags to associate with the resource.
identifier
This property is required.
Changes to this property will trigger replacement.
String
Unique identifier of the resource.
credentialsRef String
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
delegateSelectors List<String>
The delegates to inherit the credentials from.
description String
Description of the resource.
executeOnDelegate Boolean
Execute on delegate or not.
inheritFromDelegate Boolean
Inherit configuration from delegate.
isDefault Boolean
Set this flag to set this secret manager as default secret manager.
name String
Name of the resource.
oidcAuthentications List<Property Map>
Authentication using harness oidc.
orgId String
Unique identifier of the organization.
projectId String
Unique identifier of the project.
tags List<String>
Tags to associate with the resource.

Outputs

All input properties are implicitly available as output properties. Additionally, the GcpSecretManagerConnector resource produces the following output properties:

Id string
The provider-assigned unique ID for this managed resource.
Id string
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.
id string
The provider-assigned unique ID for this managed resource.
id str
The provider-assigned unique ID for this managed resource.
id String
The provider-assigned unique ID for this managed resource.

Look up Existing GcpSecretManagerConnector Resource

Get an existing GcpSecretManagerConnector resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: GcpSecretManagerConnectorState, opts?: CustomResourceOptions): GcpSecretManagerConnector
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        credentials_ref: Optional[str] = None,
        delegate_selectors: Optional[Sequence[str]] = None,
        description: Optional[str] = None,
        execute_on_delegate: Optional[bool] = None,
        identifier: Optional[str] = None,
        inherit_from_delegate: Optional[bool] = None,
        is_default: Optional[bool] = None,
        name: Optional[str] = None,
        oidc_authentications: Optional[Sequence[GcpSecretManagerConnectorOidcAuthenticationArgs]] = None,
        org_id: Optional[str] = None,
        project_id: Optional[str] = None,
        tags: Optional[Sequence[str]] = None) -> GcpSecretManagerConnector
func GetGcpSecretManagerConnector(ctx *Context, name string, id IDInput, state *GcpSecretManagerConnectorState, opts ...ResourceOption) (*GcpSecretManagerConnector, error)
public static GcpSecretManagerConnector Get(string name, Input<string> id, GcpSecretManagerConnectorState? state, CustomResourceOptions? opts = null)
public static GcpSecretManagerConnector get(String name, Output<String> id, GcpSecretManagerConnectorState state, CustomResourceOptions options)
resources:  _:    type: harness:platform:GcpSecretManagerConnector    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
CredentialsRef string
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
DelegateSelectors List<string>
The delegates to inherit the credentials from.
Description string
Description of the resource.
ExecuteOnDelegate bool
Execute on delegate or not.
Identifier Changes to this property will trigger replacement. string
Unique identifier of the resource.
InheritFromDelegate bool
Inherit configuration from delegate.
IsDefault bool
Set this flag to set this secret manager as default secret manager.
Name string
Name of the resource.
OidcAuthentications List<GcpSecretManagerConnectorOidcAuthentication>
Authentication using harness oidc.
OrgId string
Unique identifier of the organization.
ProjectId string
Unique identifier of the project.
Tags List<string>
Tags to associate with the resource.
CredentialsRef string
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
DelegateSelectors []string
The delegates to inherit the credentials from.
Description string
Description of the resource.
ExecuteOnDelegate bool
Execute on delegate or not.
Identifier Changes to this property will trigger replacement. string
Unique identifier of the resource.
InheritFromDelegate bool
Inherit configuration from delegate.
IsDefault bool
Set this flag to set this secret manager as default secret manager.
Name string
Name of the resource.
OidcAuthentications []GcpSecretManagerConnectorOidcAuthenticationArgs
Authentication using harness oidc.
OrgId string
Unique identifier of the organization.
ProjectId string
Unique identifier of the project.
Tags []string
Tags to associate with the resource.
credentialsRef String
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
delegateSelectors List<String>
The delegates to inherit the credentials from.
description String
Description of the resource.
executeOnDelegate Boolean
Execute on delegate or not.
identifier Changes to this property will trigger replacement. String
Unique identifier of the resource.
inheritFromDelegate Boolean
Inherit configuration from delegate.
isDefault Boolean
Set this flag to set this secret manager as default secret manager.
name String
Name of the resource.
oidcAuthentications List<GcpSecretManagerConnectorOidcAuthentication>
Authentication using harness oidc.
orgId String
Unique identifier of the organization.
projectId String
Unique identifier of the project.
tags List<String>
Tags to associate with the resource.
credentialsRef string
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
delegateSelectors string[]
The delegates to inherit the credentials from.
description string
Description of the resource.
executeOnDelegate boolean
Execute on delegate or not.
identifier Changes to this property will trigger replacement. string
Unique identifier of the resource.
inheritFromDelegate boolean
Inherit configuration from delegate.
isDefault boolean
Set this flag to set this secret manager as default secret manager.
name string
Name of the resource.
oidcAuthentications GcpSecretManagerConnectorOidcAuthentication[]
Authentication using harness oidc.
orgId string
Unique identifier of the organization.
projectId string
Unique identifier of the project.
tags string[]
Tags to associate with the resource.
credentials_ref str
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
delegate_selectors Sequence[str]
The delegates to inherit the credentials from.
description str
Description of the resource.
execute_on_delegate bool
Execute on delegate or not.
identifier Changes to this property will trigger replacement. str
Unique identifier of the resource.
inherit_from_delegate bool
Inherit configuration from delegate.
is_default bool
Set this flag to set this secret manager as default secret manager.
name str
Name of the resource.
oidc_authentications Sequence[GcpSecretManagerConnectorOidcAuthenticationArgs]
Authentication using harness oidc.
org_id str
Unique identifier of the organization.
project_id str
Unique identifier of the project.
tags Sequence[str]
Tags to associate with the resource.
credentialsRef String
Reference to the secret containing credentials of IAM service account for Google Secret Manager. To reference a secret at the organization scope, prefix 'org' to the expression: org.{identifier}. To reference a secret at the account scope, prefix 'account` to the expression: account.{identifier}.
delegateSelectors List<String>
The delegates to inherit the credentials from.
description String
Description of the resource.
executeOnDelegate Boolean
Execute on delegate or not.
identifier Changes to this property will trigger replacement. String
Unique identifier of the resource.
inheritFromDelegate Boolean
Inherit configuration from delegate.
isDefault Boolean
Set this flag to set this secret manager as default secret manager.
name String
Name of the resource.
oidcAuthentications List<Property Map>
Authentication using harness oidc.
orgId String
Unique identifier of the organization.
projectId String
Unique identifier of the project.
tags List<String>
Tags to associate with the resource.

Supporting Types

GcpSecretManagerConnectorOidcAuthentication
, GcpSecretManagerConnectorOidcAuthenticationArgs

GcpProjectId This property is required. string
The project number of the GCP project that is used to create the workload identity.
ProviderId This property is required. string
The OIDC provider ID value configured in GCP.
ServiceAccountEmail This property is required. string
The service account linked to workload identity pool while setting GCP workload identity provider.
WorkloadPoolId This property is required. string
The workload pool ID value created in GCP.
GcpProjectId This property is required. string
The project number of the GCP project that is used to create the workload identity.
ProviderId This property is required. string
The OIDC provider ID value configured in GCP.
ServiceAccountEmail This property is required. string
The service account linked to workload identity pool while setting GCP workload identity provider.
WorkloadPoolId This property is required. string
The workload pool ID value created in GCP.
gcpProjectId This property is required. String
The project number of the GCP project that is used to create the workload identity.
providerId This property is required. String
The OIDC provider ID value configured in GCP.
serviceAccountEmail This property is required. String
The service account linked to workload identity pool while setting GCP workload identity provider.
workloadPoolId This property is required. String
The workload pool ID value created in GCP.
gcpProjectId This property is required. string
The project number of the GCP project that is used to create the workload identity.
providerId This property is required. string
The OIDC provider ID value configured in GCP.
serviceAccountEmail This property is required. string
The service account linked to workload identity pool while setting GCP workload identity provider.
workloadPoolId This property is required. string
The workload pool ID value created in GCP.
gcp_project_id This property is required. str
The project number of the GCP project that is used to create the workload identity.
provider_id This property is required. str
The OIDC provider ID value configured in GCP.
service_account_email This property is required. str
The service account linked to workload identity pool while setting GCP workload identity provider.
workload_pool_id This property is required. str
The workload pool ID value created in GCP.
gcpProjectId This property is required. String
The project number of the GCP project that is used to create the workload identity.
providerId This property is required. String
The OIDC provider ID value configured in GCP.
serviceAccountEmail This property is required. String
The service account linked to workload identity pool while setting GCP workload identity provider.
workloadPoolId This property is required. String
The workload pool ID value created in GCP.

Import

Import account level gcp secret manager connector

$ pulumi import harness:platform/gcpSecretManagerConnector:GcpSecretManagerConnector example <connector_id>
Copy

Import org level gcp secret manager connector

$ pulumi import harness:platform/gcpSecretManagerConnector:GcpSecretManagerConnector example <ord_id>/<connector_id>
Copy

Import project level gcp secret manager connector

$ pulumi import harness:platform/gcpSecretManagerConnector:GcpSecretManagerConnector example <org_id>/<project_id>/<connector_id>
Copy

To learn more about importing existing cloud resources, see Importing resources.

Package Details

Repository
harness pulumi/pulumi-harness
License
Apache-2.0
Notes
This Pulumi package is based on the harness Terraform Provider.
Harness v0.7.1 published on Saturday, Mar 29, 2025 by Pulumi
pulumi/pulumi-harness