# juju_secret (Resource)

A resource that represents a Juju secret.

## Example Usage

```terraform
resource "juju_secret" "my-secret" {
  model_uuid = juju_model.development.uuid
  name       = "my_secret_name"
  value = {
    key1 = "value1"
    key2 = "value2"
  }
  info = "This is the secret"
}

resource "juju_application" "my-application" {
  #
  config = {
    # Reference my-secret within the plan by using the secret_id
    secret = juju_secret.my-secret.secret_id
  }
  #
}

# Write-only secret value. The value is supplied via value_wo, which is never
# stored in Terraform state. Bumping value_wo_version triggers an update of the
# secret value. This requires Terraform >= 1.11 and pairs well with ephemeral
# resources/values.
resource "juju_secret" "my-wo-secret" {
  model_uuid = juju_model.development.uuid
  name       = "my_wo_secret_name"
  value_wo = {
    key1 = "value1"
    key2 = "value2"
  }
  value_wo_version = 1
  info             = "This is a write-only secret"
}
```

<!-- schema generated by tfplugindocs -->

## Schema

### Required

- `model_uuid` (String) The model in which the secret belongs. Changing this value will cause the secret to be destroyed and recreated by terraform.

### Optional

> **NOTE**: [Write-only arguments](https://developer.hashicorp.com/terraform/language/resources/ephemeral#write-only-arguments) are supported in Terraform 1.11 and later.
- `info` (String) The description of the secret.
- `name` (String) The name of the secret.
- `value` (Map of String, Sensitive) The value map of the secret. There can be more than one key-value pair. Conflicts with value_wo; prefer value_wo for ephemeral/secret data that should not be stored in Terraform state.
- `value_wo` (Map of String, Sensitive, [Write-only](https://developer.hashicorp.com/terraform/language/resources/ephemeral#write-only-arguments)) The write-only value map of the secret. Its content is never persisted to Terraform state. Requires value_wo_version to be set; bump value_wo_version to apply changes to this value. Requires Terraform >= 1.11.
- `value_wo_version` (Number) The version of value_wo. Increment this value to trigger an update of the write-only secret value.

### Read-Only

- `id` (String) The ID of the secret. Used for terraform import.
- `secret_id` (String) The ID of the secret. E.g. coj8mulh8b41e8nv6p90
- `secret_uri` (String) The URI of the secret. E.g. secret:coj8mulh8b41e8nv6p90

## Import

Import is supported using the following syntax:

The [`terraform import` command](https://developer.hashicorp.com/terraform/cli/commands/import) can be used, for example:

```shell
# Secrets can be imported by using the model and secret names.
$ terraform import juju_secret.secret-name testmodel:secret-name
```