Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Ibm Provider
  3. API Docs
  4. ContainerIngressSecretTls
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

ibm.ContainerIngressSecretTls

Explore with Pulumi AI

ibm logo
ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
ibm-cloud/terraform-provider-ibm

    Registers an IBM Cloud Secrets Manager secret type certificate with your IBM Cloud Kubernetes Service or Red Hat OpenShift on IBM Cloud cluster. For more information about how TLS secrets can be used see about Secrets Manager secrets

    Example Usage

    import * as pulumi from "@pulumi/pulumi";
import * as ibm from "@pulumi/ibm";

const secret = new ibm.ContainerIngressSecretTls("secret", {
    certCrn: "cert:region:crn",
    cluster: "exampleClusterName",
    secretName: "mySecretName",
    secretNamespace: "mySecretNamespace",
});

    import pulumi
import pulumi_ibm as ibm

secret = ibm.ContainerIngressSecretTls("secret",
    cert_crn="cert:region:crn",
    cluster="exampleClusterName",
    secret_name="mySecretName",
    secret_namespace="mySecretNamespace")

    package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/ibm/ibm"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := ibm.NewContainerIngressSecretTls(ctx, "secret", &ibm.ContainerIngressSecretTlsArgs{
			CertCrn:         pulumi.String("cert:region:crn"),
			Cluster:         pulumi.String("exampleClusterName"),
			SecretName:      pulumi.String("mySecretName"),
			SecretNamespace: pulumi.String("mySecretNamespace"),
		})
		if err != nil {
			return err
		}
		return nil
	})
}

    using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Ibm = Pulumi.Ibm;

return await Deployment.RunAsync(() => 
{
    var secret = new Ibm.ContainerIngressSecretTls("secret", new()
    {
        CertCrn = "cert:region:crn",
        Cluster = "exampleClusterName",
        SecretName = "mySecretName",
        SecretNamespace = "mySecretNamespace",
    });

});

    package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.ibm.ContainerIngressSecretTls;
import com.pulumi.ibm.ContainerIngressSecretTlsArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        var secret = new ContainerIngressSecretTls("secret", ContainerIngressSecretTlsArgs.builder()
            .certCrn("cert:region:crn")
            .cluster("exampleClusterName")
            .secretName("mySecretName")
            .secretNamespace("mySecretNamespace")
            .build());

    }
}

    resources:
  secret:
    type: ibm:ContainerIngressSecretTls
    properties:
      certCrn: cert:region:crn
      cluster: exampleClusterName
      secretName: mySecretName
      secretNamespace: mySecretNamespace

    Create ContainerIngressSecretTls Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new ContainerIngressSecretTls(name: string, args: ContainerIngressSecretTlsArgs, opts?: CustomResourceOptions);
    @overload
def ContainerIngressSecretTls(resource_name: str,
                              args: ContainerIngressSecretTlsArgs,
                              opts: Optional[ResourceOptions] = None)

@overload
def ContainerIngressSecretTls(resource_name: str,
                              opts: Optional[ResourceOptions] = None,
                              cert_crn: Optional[str] = None,
                              cluster: Optional[str] = None,
                              secret_name: Optional[str] = None,
                              secret_namespace: Optional[str] = None,
                              container_ingress_secret_tls_id: Optional[str] = None,
                              persistence: Optional[bool] = None,
                              timeouts: Optional[ContainerIngressSecretTlsTimeoutsArgs] = None,
                              update_secret: Optional[float] = None)
    func NewContainerIngressSecretTls(ctx *Context, name string, args ContainerIngressSecretTlsArgs, opts ...ResourceOption) (*ContainerIngressSecretTls, error)
    public ContainerIngressSecretTls(string name, ContainerIngressSecretTlsArgs args, CustomResourceOptions? opts = null)
    public ContainerIngressSecretTls(String name, ContainerIngressSecretTlsArgs args)
public ContainerIngressSecretTls(String name, ContainerIngressSecretTlsArgs args, CustomResourceOptions options)

    type: ibm:ContainerIngressSecretTls
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

    Parameters

    name string
    The unique name of the resource.
    args ContainerIngressSecretTlsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args ContainerIngressSecretTlsArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args ContainerIngressSecretTlsArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args ContainerIngressSecretTlsArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args ContainerIngressSecretTlsArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var containerIngressSecretTlsResource = new Ibm.ContainerIngressSecretTls("containerIngressSecretTlsResource", new()
{
    CertCrn = "string",
    Cluster = "string",
    SecretName = "string",
    SecretNamespace = "string",
    ContainerIngressSecretTlsId = "string",
    Persistence = false,
    Timeouts = new Ibm.Inputs.ContainerIngressSecretTlsTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Update = "string",
    },
    UpdateSecret = 0,
});

    example, err := ibm.NewContainerIngressSecretTls(ctx, "containerIngressSecretTlsResource", &ibm.ContainerIngressSecretTlsArgs{
	CertCrn:                     pulumi.String("string"),
	Cluster:                     pulumi.String("string"),
	SecretName:                  pulumi.String("string"),
	SecretNamespace:             pulumi.String("string"),
	ContainerIngressSecretTlsId: pulumi.String("string"),
	Persistence:                 pulumi.Bool(false),
	Timeouts: &ibm.ContainerIngressSecretTlsTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Update: pulumi.String("string"),
	},
	UpdateSecret: pulumi.Float64(0),
})

    var containerIngressSecretTlsResource = new ContainerIngressSecretTls("containerIngressSecretTlsResource", ContainerIngressSecretTlsArgs.builder()
    .certCrn("string")
    .cluster("string")
    .secretName("string")
    .secretNamespace("string")
    .containerIngressSecretTlsId("string")
    .persistence(false)
    .timeouts(ContainerIngressSecretTlsTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .update("string")
        .build())
    .updateSecret(0)
    .build());

    container_ingress_secret_tls_resource = ibm.ContainerIngressSecretTls("containerIngressSecretTlsResource",
    cert_crn="string",
    cluster="string",
    secret_name="string",
    secret_namespace="string",
    container_ingress_secret_tls_id="string",
    persistence=False,
    timeouts={
        "create": "string",
        "delete": "string",
        "update": "string",
    },
    update_secret=0)

    const containerIngressSecretTlsResource = new ibm.ContainerIngressSecretTls("containerIngressSecretTlsResource", {
    certCrn: "string",
    cluster: "string",
    secretName: "string",
    secretNamespace: "string",
    containerIngressSecretTlsId: "string",
    persistence: false,
    timeouts: {
        create: "string",
        "delete": "string",
        update: "string",
    },
    updateSecret: 0,
});

    type: ibm:ContainerIngressSecretTls
properties:
    certCrn: string
    cluster: string
    containerIngressSecretTlsId: string
    persistence: false
    secretName: string
    secretNamespace: string
    timeouts:
        create: string
        delete: string
        update: string
    updateSecret: 0

    ContainerIngressSecretTls Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The ContainerIngressSecretTls resource accepts the following input properties:

    CertCrn string
    The Secrets Manager crn for a secret of type certificate.
    Cluster string
    The cluster ID.
    SecretName string
    The name of the kubernetes secret.
    SecretNamespace string
    The namespace of the kubernetes secret.
    ContainerIngressSecretTlsId string
    Persistence bool
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    Timeouts ContainerIngressSecretTlsTimeouts
    UpdateSecret double
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    CertCrn string
    The Secrets Manager crn for a secret of type certificate.
    Cluster string
    The cluster ID.
    SecretName string
    The name of the kubernetes secret.
    SecretNamespace string
    The namespace of the kubernetes secret.
    ContainerIngressSecretTlsId string
    Persistence bool
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    Timeouts ContainerIngressSecretTlsTimeoutsArgs
    UpdateSecret float64
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    certCrn String
    The Secrets Manager crn for a secret of type certificate.
    cluster String
    The cluster ID.
    secretName String
    The name of the kubernetes secret.
    secretNamespace String
    The namespace of the kubernetes secret.
    containerIngressSecretTlsId String
    persistence Boolean
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    timeouts ContainerIngressSecretTlsTimeouts
    updateSecret Double
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    certCrn string
    The Secrets Manager crn for a secret of type certificate.
    cluster string
    The cluster ID.
    secretName string
    The name of the kubernetes secret.
    secretNamespace string
    The namespace of the kubernetes secret.
    containerIngressSecretTlsId string
    persistence boolean
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    timeouts ContainerIngressSecretTlsTimeouts
    updateSecret number
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    cert_crn str
    The Secrets Manager crn for a secret of type certificate.
    cluster str
    The cluster ID.
    secret_name str
    The name of the kubernetes secret.
    secret_namespace str
    The namespace of the kubernetes secret.
    container_ingress_secret_tls_id str
    persistence bool
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    timeouts ContainerIngressSecretTlsTimeoutsArgs
    update_secret float
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    certCrn String
    The Secrets Manager crn for a secret of type certificate.
    cluster String
    The cluster ID.
    secretName String
    The name of the kubernetes secret.
    secretNamespace String
    The namespace of the kubernetes secret.
    containerIngressSecretTlsId String
    persistence Boolean
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    timeouts Property Map
    updateSecret Number
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the ContainerIngressSecretTls resource produces the following output properties:

    DomainName string
    (String) Domain name.
    ExpiresOn string
    (String) Certificate expires on date.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastUpdatedTimestamp string
    (String) Timestamp secret was last updated in cluster.
    Status string
    (String) The Status of the secret.
    Type string
    (String) Type of Secret Manager secret.
    UserManaged bool
    (Bool) Indicates whether the secret was created by a user.
    DomainName string
    (String) Domain name.
    ExpiresOn string
    (String) Certificate expires on date.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastUpdatedTimestamp string
    (String) Timestamp secret was last updated in cluster.
    Status string
    (String) The Status of the secret.
    Type string
    (String) Type of Secret Manager secret.
    UserManaged bool
    (Bool) Indicates whether the secret was created by a user.
    domainName String
    (String) Domain name.
    expiresOn String
    (String) Certificate expires on date.
    id String
    The provider-assigned unique ID for this managed resource.
    lastUpdatedTimestamp String
    (String) Timestamp secret was last updated in cluster.
    status String
    (String) The Status of the secret.
    type String
    (String) Type of Secret Manager secret.
    userManaged Boolean
    (Bool) Indicates whether the secret was created by a user.
    domainName string
    (String) Domain name.
    expiresOn string
    (String) Certificate expires on date.
    id string
    The provider-assigned unique ID for this managed resource.
    lastUpdatedTimestamp string
    (String) Timestamp secret was last updated in cluster.
    status string
    (String) The Status of the secret.
    type string
    (String) Type of Secret Manager secret.
    userManaged boolean
    (Bool) Indicates whether the secret was created by a user.
    domain_name str
    (String) Domain name.
    expires_on str
    (String) Certificate expires on date.
    id str
    The provider-assigned unique ID for this managed resource.
    last_updated_timestamp str
    (String) Timestamp secret was last updated in cluster.
    status str
    (String) The Status of the secret.
    type str
    (String) Type of Secret Manager secret.
    user_managed bool
    (Bool) Indicates whether the secret was created by a user.
    domainName String
    (String) Domain name.
    expiresOn String
    (String) Certificate expires on date.
    id String
    The provider-assigned unique ID for this managed resource.
    lastUpdatedTimestamp String
    (String) Timestamp secret was last updated in cluster.
    status String
    (String) The Status of the secret.
    type String
    (String) Type of Secret Manager secret.
    userManaged Boolean
    (Bool) Indicates whether the secret was created by a user.

    Look up Existing ContainerIngressSecretTls Resource

    Get an existing ContainerIngressSecretTls resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: ContainerIngressSecretTlsState, opts?: CustomResourceOptions): ContainerIngressSecretTls
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        cert_crn: Optional[str] = None,
        cluster: Optional[str] = None,
        container_ingress_secret_tls_id: Optional[str] = None,
        domain_name: Optional[str] = None,
        expires_on: Optional[str] = None,
        last_updated_timestamp: Optional[str] = None,
        persistence: Optional[bool] = None,
        secret_name: Optional[str] = None,
        secret_namespace: Optional[str] = None,
        status: Optional[str] = None,
        timeouts: Optional[ContainerIngressSecretTlsTimeoutsArgs] = None,
        type: Optional[str] = None,
        update_secret: Optional[float] = None,
        user_managed: Optional[bool] = None) -> ContainerIngressSecretTls
    func GetContainerIngressSecretTls(ctx *Context, name string, id IDInput, state *ContainerIngressSecretTlsState, opts ...ResourceOption) (*ContainerIngressSecretTls, error)
    public static ContainerIngressSecretTls Get(string name, Input<string> id, ContainerIngressSecretTlsState? state, CustomResourceOptions? opts = null)
    public static ContainerIngressSecretTls get(String name, Output<String> id, ContainerIngressSecretTlsState state, CustomResourceOptions options)
    resources:  _:    type: ibm:ContainerIngressSecretTls    get:      id: ${id}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    CertCrn string
    The Secrets Manager crn for a secret of type certificate.
    Cluster string
    The cluster ID.
    ContainerIngressSecretTlsId string
    DomainName string
    (String) Domain name.
    ExpiresOn string
    (String) Certificate expires on date.
    LastUpdatedTimestamp string
    (String) Timestamp secret was last updated in cluster.
    Persistence bool
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    SecretName string
    The name of the kubernetes secret.
    SecretNamespace string
    The namespace of the kubernetes secret.
    Status string
    (String) The Status of the secret.
    Timeouts ContainerIngressSecretTlsTimeouts
    Type string
    (String) Type of Secret Manager secret.
    UpdateSecret double
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    UserManaged bool
    (Bool) Indicates whether the secret was created by a user.
    CertCrn string
    The Secrets Manager crn for a secret of type certificate.
    Cluster string
    The cluster ID.
    ContainerIngressSecretTlsId string
    DomainName string
    (String) Domain name.
    ExpiresOn string
    (String) Certificate expires on date.
    LastUpdatedTimestamp string
    (String) Timestamp secret was last updated in cluster.
    Persistence bool
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    SecretName string
    The name of the kubernetes secret.
    SecretNamespace string
    The namespace of the kubernetes secret.
    Status string
    (String) The Status of the secret.
    Timeouts ContainerIngressSecretTlsTimeoutsArgs
    Type string
    (String) Type of Secret Manager secret.
    UpdateSecret float64
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    UserManaged bool
    (Bool) Indicates whether the secret was created by a user.
    certCrn String
    The Secrets Manager crn for a secret of type certificate.
    cluster String
    The cluster ID.
    containerIngressSecretTlsId String
    domainName String
    (String) Domain name.
    expiresOn String
    (String) Certificate expires on date.
    lastUpdatedTimestamp String
    (String) Timestamp secret was last updated in cluster.
    persistence Boolean
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    secretName String
    The name of the kubernetes secret.
    secretNamespace String
    The namespace of the kubernetes secret.
    status String
    (String) The Status of the secret.
    timeouts ContainerIngressSecretTlsTimeouts
    type String
    (String) Type of Secret Manager secret.
    updateSecret Double
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    userManaged Boolean
    (Bool) Indicates whether the secret was created by a user.
    certCrn string
    The Secrets Manager crn for a secret of type certificate.
    cluster string
    The cluster ID.
    containerIngressSecretTlsId string
    domainName string
    (String) Domain name.
    expiresOn string
    (String) Certificate expires on date.
    lastUpdatedTimestamp string
    (String) Timestamp secret was last updated in cluster.
    persistence boolean
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    secretName string
    The name of the kubernetes secret.
    secretNamespace string
    The namespace of the kubernetes secret.
    status string
    (String) The Status of the secret.
    timeouts ContainerIngressSecretTlsTimeouts
    type string
    (String) Type of Secret Manager secret.
    updateSecret number
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    userManaged boolean
    (Bool) Indicates whether the secret was created by a user.
    cert_crn str
    The Secrets Manager crn for a secret of type certificate.
    cluster str
    The cluster ID.
    container_ingress_secret_tls_id str
    domain_name str
    (String) Domain name.
    expires_on str
    (String) Certificate expires on date.
    last_updated_timestamp str
    (String) Timestamp secret was last updated in cluster.
    persistence bool
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    secret_name str
    The name of the kubernetes secret.
    secret_namespace str
    The namespace of the kubernetes secret.
    status str
    (String) The Status of the secret.
    timeouts ContainerIngressSecretTlsTimeoutsArgs
    type str
    (String) Type of Secret Manager secret.
    update_secret float
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    user_managed bool
    (Bool) Indicates whether the secret was created by a user.
    certCrn String
    The Secrets Manager crn for a secret of type certificate.
    cluster String
    The cluster ID.
    containerIngressSecretTlsId String
    domainName String
    (String) Domain name.
    expiresOn String
    (String) Certificate expires on date.
    lastUpdatedTimestamp String
    (String) Timestamp secret was last updated in cluster.
    persistence Boolean
    (Bool) Persist the secret data in your cluster. If the secret is later deleted from the command line or OpenShift web console, the secret is automatically re-created in your cluster.
    secretName String
    The name of the kubernetes secret.
    secretNamespace String
    The namespace of the kubernetes secret.
    status String
    (String) The Status of the secret.
    timeouts Property Map
    type String
    (String) Type of Secret Manager secret.
    updateSecret Number
    This argument is used to force update from upstream secrets manager instance that stores secret. Increment the value to force an update to your Ingress secret for changes made to the upstream secrets manager secret.
    userManaged Boolean
    (Bool) Indicates whether the secret was created by a user.

    Supporting Types

    ContainerIngressSecretTlsTimeouts, ContainerIngressSecretTlsTimeoutsArgs

    Create string
    Delete string
    Update string
    Create string
    Delete string
    Update string
    create String
    delete String
    update String
    create string
    delete string
    update string
    create str
    delete str
    update str
    create String
    delete String
    update String

    Package Details

    Repository
    ibm ibm-cloud/terraform-provider-ibm
    License
    Notes
    This Pulumi package is based on the ibm Terraform Provider.
    ibm logo
    ibm 1.78.0 published on Wednesday, Apr 30, 2025 by ibm-cloud
    ibm-cloud/terraform-provider-ibm