Secret

incident 7.0.0, Sep 11 26

Viewing docs for incident 7.0.0
published on Friday, Sep 11, 2026 by incident-io

Schema (JSON)

incident-io/terraform-provider-incident

Viewing docs for incident 7.0.0
published on Friday, Sep 11, 2026 by incident-io

Schema (JSON)

incident-io/terraform-provider-incident

Import

Import is supported using an import block or the pulumi import command:

The pulumi import command can be used, for example:

#!/bin/bash

Import a secret using its ID

Replace the ID with a real ID from your incident.io organization

$ pulumi import incident:index/secret:Secret example 01ABC123DEF456GHI789JKL

An imported secret has no value_wo_version, because the value it already holds didn’t

come from your configuration. If your config sets value_wo and value_wo_version, the

first apply after importing will rotate the secret to that value - the plan says so.

To adopt a secret without touching its value, leave both attributes unset.

Create Secret Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new Secret(name: string, args?: SecretArgs, opts?: CustomResourceOptions);

@overload
def Secret(resource_name: str,
           args: Optional[SecretArgs] = None,
           opts: Optional[ResourceOptions] = None)

@overload
def Secret(resource_name: str,
           opts: Optional[ResourceOptions] = None,
           description: Optional[str] = None,
           name: Optional[str] = None,
           owning_team_ids: Optional[Sequence[str]] = None,
           value_wo: Optional[str] = None,
           value_wo_version: Optional[float] = None)

func NewSecret(ctx *Context, name string, args *SecretArgs, opts ...ResourceOption) (*Secret, error)

public Secret(string name, SecretArgs? args = null, CustomResourceOptions? opts = null)

public Secret(String name, SecretArgs args)
public Secret(String name, SecretArgs args, CustomResourceOptions options)

type: incident:Secret
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

resource "incident_secret" "name" {
    # resource properties
}

Parameters

name string: The unique name of the resource.
args SecretArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

resource_name str: The unique name of the resource.
args SecretArgs: The arguments to resource properties.
opts ResourceOptions: Bag of options to control resource's behavior.

ctx Context: Context object for the current deployment.
name string: The unique name of the resource.
args SecretArgs: The arguments to resource properties.
opts ResourceOption: Bag of options to control resource's behavior.

name string: The unique name of the resource.
args SecretArgs: The arguments to resource properties.
opts CustomResourceOptions: Bag of options to control resource's behavior.

name String: The unique name of the resource.
args SecretArgs: The arguments to resource properties.
options CustomResourceOptions: Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var secretResource = new Incident.Secret("secretResource", new()
{
    Description = "string",
    Name = "string",
    OwningTeamIds = new[]
    {
        "string",
    },
    ValueWo = "string",
    ValueWoVersion = 0.0,
});

example, err := incident.NewSecret(ctx, "secretResource", &incident.SecretArgs{
	Description: pulumi.String("string"),
	Name:        pulumi.String("string"),
	OwningTeamIds: pulumi.StringArray{
		pulumi.String("string"),
	},
	ValueWo:        pulumi.String("string"),
	ValueWoVersion: pulumi.Float64(0),
})

resource "incident_secret" "secretResource" {
  lifecycle {
    create_before_destroy = true
  }
  description      = "string"
  name             = "string"
  owning_team_ids  = ["string"]
  value_wo         = "string"
  value_wo_version = 0
}

var secretResource = new Secret("secretResource", SecretArgs.builder()
    .description("string")
    .name("string")
    .owningTeamIds("string")
    .valueWo("string")
    .valueWoVersion(0.0)
    .build());

secret_resource = incident.Secret("secretResource",
    description="string",
    name="string",
    owning_team_ids=["string"],
    value_wo="string",
    value_wo_version=float(0))

const secretResource = new incident.Secret("secretResource", {
    description: "string",
    name: "string",
    owningTeamIds: ["string"],
    valueWo: "string",
    valueWoVersion: 0,
});

type: incident:Secret
properties:
    description: string
    name: string
    owningTeamIds:
        - string
    valueWo: string
    valueWoVersion: 0

Secret Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The Secret resource accepts the following input properties:

Description string: Optional description of what this secret is for
Name string: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
OwningTeamIds List<string>: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
ValueWo string
ValueWoVersion double

Description string: Optional description of what this secret is for
Name string: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
OwningTeamIds []string: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
ValueWo string
ValueWoVersion float64

description string: Optional description of what this secret is for
name string: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owning_team_ids list(string): IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
value_wo string
value_wo_version number

description String: Optional description of what this secret is for
name String: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owningTeamIds List<String>: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
valueWo String
valueWoVersion Double

description string: Optional description of what this secret is for
name string: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owningTeamIds string[]: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
valueWo string
valueWoVersion number

description str: Optional description of what this secret is for
name str: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owning_team_ids Sequence[str]: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
value_wo str
value_wo_version float

description String: Optional description of what this secret is for
name String: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owningTeamIds List<String>: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
valueWo String
valueWoVersion Number

Outputs

All input properties are implicitly available as output properties. Additionally, the Secret resource produces the following output properties:

CreatedAt string: When this secret was created.
Id string: The provider-assigned unique ID for this managed resource.
LastFourChars string: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
UpdatedAt string: When this secret was last changed, which includes being rotated as well as having its metadata edited.
Version double: The current version number, incremented on each rotation

CreatedAt string: When this secret was created.
Id string: The provider-assigned unique ID for this managed resource.
LastFourChars string: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
UpdatedAt string: When this secret was last changed, which includes being rotated as well as having its metadata edited.
Version float64: The current version number, incremented on each rotation

created_at string: When this secret was created.
id string: The provider-assigned unique ID for this managed resource.
last_four_chars string: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
updated_at string: When this secret was last changed, which includes being rotated as well as having its metadata edited.
version number: The current version number, incremented on each rotation

createdAt String: When this secret was created.
id String: The provider-assigned unique ID for this managed resource.
lastFourChars String: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
updatedAt String: When this secret was last changed, which includes being rotated as well as having its metadata edited.
version Double: The current version number, incremented on each rotation

createdAt string: When this secret was created.
id string: The provider-assigned unique ID for this managed resource.
lastFourChars string: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
updatedAt string: When this secret was last changed, which includes being rotated as well as having its metadata edited.
version number: The current version number, incremented on each rotation

created_at str: When this secret was created.
id str: The provider-assigned unique ID for this managed resource.
last_four_chars str: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
updated_at str: When this secret was last changed, which includes being rotated as well as having its metadata edited.
version float: The current version number, incremented on each rotation

createdAt String: When this secret was created.
id String: The provider-assigned unique ID for this managed resource.
lastFourChars String: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
updatedAt String: When this secret was last changed, which includes being rotated as well as having its metadata edited.
version Number: The current version number, incremented on each rotation

Look up Existing Secret Resource

Get an existing Secret resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: SecretState, opts?: CustomResourceOptions): Secret

@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        created_at: Optional[str] = None,
        description: Optional[str] = None,
        last_four_chars: Optional[str] = None,
        name: Optional[str] = None,
        owning_team_ids: Optional[Sequence[str]] = None,
        updated_at: Optional[str] = None,
        value_wo: Optional[str] = None,
        value_wo_version: Optional[float] = None,
        version: Optional[float] = None) -> Secret

func GetSecret(ctx *Context, name string, id IDInput, state *SecretState, opts ...ResourceOption) (*Secret, error)

public static Secret Get(string name, Input<string> id, SecretState? state, CustomResourceOptions? opts = null)

public static Secret get(String name, Output<String> id, SecretState state, CustomResourceOptions options)

resources:  _:    type: incident:Secret    get:      id: ${id}

import {
  to = incident_secret.example
  id = "${id}"
}

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

resource_name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

name: The unique name of the resulting resource.
id: The unique provider ID of the resource to lookup.
state: Any extra arguments used during the lookup.
opts: A bag of options that control this resource's behavior.

The following state arguments are supported:

CreatedAt string: When this secret was created.
Description string: Optional description of what this secret is for
LastFourChars string: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
Name string: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
OwningTeamIds List<string>: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
UpdatedAt string: When this secret was last changed, which includes being rotated as well as having its metadata edited.
ValueWo string
ValueWoVersion double
Version double: The current version number, incremented on each rotation

CreatedAt string: When this secret was created.
Description string: Optional description of what this secret is for
LastFourChars string: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
Name string: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
OwningTeamIds []string: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
UpdatedAt string: When this secret was last changed, which includes being rotated as well as having its metadata edited.
ValueWo string
ValueWoVersion float64
Version float64: The current version number, incremented on each rotation

created_at string: When this secret was created.
description string: Optional description of what this secret is for
last_four_chars string: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
name string: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owning_team_ids list(string): IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
updated_at string: When this secret was last changed, which includes being rotated as well as having its metadata edited.
value_wo string
value_wo_version number
version number: The current version number, incremented on each rotation

createdAt String: When this secret was created.
description String: Optional description of what this secret is for
lastFourChars String: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
name String: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owningTeamIds List<String>: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
updatedAt String: When this secret was last changed, which includes being rotated as well as having its metadata edited.
valueWo String
valueWoVersion Double
version Double: The current version number, incremented on each rotation

createdAt string: When this secret was created.
description string: Optional description of what this secret is for
lastFourChars string: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
name string: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owningTeamIds string[]: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
updatedAt string: When this secret was last changed, which includes being rotated as well as having its metadata edited.
valueWo string
valueWoVersion number
version number: The current version number, incremented on each rotation

created_at str: When this secret was created.
description str: Optional description of what this secret is for
last_four_chars str: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
name str: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owning_team_ids Sequence[str]: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
updated_at str: When this secret was last changed, which includes being rotated as well as having its metadata edited.
value_wo str
value_wo_version float
version float: The current version number, incremented on each rotation

createdAt String: When this secret was created.
description String: Optional description of what this secret is for
lastFourChars String: The last four characters of the current value, for masked display. Absent when the value is four characters or shorter.
name String: Human-readable name, unique within the organisation amongst unarchived secrets. At most 1024 bytes, counted in bytes rather than characters, so a name using multi-byte characters reaches the limit sooner.
owningTeamIds List<String>: IDs of the teams that own this secret. Empty means the secret is owned by the whole organisation.
updatedAt String: When this secret was last changed, which includes being rotated as well as having its metadata edited.
valueWo String
valueWoVersion Number
version Number: The current version number, incremented on each rotation

Package Details

Repository: incident incident-io/terraform-provider-incident
License
Notes: This Pulumi package is based on the incident Terraform Provider.

Viewing docs for incident 7.0.0
published on Friday, Sep 11, 2026 by incident-io

Schema (JSON)

incident-io/terraform-provider-incident

incident.Secret

On this page

On this page

Import

Create Secret Resource

Constructor syntax

Parameters

Constructor example

Secret Resource Properties

Inputs

Outputs

Look up Existing Secret Resource

Package Details

On this page

On this page

Try Pulumi Cloud free.
Your team will thank you.

incident.Secret

On this page

On this page

Import

Create Secret Resource

Constructor syntax

Parameters

Constructor example

Secret Resource Properties

Inputs

Outputs

Look up Existing Secret Resource

Package Details

On this page

On this page

Try Pulumi Cloud free.Your team will thank you.

Try Pulumi Cloud free.
Your team will thank you.