published on Friday, Jul 17, 2026 by OVHcloud
published on Friday, Jul 17, 2026 by OVHcloud
Creates a container in the Barbican Key Manager service for a public cloud project. Containers hold references to secrets and are typically used to group related secrets such as TLS certificates.
Example Usage
Create a certificate container referencing a certificate and a private key secret:
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
Example coming soon!
resources:
certificate:
type: ovh:CloudKeyManagerSecret
properties:
serviceName: Public cloud project ID
region: GRA
name: my-certificate
secretType: CERTIFICATE
privateKey:
type: ovh:CloudKeyManagerSecret
name: private_key
properties:
serviceName: Public cloud project ID
region: GRA
name: my-private-key
secretType: PRIVATE
container:
type: ovh:CloudKeyManagerContainer
properties:
serviceName: Public cloud project ID
region: GRA
name: my-certificate-container
type: CERTIFICATE
secretRefs:
- name: certificate
secret_id: ${certificate.id}
- name: private_key
secret_id: ${privateKey.id}
Example coming soon!
Create CloudKeyManagerContainer Resource
Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.
Constructor syntax
new CloudKeyManagerContainer(name: string, args: CloudKeyManagerContainerArgs, opts?: CustomResourceOptions);@overload
def CloudKeyManagerContainer(resource_name: str,
args: CloudKeyManagerContainerArgs,
opts: Optional[ResourceOptions] = None)
@overload
def CloudKeyManagerContainer(resource_name: str,
opts: Optional[ResourceOptions] = None,
region: Optional[str] = None,
service_name: Optional[str] = None,
type: Optional[str] = None,
availability_zone: Optional[str] = None,
name: Optional[str] = None,
secret_refs: Optional[Sequence[CloudKeyManagerContainerSecretRefArgs]] = None)func NewCloudKeyManagerContainer(ctx *Context, name string, args CloudKeyManagerContainerArgs, opts ...ResourceOption) (*CloudKeyManagerContainer, error)public CloudKeyManagerContainer(string name, CloudKeyManagerContainerArgs args, CustomResourceOptions? opts = null)
public CloudKeyManagerContainer(String name, CloudKeyManagerContainerArgs args)
public CloudKeyManagerContainer(String name, CloudKeyManagerContainerArgs args, CustomResourceOptions options)
type: ovh:CloudKeyManagerContainer
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.
resource "ovh_cloud_key_manager_container" "name" {
# resource properties
}Parameters
- name string
- The unique name of the resource.
- args CloudKeyManagerContainerArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- resource_name str
- The unique name of the resource.
- args CloudKeyManagerContainerArgs
- The arguments to resource properties.
- opts ResourceOptions
- Bag of options to control resource's behavior.
- ctx Context
- Context object for the current deployment.
- name string
- The unique name of the resource.
- args CloudKeyManagerContainerArgs
- The arguments to resource properties.
- opts ResourceOption
- Bag of options to control resource's behavior.
- name string
- The unique name of the resource.
- args CloudKeyManagerContainerArgs
- The arguments to resource properties.
- opts CustomResourceOptions
- Bag of options to control resource's behavior.
- name String
- The unique name of the resource.
- args CloudKeyManagerContainerArgs
- The arguments to resource properties.
- options CustomResourceOptions
- Bag of options to control resource's behavior.
Constructor example
The following reference example uses placeholder values for all input properties.
var cloudKeyManagerContainerResource = new Ovh.CloudKeyManagerContainer("cloudKeyManagerContainerResource", new()
{
Region = "string",
ServiceName = "string",
Type = "string",
AvailabilityZone = "string",
Name = "string",
SecretRefs = new[]
{
new Ovh.Inputs.CloudKeyManagerContainerSecretRefArgs
{
Name = "string",
SecretId = "string",
},
},
});
example, err := ovh.NewCloudKeyManagerContainer(ctx, "cloudKeyManagerContainerResource", &ovh.CloudKeyManagerContainerArgs{
Region: pulumi.String("string"),
ServiceName: pulumi.String("string"),
Type: pulumi.String("string"),
AvailabilityZone: pulumi.String("string"),
Name: pulumi.String("string"),
SecretRefs: ovh.CloudKeyManagerContainerSecretRefArray{
&ovh.CloudKeyManagerContainerSecretRefArgs{
Name: pulumi.String("string"),
SecretId: pulumi.String("string"),
},
},
})
resource "ovh_cloud_key_manager_container" "cloudKeyManagerContainerResource" {
lifecycle {
create_before_destroy = true
}
region = "string"
service_name = "string"
type = "string"
availability_zone = "string"
name = "string"
secret_refs {
name = "string"
secret_id = "string"
}
}
var cloudKeyManagerContainerResource = new CloudKeyManagerContainer("cloudKeyManagerContainerResource", CloudKeyManagerContainerArgs.builder()
.region("string")
.serviceName("string")
.type("string")
.availabilityZone("string")
.name("string")
.secretRefs(CloudKeyManagerContainerSecretRefArgs.builder()
.name("string")
.secretId("string")
.build())
.build());
cloud_key_manager_container_resource = ovh.CloudKeyManagerContainer("cloudKeyManagerContainerResource",
region="string",
service_name="string",
type="string",
availability_zone="string",
name="string",
secret_refs=[{
"name": "string",
"secret_id": "string",
}])
const cloudKeyManagerContainerResource = new ovh.CloudKeyManagerContainer("cloudKeyManagerContainerResource", {
region: "string",
serviceName: "string",
type: "string",
availabilityZone: "string",
name: "string",
secretRefs: [{
name: "string",
secretId: "string",
}],
});
type: ovh:CloudKeyManagerContainer
properties:
availabilityZone: string
name: string
region: string
secretRefs:
- name: string
secretId: string
serviceName: string
type: string
CloudKeyManagerContainer Resource Properties
To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.
Inputs
In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.
The CloudKeyManagerContainer resource accepts the following input properties:
- Region string
- Region where the container will be created.
- Service
Name string - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - Type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - Availability
Zone string - Availability zone where the container will be created.
- Name string
- Name of the container.
- Secret
Refs List<CloudKey Manager Container Secret Ref> - List of secret references in the container. Each element supports:
- Region string
- Region where the container will be created.
- Service
Name string - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - Type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - Availability
Zone string - Availability zone where the container will be created.
- Name string
- Name of the container.
- Secret
Refs []CloudKey Manager Container Secret Ref Args - List of secret references in the container. Each element supports:
- region string
- Region where the container will be created.
- service_
name string - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - availability_
zone string - Availability zone where the container will be created.
- name string
- Name of the container.
- secret_
refs list(object) - List of secret references in the container. Each element supports:
- region String
- Region where the container will be created.
- service
Name String - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type String
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - availability
Zone String - Availability zone where the container will be created.
- name String
- Name of the container.
- secret
Refs List<CloudKey Manager Container Secret Ref> - List of secret references in the container. Each element supports:
- region string
- Region where the container will be created.
- service
Name string - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - availability
Zone string - Availability zone where the container will be created.
- name string
- Name of the container.
- secret
Refs CloudKey Manager Container Secret Ref[] - List of secret references in the container. Each element supports:
- region str
- Region where the container will be created.
- service_
name str - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type str
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - availability_
zone str - Availability zone where the container will be created.
- name str
- Name of the container.
- secret_
refs Sequence[CloudKey Manager Container Secret Ref Args] - List of secret references in the container. Each element supports:
- region String
- Region where the container will be created.
- service
Name String - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type String
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - availability
Zone String - Availability zone where the container will be created.
- name String
- Name of the container.
- secret
Refs List<Property Map> - List of secret references in the container. Each element supports:
Outputs
All input properties are implicitly available as output properties. Additionally, the CloudKeyManagerContainer resource produces the following output properties:
- Checksum string
- Computed hash representing the current resource state.
- Created
At string - Creation date of the container.
- Current
State CloudKey Manager Container Current State - Current state of the container as reported by OpenStack Barbican:
- Id string
- The provider-assigned unique ID for this managed resource.
- Resource
Status string - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - Updated
At string - Last update date of the container.
- Checksum string
- Computed hash representing the current resource state.
- Created
At string - Creation date of the container.
- Current
State CloudKey Manager Container Current State - Current state of the container as reported by OpenStack Barbican:
- Id string
- The provider-assigned unique ID for this managed resource.
- Resource
Status string - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - Updated
At string - Last update date of the container.
- checksum string
- Computed hash representing the current resource state.
- created_
at string - Creation date of the container.
- current_
state object - Current state of the container as reported by OpenStack Barbican:
- id string
- The provider-assigned unique ID for this managed resource.
- resource_
status string - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - updated_
at string - Last update date of the container.
- checksum String
- Computed hash representing the current resource state.
- created
At String - Creation date of the container.
- current
State CloudKey Manager Container Current State - Current state of the container as reported by OpenStack Barbican:
- id String
- The provider-assigned unique ID for this managed resource.
- resource
Status String - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - updated
At String - Last update date of the container.
- checksum string
- Computed hash representing the current resource state.
- created
At string - Creation date of the container.
- current
State CloudKey Manager Container Current State - Current state of the container as reported by OpenStack Barbican:
- id string
- The provider-assigned unique ID for this managed resource.
- resource
Status string - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - updated
At string - Last update date of the container.
- checksum str
- Computed hash representing the current resource state.
- created_
at str - Creation date of the container.
- current_
state CloudKey Manager Container Current State - Current state of the container as reported by OpenStack Barbican:
- id str
- The provider-assigned unique ID for this managed resource.
- resource_
status str - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - updated_
at str - Last update date of the container.
- checksum String
- Computed hash representing the current resource state.
- created
At String - Creation date of the container.
- current
State Property Map - Current state of the container as reported by OpenStack Barbican:
- id String
- The provider-assigned unique ID for this managed resource.
- resource
Status String - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - updated
At String - Last update date of the container.
Look up Existing CloudKeyManagerContainer Resource
Get an existing CloudKeyManagerContainer resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.
public static get(name: string, id: Input<ID>, state?: CloudKeyManagerContainerState, opts?: CustomResourceOptions): CloudKeyManagerContainer@staticmethod
def get(resource_name: str,
id: str,
opts: Optional[ResourceOptions] = None,
availability_zone: Optional[str] = None,
checksum: Optional[str] = None,
created_at: Optional[str] = None,
current_state: Optional[CloudKeyManagerContainerCurrentStateArgs] = None,
name: Optional[str] = None,
region: Optional[str] = None,
resource_status: Optional[str] = None,
secret_refs: Optional[Sequence[CloudKeyManagerContainerSecretRefArgs]] = None,
service_name: Optional[str] = None,
type: Optional[str] = None,
updated_at: Optional[str] = None) -> CloudKeyManagerContainerfunc GetCloudKeyManagerContainer(ctx *Context, name string, id IDInput, state *CloudKeyManagerContainerState, opts ...ResourceOption) (*CloudKeyManagerContainer, error)public static CloudKeyManagerContainer Get(string name, Input<string> id, CloudKeyManagerContainerState? state, CustomResourceOptions? opts = null)public static CloudKeyManagerContainer get(String name, Output<String> id, CloudKeyManagerContainerState state, CustomResourceOptions options)resources: _: type: ovh:CloudKeyManagerContainer get: id: ${id}import {
to = ovh_cloud_key_manager_container.example
id = "${id}"
}
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- resource_name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- name
- The unique name of the resulting resource.
- id
- The unique provider ID of the resource to lookup.
- state
- Any extra arguments used during the lookup.
- opts
- A bag of options that control this resource's behavior.
- Availability
Zone string - Availability zone where the container will be created.
- Checksum string
- Computed hash representing the current resource state.
- Created
At string - Creation date of the container.
- Current
State CloudKey Manager Container Current State - Current state of the container as reported by OpenStack Barbican:
- Name string
- Name of the container.
- Region string
- Region where the container will be created.
- Resource
Status string - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - Secret
Refs List<CloudKey Manager Container Secret Ref> - List of secret references in the container. Each element supports:
- Service
Name string - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - Type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - Updated
At string - Last update date of the container.
- Availability
Zone string - Availability zone where the container will be created.
- Checksum string
- Computed hash representing the current resource state.
- Created
At string - Creation date of the container.
- Current
State CloudKey Manager Container Current State Args - Current state of the container as reported by OpenStack Barbican:
- Name string
- Name of the container.
- Region string
- Region where the container will be created.
- Resource
Status string - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - Secret
Refs []CloudKey Manager Container Secret Ref Args - List of secret references in the container. Each element supports:
- Service
Name string - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - Type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - Updated
At string - Last update date of the container.
- availability_
zone string - Availability zone where the container will be created.
- checksum string
- Computed hash representing the current resource state.
- created_
at string - Creation date of the container.
- current_
state object - Current state of the container as reported by OpenStack Barbican:
- name string
- Name of the container.
- region string
- Region where the container will be created.
- resource_
status string - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - secret_
refs list(object) - List of secret references in the container. Each element supports:
- service_
name string - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - updated_
at string - Last update date of the container.
- availability
Zone String - Availability zone where the container will be created.
- checksum String
- Computed hash representing the current resource state.
- created
At String - Creation date of the container.
- current
State CloudKey Manager Container Current State - Current state of the container as reported by OpenStack Barbican:
- name String
- Name of the container.
- region String
- Region where the container will be created.
- resource
Status String - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - secret
Refs List<CloudKey Manager Container Secret Ref> - List of secret references in the container. Each element supports:
- service
Name String - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type String
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - updated
At String - Last update date of the container.
- availability
Zone string - Availability zone where the container will be created.
- checksum string
- Computed hash representing the current resource state.
- created
At string - Creation date of the container.
- current
State CloudKey Manager Container Current State - Current state of the container as reported by OpenStack Barbican:
- name string
- Name of the container.
- region string
- Region where the container will be created.
- resource
Status string - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - secret
Refs CloudKey Manager Container Secret Ref[] - List of secret references in the container. Each element supports:
- service
Name string - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - updated
At string - Last update date of the container.
- availability_
zone str - Availability zone where the container will be created.
- checksum str
- Computed hash representing the current resource state.
- created_
at str - Creation date of the container.
- current_
state CloudKey Manager Container Current State Args - Current state of the container as reported by OpenStack Barbican:
- name str
- Name of the container.
- region str
- Region where the container will be created.
- resource_
status str - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - secret_
refs Sequence[CloudKey Manager Container Secret Ref Args] - List of secret references in the container. Each element supports:
- service_
name str - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type str
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - updated_
at str - Last update date of the container.
- availability
Zone String - Availability zone where the container will be created.
- checksum String
- Computed hash representing the current resource state.
- created
At String - Creation date of the container.
- current
State Property Map - Current state of the container as reported by OpenStack Barbican:
- name String
- Name of the container.
- region String
- Region where the container will be created.
- resource
Status String - Container readiness status (
CREATING,DELETING,ERROR,OUT_OF_SYNC,READY,UPDATING). - secret
Refs List<Property Map> - List of secret references in the container. Each element supports:
- service
Name String - The id of the public cloud project. If omitted, the
OVH_CLOUD_PROJECT_SERVICEenvironment variable is used. - type String
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA. - updated
At String - Last update date of the container.
Supporting Types
CloudKeyManagerContainerCurrentState, CloudKeyManagerContainerCurrentStateArgs
- Container
Ref string - OpenStack reference URL for the container.
- Location
Cloud
Key Manager Container Current State Location - Location of the container:
- Name string
- Name of the container.
- Secret
Refs List<CloudKey Manager Container Current State Secret Ref> - List of secret references in the container. Each element supports:
- Status string
- Status of the container. Possible values:
ACTIVE,ERROR. - Type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA.
- Container
Ref string - OpenStack reference URL for the container.
- Location
Cloud
Key Manager Container Current State Location - Location of the container:
- Name string
- Name of the container.
- Secret
Refs []CloudKey Manager Container Current State Secret Ref - List of secret references in the container. Each element supports:
- Status string
- Status of the container. Possible values:
ACTIVE,ERROR. - Type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA.
- container_
ref string - OpenStack reference URL for the container.
- location object
- Location of the container:
- name string
- Name of the container.
- secret_
refs list(object) - List of secret references in the container. Each element supports:
- status string
- Status of the container. Possible values:
ACTIVE,ERROR. - type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA.
- container
Ref String - OpenStack reference URL for the container.
- location
Cloud
Key Manager Container Current State Location - Location of the container:
- name String
- Name of the container.
- secret
Refs List<CloudKey Manager Container Current State Secret Ref> - List of secret references in the container. Each element supports:
- status String
- Status of the container. Possible values:
ACTIVE,ERROR. - type String
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA.
- container
Ref string - OpenStack reference URL for the container.
- location
Cloud
Key Manager Container Current State Location - Location of the container:
- name string
- Name of the container.
- secret
Refs CloudKey Manager Container Current State Secret Ref[] - List of secret references in the container. Each element supports:
- status string
- Status of the container. Possible values:
ACTIVE,ERROR. - type string
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA.
- container_
ref str - OpenStack reference URL for the container.
- location
Cloud
Key Manager Container Current State Location - Location of the container:
- name str
- Name of the container.
- secret_
refs Sequence[CloudKey Manager Container Current State Secret Ref] - List of secret references in the container. Each element supports:
- status str
- Status of the container. Possible values:
ACTIVE,ERROR. - type str
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA.
- container
Ref String - OpenStack reference URL for the container.
- location Property Map
- Location of the container:
- name String
- Name of the container.
- secret
Refs List<Property Map> - List of secret references in the container. Each element supports:
- status String
- Status of the container. Possible values:
ACTIVE,ERROR. - type String
- Type of the container. Possible values:
CERTIFICATE,GENERIC,RSA.
CloudKeyManagerContainerCurrentStateLocation, CloudKeyManagerContainerCurrentStateLocationArgs
- Availability
Zone string - Availability zone where the container will be created.
- Region string
- Region where the container will be created.
- Availability
Zone string - Availability zone where the container will be created.
- Region string
- Region where the container will be created.
- availability_
zone string - Availability zone where the container will be created.
- region string
- Region where the container will be created.
- availability
Zone String - Availability zone where the container will be created.
- region String
- Region where the container will be created.
- availability
Zone string - Availability zone where the container will be created.
- region string
- Region where the container will be created.
- availability_
zone str - Availability zone where the container will be created.
- region str
- Region where the container will be created.
- availability
Zone String - Availability zone where the container will be created.
- region String
- Region where the container will be created.
CloudKeyManagerContainerCurrentStateSecretRef, CloudKeyManagerContainerCurrentStateSecretRefArgs
CloudKeyManagerContainerSecretRef, CloudKeyManagerContainerSecretRefArgs
Import
A Key Manager container can be imported using the service_name and id, separated by /:
bash
$ pulumi import ovh:index/cloudKeyManagerContainer:CloudKeyManagerContainer my_container service_name/container_id
To learn more about importing existing cloud resources, see Importing resources.
Package Details
- Repository
- ovh ovh/pulumi-ovh
- License
- Apache-2.0
- Notes
- This Pulumi package is based on the
ovhTerraform Provider.
published on Friday, Jul 17, 2026 by OVHcloud