Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. OVH
  4. API Docs
  5. CloudKeyManagerSecret
Viewing docs for OVHCloud v2.17.0
published on Friday, Jul 17, 2026 by OVHcloud
Schema (JSON)
ovh/pulumi-ovh

ovh.CloudKeyManagerSecret

ovh logo
Viewing docs for OVHCloud v2.17.0
published on Friday, Jul 17, 2026 by OVHcloud
Schema (JSON)
ovh/pulumi-ovh

    Creates a secret in the Barbican Key Manager service for a public cloud project.

    Create CloudKeyManagerSecret Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new CloudKeyManagerSecret(name: string, args: CloudKeyManagerSecretArgs, opts?: CustomResourceOptions);
    @overload
def CloudKeyManagerSecret(resource_name: str,
                          args: CloudKeyManagerSecretArgs,
                          opts: Optional[ResourceOptions] = None)

@overload
def CloudKeyManagerSecret(resource_name: str,
                          opts: Optional[ResourceOptions] = None,
                          region: Optional[str] = None,
                          secret_type: Optional[str] = None,
                          service_name: Optional[str] = None,
                          algorithm: Optional[str] = None,
                          availability_zone: Optional[str] = None,
                          bit_length: Optional[int] = None,
                          expiration: Optional[str] = None,
                          metadata: Optional[Mapping[str, str]] = None,
                          mode: Optional[str] = None,
                          name: Optional[str] = None,
                          payload: Optional[str] = None,
                          payload_content_type: Optional[str] = None)
    func NewCloudKeyManagerSecret(ctx *Context, name string, args CloudKeyManagerSecretArgs, opts ...ResourceOption) (*CloudKeyManagerSecret, error)
    public CloudKeyManagerSecret(string name, CloudKeyManagerSecretArgs args, CustomResourceOptions? opts = null)
    public CloudKeyManagerSecret(String name, CloudKeyManagerSecretArgs args)
public CloudKeyManagerSecret(String name, CloudKeyManagerSecretArgs args, CustomResourceOptions options)

    type: ovh:CloudKeyManagerSecret
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "ovh_cloud_key_manager_secret" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args CloudKeyManagerSecretArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args CloudKeyManagerSecretArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args CloudKeyManagerSecretArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args CloudKeyManagerSecretArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args CloudKeyManagerSecretArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var cloudKeyManagerSecretResource = new Ovh.CloudKeyManagerSecret("cloudKeyManagerSecretResource", new()
{
    Region = "string",
    SecretType = "string",
    ServiceName = "string",
    Algorithm = "string",
    AvailabilityZone = "string",
    BitLength = 0,
    Expiration = "string",
    Metadata = 
    {
        { "string", "string" },
    },
    Mode = "string",
    Name = "string",
    Payload = "string",
    PayloadContentType = "string",
});

    example, err := ovh.NewCloudKeyManagerSecret(ctx, "cloudKeyManagerSecretResource", &ovh.CloudKeyManagerSecretArgs{
	Region:           pulumi.String("string"),
	SecretType:       pulumi.String("string"),
	ServiceName:      pulumi.String("string"),
	Algorithm:        pulumi.String("string"),
	AvailabilityZone: pulumi.String("string"),
	BitLength:        pulumi.Int(0),
	Expiration:       pulumi.String("string"),
	Metadata: pulumi.StringMap{
		"string": pulumi.String("string"),
	},
	Mode:               pulumi.String("string"),
	Name:               pulumi.String("string"),
	Payload:            pulumi.String("string"),
	PayloadContentType: pulumi.String("string"),
})

    resource "ovh_cloud_key_manager_secret" "cloudKeyManagerSecretResource" {
  lifecycle {
    create_before_destroy = true
  }
  region            = "string"
  secret_type       = "string"
  service_name      = "string"
  algorithm         = "string"
  availability_zone = "string"
  bit_length        = 0
  expiration        = "string"
  metadata = {
    "string" = "string"
  }
  mode                 = "string"
  name                 = "string"
  payload              = "string"
  payload_content_type = "string"
}

    var cloudKeyManagerSecretResource = new CloudKeyManagerSecret("cloudKeyManagerSecretResource", CloudKeyManagerSecretArgs.builder()
    .region("string")
    .secretType("string")
    .serviceName("string")
    .algorithm("string")
    .availabilityZone("string")
    .bitLength(0)
    .expiration("string")
    .metadata(Map.of("string", "string"))
    .mode("string")
    .name("string")
    .payload("string")
    .payloadContentType("string")
    .build());

    cloud_key_manager_secret_resource = ovh.CloudKeyManagerSecret("cloudKeyManagerSecretResource",
    region="string",
    secret_type="string",
    service_name="string",
    algorithm="string",
    availability_zone="string",
    bit_length=0,
    expiration="string",
    metadata={
        "string": "string",
    },
    mode="string",
    name="string",
    payload="string",
    payload_content_type="string")

    const cloudKeyManagerSecretResource = new ovh.CloudKeyManagerSecret("cloudKeyManagerSecretResource", {
    region: "string",
    secretType: "string",
    serviceName: "string",
    algorithm: "string",
    availabilityZone: "string",
    bitLength: 0,
    expiration: "string",
    metadata: {
        string: "string",
    },
    mode: "string",
    name: "string",
    payload: "string",
    payloadContentType: "string",
});

    type: ovh:CloudKeyManagerSecret
properties:
    algorithm: string
    availabilityZone: string
    bitLength: 0
    expiration: string
    metadata:
        string: string
    mode: string
    name: string
    payload: string
    payloadContentType: string
    region: string
    secretType: string
    serviceName: string

    CloudKeyManagerSecret Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The CloudKeyManagerSecret resource accepts the following input properties:

    Region string
    Region where the secret will be created.
    SecretType string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    ServiceName string
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    Algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    AvailabilityZone string
    Availability zone where the secret will be created.
    BitLength int
    Bit length of the secret (e.g., 256).
    Expiration string
    Expiration date of the secret in RFC3339 format.
    Metadata Dictionary<string, string>
    Key-value metadata for the secret. This is the only mutable field on a secret.
    Mode string
    Mode of the secret algorithm (e.g., CBC).
    Name string
    Name of the secret.
    Payload string
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    PayloadContentType string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    Region string
    Region where the secret will be created.
    SecretType string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    ServiceName string
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    Algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    AvailabilityZone string
    Availability zone where the secret will be created.
    BitLength int
    Bit length of the secret (e.g., 256).
    Expiration string
    Expiration date of the secret in RFC3339 format.
    Metadata map[string]string
    Key-value metadata for the secret. This is the only mutable field on a secret.
    Mode string
    Mode of the secret algorithm (e.g., CBC).
    Name string
    Name of the secret.
    Payload string
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    PayloadContentType string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region string
    Region where the secret will be created.
    secret_type string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    service_name string
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    availability_zone string
    Availability zone where the secret will be created.
    bit_length number
    Bit length of the secret (e.g., 256).
    expiration string
    Expiration date of the secret in RFC3339 format.
    metadata map(string)
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode string
    Mode of the secret algorithm (e.g., CBC).
    name string
    Name of the secret.
    payload string
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payload_content_type string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region String
    Region where the secret will be created.
    secretType String
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    serviceName String
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    algorithm String
    Algorithm associated with the secret (e.g., AES, RSA).
    availabilityZone String
    Availability zone where the secret will be created.
    bitLength Integer
    Bit length of the secret (e.g., 256).
    expiration String
    Expiration date of the secret in RFC3339 format.
    metadata Map<String,String>
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode String
    Mode of the secret algorithm (e.g., CBC).
    name String
    Name of the secret.
    payload String
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payloadContentType String
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region string
    Region where the secret will be created.
    secretType string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    serviceName string
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    availabilityZone string
    Availability zone where the secret will be created.
    bitLength number
    Bit length of the secret (e.g., 256).
    expiration string
    Expiration date of the secret in RFC3339 format.
    metadata {[key: string]: string}
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode string
    Mode of the secret algorithm (e.g., CBC).
    name string
    Name of the secret.
    payload string
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payloadContentType string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region str
    Region where the secret will be created.
    secret_type str
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    service_name str
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    algorithm str
    Algorithm associated with the secret (e.g., AES, RSA).
    availability_zone str
    Availability zone where the secret will be created.
    bit_length int
    Bit length of the secret (e.g., 256).
    expiration str
    Expiration date of the secret in RFC3339 format.
    metadata Mapping[str, str]
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode str
    Mode of the secret algorithm (e.g., CBC).
    name str
    Name of the secret.
    payload str
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payload_content_type str
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region String
    Region where the secret will be created.
    secretType String
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    serviceName String
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    algorithm String
    Algorithm associated with the secret (e.g., AES, RSA).
    availabilityZone String
    Availability zone where the secret will be created.
    bitLength Number
    Bit length of the secret (e.g., 256).
    expiration String
    Expiration date of the secret in RFC3339 format.
    metadata Map<String>
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode String
    Mode of the secret algorithm (e.g., CBC).
    name String
    Name of the secret.
    payload String
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payloadContentType String
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the CloudKeyManagerSecret resource produces the following output properties:

    Checksum string
    Computed hash representing the current resource state.
    CreatedAt string
    Creation date of the secret.
    CurrentState CloudKeyManagerSecretCurrentState
    Current state of the secret as reported by OpenStack Barbican:
    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceStatus string
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    UpdatedAt string
    Last update date of the secret.
    Checksum string
    Computed hash representing the current resource state.
    CreatedAt string
    Creation date of the secret.
    CurrentState CloudKeyManagerSecretCurrentState
    Current state of the secret as reported by OpenStack Barbican:
    Id string
    The provider-assigned unique ID for this managed resource.
    ResourceStatus string
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    UpdatedAt string
    Last update date of the secret.
    checksum string
    Computed hash representing the current resource state.
    created_at string
    Creation date of the secret.
    current_state object
    Current state of the secret as reported by OpenStack Barbican:
    id string
    The provider-assigned unique ID for this managed resource.
    resource_status string
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    updated_at string
    Last update date of the secret.
    checksum String
    Computed hash representing the current resource state.
    createdAt String
    Creation date of the secret.
    currentState CloudKeyManagerSecretCurrentState
    Current state of the secret as reported by OpenStack Barbican:
    id String
    The provider-assigned unique ID for this managed resource.
    resourceStatus String
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    updatedAt String
    Last update date of the secret.
    checksum string
    Computed hash representing the current resource state.
    createdAt string
    Creation date of the secret.
    currentState CloudKeyManagerSecretCurrentState
    Current state of the secret as reported by OpenStack Barbican:
    id string
    The provider-assigned unique ID for this managed resource.
    resourceStatus string
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    updatedAt string
    Last update date of the secret.
    checksum str
    Computed hash representing the current resource state.
    created_at str
    Creation date of the secret.
    current_state CloudKeyManagerSecretCurrentState
    Current state of the secret as reported by OpenStack Barbican:
    id str
    The provider-assigned unique ID for this managed resource.
    resource_status str
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    updated_at str
    Last update date of the secret.
    checksum String
    Computed hash representing the current resource state.
    createdAt String
    Creation date of the secret.
    currentState Property Map
    Current state of the secret as reported by OpenStack Barbican:
    id String
    The provider-assigned unique ID for this managed resource.
    resourceStatus String
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    updatedAt String
    Last update date of the secret.

    Look up Existing CloudKeyManagerSecret Resource

    Get an existing CloudKeyManagerSecret resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: CloudKeyManagerSecretState, opts?: CustomResourceOptions): CloudKeyManagerSecret
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        algorithm: Optional[str] = None,
        availability_zone: Optional[str] = None,
        bit_length: Optional[int] = None,
        checksum: Optional[str] = None,
        created_at: Optional[str] = None,
        current_state: Optional[CloudKeyManagerSecretCurrentStateArgs] = None,
        expiration: Optional[str] = None,
        metadata: Optional[Mapping[str, str]] = None,
        mode: Optional[str] = None,
        name: Optional[str] = None,
        payload: Optional[str] = None,
        payload_content_type: Optional[str] = None,
        region: Optional[str] = None,
        resource_status: Optional[str] = None,
        secret_type: Optional[str] = None,
        service_name: Optional[str] = None,
        updated_at: Optional[str] = None) -> CloudKeyManagerSecret
    func GetCloudKeyManagerSecret(ctx *Context, name string, id IDInput, state *CloudKeyManagerSecretState, opts ...ResourceOption) (*CloudKeyManagerSecret, error)
    public static CloudKeyManagerSecret Get(string name, Input<string> id, CloudKeyManagerSecretState? state, CustomResourceOptions? opts = null)
    public static CloudKeyManagerSecret get(String name, Output<String> id, CloudKeyManagerSecretState state, CustomResourceOptions options)
    resources:  _:    type: ovh:CloudKeyManagerSecret    get:      id: ${id}
    import {
  to = ovh_cloud_key_manager_secret.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    Algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    AvailabilityZone string
    Availability zone where the secret will be created.
    BitLength int
    Bit length of the secret (e.g., 256).
    Checksum string
    Computed hash representing the current resource state.
    CreatedAt string
    Creation date of the secret.
    CurrentState CloudKeyManagerSecretCurrentState
    Current state of the secret as reported by OpenStack Barbican:
    Expiration string
    Expiration date of the secret in RFC3339 format.
    Metadata Dictionary<string, string>
    Key-value metadata for the secret. This is the only mutable field on a secret.
    Mode string
    Mode of the secret algorithm (e.g., CBC).
    Name string
    Name of the secret.
    Payload string
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    PayloadContentType string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    Region string
    Region where the secret will be created.
    ResourceStatus string
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    SecretType string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    ServiceName string
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    UpdatedAt string
    Last update date of the secret.
    Algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    AvailabilityZone string
    Availability zone where the secret will be created.
    BitLength int
    Bit length of the secret (e.g., 256).
    Checksum string
    Computed hash representing the current resource state.
    CreatedAt string
    Creation date of the secret.
    CurrentState CloudKeyManagerSecretCurrentStateArgs
    Current state of the secret as reported by OpenStack Barbican:
    Expiration string
    Expiration date of the secret in RFC3339 format.
    Metadata map[string]string
    Key-value metadata for the secret. This is the only mutable field on a secret.
    Mode string
    Mode of the secret algorithm (e.g., CBC).
    Name string
    Name of the secret.
    Payload string
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    PayloadContentType string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    Region string
    Region where the secret will be created.
    ResourceStatus string
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    SecretType string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    ServiceName string
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    UpdatedAt string
    Last update date of the secret.
    algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    availability_zone string
    Availability zone where the secret will be created.
    bit_length number
    Bit length of the secret (e.g., 256).
    checksum string
    Computed hash representing the current resource state.
    created_at string
    Creation date of the secret.
    current_state object
    Current state of the secret as reported by OpenStack Barbican:
    expiration string
    Expiration date of the secret in RFC3339 format.
    metadata map(string)
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode string
    Mode of the secret algorithm (e.g., CBC).
    name string
    Name of the secret.
    payload string
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payload_content_type string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region string
    Region where the secret will be created.
    resource_status string
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    secret_type string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    service_name string
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    updated_at string
    Last update date of the secret.
    algorithm String
    Algorithm associated with the secret (e.g., AES, RSA).
    availabilityZone String
    Availability zone where the secret will be created.
    bitLength Integer
    Bit length of the secret (e.g., 256).
    checksum String
    Computed hash representing the current resource state.
    createdAt String
    Creation date of the secret.
    currentState CloudKeyManagerSecretCurrentState
    Current state of the secret as reported by OpenStack Barbican:
    expiration String
    Expiration date of the secret in RFC3339 format.
    metadata Map<String,String>
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode String
    Mode of the secret algorithm (e.g., CBC).
    name String
    Name of the secret.
    payload String
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payloadContentType String
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region String
    Region where the secret will be created.
    resourceStatus String
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    secretType String
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    serviceName String
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    updatedAt String
    Last update date of the secret.
    algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    availabilityZone string
    Availability zone where the secret will be created.
    bitLength number
    Bit length of the secret (e.g., 256).
    checksum string
    Computed hash representing the current resource state.
    createdAt string
    Creation date of the secret.
    currentState CloudKeyManagerSecretCurrentState
    Current state of the secret as reported by OpenStack Barbican:
    expiration string
    Expiration date of the secret in RFC3339 format.
    metadata {[key: string]: string}
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode string
    Mode of the secret algorithm (e.g., CBC).
    name string
    Name of the secret.
    payload string
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payloadContentType string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region string
    Region where the secret will be created.
    resourceStatus string
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    secretType string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    serviceName string
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    updatedAt string
    Last update date of the secret.
    algorithm str
    Algorithm associated with the secret (e.g., AES, RSA).
    availability_zone str
    Availability zone where the secret will be created.
    bit_length int
    Bit length of the secret (e.g., 256).
    checksum str
    Computed hash representing the current resource state.
    created_at str
    Creation date of the secret.
    current_state CloudKeyManagerSecretCurrentStateArgs
    Current state of the secret as reported by OpenStack Barbican:
    expiration str
    Expiration date of the secret in RFC3339 format.
    metadata Mapping[str, str]
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode str
    Mode of the secret algorithm (e.g., CBC).
    name str
    Name of the secret.
    payload str
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payload_content_type str
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region str
    Region where the secret will be created.
    resource_status str
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    secret_type str
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    service_name str
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    updated_at str
    Last update date of the secret.
    algorithm String
    Algorithm associated with the secret (e.g., AES, RSA).
    availabilityZone String
    Availability zone where the secret will be created.
    bitLength Number
    Bit length of the secret (e.g., 256).
    checksum String
    Computed hash representing the current resource state.
    createdAt String
    Creation date of the secret.
    currentState Property Map
    Current state of the secret as reported by OpenStack Barbican:
    expiration String
    Expiration date of the secret in RFC3339 format.
    metadata Map<String>
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode String
    Mode of the secret algorithm (e.g., CBC).
    name String
    Name of the secret.
    payload String
    Secret payload data (base64-encoded). Write-only, never returned in responses. Requires payload_content_type.
    payloadContentType String
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    region String
    Region where the secret will be created.
    resourceStatus String
    Secret readiness status (CREATING, DELETING, ERROR, OUT_OF_SYNC, READY, UPDATING).
    secretType String
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    serviceName String
    The id of the public cloud project. If omitted, the OVH_CLOUD_PROJECT_SERVICE environment variable is used.
    updatedAt String
    Last update date of the secret.

    Supporting Types

    CloudKeyManagerSecretCurrentState, CloudKeyManagerSecretCurrentStateArgs

    Algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    BitLength int
    Bit length of the secret (e.g., 256).
    Expiration string
    Expiration date of the secret in RFC3339 format.
    Location CloudKeyManagerSecretCurrentStateLocation
    Location of the secret:
    Metadata Dictionary<string, string>
    Key-value metadata for the secret. This is the only mutable field on a secret.
    Mode string
    Mode of the secret algorithm (e.g., CBC).
    Name string
    Name of the secret.
    PayloadContentType string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    SecretRef string
    OpenStack reference URL for the secret.
    SecretType string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    Status string
    Status of the secret (ACTIVE, ERROR).
    Algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    BitLength int
    Bit length of the secret (e.g., 256).
    Expiration string
    Expiration date of the secret in RFC3339 format.
    Location CloudKeyManagerSecretCurrentStateLocation
    Location of the secret:
    Metadata map[string]string
    Key-value metadata for the secret. This is the only mutable field on a secret.
    Mode string
    Mode of the secret algorithm (e.g., CBC).
    Name string
    Name of the secret.
    PayloadContentType string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    SecretRef string
    OpenStack reference URL for the secret.
    SecretType string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    Status string
    Status of the secret (ACTIVE, ERROR).
    algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    bit_length number
    Bit length of the secret (e.g., 256).
    expiration string
    Expiration date of the secret in RFC3339 format.
    location object
    Location of the secret:
    metadata map(string)
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode string
    Mode of the secret algorithm (e.g., CBC).
    name string
    Name of the secret.
    payload_content_type string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    secret_ref string
    OpenStack reference URL for the secret.
    secret_type string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    status string
    Status of the secret (ACTIVE, ERROR).
    algorithm String
    Algorithm associated with the secret (e.g., AES, RSA).
    bitLength Integer
    Bit length of the secret (e.g., 256).
    expiration String
    Expiration date of the secret in RFC3339 format.
    location CloudKeyManagerSecretCurrentStateLocation
    Location of the secret:
    metadata Map<String,String>
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode String
    Mode of the secret algorithm (e.g., CBC).
    name String
    Name of the secret.
    payloadContentType String
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    secretRef String
    OpenStack reference URL for the secret.
    secretType String
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    status String
    Status of the secret (ACTIVE, ERROR).
    algorithm string
    Algorithm associated with the secret (e.g., AES, RSA).
    bitLength number
    Bit length of the secret (e.g., 256).
    expiration string
    Expiration date of the secret in RFC3339 format.
    location CloudKeyManagerSecretCurrentStateLocation
    Location of the secret:
    metadata {[key: string]: string}
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode string
    Mode of the secret algorithm (e.g., CBC).
    name string
    Name of the secret.
    payloadContentType string
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    secretRef string
    OpenStack reference URL for the secret.
    secretType string
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    status string
    Status of the secret (ACTIVE, ERROR).
    algorithm str
    Algorithm associated with the secret (e.g., AES, RSA).
    bit_length int
    Bit length of the secret (e.g., 256).
    expiration str
    Expiration date of the secret in RFC3339 format.
    location CloudKeyManagerSecretCurrentStateLocation
    Location of the secret:
    metadata Mapping[str, str]
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode str
    Mode of the secret algorithm (e.g., CBC).
    name str
    Name of the secret.
    payload_content_type str
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    secret_ref str
    OpenStack reference URL for the secret.
    secret_type str
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    status str
    Status of the secret (ACTIVE, ERROR).
    algorithm String
    Algorithm associated with the secret (e.g., AES, RSA).
    bitLength Number
    Bit length of the secret (e.g., 256).
    expiration String
    Expiration date of the secret in RFC3339 format.
    location Property Map
    Location of the secret:
    metadata Map<String>
    Key-value metadata for the secret. This is the only mutable field on a secret.
    mode String
    Mode of the secret algorithm (e.g., CBC).
    name String
    Name of the secret.
    payloadContentType String
    Content type of the secret payload. Possible values: TEXT_PLAIN, APPLICATION_OCTET_STREAM, APPLICATION_PKIX_CERT, APPLICATION_PKCS8.
    secretRef String
    OpenStack reference URL for the secret.
    secretType String
    Type of the secret. Possible values: SYMMETRIC, PUBLIC, PRIVATE, PASSPHRASE, CERTIFICATE, OPAQUE.
    status String
    Status of the secret (ACTIVE, ERROR).

    CloudKeyManagerSecretCurrentStateLocation, CloudKeyManagerSecretCurrentStateLocationArgs

    AvailabilityZone string
    Availability zone where the secret will be created.
    Region string
    Region where the secret will be created.
    AvailabilityZone string
    Availability zone where the secret will be created.
    Region string
    Region where the secret will be created.
    availability_zone string
    Availability zone where the secret will be created.
    region string
    Region where the secret will be created.
    availabilityZone String
    Availability zone where the secret will be created.
    region String
    Region where the secret will be created.
    availabilityZone string
    Availability zone where the secret will be created.
    region string
    Region where the secret will be created.
    availability_zone str
    Availability zone where the secret will be created.
    region str
    Region where the secret will be created.
    availabilityZone String
    Availability zone where the secret will be created.
    region String
    Region where the secret will be created.

    Import

    A Key Manager secret can be imported using the service_name and id, separated by /:

    bash

    $ pulumi import ovh:index/cloudKeyManagerSecret:CloudKeyManagerSecret my_secret service_name/secret_id

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    ovh ovh/pulumi-ovh
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the ovh Terraform Provider.
    ovh logo
    Viewing docs for OVHCloud v2.17.0
    published on Friday, Jul 17, 2026 by OVHcloud
    Schema (JSON)
    ovh/pulumi-ovh

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial