mirror of
https://github.com/kreuzwerker/terraform-provider-docker.git
synced 2026-02-02 19:59:30 -05:00
81 lines
No EOL
2.3 KiB
Markdown
81 lines
No EOL
2.3 KiB
Markdown
---
|
|
layout: "docker"
|
|
page_title: "Docker: docker_secret"
|
|
sidebar_current: "docs-docker-resource-secret"
|
|
description: |-
|
|
Manages the secrets of a Docker service in a swarm.
|
|
---
|
|
|
|
# docker\_secret
|
|
|
|
Manages the secrets of a Docker service in a swarm.
|
|
|
|
## Example Usage
|
|
|
|
### Basic
|
|
|
|
```hcl
|
|
# Creates a secret
|
|
resource "docker_secret" "foo_secret" {
|
|
name = "foo_secret"
|
|
data = "ewogICJzZXJsaasIfQo="
|
|
}
|
|
```
|
|
|
|
#### Update secret with no downtime
|
|
To update a `secret`, Terraform will destroy the existing resource and create a replacement. To effectively use a `docker_secret` resource with a `docker_service` resource, it's recommended to specify `create_before_destroy` in a `lifecycle` block. Provide a unique `name` attribute, for example
|
|
with one of the interpolation functions `uuid` or `timestamp` as shown
|
|
in the example below. The reason is [moby-35803](https://github.com/moby/moby/issues/35803).
|
|
|
|
```hcl
|
|
resource "docker_secret" "service_secret" {
|
|
name = "${var.service_name}-secret-${replace(timestamp(),":", ".")}"
|
|
data = "${base64encode(data.template_file.service_secret_tpl.rendered)}"
|
|
|
|
lifecycle {
|
|
ignore_changes = ["name"]
|
|
create_before_destroy = true
|
|
}
|
|
}
|
|
|
|
resource "docker_service" "service" {
|
|
# ...
|
|
secrets = [
|
|
{
|
|
secret_id = "${docker_secret.service_secret.id}"
|
|
secret_name = "${docker_secret.service_secret.name}"
|
|
file_name = "/root/configs/configs.json"
|
|
},
|
|
]
|
|
}
|
|
```
|
|
|
|
## Argument Reference
|
|
|
|
The following arguments are supported:
|
|
|
|
* `name` - (Required, string) The name of the Docker secret.
|
|
* `data` - (Required, string) The base64 encoded data of the secret.
|
|
* `labels` - (Optional, block) See [Labels](#labels-1) below for details.
|
|
|
|
<a id="labels-1"></a>
|
|
#### Labels
|
|
|
|
`labels` is a block within the configuration that can be repeated to specify
|
|
additional label name and value data to the container. Each `labels` block supports
|
|
the following:
|
|
|
|
* `label` - (Required, string) Name of the label
|
|
* `value` (Required, string) Value of the label
|
|
|
|
See [214](https://github.com/terraform-providers/terraform-provider-docker/issues/214#issuecomment-550128950) for Details.
|
|
|
|
## Attributes Reference
|
|
|
|
The following attributes are exported in addition to the above configuration:
|
|
|
|
* `id` (string)
|
|
|
|
## Import
|
|
|
|
Docker secret cannot be imported as the secret data, once set, is never exposed again. |