feat: Add support for secret_manager_enabled

Author: d0ugal

examples/resources/grafana_synthetic_monitoring_check/http_secret_manager.tf

@@ -0,0 +1,41 @@
+data "grafana_synthetic_monitoring_probes" "main" {}
+
+resource "grafana_synthetic_monitoring_check" "http" {
+  job     = "HTTP Secret Manager"
+  target  = "https://api.example.com"
+  enabled = true
+  probes = [
+    data.grafana_synthetic_monitoring_probes.main.probes.Mumbai,
+  ]
+  labels = {
+    environment = "production"
+    service     = "api"
+  }
+  settings {
+    http {
+      ip_version             = "V4"
+      method                 = "GET"
+      secret_manager_enabled = true
+      bearer_token           = "gsm:my-api-token"
+
+      basic_auth {
+        username = "admin"
+        password = "gsm:my-api-password"
+      }
+
+      headers = [
+        "Accept: application/json",
+        "User-Agent: Terraform-Synthetic-Monitoring",
+      ]
+
+      valid_status_codes = [
+        200,
+        201,
+        202,
+      ]
+
+      fail_if_ssl     = false
+      fail_if_not_ssl = true
+    }
+  }
+}

go.mod

@@ -220,4 +220,4 @@ require (
 )
 
 // https://github.com/hashicorp/terraform-exec/issues/423
-replace github.com/hashicorp/terraform-exec v0.22.0 => github.com/hrmsk66/terraform-exec v0.21.0
+replace github.com/hashicorp/terraform-exec v0.22.0 => github.com/hrmsk66/terraform-exec v0.21.0

go.sum

@@ -206,8 +206,6 @@ github.com/grafana/river v0.3.0 h1:6TsaR/vkkcppUM9I0muGbPIUedCtpPu6OWreE5+CE6g=
 github.com/grafana/river v0.3.0/go.mod h1:icSidCSHYXJUYy6TjGAi/D+X7FsP7Gc7cxvBUIwYMmY=
 github.com/grafana/slo-openapi-client/go/slo v0.0.0-20250218172929-ab9cae090da6 h1:7jbuz2MCqHlIc+vC3geOEzMZolm30v3K1bFTaTJ4mGI=
 github.com/grafana/slo-openapi-client/go/slo v0.0.0-20250218172929-ab9cae090da6/go.mod h1:a9idYds6valDrBwBdcFTIp+QzlERgf2CFDZgEfmp9pA=
-github.com/grafana/synthetic-monitoring-agent v0.39.2 h1:aiaU4mUzhe1mdORaVfaTKiFTSTlfyT4doBQoovA+I1k=
-github.com/grafana/synthetic-monitoring-agent v0.39.2/go.mod h1:nt+OvMmK7GsM72gMKaVA9uNDwQKxU90WeyxU0gnwrOQ=
 github.com/grafana/synthetic-monitoring-api-go-client v0.15.1 h1:YCQ5dWFeWny24wo6SA/rVrtpF0Y7miGHAnFF15LDWFQ=
 github.com/grafana/synthetic-monitoring-api-go-client v0.15.1/go.mod h1:6PmnrhmVoEsf6s4d20zmsujgpPwprC4Roc7jAK9Thyc=
 github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus v1.0.1 h1:qnpSQwGEnkcRpTqNOIR6bJbR0gAorgP9CSALpRcKoAA=

internal/resources/syntheticmonitoring/resource_check.go

@@ -371,6 +371,12 @@ var (
 				Type:        schema.TypeString,
 				Optional:    true,
 			},
+			"secret_manager_enabled": {
+				Description: "Enable secret manager for bearer token and basic auth password resolution using ${secrets.secret_name} syntax.",
+				Type:        schema.TypeBool,
+				Optional:    true,
+				Default:     false,
+			},
 		},
 	}
 
@@ -1003,6 +1009,7 @@ func resourceCheckRead(ctx context.Context, d *schema.ResourceData, c *smapi.Cli
 			"fail_if_header_not_matches_regexp": headerMatch(chk.Settings.Http.FailIfHeaderNotMatchesRegexp),
 			"compression":                       compression,
 			"cache_busting_query_param_name":    chk.Settings.Http.CacheBustingQueryParamName,
+			"secret_manager_enabled":            chk.Settings.Http.SecretManagerEnabled,
 		})
 
 		settings.Add(map[string]interface{}{
@@ -1518,6 +1525,7 @@ func makeCheckSettings(settings map[string]interface{}) (sm.CheckSettings, error
 			FailIfBodyMatchesRegexp:    common.SetToStringSlice(h["fail_if_body_matches_regexp"].(*schema.Set)),
 			FailIfBodyNotMatchesRegexp: common.SetToStringSlice(h["fail_if_body_not_matches_regexp"].(*schema.Set)),
 			CacheBustingQueryParamName: h["cache_busting_query_param_name"].(string),
+			SecretManagerEnabled:       h["secret_manager_enabled"].(bool),
 		}
 		compression, ok := h["compression"].(string)
 		if ok {

internal/resources/syntheticmonitoring/resource_check_test.go

@@ -141,6 +141,7 @@ func TestAccResourceCheck_http(t *testing.T) {
 					resource.TestCheckResourceAttr("grafana_synthetic_monitoring_check.http", "settings.0.http.0.fail_if_header_matches_regexp.0.header", "Content-Type"),
 					resource.TestCheckResourceAttr("grafana_synthetic_monitoring_check.http", "settings.0.http.0.fail_if_header_matches_regexp.0.regexp", "application/soap*"),
 					resource.TestCheckResourceAttr("grafana_synthetic_monitoring_check.http", "settings.0.http.0.fail_if_header_matches_regexp.0.allow_missing", "true"),
+					resource.TestCheckResourceAttr("grafana_synthetic_monitoring_check.http", "settings.0.http.0.secret_manager_enabled", "false"),
 				),
 			},
 			{