full config

Author: rajatagarwal-ibm

tests/pr_test.go

@@ -78,7 +78,7 @@ func TestProjectsBasicExistingResourcesTest(t *testing.T) {
 	t.Parallel()
 
 	// ------------------------------------------------------------------------------------
-	// Provision RG, EN and KMS
+	// Provision RG, EN, SM and KMS
 	// ------------------------------------------------------------------------------------
 
 	prefix := fmt.Sprintf("ragext-%s", strings.ToLower(random.UniqueId()))
@@ -129,7 +129,7 @@ func TestProjectsBasicExistingResourcesTest(t *testing.T) {
 			"existing_resource_group_name":              terraform.Output(t, existingTerraformOptions, "resource_group_name"),
 			"ibmcloud_api_key":                          options.RequiredEnvironmentVars["TF_VAR_ibmcloud_api_key"], // always required by the stack
 			"enable_platform_metrics":                   false,
-			"existing_secrets_manager_crn":              permanentResources["privateOnlySecMgrCRN"],
+			"existing_secrets_manager_crn":              terraform.Output(t, existingTerraformOptions, "secrets_manager_instance_crn"),
 			"skip_secrets_manager_iam_auth_policy":      true, // skip as s2s auth policy was already created for existing instance
 			"signing_key":                               privateKey,
 			"existing_kms_instance_crn":                 terraform.Output(t, existingTerraformOptions, "kms_instance_crn"),

tests/resources/main.tf

@@ -24,6 +24,20 @@ module "event_notifications" {
   region            = var.region
 }
 
+##############################################################################
+# Secrets Manager
+##############################################################################
+
+module "secrets_manager" {
+  source               = "terraform-ibm-modules/secrets-manager/ibm"
+  version              = "2.0.0"
+  resource_group_id    = module.resource_group.resource_group_id
+  region               = var.region
+  secrets_manager_name = "${var.prefix}-secrets-manager" #tfsec:ignore:general-secrets-no-plaintext-exposure
+  sm_service_plan      = "trial"
+  sm_tags              = var.resource_tags
+}
+
 ##############################################################################
 # Key Protect All Inclusive
 ##############################################################################

tests/resources/outputs.tf

@@ -23,6 +23,11 @@ output "event_notifications_instance_crn" {
   description = "CRN of created event notifications"
 }
 
+output "secrets_manager_instance_crn" {
+  value       = module.secrets_manager.secrets_manager_crn
+  description = "CRN of created secret manager instance"
+}
+
 output "kms_instance_crn" {
   value       = module.key_protect_all_inclusive.key_protect_crn
   description = "CRN of created kms instance"