terraformで使うsecretをgoogle secret managerに保存する

aws/production/locals.tf

@@ -1,3 +1,5 @@
 locals {
   slack_channel = "C06CB9RUP3J"
+  gcp_project   = "prd-piny940"
+  env           = "production"
 }

aws/production/provider.tf

@@ -1,3 +1,11 @@
 provider "aws" {
   region = "ap-northeast-1"
 }
+provider "google" {
+  project = local.gcp_project
+  default_labels = {
+    service     = "home-cluster"
+    environment = local.env
+  }
+}
+

aws/staging/locals.tf

@@ -1,3 +1,5 @@
 locals {
   slack_channel = "C07655VCH9P"
+  gcp_project   = "stg-piny940"
+  env           = "staging"
 }

aws/staging/provider.tf

@@ -1,3 +1,10 @@
 provider "aws" {
   region = "ap-northeast-1"
 }
+provider "google" {
+  project = local.gcp_project
+  default_labels = {
+    service     = "home-cluster"
+    environment = local.env
+  }
+}

aws/staging/service-monitor.tf

@@ -22,6 +22,16 @@ data "archive_file" "dummy" {
     filename = "dummy.txt"
   }
 }
+resource "google_secret_manager_secret" "service_monitor" {
+  secret_id = "stg-service-monitor"
+  replication {
+    auto {}
+  }
+}
+# data "google_secret_manager_secret_version" "service_monitor" {
+#   secret  = google_secret_manager_secret.service_monitor.secret_id
+#   version = "1"
+# }
 resource "aws_lambda_function" "service-monitor" {
   function_name = "stg-service-monitor"
   description   = "Service monitor of staging home cluster"