SecretManager.fs

module SecretManager

open Pulumi.FSharp.Config
open Pulumi.FSharp.Gcp.SecretManager
open Pulumi.FSharp.Gcp.SecretManager.Inputs
open Pulumi.Gcp.SecretManager

type MySecretPair =
    { secret: Secret
      version: SecretVersion }

type MySecrets =
    { mysqlDefaultProdConnection: MySecretPair }

let createSecretPair (id: string) =
    let s =
        secret {
            name id
            secretId id
            project "REDACTED"
            secretReplication {
                automatic true
            }
        }

    { secret = s
      version =
        secretVersion {
            name $"{id}-version"
            enabled true
            secret s.SecretId
            secretData config.[id]
        } }

let secrets () =
    { mysqlDefaultProdConnection = createSecretPair "redacted-id" }