Unfortunately the secret handling in this module is quite complex. The problem is that:
- The provider cannot update individual values in a secret, it always replaces the whole thing
- You can use a datasource in terraform to read the current secret and merge it with the new data
- A datasource cannot be optional. a secret mathing the name MUST exist in vault
Solution:
- Compute all the paths where secrets should be stored
- Check if a secret with that name already exists