getDynamicSecret

akeyless 2.0.1, Apr 27 26

Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community

akeyless-community/terraform-provider-akeyless

Viewing docs for akeyless 2.0.1
published on Monday, Apr 27, 2026 by akeyless-community

akeyless-community/terraform-provider-akeyless

Example Usage

import * as pulumi from "@pulumi/pulumi";
import * as akeyless from "@pulumi/akeyless";

const secret = akeyless.getDynamicSecret({
    path: "terraform/dynamic-secret",
});

import pulumi
import pulumi_akeyless as akeyless

secret = akeyless.get_dynamic_secret(path="terraform/dynamic-secret")

package main

import (
	"github.com/pulumi/pulumi-terraform-provider/sdks/go/akeyless/v2/akeyless"
	"github.com/pulumi/pulumi/sdk/v3/go/pulumi"
)

func main() {
	pulumi.Run(func(ctx *pulumi.Context) error {
		_, err := akeyless.GetDynamicSecret(ctx, &akeyless.GetDynamicSecretArgs{
			Path: "terraform/dynamic-secret",
		}, nil)
		if err != nil {
			return err
		}
		return nil
	})
}

using System.Collections.Generic;
using System.Linq;
using Pulumi;
using Akeyless = Pulumi.Akeyless;

return await Deployment.RunAsync(() => 
{
    var secret = Akeyless.GetDynamicSecret.Invoke(new()
    {
        Path = "terraform/dynamic-secret",
    });

});

package generated_program;

import com.pulumi.Context;
import com.pulumi.Pulumi;
import com.pulumi.core.Output;
import com.pulumi.akeyless.AkeylessFunctions;
import com.pulumi.akeyless.inputs.GetDynamicSecretArgs;
import java.util.List;
import java.util.ArrayList;
import java.util.Map;
import java.io.File;
import java.nio.file.Files;
import java.nio.file.Paths;

public class App {
    public static void main(String[] args) {
        Pulumi.run(App::stack);
    }

    public static void stack(Context ctx) {
        final var secret = AkeylessFunctions.getDynamicSecret(GetDynamicSecretArgs.builder()
            .path("terraform/dynamic-secret")
            .build());

    }
}

variables:
  secret:
    fn::invoke:
      function: akeyless:getDynamicSecret
      arguments:
        path: terraform/dynamic-secret

Using getDynamicSecret

Two invocation forms are available. The direct form accepts plain arguments and either blocks until the result value is available, or returns a Promise-wrapped result. The output form accepts Input-wrapped arguments and returns an Output-wrapped result.

function getDynamicSecret(args: GetDynamicSecretArgs, opts?: InvokeOptions): Promise<GetDynamicSecretResult>
function getDynamicSecretOutput(args: GetDynamicSecretOutputArgs, opts?: InvokeOptions): Output<GetDynamicSecretResult>

def get_dynamic_secret(args: Optional[Sequence[str]] = None,
                       dbname: Optional[str] = None,
                       host: Optional[str] = None,
                       id: Optional[str] = None,
                       path: Optional[str] = None,
                       target: Optional[str] = None,
                       timeout: Optional[float] = None,
                       opts: Optional[InvokeOptions] = None) -> GetDynamicSecretResult
def get_dynamic_secret_output(args: pulumi.Input[Optional[Sequence[pulumi.Input[str]]]] = None,
                       dbname: pulumi.Input[Optional[str]] = None,
                       host: pulumi.Input[Optional[str]] = None,
                       id: pulumi.Input[Optional[str]] = None,
                       path: pulumi.Input[Optional[str]] = None,
                       target: pulumi.Input[Optional[str]] = None,
                       timeout: pulumi.Input[Optional[float]] = None,
                       opts: Optional[InvokeOptions] = None) -> Output[GetDynamicSecretResult]

func GetDynamicSecret(ctx *Context, args *GetDynamicSecretArgs, opts ...InvokeOption) (*GetDynamicSecretResult, error)
func GetDynamicSecretOutput(ctx *Context, args *GetDynamicSecretOutputArgs, opts ...InvokeOption) GetDynamicSecretResultOutput

> Note: This function is named GetDynamicSecret in the Go SDK.

public static class GetDynamicSecret 
{
    public static Task<GetDynamicSecretResult> InvokeAsync(GetDynamicSecretArgs args, InvokeOptions? opts = null)
    public static Output<GetDynamicSecretResult> Invoke(GetDynamicSecretInvokeArgs args, InvokeOptions? opts = null)
}

public static CompletableFuture<GetDynamicSecretResult> getDynamicSecret(GetDynamicSecretArgs args, InvokeOptions options)
public static Output<GetDynamicSecretResult> getDynamicSecret(GetDynamicSecretArgs args, InvokeOptions options)

fn::invoke:
  function: akeyless:index/getDynamicSecret:getDynamicSecret
  arguments:
    # arguments dictionary

The following arguments are supported:

Path string: The path where the secret is stored. Defaults to the latest version.
Args List<string>: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
Dbname string: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
Host string: Host
Id string: The ID of this resource.
Target string: Target Name
Timeout double: Timeout in seconds

Path string: The path where the secret is stored. Defaults to the latest version.
Args []string: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
Dbname string: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
Host string: Host
Id string: The ID of this resource.
Target string: Target Name
Timeout float64: Timeout in seconds

path String: The path where the secret is stored. Defaults to the latest version.
args List<String>: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
dbname String: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
host String: Host
id String: The ID of this resource.
target String: Target Name
timeout Double: Timeout in seconds

path string: The path where the secret is stored. Defaults to the latest version.
args string[]: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
dbname string: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
host string: Host
id string: The ID of this resource.
target string: Target Name
timeout number: Timeout in seconds

path str: The path where the secret is stored. Defaults to the latest version.
args Sequence[str]: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
dbname str: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
host str: Host
id str: The ID of this resource.
target str: Target Name
timeout float: Timeout in seconds

path String: The path where the secret is stored. Defaults to the latest version.
args List<String>: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
dbname String: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
host String: Host
id String: The ID of this resource.
target String: Target Name
timeout Number: Timeout in seconds

getDynamicSecret Result

The following output properties are available:

Id string: The ID of this resource.
Path string: The path where the secret is stored. Defaults to the latest version.
Value string: The secret contents.
Args List<string>: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
Dbname string: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
Host string: Host
Target string: Target Name
Timeout double: Timeout in seconds

Id string: The ID of this resource.
Path string: The path where the secret is stored. Defaults to the latest version.
Value string: The secret contents.
Args []string: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
Dbname string: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
Host string: Host
Target string: Target Name
Timeout float64: Timeout in seconds

id String: The ID of this resource.
path String: The path where the secret is stored. Defaults to the latest version.
value String: The secret contents.
args List<String>: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
dbname String: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
host String: Host
target String: Target Name
timeout Double: Timeout in seconds

id string: The ID of this resource.
path string: The path where the secret is stored. Defaults to the latest version.
value string: The secret contents.
args string[]: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
dbname string: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
host string: Host
target string: Target Name
timeout number: Timeout in seconds

id str: The ID of this resource.
path str: The path where the secret is stored. Defaults to the latest version.
value str: The secret contents.
args Sequence[str]: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
dbname str: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
host str: Host
target str: Target Name
timeout float: Timeout in seconds

id String: The ID of this resource.
path String: The path where the secret is stored. Defaults to the latest version.
value String: The secret contents.
args List<String>: Optional arguments as key=value pairs or JSON strings, e.g - "--args=csr=base64encodedcsr --args=commonname=bar" or args='{"csr":"base64encoded_csr"}. It is possible to combine both formats.'
dbname String: DBName: Optional override DB name (works only if DS allows it. only relevant for MSSQL)
host String: Host
target String: Target Name
timeout Number: Timeout in seconds