Not able to pull secrets using terraform

[monish-devendran]

terraform {
  required_providers {
    akeyless = {
      version = ">= 1.0.0"
      source  = "akeyless-community/akeyless"
    }
  }
}

provider "akeyless" {
  api_gateway_address = "http://localhost:8000/"

  api_key_login {
    access_id = "******"
    access_key = "*********"
  }
}


resource "akeyless_static_secret" "secret" {
  path = "/path/to/my/secret"
  value = "this value was set from terraform"
}

this is my code and when run terraform apply , i get

❯ terraform apply
╷
│ Error: authentication failed: {"error":"MissingRequiredParam","message":"Missing required parameter - access_id "}
│
│
│ with provider["registry.terraform.io/akeyless-community/akeyless"],
│ on main.tf line 10, in provider "akeyless":
│ 10: provider "akeyless" {

i want to basically pull my gcp secrets and pass to terraform

[monish-devendran]

The above issue code resolved, if someone can help in how to pass my secret to gcp credentials

provider "google" {
project = "cf-triggers"
credentials = data.akeyless_secret.secret
}

│ on main.tf line 38, in provider "google":
│ 38: credentials = data.akeyless_secret.secret
│ ├────────────────
│ │ data.akeyless_secret.secret is object with 4 attributes
│
│ Inappropriate value for attribute "credentials": string required.

[devorbitus]

In think, in order to pass a variable into provider you have to have that provider block be inside a sub-module and pass it in as a variable.

I suggest asking ChatGPT or Claude on how to accomplish a dynamic provider credential.

[DaniRieker]

From what I know about terraform, the providers are always initialized during the init phase and you can not have values from a data source in the configuration as data sources are read just later in the plan phase. What I do to use a secret from akeyless which is needed to configure the akeyless provider itself is to load the secret upfront using the akeyless CLI and set the value to the ENV-variable AKEYLESS_ACCESS_KEY. With this you don't have to specify the key in the configuration at all, it just gets sourced from the ENV variable.