feat: add coder_secret data source

evgeniy-scherbina · evgeniy-scherbina · commit cc9e59bf46b0 · 2025-08-01T16:13:25.000Z
diff --git a/provider/provider.go b/provider/provider.go
@@ -64,6 +64,7 @@ func New() *schema.Provider {
 			"coder_external_auth":    externalAuthDataSource(),
 			"coder_workspace_owner":  workspaceOwnerDataSource(),
 			"coder_workspace_preset": workspacePresetDataSource(),
+			"coder_secret":           secretDataSource(),
 		},
 		ResourcesMap: map[string]*schema.Resource{
 			"coder_agent":          agentResource(),
diff --git a/provider/secret.go b/provider/secret.go
@@ -0,0 +1,40 @@
+package provider
+
+import (
+	"context"
+
+	"github.com/coder/terraform-provider-coder/v2/provider/helpers"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/diag"
+	"github.com/hashicorp/terraform-plugin-sdk/v2/helper/schema"
+)
+
+func secretDataSource() *schema.Resource {
+	return &schema.Resource{
+		SchemaVersion: 1,
+
+		Description: "",
+		ReadContext: func(ctx context.Context, rd *schema.ResourceData, i interface{}) diag.Diagnostics {
+			envName, ok := rd.Get("env_name").(string)
+			if !ok || envName == "" {
+				return diag.Errorf("env_name is required")
+			}
+			envVal := helpers.OptionalEnv(envName)
+
+			rd.Set("value", envVal)
+			rd.SetId(envName)
+			return nil
+		},
+		Schema: map[string]*schema.Schema{
+			"env_name": {
+				Type:        schema.TypeString,
+				Description: "",
+				Required:    true,
+			},
+			"value": {
+				Type:        schema.TypeString,
+				Description: "",
+				Computed:    true,
+			},
+		},
+	}
+}
