1Password/terraform-provider-onepassword — Gitpedia

<img alt="" role="img" src="https://blog.1password.com/posts/2021/secrets-automation-launch/header.svg"/> <div align="center"> <h1>1Password Terraform provider</h1> <p>Use the 1Password Terraform provider to access and manage items in your 1Password vaults.</p> <a href="#-get-started"> <img alt="Get started" src="https://user-images.githubusercontent.com/45081667/226940040-16d3684b-60f4-4d95-adb2-5757a8f1bc15.png" height="37"/> </a> </div>

✨ Get started

See the examples directory for detailed examples.
For more details check out 1Password Terraform Provider documentation.

This project is licensed under MIT. Use of the 1Password APIs and services accessed through these tools is governed by the 1Password API Terms of Service.

tf
terraform {
  required_providers {
    onepassword = {
      source = "1Password/onepassword"
    }
  }
}

provider "onepassword" {
  service_account_token = "<1Password service account token>"
}

variable "vault_id" {}

# Using section_map for direct field access by label
resource "onepassword_item" "demo_credentials" {
  vault = var.vault_id

  title    = "Demo API Credentials"
  category = "login"

  section_map = {
    "api_credentials" = {
      field_map = {
        "api_key" = {
          type  = "CONCEALED"
          value = "your-api-key"
        }
        "api_secret" = {
          type = "CONCEALED"
          password_recipe = {
            length  = 32
            symbols = false
          }
        }
      }
    }
  }
}

# Access fields directly by label
output "api_key" {
  value     = onepassword_item.demo_credentials.section_map["api_credentials"].field_map["api_key"].value
  sensitive = true
}

# Using section (list) for block syntax
resource "onepassword_item" "demo_login" {
  vault = var.vault_id

  title    = "Demo Terraform Login"
  category = "password"

  username = "demo-username"

  password_recipe {
    length  = 40
    symbols = false
  }
}