Lists Vault external-secret integrations by optional name and workspace scope. Returns identifying metadata only; never exposes credential values or secret metadata.
# Scope defaults to provider workspace_id (otherwise personal namespace).
# Lists identities only, never credential metadata or values.
# WARNING: Managed external-secret credentials can still remain in Terraform
# state; protect the state backend even though this lookup does not expose them.
data "sg_external_secrets" "example" {
name = "example-aws-external"
}
output "external_secret_ids" {
value = [for secret in data.sg_external_secrets.example.external_secrets : secret.id]
}
This list deliberately excludes connection credential metadata. Descriptions and sharing IDs are visible in Terraform state; keep secrets only in sensitive resource fields.
name (String) Optional exact integration name filter applied to the returned catalog.org_id (String) Vault organization ID for this lookup; defaults to provider workspace_id, or personal namespace when neither is set.external_secrets (Attributes List) External-secret integrations visible to the caller. Credential metadata and values are never exposed. (see below for nested schema)external_secretsRead-Only:
category (String) Integration provider category; empty when omitted.created_at (String) Vault creation timestamp in RFC 3339 format; empty if omitted.description (String) Human-readable integration description; empty when omitted.id (String) Vault-assigned external-secret integration ID for use with sg_external_secret.name (String) External-secret integration name.owner (String) ID of the user or organization owning this integration; empty when omitted.shared_with (List of String) IDs of users or organizations with which this integration is shared.subcategory (String) Integration provider subcategory.updated_at (String) Vault last-update timestamp in RFC 3339 format; empty if omitted.