ibm_catalog.json

{
  "products": [
    {
      "name": "deploy-arch-ibm-secrets-manager",
      "label": "Secrets Manager",
      "product_kind": "solution",
      "tags": [
        "ibm_created",
        "target_terraform",
        "terraform",
        "solution",
        "security"
      ],
      "keywords": [
        "Secrets",
        "Secrets Manager",
        "IaC",
        "infrastructure as code",
        "terraform",
        "solution"
      ],
      "short_description": "Creates and configures a Secrets Manager instance.",
      "long_description": "This solution is used to provision and configure an IBM Cloud Secrets Manager instance.",
      "offering_docs_url": "https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager/blob/main/solutions/standard/README.md",
      "offering_icon_url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-secrets-manager/main/images/secrets_manager.svg",
      "provider_name": "IBM",
      "features": [
        {
          "title": "Creates a Secrets Manager instance.",
          "description": "Creates an IBM Secrets Manager instance."
        },
        {
          "title": "Optionally configure an IBM Secrets Manager IAM credentials engine to an IBM Secrets Manager instance.",
          "description": "Optionally configure an IBM Secrets Manager IAM credentials engine to an IBM Secrets Manager instance."
        },
        {
          "title": "Sets up authorization policy.",
          "description": "Sets up IBM IAM authorization policy between IBM Secrets Manager instance and IBM Key Management Service (KMS) instance. It also supports Event Notification authorization policy."
        },
        {
          "title": "Configures lifecycle notifications for the Secrets Manager instance.",
          "description": "Configures lifecycle notifications for the IBM Secrets Manager instance by connecting an IBM Event Notifications service. The DA supports optionally creating a KMS key ring and key, or using an already existing one to encrypt data."
        }
      ],
      "support_details": "This product is in the community registry, as such support is handled through the originated repo. If you experience issues please open an issue in that repository [https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager/issues](https://github.com/terraform-ibm-modules/terraform-ibm-secrets-manager/issues). Please note this product is not supported via the IBM Cloud Support Center.",
      "flavors": [
        {
          "label": "Standard",
          "name": "standard",
          "install_type": "fullstack",
          "working_directory": "solutions/standard",
          "compliance": {
            "authority": "scc-v3",
            "profiles": [
              {
                "profile_name": "IBM Cloud Framework for Financial Services",
                "profile_version": "1.6.0"
              }
            ]
          },
          "configuration" : [
            {
              "key": "ibmcloud_api_key"
            },
            {
              "key": "use_existing_resource_group"
            },
            {
              "key": "resource_group_name",
              "required": true
            },
            {
              "custom_config": {
                "config_constraints": {
                  "generationType": "2"
                },
                "grouping": "deployment",
                "original_grouping": "deployment",
                "type": "region"
              },
              "key": "region",
              "required": true,
              "type": "string"
            },
            {
              "key": "prefix"
            },
            {
              "key": "secrets_manager_instance_name"
            },
            {
              "key": "service_plan",
              "options": [
                {
                  "displayname": "Standard",
                  "value": "standard"
                },
                {
                  "displayname": "Trial",
                  "value": "trial"
                }
              ]
            },
            {
              "key": "allowed_network",
              "options": [
                {
                  "displayname": "Public and private",
                  "value": "public-and-private"
                },
                {
                  "displayname": "Private only",
                  "value": "private-only"
                }
              ]
            },
            {
              "key": "secret_manager_tags"
            },
            {
              "key": "iam_engine_enabled"
            },
            {
              "key": "iam_engine_name"
            },
            {
              "key": "public_engine_enabled"
            },
            {
              "key": "public_engine_name"
            },
            {
              "key": "cis_id"
            },
            {
              "key": "dns_provider_name"
            },
            {
              "key": "ca_name"
            },
            {
              "key": "acme_letsencrypt_private_key"
            },
            {
              "key": "private_engine_enabled"
            },
            {
              "key": "private_engine_name"
            },
            {
              "key": "root_ca_name"
            },
            {
              "key": "root_ca_common_name"
            },
            {
              "key": "root_ca_max_ttl"
            },
            {
              "key": "intermediate_ca_name"
            },
            {
              "key": "certificate_template_name"
            },
            {
              "key": "skip_kms_iam_authorization_policy"
            },
            {
              "key": "existing_secrets_manager_kms_key_crn"
            },
            {
              "key": "existing_kms_instance_crn"
            },
            {
              "key": "kms_endpoint_type",
              "options": [
                {
                  "displayname": "Public",
                  "value": "public"
                },
                {
                  "displayname": "Private",
                  "value": "private"
                }
              ]
            },
            {
              "key": "kms_key_ring_name"
            },
            {
              "key": "kms_key_name"
            },
            {
              "key": "existing_event_notification_instance_crn"
            },
            {
              "key": "skip_event_notification_iam_authorization_policy"
            }
          ],
          "architecture": {
            "descriptions": "This architecture supports creating and configuring a Secrets Manager instance.",
            "features": [
              {
                "title": "Creates a Secrets Manager instance.",
                "description": "Creates and configures an IBM Secrets Manager instance."
              },
              {
                "title": "Optionally configure an IBM Secrets Manager IAM credentials engine to an IBM Secrets Manager instance.",
                "description": "Optionally configure an IBM Secrets Manager IAM credentials engine to an IBM Secrets Manager instance."
              },
              {
                "title": "Sets up authorization policy.",
                "description": "Sets up IBM IAM authorization policy between IBM Secrets Manager instance and IBM Key Management Service (KMS) instance. It also supports Event Notification authorization policy."
              },
              {
                "title": "Configures lifecycle notifications for the Secrets Manager instance.",
                "description": "Configures lifecycle notifications for the IBM Secrets Manager instance by connecting an IBM Event Notifications service. The DA supports optionally creating a KMS key ring and key, or using an already existing one to encrypt data."
              }
            ],
            "diagrams": [
              {
                "diagram": {
                  "caption": "Secrets Manager",
                  "url": "https://raw.githubusercontent.com/terraform-ibm-modules/terraform-ibm-secrets-manager/main/reference-architecture/secrets_manager.svg",
                  "type": "image/svg+xml"
                },
                "description": "This architecture supports creating and configuring IBM Secrets Manager instance."
              }
            ]
          }
        }
      ]
    }
  ]
}