Enable rotation config and topics in modules/secret-manager

Author: dshah22

modules/secret-manager/global.tf

@@ -71,14 +71,19 @@ resource "google_secret_manager_secret" "default" {
       }
     }
   }
-  # dynamic "rotation" {
-  #   for_each = try(each.value.rotation_config, null) == null ? [] : [""]
-  #   content {
-  #     next_rotation_time = each.value.rotation_config.next_time
-  #     rotation_period    = each.value.rotation_config.period
-  #   }
-  # }
-  # topics
+  dynamic "rotation" {
+    for_each = try(each.value.rotation_config, null) == null ? [] : [""]
+    content {
+      next_rotation_time = each.value.rotation_config.next_time
+      rotation_period    = each.value.rotation_config.period
+    }
+  }
+  dynamic "topics" {
+    for_each = coalesce(try(each.value.topics, null), [])
+    content {
+      name = topics.value
+    }
+  }
   lifecycle {
     ignore_changes = [
       rotation[0].next_rotation_time

modules/secret-manager/regional.tf

@@ -43,14 +43,19 @@ resource "google_secret_manager_regional_secret" "default" {
       )
     }
   }
-  # dynamic "rotation" {
-  #   for_each = try(each.value.rotation_config, null) == null ? [] : [""]
-  #   content {
-  #     next_rotation_time = each.value.rotation_config.next_time
-  #     rotation_period    = each.value.rotation_config.period
-  #   }
-  # }
-  # topics
+  dynamic "rotation" {
+    for_each = try(each.value.rotation_config, null) == null ? [] : [""]
+    content {
+      next_rotation_time = each.value.rotation_config.next_time
+      rotation_period    = each.value.rotation_config.period
+    }
+  }
+  dynamic "topics" {
+    for_each = coalesce(try(each.value.topics, null), [])
+    content {
+      name = topics.value
+    }
+  }
   lifecycle {
     ignore_changes = [
       rotation[0].next_rotation_time

modules/secret-manager/variables.tf

@@ -100,13 +100,20 @@ variable "secrets" {
         write_only_version = optional(number)
       }))
     })), {})
-    # rotation_config = optional(object({
-    #   next_time = string
-    #   period    = number
-    # }))
-    # topics
+    rotation_config = optional(object({
+      next_time = optional(string)
+      period    = string
+    }))
+    topics = optional(list(string))
   }))
   default = {}
+  validation {
+    condition = alltrue([
+      for k, v in var.secrets :
+      try(v.rotation_config, null) == null || (try(length(v.topics), 0) > 0)
+    ])
+    error_message = "At least one topic must be configured when rotation_config is set."
+  }
   validation {
     condition = alltrue([
       for k, v in var.secrets :