secretmanager/snippets/create_secret_with_delayed_destroy.py

#!/usr/bin/env python

# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
#     http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
"""
Command line application and sample code for creating a new secret with
delayed_destroy.
"""

import argparse

# [START secretmanager_create_secret_with_delayed_destroy]

# Import the Secret Manager client library.
from google.cloud import secretmanager
from google.protobuf.duration_pb2 import Duration


def create_secret_with_delayed_destroy(
    project_id: str,
    secret_id: str,
    version_destroy_ttl: int,
) -> secretmanager.Secret:
    """
    Create a new secret with the given name and version destroy ttl. A
    secret is a logical wrapper around a collection of secret versions.
    Secret versions hold the actual secret material.
    """

    # Create the Secret Manager client.
    client = secretmanager.SecretManagerServiceClient()

    # Build the resource name of the parent project.
    parent = f"projects/{project_id}"

    # Create the secret.
    response = client.create_secret(
        request={
            "parent": parent,
            "secret_id": secret_id,
            "secret": {
                "replication": {"automatic": {}},
                "version_destroy_ttl": Duration(seconds=version_destroy_ttl),
            },
        }
    )

    # Print the new secret name.
    print(f"Created secret: {response.name}")

    return response

# [END secretmanager_create_secret_with_delayed_destroy]


if __name__ == "__main__":
    parser = argparse.ArgumentParser(
        description=__doc__, formatter_class=argparse.RawDescriptionHelpFormatter
    )
    parser.add_argument("project_id", help="id of the GCP project")
    parser.add_argument("secret_id", help="id of the secret to create")
    parser.add_argument("version_destroy_ttl", help="version_destroy_ttl you want to add")
    args = parser.parse_args()

    create_secret_with_delayed_destroy(args.project_id, args.secret_id, args.version_destroy_ttl)