resource "random_password" "this" {
  length           = 16
  special          = true
  override_special = "!#$%&*()-_=+[]{}<>:?"
}

resource "vault_kv_secret_v2" "random_secret" {
  count               = 1
  mount               = stackit_secretsmanager_instance.instance.instance_id
  name                = "random-secret"
  cas                 = 1
  delete_all_versions = true
  data_json = jsonencode(
    {
      admin = random_password.this.result
    }
  )

  depends_on = [stackit_secretsmanager_user.user]
}