import * as gcp from "@pulumi/gcp";

export function databasePasswordSecret(
	gcpProject: string,
	database: string,
	username: string,
	password: string,
) {
	const secret = new gcp.secretmanager.Secret(
		`${database}-${username}-password-secret`,
		{
			project: gcpProject,
			secretId: `postgres-${database}-${username}-password`,
			labels: {
				managed_by: "pulumi",
			},
			replication: {
				auto: {},
			},
		},
	);
	new gcp.secretmanager.SecretVersion(
		`${database}-${username}-password-secret-version`,
		{
			enabled: true,
			secret: secret.id,
			secretData: password,
		},
	);
}