pulumiverse-scaleway 1.26.0a1742897201__py3-none-any.whl → 1.27.0__py3-none-any.whl

pulumiverse_scaleway/job/_inputs.py

@@ -17,6 +17,8 @@ from .. import _utilities
 __all__ = [
     'DefinitionCronArgs',
     'DefinitionCronArgsDict',
+    'DefinitionSecretReferenceArgs',
+    'DefinitionSecretReferenceArgsDict',
 ]
 
 MYPY = False
@@ -71,3 +73,114 @@ class DefinitionCronArgs:
         pulumi.set(self, "timezone", value)
 
 
+if not MYPY:
+    class DefinitionSecretReferenceArgsDict(TypedDict):
+        secret_id: pulumi.Input[str]
+        """
+        The secret unique identifier, it could be formatted as region/UUID or UUID. In case the region is passed, it must be the same as the job definition. You could reference the same secret multiple times in the same job definition.
+        """
+        environment: NotRequired[pulumi.Input[str]]
+        """
+        An environment variable containing the secret value. Must be specified if `file` is not specified.
+        """
+        file: NotRequired[pulumi.Input[str]]
+        """
+        The absolute file path where the secret will be mounted. Must be specified if `environment` is not specified.
+        """
+        secret_reference_id: NotRequired[pulumi.Input[str]]
+        """
+        The secret reference UUID that is automatically generated by the provider.
+        """
+        secret_version: NotRequired[pulumi.Input[str]]
+        """
+        The secret version.
+        """
+elif False:
+    DefinitionSecretReferenceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DefinitionSecretReferenceArgs:
+    def __init__(__self__, *,
+                 secret_id: pulumi.Input[str],
+                 environment: Optional[pulumi.Input[str]] = None,
+                 file: Optional[pulumi.Input[str]] = None,
+                 secret_reference_id: Optional[pulumi.Input[str]] = None,
+                 secret_version: Optional[pulumi.Input[str]] = None):
+        """
+        :param pulumi.Input[str] secret_id: The secret unique identifier, it could be formatted as region/UUID or UUID. In case the region is passed, it must be the same as the job definition. You could reference the same secret multiple times in the same job definition.
+        :param pulumi.Input[str] environment: An environment variable containing the secret value. Must be specified if `file` is not specified.
+        :param pulumi.Input[str] file: The absolute file path where the secret will be mounted. Must be specified if `environment` is not specified.
+        :param pulumi.Input[str] secret_reference_id: The secret reference UUID that is automatically generated by the provider.
+        :param pulumi.Input[str] secret_version: The secret version.
+        """
+        pulumi.set(__self__, "secret_id", secret_id)
+        if environment is not None:
+            pulumi.set(__self__, "environment", environment)
+        if file is not None:
+            pulumi.set(__self__, "file", file)
+        if secret_reference_id is not None:
+            pulumi.set(__self__, "secret_reference_id", secret_reference_id)
+        if secret_version is not None:
+            pulumi.set(__self__, "secret_version", secret_version)
+
+    @property
+    @pulumi.getter(name="secretId")
+    def secret_id(self) -> pulumi.Input[str]:
+        """
+        The secret unique identifier, it could be formatted as region/UUID or UUID. In case the region is passed, it must be the same as the job definition. You could reference the same secret multiple times in the same job definition.
+        """
+        return pulumi.get(self, "secret_id")
+
+    @secret_id.setter
+    def secret_id(self, value: pulumi.Input[str]):
+        pulumi.set(self, "secret_id", value)
+
+    @property
+    @pulumi.getter
+    def environment(self) -> Optional[pulumi.Input[str]]:
+        """
+        An environment variable containing the secret value. Must be specified if `file` is not specified.
+        """
+        return pulumi.get(self, "environment")
+
+    @environment.setter
+    def environment(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "environment", value)
+
+    @property
+    @pulumi.getter
+    def file(self) -> Optional[pulumi.Input[str]]:
+        """
+        The absolute file path where the secret will be mounted. Must be specified if `environment` is not specified.
+        """
+        return pulumi.get(self, "file")
+
+    @file.setter
+    def file(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "file", value)
+
+    @property
+    @pulumi.getter(name="secretReferenceId")
+    def secret_reference_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        The secret reference UUID that is automatically generated by the provider.
+        """
+        return pulumi.get(self, "secret_reference_id")
+
+    @secret_reference_id.setter
+    def secret_reference_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "secret_reference_id", value)
+
+    @property
+    @pulumi.getter(name="secretVersion")
+    def secret_version(self) -> Optional[pulumi.Input[str]]:
+        """
+        The secret version.
+        """
+        return pulumi.get(self, "secret_version")
+
+    @secret_version.setter
+    def secret_version(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "secret_version", value)
+
+

pulumiverse_scaleway/job/definition.py

@@ -31,6 +31,7 @@ class DefinitionArgs:
                  name: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 secret_references: Optional[pulumi.Input[Sequence[pulumi.Input['DefinitionSecretReferenceArgs']]]] = None,
                  timeout: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a Definition resource.
@@ -44,6 +45,7 @@ class DefinitionArgs:
         :param pulumi.Input[str] name: The name of the job.
         :param pulumi.Input[str] project_id: `project_id`) The ID of the project the Job is associated with.
         :param pulumi.Input[str] region: `region`) The region of the Job.
+        :param pulumi.Input[Sequence[pulumi.Input['DefinitionSecretReferenceArgs']]] secret_references: A reference to a secret stored in Secret Manager.
         :param pulumi.Input[str] timeout: The job run timeout, in Go Time format (ex: `2h30m25s`)
         """
         pulumi.set(__self__, "cpu_limit", cpu_limit)
@@ -64,6 +66,8 @@ class DefinitionArgs:
             pulumi.set(__self__, "project_id", project_id)
         if region is not None:
             pulumi.set(__self__, "region", region)
+        if secret_references is not None:
+            pulumi.set(__self__, "secret_references", secret_references)
         if timeout is not None:
             pulumi.set(__self__, "timeout", timeout)
 
@@ -187,6 +191,18 @@ class DefinitionArgs:
     def region(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "region", value)
 
+    @property
+    @pulumi.getter(name="secretReferences")
+    def secret_references(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['DefinitionSecretReferenceArgs']]]]:
+        """
+        A reference to a secret stored in Secret Manager.
+        """
+        return pulumi.get(self, "secret_references")
+
+    @secret_references.setter
+    def secret_references(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['DefinitionSecretReferenceArgs']]]]):
+        pulumi.set(self, "secret_references", value)
+
     @property
     @pulumi.getter
     def timeout(self) -> Optional[pulumi.Input[str]]:
@@ -213,6 +229,7 @@ class _DefinitionState:
                  name: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 secret_references: Optional[pulumi.Input[Sequence[pulumi.Input['DefinitionSecretReferenceArgs']]]] = None,
                  timeout: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering Definition resources.
@@ -226,6 +243,7 @@ class _DefinitionState:
         :param pulumi.Input[str] name: The name of the job.
         :param pulumi.Input[str] project_id: `project_id`) The ID of the project the Job is associated with.
         :param pulumi.Input[str] region: `region`) The region of the Job.
+        :param pulumi.Input[Sequence[pulumi.Input['DefinitionSecretReferenceArgs']]] secret_references: A reference to a secret stored in Secret Manager.
         :param pulumi.Input[str] timeout: The job run timeout, in Go Time format (ex: `2h30m25s`)
         """
         if command is not None:
@@ -248,6 +266,8 @@ class _DefinitionState:
             pulumi.set(__self__, "project_id", project_id)
         if region is not None:
             pulumi.set(__self__, "region", region)
+        if secret_references is not None:
+            pulumi.set(__self__, "secret_references", secret_references)
         if timeout is not None:
             pulumi.set(__self__, "timeout", timeout)
 
@@ -371,6 +391,18 @@ class _DefinitionState:
     def region(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "region", value)
 
+    @property
+    @pulumi.getter(name="secretReferences")
+    def secret_references(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['DefinitionSecretReferenceArgs']]]]:
+        """
+        A reference to a secret stored in Secret Manager.
+        """
+        return pulumi.get(self, "secret_references")
+
+    @secret_references.setter
+    def secret_references(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['DefinitionSecretReferenceArgs']]]]):
+        pulumi.set(self, "secret_references", value)
+
     @property
     @pulumi.getter
     def timeout(self) -> Optional[pulumi.Input[str]]:
@@ -399,6 +431,7 @@ class Definition(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 secret_references: Optional[pulumi.Input[Sequence[pulumi.Input[Union['DefinitionSecretReferenceArgs', 'DefinitionSecretReferenceArgsDict']]]]] = None,
                  timeout: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
@@ -428,6 +461,36 @@ class Definition(pulumi.CustomResource):
             })
         ```
 
+        ### With Secret Reference
+
+        ```python
+        import pulumi
+        import pulumiverse_scaleway as scaleway
+
+        main = scaleway.job.Definition("main",
+            name="testjob",
+            cpu_limit=140,
+            memory_limit=256,
+            image_uri="docker.io/alpine:latest",
+            command="ls",
+            timeout="10m",
+            cron={
+                "schedule": "5 4 1 * *",
+                "timezone": "Europe/Paris",
+            },
+            secret_references=[
+                {
+                    "secret_id": "11111111-1111-1111-1111-111111111111",
+                    "file": "/home/dev/secret_file",
+                },
+                {
+                    "secret_id": job_secret["id"],
+                    "secret_version": "1",
+                    "environment": "FOO",
+                },
+            ])
+        ```
+
         ## Import
 
         Serverless Jobs can be imported using the `{region}/{id}`, e.g.
@@ -450,6 +513,7 @@ class Definition(pulumi.CustomResource):
         :param pulumi.Input[str] name: The name of the job.
         :param pulumi.Input[str] project_id: `project_id`) The ID of the project the Job is associated with.
         :param pulumi.Input[str] region: `region`) The region of the Job.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['DefinitionSecretReferenceArgs', 'DefinitionSecretReferenceArgsDict']]]] secret_references: A reference to a secret stored in Secret Manager.
         :param pulumi.Input[str] timeout: The job run timeout, in Go Time format (ex: `2h30m25s`)
         """
         ...
@@ -485,6 +549,36 @@ class Definition(pulumi.CustomResource):
             })
         ```
 
+        ### With Secret Reference
+
+        ```python
+        import pulumi
+        import pulumiverse_scaleway as scaleway
+
+        main = scaleway.job.Definition("main",
+            name="testjob",
+            cpu_limit=140,
+            memory_limit=256,
+            image_uri="docker.io/alpine:latest",
+            command="ls",
+            timeout="10m",
+            cron={
+                "schedule": "5 4 1 * *",
+                "timezone": "Europe/Paris",
+            },
+            secret_references=[
+                {
+                    "secret_id": "11111111-1111-1111-1111-111111111111",
+                    "file": "/home/dev/secret_file",
+                },
+                {
+                    "secret_id": job_secret["id"],
+                    "secret_version": "1",
+                    "environment": "FOO",
+                },
+            ])
+        ```
+
         ## Import
 
         Serverless Jobs can be imported using the `{region}/{id}`, e.g.
@@ -520,6 +614,7 @@ class Definition(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 secret_references: Optional[pulumi.Input[Sequence[pulumi.Input[Union['DefinitionSecretReferenceArgs', 'DefinitionSecretReferenceArgsDict']]]]] = None,
                  timeout: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
@@ -544,6 +639,7 @@ class Definition(pulumi.CustomResource):
             __props__.__dict__["name"] = name
             __props__.__dict__["project_id"] = project_id
             __props__.__dict__["region"] = region
+            __props__.__dict__["secret_references"] = secret_references
             __props__.__dict__["timeout"] = timeout
         alias_opts = pulumi.ResourceOptions(aliases=[pulumi.Alias(type_="scaleway:index/jobDefinition:JobDefinition")])
         opts = pulumi.ResourceOptions.merge(opts, alias_opts)
@@ -567,6 +663,7 @@ class Definition(pulumi.CustomResource):
             name: Optional[pulumi.Input[str]] = None,
             project_id: Optional[pulumi.Input[str]] = None,
             region: Optional[pulumi.Input[str]] = None,
+            secret_references: Optional[pulumi.Input[Sequence[pulumi.Input[Union['DefinitionSecretReferenceArgs', 'DefinitionSecretReferenceArgsDict']]]]] = None,
             timeout: Optional[pulumi.Input[str]] = None) -> 'Definition':
         """
         Get an existing Definition resource's state with the given name, id, and optional extra
@@ -585,6 +682,7 @@ class Definition(pulumi.CustomResource):
         :param pulumi.Input[str] name: The name of the job.
         :param pulumi.Input[str] project_id: `project_id`) The ID of the project the Job is associated with.
         :param pulumi.Input[str] region: `region`) The region of the Job.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['DefinitionSecretReferenceArgs', 'DefinitionSecretReferenceArgsDict']]]] secret_references: A reference to a secret stored in Secret Manager.
         :param pulumi.Input[str] timeout: The job run timeout, in Go Time format (ex: `2h30m25s`)
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -601,6 +699,7 @@ class Definition(pulumi.CustomResource):
         __props__.__dict__["name"] = name
         __props__.__dict__["project_id"] = project_id
         __props__.__dict__["region"] = region
+        __props__.__dict__["secret_references"] = secret_references
         __props__.__dict__["timeout"] = timeout
         return Definition(resource_name, opts=opts, __props__=__props__)
 
@@ -684,6 +783,14 @@ class Definition(pulumi.CustomResource):
         """
         return pulumi.get(self, "region")
 
+    @property
+    @pulumi.getter(name="secretReferences")
+    def secret_references(self) -> pulumi.Output[Optional[Sequence['outputs.DefinitionSecretReference']]]:
+        """
+        A reference to a secret stored in Secret Manager.
+        """
+        return pulumi.get(self, "secret_references")
+
     @property
     @pulumi.getter
     def timeout(self) -> pulumi.Output[str]:

pulumiverse_scaleway/job/outputs.py

@@ -16,6 +16,7 @@ from .. import _utilities
 
 __all__ = [
     'DefinitionCron',
+    'DefinitionSecretReference',
 ]
 
 @pulumi.output_type
@@ -47,3 +48,90 @@ class DefinitionCron(dict):
         return pulumi.get(self, "timezone")
 
 
+@pulumi.output_type
+class DefinitionSecretReference(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "secretId":
+            suggest = "secret_id"
+        elif key == "secretReferenceId":
+            suggest = "secret_reference_id"
+        elif key == "secretVersion":
+            suggest = "secret_version"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in DefinitionSecretReference. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        DefinitionSecretReference.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        DefinitionSecretReference.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 secret_id: str,
+                 environment: Optional[str] = None,
+                 file: Optional[str] = None,
+                 secret_reference_id: Optional[str] = None,
+                 secret_version: Optional[str] = None):
+        """
+        :param str secret_id: The secret unique identifier, it could be formatted as region/UUID or UUID. In case the region is passed, it must be the same as the job definition. You could reference the same secret multiple times in the same job definition.
+        :param str environment: An environment variable containing the secret value. Must be specified if `file` is not specified.
+        :param str file: The absolute file path where the secret will be mounted. Must be specified if `environment` is not specified.
+        :param str secret_reference_id: The secret reference UUID that is automatically generated by the provider.
+        :param str secret_version: The secret version.
+        """
+        pulumi.set(__self__, "secret_id", secret_id)
+        if environment is not None:
+            pulumi.set(__self__, "environment", environment)
+        if file is not None:
+            pulumi.set(__self__, "file", file)
+        if secret_reference_id is not None:
+            pulumi.set(__self__, "secret_reference_id", secret_reference_id)
+        if secret_version is not None:
+            pulumi.set(__self__, "secret_version", secret_version)
+
+    @property
+    @pulumi.getter(name="secretId")
+    def secret_id(self) -> str:
+        """
+        The secret unique identifier, it could be formatted as region/UUID or UUID. In case the region is passed, it must be the same as the job definition. You could reference the same secret multiple times in the same job definition.
+        """
+        return pulumi.get(self, "secret_id")
+
+    @property
+    @pulumi.getter
+    def environment(self) -> Optional[str]:
+        """
+        An environment variable containing the secret value. Must be specified if `file` is not specified.
+        """
+        return pulumi.get(self, "environment")
+
+    @property
+    @pulumi.getter
+    def file(self) -> Optional[str]:
+        """
+        The absolute file path where the secret will be mounted. Must be specified if `environment` is not specified.
+        """
+        return pulumi.get(self, "file")
+
+    @property
+    @pulumi.getter(name="secretReferenceId")
+    def secret_reference_id(self) -> Optional[str]:
+        """
+        The secret reference UUID that is automatically generated by the provider.
+        """
+        return pulumi.get(self, "secret_reference_id")
+
+    @property
+    @pulumi.getter(name="secretVersion")
+    def secret_version(self) -> Optional[str]:
+        """
+        The secret version.
+        """
+        return pulumi.get(self, "secret_version")
+
+

pulumiverse_scaleway/job_definition.py

@@ -31,6 +31,7 @@ class JobDefinitionArgs:
                  name: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 secret_references: Optional[pulumi.Input[Sequence[pulumi.Input['JobDefinitionSecretReferenceArgs']]]] = None,
                  timeout: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a JobDefinition resource.
@@ -44,6 +45,7 @@ class JobDefinitionArgs:
         :param pulumi.Input[str] name: The name of the job.
         :param pulumi.Input[str] project_id: `project_id`) The ID of the project the Job is associated with.
         :param pulumi.Input[str] region: `region`) The region of the Job.
+        :param pulumi.Input[Sequence[pulumi.Input['JobDefinitionSecretReferenceArgs']]] secret_references: A reference to a secret stored in Secret Manager.
         :param pulumi.Input[str] timeout: The job run timeout, in Go Time format (ex: `2h30m25s`)
         """
         pulumi.set(__self__, "cpu_limit", cpu_limit)
@@ -64,6 +66,8 @@ class JobDefinitionArgs:
             pulumi.set(__self__, "project_id", project_id)
         if region is not None:
             pulumi.set(__self__, "region", region)
+        if secret_references is not None:
+            pulumi.set(__self__, "secret_references", secret_references)
         if timeout is not None:
             pulumi.set(__self__, "timeout", timeout)
 
@@ -187,6 +191,18 @@ class JobDefinitionArgs:
     def region(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "region", value)
 
+    @property
+    @pulumi.getter(name="secretReferences")
+    def secret_references(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['JobDefinitionSecretReferenceArgs']]]]:
+        """
+        A reference to a secret stored in Secret Manager.
+        """
+        return pulumi.get(self, "secret_references")
+
+    @secret_references.setter
+    def secret_references(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['JobDefinitionSecretReferenceArgs']]]]):
+        pulumi.set(self, "secret_references", value)
+
     @property
     @pulumi.getter
     def timeout(self) -> Optional[pulumi.Input[str]]:
@@ -213,6 +229,7 @@ class _JobDefinitionState:
                  name: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 secret_references: Optional[pulumi.Input[Sequence[pulumi.Input['JobDefinitionSecretReferenceArgs']]]] = None,
                  timeout: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering JobDefinition resources.
@@ -226,6 +243,7 @@ class _JobDefinitionState:
         :param pulumi.Input[str] name: The name of the job.
         :param pulumi.Input[str] project_id: `project_id`) The ID of the project the Job is associated with.
         :param pulumi.Input[str] region: `region`) The region of the Job.
+        :param pulumi.Input[Sequence[pulumi.Input['JobDefinitionSecretReferenceArgs']]] secret_references: A reference to a secret stored in Secret Manager.
         :param pulumi.Input[str] timeout: The job run timeout, in Go Time format (ex: `2h30m25s`)
         """
         if command is not None:
@@ -248,6 +266,8 @@ class _JobDefinitionState:
             pulumi.set(__self__, "project_id", project_id)
         if region is not None:
             pulumi.set(__self__, "region", region)
+        if secret_references is not None:
+            pulumi.set(__self__, "secret_references", secret_references)
         if timeout is not None:
             pulumi.set(__self__, "timeout", timeout)
 
@@ -371,6 +391,18 @@ class _JobDefinitionState:
     def region(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "region", value)
 
+    @property
+    @pulumi.getter(name="secretReferences")
+    def secret_references(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['JobDefinitionSecretReferenceArgs']]]]:
+        """
+        A reference to a secret stored in Secret Manager.
+        """
+        return pulumi.get(self, "secret_references")
+
+    @secret_references.setter
+    def secret_references(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['JobDefinitionSecretReferenceArgs']]]]):
+        pulumi.set(self, "secret_references", value)
+
     @property
     @pulumi.getter
     def timeout(self) -> Optional[pulumi.Input[str]]:
@@ -404,6 +436,7 @@ class JobDefinition(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 secret_references: Optional[pulumi.Input[Sequence[pulumi.Input[Union['JobDefinitionSecretReferenceArgs', 'JobDefinitionSecretReferenceArgsDict']]]]] = None,
                  timeout: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
@@ -433,6 +466,36 @@ class JobDefinition(pulumi.CustomResource):
             })
         ```
 
+        ### With Secret Reference
+
+        ```python
+        import pulumi
+        import pulumiverse_scaleway as scaleway
+
+        main = scaleway.job.Definition("main",
+            name="testjob",
+            cpu_limit=140,
+            memory_limit=256,
+            image_uri="docker.io/alpine:latest",
+            command="ls",
+            timeout="10m",
+            cron={
+                "schedule": "5 4 1 * *",
+                "timezone": "Europe/Paris",
+            },
+            secret_references=[
+                {
+                    "secret_id": "11111111-1111-1111-1111-111111111111",
+                    "file": "/home/dev/secret_file",
+                },
+                {
+                    "secret_id": job_secret["id"],
+                    "secret_version": "1",
+                    "environment": "FOO",
+                },
+            ])
+        ```
+
         ## Import
 
         Serverless Jobs can be imported using the `{region}/{id}`, e.g.
@@ -455,6 +518,7 @@ class JobDefinition(pulumi.CustomResource):
         :param pulumi.Input[str] name: The name of the job.
         :param pulumi.Input[str] project_id: `project_id`) The ID of the project the Job is associated with.
         :param pulumi.Input[str] region: `region`) The region of the Job.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['JobDefinitionSecretReferenceArgs', 'JobDefinitionSecretReferenceArgsDict']]]] secret_references: A reference to a secret stored in Secret Manager.
         :param pulumi.Input[str] timeout: The job run timeout, in Go Time format (ex: `2h30m25s`)
         """
         ...
@@ -490,6 +554,36 @@ class JobDefinition(pulumi.CustomResource):
             })
         ```
 
+        ### With Secret Reference
+
+        ```python
+        import pulumi
+        import pulumiverse_scaleway as scaleway
+
+        main = scaleway.job.Definition("main",
+            name="testjob",
+            cpu_limit=140,
+            memory_limit=256,
+            image_uri="docker.io/alpine:latest",
+            command="ls",
+            timeout="10m",
+            cron={
+                "schedule": "5 4 1 * *",
+                "timezone": "Europe/Paris",
+            },
+            secret_references=[
+                {
+                    "secret_id": "11111111-1111-1111-1111-111111111111",
+                    "file": "/home/dev/secret_file",
+                },
+                {
+                    "secret_id": job_secret["id"],
+                    "secret_version": "1",
+                    "environment": "FOO",
+                },
+            ])
+        ```
+
         ## Import
 
         Serverless Jobs can be imported using the `{region}/{id}`, e.g.
@@ -525,6 +619,7 @@ class JobDefinition(pulumi.CustomResource):
                  name: Optional[pulumi.Input[str]] = None,
                  project_id: Optional[pulumi.Input[str]] = None,
                  region: Optional[pulumi.Input[str]] = None,
+                 secret_references: Optional[pulumi.Input[Sequence[pulumi.Input[Union['JobDefinitionSecretReferenceArgs', 'JobDefinitionSecretReferenceArgsDict']]]]] = None,
                  timeout: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         pulumi.log.warn("""JobDefinition is deprecated: scaleway.index/jobdefinition.JobDefinition has been deprecated in favor of scaleway.job/definition.Definition""")
@@ -550,6 +645,7 @@ class JobDefinition(pulumi.CustomResource):
             __props__.__dict__["name"] = name
             __props__.__dict__["project_id"] = project_id
             __props__.__dict__["region"] = region
+            __props__.__dict__["secret_references"] = secret_references
             __props__.__dict__["timeout"] = timeout
         super(JobDefinition, __self__).__init__(
             'scaleway:index/jobDefinition:JobDefinition',
@@ -571,6 +667,7 @@ class JobDefinition(pulumi.CustomResource):
             name: Optional[pulumi.Input[str]] = None,
             project_id: Optional[pulumi.Input[str]] = None,
             region: Optional[pulumi.Input[str]] = None,
+            secret_references: Optional[pulumi.Input[Sequence[pulumi.Input[Union['JobDefinitionSecretReferenceArgs', 'JobDefinitionSecretReferenceArgsDict']]]]] = None,
             timeout: Optional[pulumi.Input[str]] = None) -> 'JobDefinition':
         """
         Get an existing JobDefinition resource's state with the given name, id, and optional extra
@@ -589,6 +686,7 @@ class JobDefinition(pulumi.CustomResource):
         :param pulumi.Input[str] name: The name of the job.
         :param pulumi.Input[str] project_id: `project_id`) The ID of the project the Job is associated with.
         :param pulumi.Input[str] region: `region`) The region of the Job.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['JobDefinitionSecretReferenceArgs', 'JobDefinitionSecretReferenceArgsDict']]]] secret_references: A reference to a secret stored in Secret Manager.
         :param pulumi.Input[str] timeout: The job run timeout, in Go Time format (ex: `2h30m25s`)
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
@@ -605,6 +703,7 @@ class JobDefinition(pulumi.CustomResource):
         __props__.__dict__["name"] = name
         __props__.__dict__["project_id"] = project_id
         __props__.__dict__["region"] = region
+        __props__.__dict__["secret_references"] = secret_references
         __props__.__dict__["timeout"] = timeout
         return JobDefinition(resource_name, opts=opts, __props__=__props__)
 
@@ -688,6 +787,14 @@ class JobDefinition(pulumi.CustomResource):
         """
         return pulumi.get(self, "region")
 
+    @property
+    @pulumi.getter(name="secretReferences")
+    def secret_references(self) -> pulumi.Output[Optional[Sequence['outputs.JobDefinitionSecretReference']]]:
+        """
+        A reference to a secret stored in Secret Manager.
+        """
+        return pulumi.get(self, "secret_references")
+
     @property
     @pulumi.getter
     def timeout(self) -> pulumi.Output[str]: