OnePasswordItem status stays empty

That's good to hear. When it's released will depend on how quickly we can iron out the API. There is still some discussion on the ready field.

I am currently leaning towards removing that altogether. Is it correct that the following would work for you?


resource "kubernetes_manifest" "oauth_secret_properties" {
manifest = {
apiVersion = "onepassword.com/v1"
kind = "OnePasswordItem"
metadata = {
name = "secret-properties"
namespace = kubernetes_namespace.oauth2.metadata[0].name
}
type = "Opaque"
spec = {
itemPath = <redacted>
}
}
wait {
fields = {
"status.conditions[0].type" = "Ready"
"status.conditions[0].status" = "True"
}
}
}


I tested this locally and it seems to do what you would expect: it waits for the k8s secret to be created.