How to load secret in file for cloud run?

Terraform
1

--update-secrets=SECRET_KEY=secret-key:latest,/shhh/sa.json=secret-key:latest

this flag loads secret-key in SECRET_KEY env var and writes a /shhh/sa.json file with it in gcloud cloud run

any idea how to do equivalent in terraform?

one thing i could think of is using volumes

...
    volumes {
      name = "secret-volume"
      secret {
        secret = data.google_secret_manager_secret_version_access.secret_key.secret
      }
    }

...

...

containers {

...

      volume_mounts {
        mount_path = "/shhh/secret.json"
        name       = "secret-volume"
      }

...
}

but i don’t know how it saves, will it save secret in given file path?