I come with Azure background. In Azure, I could establish Key Vault (Azure's version of Google's secret manager) to store SSL certificates and set up VMs accordingly to pull certs from this. New versions uploaded to the Key Vault will auto-renew all the VMs that are set up to pull the certifcates from this Key Vault.
Can I do the same thing in Google so that Compute Engine pulls the certificates from the Secret Manager automatically?
I did some search but no prevalent results were found.