Questions tagged [google-secret-manager]

Secret Manager provides a secure and convenient tool for storing API keys, passwords, certificates, and other sensitive data on Google Cloud Platform.

Secret Manager is a Google Cloud product that provides a secure and convenient way to store and access API keys, passwords, certificates, and other sensitive data.

Resources

Related Products

312 questions
0
votes
1 answer

Not able to configure secrets using cloudbuild.yaml to deploy to cloudrun for the purpose of dialogflow basicauth

I have designed a simple dialogflow and tried to enable basicauth by providing username and password in the code.It works.It is shown below(refer check_auth function): app.py The dialogflow works fine with the given username and password.I tried…
0
votes
2 answers

Using stored keys as Environment variables

I have a secret key stored in the Secret manager of GCP. The idea is to use that secret key to get the budget list using cloud functions. Right now, I can access that key from my code, but the problem that I'm facing is that I need to set an…
Pin90
  • 91
  • 1
  • 10
0
votes
3 answers

Create notifications when GCP secret nears expiry

Whenever a GCP secret nears it's expiration date, it creates expiration logs in Secret Manager secret resource as mentioned here. It states one can create Log-based metrics and use them to create alerts for upcoming expirations. But the log based…
0
votes
1 answer

How to supply env file for a docker GCP CloudRun Service

I have .env file for my docker-compose, and was able to run using "docker-compose up" Now I pushed to cloud registry, and want to Cloud Run How can I supply the various environemnt variables? I did create secrets in secret manager, but how can I…
Kris Swat
  • 788
  • 1
  • 10
  • 39
0
votes
0 answers

Dealing with temporary acces tokens (and refresh tokens)

I'm struggling to get a solid flow with a temporary acces token and an refresh token to update the acces token. Background: I've build an middleware function in NodeJS running on GCF to get data from system A to B. This done with the help of 5 cloud…
RemcoE33
  • 1,551
  • 1
  • 4
  • 11
0
votes
1 answer

Cloud Run, Secret Manager and Spring Boot

I want to load whole .properties file from GCP Secret Manager to my Spring Boot application. Secret is "mounted as volume" in Cloud Run (whole .properties file, in path /secrets/secret.properties), but I cannot manage to load it to Spring Boot using…
0
votes
1 answer

GKE Workload Identity PermissionDenied

I am trying to use Google's preferred "Workload Identity" method to enable my GKE app to securely access secrets from Google Secrets. I've completed the setup and even checked all steps in the Troubleshooting section…
0
votes
0 answers

Is is possible to access secret manager from end user impersonation on local?

I have been able to access my secret from secret manager on google with a service account and its key file but I would like to be able to do this using the access token I generate with my end user on local that is impersonating the app engine…
0
votes
1 answer

What is a good way to get the latest version of a app engine cloud secret?

I can get the secret versions with from google.cloud import secretmanager secretmanager_client = secretmanager.SecretManagerServiceClient() secret_pages =…
Gavin Haynes
  • 1,721
  • 11
  • 21
0
votes
2 answers

Access Google Secret Manager secrets from Angular app

Is it possible to access Google Secret Manager API via simple API call using API key? https://secretmanager.googleapis.com/v1/projects/*/secrets/*?key=mykey throws 401 unauthenticated. On the Node.js server powering the Angular app, I utilize…
Destabilizator
  • 458
  • 6
  • 18
0
votes
1 answer

Grpc.Core.RpcException - Detail=failed to connect to all addresses

I've been using GCP SecretManager in .Net core project ,while accessing one of the secret placed in GCP it throws an error Grpc.Core.RpcException: 'Status(StatusCode="Unavailable", Detail="failed to connect to all…
Sachin Kalia
  • 1,027
  • 14
  • 24
0
votes
1 answer

GCP: how to access proj-1 secret manager from proj-2 CloudBuild?

All my GCP containers use CloudBuild on my-dev-project and access secret manager on the same project (my-dev-project). However, one project requires access to secrets manger on my-prod-project. I imagine I need to add a service account, but I'm not…
Kevin Danikowski
  • 4,620
  • 6
  • 41
  • 75
0
votes
0 answers

Google Secrets Manager Denied Access When Roles/Poject/ServiceAccount Correct?

This is truly boggling my mind. I am using Python and trying to pull the secrets manager value from a resource that I have access to from what I can tell. I'm on Windows using Python 3.8. def fetch_credentials(): project_id = "109837978792" #…
Fastidious
  • 1,249
  • 4
  • 25
  • 43
0
votes
1 answer

Using a database password stored in Google Secrets Manager from within a pod running in a GKE cluster

I am running an application in a Google Kubernetes Cluster. One pod in it needs access to an externally managed database (Google cloud SQL), and up until now has had a hard coded password for testing purposes. It's come time to move to a more secure…
0
votes
1 answer

How to inject secrets from Google Secret Manager into K8s pod?

What is the best practice for injecting a secret from Google Secret Manager into a Kubernetes deployment? I have stored the admin password for my Grafana instance into Google Secret Manager. The Grafana instance was deployed using a helm chart on…
Riley Hun
  • 2,541
  • 5
  • 31
  • 77