Questions tagged [google-secret-manager]

Secret Manager provides a secure and convenient tool for storing API keys, passwords, certificates, and other sensitive data on Google Cloud Platform.

Secret Manager is a Google Cloud product that provides a secure and convenient way to store and access API keys, passwords, certificates, and other sensitive data.

Resources

Related Products

312 questions
5
votes
3 answers

Why am I getting undefined when loading env variables into Firebase function?

I am trying to use the integration between Google Secrets Manager API and Firebase Functions to load environment variables into my Firebase functions, however they are all coming up as undefined. I was previously using .env. files to load these…
5
votes
3 answers

Why does this gRPC call from the Google Secret Manager API hang when run by Apache?

In short: I have a Django application being served up by Apache on a Google Compute Engine VM. I want to access a secret from Google Secret Manager in my Python code (when the Django app is initialising). When I do 'python manage.py runserver', the…
5
votes
1 answer

How do I access mounted secrets when using Google Cloud Run?

I have two questions: Why can't I mount two cloud secrets in the same directory? I have attempted to mount two secrets, FIREBASE_AUTH_SERVICE_ACCOUNT and PURCHASE_VALIDATION_SERVICE_ACCOUNT in the…
5
votes
1 answer

Accessing Google Secrets from an application running on a Google Cloud VM instance - Assigning Cloud APIs to VM

I'm using Google Secrets to store API keys and other application specific "secrets". When I deploy my application to a VM instance using a docker container, I want it to access the Google Secrets using the VM's associated service account. I have…
5
votes
2 answers

DotNet User secrets stored in Google Secret Manager

I need to deploy a dotnet web app to Google Cloud Run and want to use the user secrets file to store credentials. Currently, they are in appsettings which is not secure. Has anyone done this using Google Secret Manager? Is it best to store the…
5
votes
1 answer

Accessing secrets in GCP Secret Manager from Python in Docker- nontsop Permission Denied

I'm building a simple app which stores Twilio credentials in GCP Secret Manager and pulls them down when it needs them. However, I keep receiving denied permissions errors (403) on the project resource: google.api_core.exceptions.PermissionDenied:…
5
votes
2 answers

Is there a way to store secrets in GCP, similar to Azure vault?

I have been trying to find a way to store secrets in GCP. I have explored Google Cloud KMS. It seems to be only for creating encryption keys, that can be used to encrypt say GCP storage elements. Or, maybe I missed something. I have also seen, there…
5
votes
1 answer

Access environment variables stored in Google Secret Manager from Google Cloud Build

How can I access the variables I define in Google Secret Manager from my Google Cloud Build Pipeline ?
4
votes
1 answer

GCP Secret Manager: Environment variables and secrets not resolved in Spring Boot Application

Following this guide and this code example, I have this in my application-deploy.yaml: spring:following cloud: gcp: project-id: ${PROJECT_ID} # Set during build-process (Docker) sql: enabled: true database-name:…
4
votes
4 answers

Google Secret Manager Permissions For Local Emulating of Functions

I've given the service account for the functions the necessary permissions ('Secret Manager Secret Accessor') and when deployed, the firebase functions are able to access the secrets without any problems. However, when using firebase serve or…
4
votes
1 answer

Load env variables from Google's Secret Manager into Docker container that runs on Google Cloud Run, but not deployed via Cloud Build?

I'm currently delivering a node + nestjs application via as a docker container using Google's Cloud Run. I'm using the secrets manager for the secrets & using projects for dev/staging/prod and I'm trying to make the secrets available to my container…
4
votes
1 answer

Storing binary data in Google Secret Manager

I'm using Google Secret Manager for the first time to store some binary data. When I access the secret, it seems to have a different encoding or format. The actual data is a certificate bundle, but I've been able to reproduce the issue using smaller…
sethvargo
  • 26,739
  • 10
  • 86
  • 156
4
votes
1 answer

How to specify secretEnv to cloudbuild.yaml via gcloud cli args or environment variables

If I follow the cloud build document, I have to specify encrypted secret on cloudbuild.yaml. secrets: - kmsKeyName: projects/[PROJECT-ID]/locations/global/keyRings/[KEYRING-NAME]/cryptoKeys/[KEY-NAME] secretEnv: MY_SECRET:
3
votes
0 answers

Connect a GCP Cloud Build Trigger with Gitlab Repository

I am working on a project in which we maintain a Gitlab Repository for all updates in code. And I have created a Cloud Build Trigger to connect to Gitlab Repository using Webhook URL by referencing the source-…
3
votes
1 answer

What is the Correct Way to Use Secret Manager in Firebase Cloud Function?

I started to add Secret Manager with a SECRET_NAME contains a certain password inside Cloud Function using Node.js. I tried both ways. First, adding Secret Manager using Console and another, adding Secret Manager directly through Firebase CLI.…
1
2
3
20 21