Questions tagged [google-secret-manager]

Secret Manager provides a secure and convenient tool for storing API keys, passwords, certificates, and other sensitive data on Google Cloud Platform.

Secret Manager is a Google Cloud product that provides a secure and convenient way to store and access API keys, passwords, certificates, and other sensitive data.

Resources

Related Products

312 questions
2
votes
1 answer

Python create_secret in Google Secrets: How can I select the Secret Manager location 'europe-north1'?

I have this code to create a secret: from google.cloud import secretmanager def create_secret(secret_id): # Create the Secret Manager client. client = secretmanager.SecretManagerServiceClient() # Build the resource name of the parent…
Europa
  • 974
  • 12
  • 40
2
votes
2 answers

SecretManagerServiceClient raises 403 Permission denied CONSUMER_INVALID in Google App Engine but `gcloud secrets versions access` works

Background: I'm trying to deploy a Django app to the Google App Engine (GAE) standard environment in the python39 runtime The database configuration is stored in a Secret Manager secret version, similar to Google's GAE Django tutorial (link) The…
2
votes
1 answer

Firebase functions 2nd generation - runtime privacy and safety

I've just made a migration from 1st gen Firebase functions to 2nd gen. In this documentation, there written: GCP does not guarantee the pure safety of the data stored in a form of env variable. The article also recommends use of Secret Manager which…
2
votes
1 answer

Passing Google Cloud credentials into a Docker container during build performed by Google Build?

This is really part 2 of a 2-part question. Part 1 was about a more graceful way to load secrets in Google Secret Manager during the middleware processing of ASP.Net Web API applications ... What's the best (real world) way to load secrets into an…
2
votes
1 answer

Question about keeping workload_identity_provider as secrets

Do we need to keep the workload_identity_provider and service_account as secrets when setting up authentication via Workload Identity Federation from Github actions?
Jerry
  • 60
  • 1
  • 5
2
votes
1 answer

firebase functions:secrets:set is not a Firebase command

I am using cloud functions and would like to use Secret Manager to protect api keys for some services. Following the official documentation here , I tried using the command: firebase functions:secrets:set STRIPE_TEST but I received the following…
sirss
  • 171
  • 1
  • 9
2
votes
2 answers

Not able to Run SpringBoot image in gcp cli whereas it runs in local Intellij

I configured my gcloud in local and was able to connect to gcp secrets manager. My springboot project worked fine. I tried to build a docker Image of the same app and tried to run the image in google cloud cli. I am getting the error shown below. I…
2
votes
1 answer

Using GCP secret manager for hundreds of secrets in Cloud Run

I am currently running a SaaS through Google's Cloud Run platform. The customers each have their own API credentials that require secure storage, and retrieval during use of my program. I would like to use Google's Secret Manager as a method of…
2
votes
1 answer

Using Google Secret Manager with Firebase Functions and Stripe (top level)

Gday, Quite new to TS and only got a little bit of experience with backend in general, so apologies if I am completely missing the idea. So I really like the idea of using Google Secret Manager instead of custom env config for Firebase…
2
votes
1 answer

inject secrets (API keys etc) into node js project

I'm migrating a nodeJS project from GCP to DigitalOcean. I'm running this nodeJS code on a kubernetes cluster in DigitalOcean. I'm using GitHub Actions to automatically build a docker image and deploy it to my kubernetes cluster. Everything works as…
2
votes
0 answers

Environment variables are undefined when using Google Cloud Secret Manager in the Firebase Functions Emulator with --inspect-functions

I added Firebase Functions secrets via the CLI as described in the docs. The secrets are populated correctly in process.env both in deployed and emulated functions UNLESS the --inspect-functions flag is set. In that case, the secrets in process.env…
2
votes
1 answer

How to use Google Secret Manager with Flutter

I am trying to use https://pub.dev/packages/googleapis and get a value from the SecretManagerApi. This is my current code but it doesn't even resolve. final secretVersion = await SecretManagerApi(Client()) .projects .secrets …
2
votes
3 answers

is it possible to automatically rotate the secrets in google secret manager

I am not able to find the options to automatically rotate the secrets in google secret manager. if any options available please share here. Thanks in advance
2
votes
2 answers

Google Secret Manager secrets do not seem to work yet I can find nothing wrong

I have created a bunch of secrets using the documented CLI method like so: echo "ak_prod_4kj56hv24hkjcg56hj2c34k5j3hbj3k124v5h243c" | gcloud secrets versions add some-api-key --data-file=- I have set my YAML to read them at start-up, this…
Luke Puplett
  • 42,091
  • 47
  • 181
  • 266
2
votes
3 answers

Creating a dynamic secret variable block within Terraform for Cloud Run

I'm trying to create the following block dynamically based on a list of strings env { name = "SECRET_ENV_VAR" value_from { secret_key_ref { name = google_secret_manager_secret.secret.secret_id …
fuzzi
  • 1,967
  • 9
  • 46
  • 90