Skip to main content
Version: 1.7

Google Secrets Manager

Prerequisite

Install External Secret Operator (ESO).

To add secrets from Google Secrets Manager, follow the steps mentioned below :

  1. Go to Google cloud console and create a Service Account.

    Figure 1: Create Service Account

    Figure 2: Service Account Creation

  2. Assign roles to the service account.

    Figure 3: Assign Service Account Roles

  3. Add and create a new key.

    Figure 4a: Add Service Account Key

    Figure 4b: Create Service Account Key

  4. Create a Kubernetes secret in the namespace in which the application is to be deployed using base64 encoded service account key.

    You can use devtron generic chart for this.

    Figure 5: Create Kubernetes Secret

  5. After creating the generic secret, navigate to Secrets section of the application and click Add Secret to add a new secret.

    Figure 6: Add New Secret

  6. Select Google Secrets Manager under External Secret Operator (ESO) from the dropdown of Data type.

    Figure 7: Select Google Secrets Manager

  7. Configure secret.

    Figure 8: Configure Secret Settings

    KeyDescription
    secretAccessKeySecretRef.nameName of secret created that would be used for authentication.
    secretAccessKeySecretRef.keyIn generic secret created for GCP authentication, variable name in which base64 encoded service account key is stored.
    ProjectIDGCP Project ID where secret is created.
    secretKeyKey name to store secret.
    keyGCP Secrets Manager secret name.

    Figure 9: Google Secret Example

  8. Save secret.