Google Secrets Manager

Prerequisite

Install External Secret Operator (ESO).

To add secrets from Google Secrets Manager, follow the steps mentioned below :

1. Go to Google cloud console and create a Service Account.

   

   Figure 1a: Create Service Account

   

   Figure 1b: Service Account Creation

2. Assign roles to the service account.

   

   Figure 2: Assign Service Account Roles

3. Add and create a new key.

   

   Figure 3a: Add Service Account Key

   

   Figure 3b: Create Service Account Key

4. Create a Kubernetes secret in the namespace in which the application is to be deployed using base64 encoded service account key.

   You can use devtron generic chart for this.

   

   Figure 4: Create Kubernetes Secret

5. After creating the generic secret, navigate to Secrets section of the application and click Add Secret to add a new secret.

   

   Figure 5: Add New Secret

6. Select Google Secrets Manager under External Secret Operator (ESO) from the dropdown of Data type.

   

   Figure 6: Select Google Secrets Manager

7. Configure secret.

   

   Figure 7: Configure Secret Settings

   Key	Description
   secretAccessKeySecretRef.name	Name of secret created that would be used for authentication.
   secretAccessKeySecretRef.key	In generic secret created for GCP authentication, variable name in which base64 encoded service account key is stored.
   ProjectID	GCP Project ID where secret is created.
   secretKey	Key name to store secret.
   key	GCP Secrets Manager secret name.

   

   Figure 8: Google Secret Example

8. Save secret.