Google Secrets Manager
Prerequisite
Install External Secret Operator (ESO).
To add secrets from Google Secrets Manager, follow the steps mentioned below :
Go to Google cloud console and create a Service Account.
Figure 1: Create Service Account 
Figure 2: Service Account Creation Assign roles to the service account.
Figure 3: Assign Service Account Roles Add and create a new key.
Figure 4a: Add Service Account Key 
Figure 4b: Create Service Account Key Create a Kubernetes secret in the namespace in which the application is to be deployed using base64 encoded service account key.
You can use devtron generic chart for this.
Figure 5: Create Kubernetes Secret After creating the generic secret, navigate to
Secretssection of the application and clickAdd Secretto add a new secret.
Figure 6: Add New Secret Select
Google Secrets ManagerunderExternal Secret Operator(ESO) from the dropdown ofData type.
Figure 7: Select Google Secrets Manager Configure secret.
Figure 8: Configure Secret Settings KeyDescriptionsecretAccessKeySecretRef.nameName of secret created that would be used for authentication.
secretAccessKeySecretRef.keyIn generic secret created for GCP authentication, variable name in which base64 encoded service account key is stored.
ProjectIDGCP Project ID where secret is created.
secretKeyKey name to store secret.
keyGCP Secrets Manager secret name.
Figure 9: Google Secret Example Save secret.
Last updated
Was this helpful?