Google Secrets Manager
To add secrets from Google Secrets Manager, follow the steps mentioned below :
1. Go to Google cloud console and create a Service Account.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fgoogle-sa.jpg&width=768&dpr=4&quality=100&sign=4d771fc&sv=1)
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fgoogle-sa-create.jpg&width=768&dpr=4&quality=100&sign=2d7320f7&sv=1)
2. Assign roles to the service account.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fgoogle-sa-roles.jpg&width=768&dpr=4&quality=100&sign=2dab944&sv=1)
3. Add and create a new key.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fgoogle-key.jpg&width=768&dpr=4&quality=100&sign=12236f03&sv=1)
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fgoogle-key-create.jpg&width=768&dpr=4&quality=100&sign=30488aae&sv=1)
5. Create a Kubernetes secret in the namespace in which the application is to be deployed using base64 encoded service account key.
You can use devtron generic chart for this.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fgcp-auth-generic.jpg&width=768&dpr=4&quality=100&sign=6728da05&sv=1)
6. After creating the generic secret, navigate to Secrets
section of the application and click Add Secret
to add a new secret.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fadd-secrets.jpg&width=768&dpr=4&quality=100&sign=6a944c1b&sv=1)
7. Select Google Secrets Manager
under External Secret Operator
(ESO) from the dropdown of Data type
.
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fgcp-secret-manager-dropdow.jpg&width=768&dpr=4&quality=100&sign=b9ffb525&sv=1)
8. Configure secret:
![](https://docs.devtron.ai/~gitbook/image?url=https%3A%2F%2Fdevtron-public-asset.s3.us-east-2.amazonaws.com%2Fimages%2Fcreating-application%2Fsecrets%2Fgcp-es-configure.jpg&width=768&dpr=4&quality=100&sign=5ed88858&sv=1)
Key | Description |
---|---|
| Name of secret created that would be used for authentication. |
| In generic secret created for GCP authentication, variable name in which base64 encoded service account key is stored. |
| GCP Project ID where secret is created. |
| Key name to store secret. |
| GCP Secrets Manager secret name. |
9. Save secret.
Last updated