65 lines
3.0 KiB
Markdown
65 lines
3.0 KiB
Markdown
|
---
|
||
|
|
title_tag: gcp-secrets Pulumi ESC Provider
|
||
|
|
meta_desc: The gcp-secrets Pulumi ESC Provider enables you to dynamically import Secrets from Google Cloud Secrets Manager into your Environment.
|
||
|
|
title: gcp-secrets
|
||
|
|
h1: gcp-secrets
|
||
|
|
meta_image: /images/docs/meta-images/docs-meta.png
|
||
|
|
menu:
|
||
|
|
pulumicloud:
|
||
|
|
identifier: gcp-secrets
|
||
|
|
parent: esc-providers
|
||
|
|
weight: 6
|
||
|
|
---
|
||
|
|
|
||
|
|
The `gcp-secrets` provider enables you to dynamically import Secrets from Google Cloud Secrets Manager into your Environment. The provider will return a map of names to Secrets.
|
||
|
|
|
||
|
|
## Example
|
||
|
|
|
||
|
|
```yaml
|
||
|
|
gcp:
|
||
|
|
login:
|
||
|
|
fn::open::gcp-login:
|
||
|
|
project: 123456789
|
||
|
|
oidc:
|
||
|
|
workloadPoolId: pulumi-esc
|
||
|
|
providerId: pulumi-esc
|
||
|
|
serviceAccount: pulumi-esc@foo-bar-123456.iam.gserviceaccount.com
|
||
|
|
secrets:
|
||
|
|
fn::open::gcp-secrets:
|
||
|
|
login: ${gcp.login}
|
||
|
|
access:
|
||
|
|
api-key:
|
||
|
|
name: api-key
|
||
|
|
app-secret:
|
||
|
|
name: app-secret
|
||
|
|
```
|
||
|
|
|
||
|
|
## Inputs
|
||
|
|
|
||
|
|
| Property | Type | Description |
|
||
|
|
|----------|--------------------------------------------------|---------------------------------------------------------------------------------------------------------------------------------------|
|
||
|
|
| `login` | [GCPSecretsLogin](#gcpsecretslogin) | Credentials used to log in to Google Cloud. |
|
||
|
|
| `access` | map[string][GCPSecretsAccess](#gcpsecretsaccess) | A map from names to secrets to read from Google Cloud Secrets Manager. The outputs will map each name to the secret's sensitive data. |
|
||
|
|
|
||
|
|
### GCPSecretsLogin
|
||
|
|
|
||
|
|
| Property | Type | Description |
|
||
|
|
|---------------|--------|----------------------------------------------------------------------------------|
|
||
|
|
| `project` | string | The **numerical** ID of the GCP project, aka project number. (e.g. 951040570662) |
|
||
|
|
| `accessToken` | string | The access token used to authenticate with Google Cloud. |
|
||
|
|
| `tokenType` | string | The type of the access token. |
|
||
|
|
| `expiry` | string | [Optional] - The access token's expiry time. |
|
||
|
|
|
||
|
|
#### GCPSecretsAccess
|
||
|
|
|
||
|
|
| Property | Type | Description |
|
||
|
|
|----------------|--------|---------------------------------------------------|
|
||
|
|
| `name` | string | The name of the secret to import. |
|
||
|
|
| `version` | string | [Optional] - The version of the secret to import. |
|
||
|
|
|
||
|
|
### Outputs
|
||
|
|
|
||
|
|
| Property | Type | Description |
|
||
|
|
|----------|--------|-------------------------------------|
|
||
|
|
| N/A | object | A map of names to imported Secrets. |
|