GCP Credential Provider - Kilemonn/Secrets-Validator GitHub Wiki

The GCP (Google Cloud Platform - Secret Manager credential provider is used to interact with the Google service and your secrets that reside within it.

Configuration

The GCP provider configuration requires the following properties to be defined in the yaml configuration file. The GCP provider can be defined multiple times with differing properties to access multiple projects within Google Cloud if this is required.

project-id (required)

This is the ID of the project configured under your Google Cloud account.

credential-file-path (required)

Because this provider can be defined multiple times you need to specify the credential file to use with this specific GCP provider. This is the path to the credential file that will be used to authenticate with Google Cloud to access the secrets in the defined project-id.

On windows this path can look like this (e.g. linking to default credentials):

C:\Users\<username>\AppData\Roaming\gcloud\application_default_credentials.json

Example

A definition of the GCP credential provider would look like this:

credential-providers:
    - GCP:
        project-id: secrets-validator-test
        credential-file-path: C:\Users\<username>\AppData\Roaming\gcloud\application_default_credentials.json
constraints:
    ...
⚠️ **GitHub.com Fallback** ⚠️