Secret Manager is a secure and convenient storage system for API keys, passwords, certificates, and other sensitive data. For more information, see Secret Manager overview .
This document describes the connections and parameters you can configure when using App Design Center to create a Secret Manager secret. The configuration parameters are based on the terraform-google-secret-manager Terraform module.
Component connections
The following table includes the components that you can connect to Secret Manager, and the resulting updates to your application and its generated Terraform code.
Connected component
Application updates
Background information
- The service account can access the secret data.
- The
roles/secretmanager.secretAccessorrole is assigned to the Compute Engine instance template service account.
- The Cloud Run instance can reference the secret data.
- The Secret Manager Secret Datafield is referenced by the Cloud Run
env_secret_varsfield. - The
roles/secretmanager.secretAccessorrole is added to the Cloud Run service account.
- Secret Manager stores user information.
- The Secret Manager Secret Datafield contains the password for the default user.
- Secret Manager stores user information.
- The Secret Manager Secret Datafield contains the password for the default user.
Required configuration parameters
If your template includes a Secret Manager component, you must configure the following parameters before you deploy.
| Parameter name |
Description and constraints |
Background information |
|---|---|---|
| Project ID |
The project where you want to deploy the Secret Manager resource. |
Configure components |
| Name |
The name of the secret to create. |
Create a secret |
| Secret Data |
The secret data. Must be no larger than 64 KiB. This property is sensitive and is not displayed in the plan. |
Create a secret |
Optional configuration parameters
The following parameters are optional. To display advanced parameters, in the Configurationarea, select Show optional fields.
Feature
Parameter name
Description and constraint information
Background information
