Google Cloud ENV Secrets
Load Google Cloud Secrets into ENV.
Installation
Add this line to your application's Gemfile:
gem 'google_cloud_env_secrets'
And then execute:
$ bundle
Or install it yourself as:
$ gem install google_cloud_env_secrets
Usage
Configure this gem with environment vars:
Variable | Description |
---|---|
GOOGLE_APPLICATION_CREDENTIALS |
Google Application Credentials, path or data (not base64 encoded). |
GOOGLE_PROJECT |
Google project |
GOOGLE_SECRETS_PREFIX |
Only load secrets that start with given prefix. |
GOOGLE_SECRETS_OVERLOAD |
Replace existing ENV vars with secret's value. Default true . |
The GOOGLE_APPLICATION_CREDENTIALS
and GOOGLE_PROJECT
variables are both optional. If not given,
we will detect them automatically, if run on Google Cloud.
Google Secrets are available after the before_configuration hook.
You can call GoogleCloudEnvSecrets.load
if you need the ENV secrets sooner than that.
See docs, too.
Required IAM Roles
Secret Manager Secret Accessor
Secret Manager Viewer