1

I'm trying to inject my secrets from Google Secret Manager into Kubernetes Pod as environment variable.

I need put it as environment variable to my NodeJS application can read it.

I tried the solution from How to inject secret from Google Secret Manager into Kubernetes Pod as environment variable? but not work for me.

Also I tried to setup a init container but it put the secrets as files into the pod.

Any idea?

Thanks

Alejandro Sotillo
  • 61
  • 5

2 Answers2

1

You can do something like this during cloud build step.

steps:
- name: '<secrets_to_configmap>'
  entrypoint: 'bash'
  args: ['USERNAME=$$USERNAME', 'PASSWORD=$$PASSWORD']
  secretEnv: ['USERNAME', 'PASSWORD']
availableSecrets:
  secretManager:
  - versionName: projects/PROJECT_ID/secrets/SECRET_NAME/versions/SECRET_VERSION
    env: 'PASSWORD'
  - versionName: projects/PROJECT_ID/secrets/SECRET_NAME/versions/SECRET_VERSION
    env: 'USERNAME'

The docker image secrets_to_configmap will take the secrets from secrets manager and create a configmaps which pods can use.

Reference

vishalsaugat
  • 193
  • 6
1

Checkout https://github.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp. It's a CSI driver for mounting Secret Manager secrets.

Sandro B
  • 315
  • 1
  • 3