google-secret-manager

How to specify secretEnv to cloudbuild.yaml via gcloud cli args or environment variables

ⅰ亾dé卋堺 提交于 2020-03-03 06:58:46
问题 If I follow the cloud build document, I have to specify encrypted secret on cloudbuild.yaml. secrets: - kmsKeyName: projects/[PROJECT-ID]/locations/global/keyRings/[KEYRING-NAME]/cryptoKeys/[KEY-NAME] secretEnv: MY_SECRET: <base64-encoded encrypted secret> Even if it is encrypted, I don't commit secret value at code. Please tell me another way. ex. via args from gcloud builds submit command or environment variables,...etc 回答1: You can use Google Secret Manager instead. We're still updating