Google Cloud ENV Secrets
Load Google Cloud Secrets into ENV.
Installation
Add this line to your application's Gemfile:
gem 'google_cloud_env_secrets'And then execute:
$ bundleOr install it yourself as:
$ gem install google_cloud_env_secretsUsage
Configure this gem with environment vars:
| Variable | Description |
|---|---|
GOOGLE_APPLICATION_CREDENTIALS |
Google Application Credentials, path or data (not base64 encoded). |
GOOGLE_PROJECT |
Google project |
GOOGLE_SECRETS_PREFIX |
Only load secrets that start with given prefix. |
GOOGLE_SECRETS_OVERLOAD |
Replace existing ENV vars with secret's value. Default true. |
The GOOGLE_APPLICATION_CREDENTIALS and GOOGLE_PROJECT variables are both optional. If not given,
we will detect them automatically, if run on Google Cloud.
Google Secrets are available after the before_configuration hook.
You can call GoogleCloudEnvSecrets.load if you need the ENV secrets sooner than that.
See docs, too.
Required IAM Roles
Secret Manager Secret Accessor
Secret Manager Viewer