Skip to content

Add GCP Secret Manager - Retrieve Secrets (OIDC) step template - #1621

Merged
twerthi merged 2 commits into
masterfrom
mh/gcp-secrets-oidc
Sep 18, 2025
Merged

twerthi merged 2 commits into
masterfrom
mh/gcp-secrets-oidc

Conversation

@harrisonmeister

Copy link
Copy Markdown
Contributor

This step retrieves one or more secrets from Secret Manager on Google Cloud Platform (GCP), and creates sensitive output variables for each value retrieved. These values can be used in other deployment or runbook process steps.

The step authenticates with GCP using an OpenID Connect account. See our blog post for more details on configuring an account for GCP authentication.

I opted to create a separate template rather than modify the existing one, as Account parameters have to be specified by a consumer, meaning having one template with 2 accounts would be confusing.

This step retrieves one or more secrets from [Secret Manager](https://cloud.google.com/secret-manager) on Google Cloud Platform (GCP), and creates [sensitive output variables](https://octopus.com/docs/projects/variables/output-variables#sensitive-output-variables) for each value retrieved. These values can be used in other deployment or runbook process steps.

You should retrieve secrets with a specific version rather than the *latest* version. You can choose a custom output variable name for each secret, or one will be created dynamically.

---

The step authenticates with GCP using an [OpenID Connect](https://octopus.com/docs/infrastructure/accounts/openid-connect) account. See our [blog post](https://octopus.com/blog/generic-oidc#using-generic-oidc-accounts-with-google-cloud) for more details on configuring an account for GCP authentication.
@github-actions

Copy link
Copy Markdown

Start Hyponome locally

docker pull ghcr.io/hnrkndrssn/hyponome:main
docker run --rm -p 8000:8080 -it ghcr.io/hnrkndrssn/hyponome:main

Review in Hyponome

@twerthi twerthi left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Incredibly nitpicky, match case for the variable name on last line (Write-Host).

@harrisonmeister

Copy link
Copy Markdown
Contributor Author

Incredibly nitpicky, match case for the variable name on last line (Write-Host).

Resolved in f67a266

@twerthi twerthi left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@twerthi
twerthi merged commit 317021c into master Sep 18, 2025
2 checks passed
@twerthi
twerthi deleted the mh/gcp-secrets-oidc branch September 18, 2025 15:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants