Google Cloud Secret Manager

Google Cloud Secret Manager Integration

Connect a service account and we push each variable into Secret Manager in your GCP project. Cloud Run, GKE and Cloud Functions read them exactly as before, we just keep the values current.

Available now One-click sync Encrypted transport

Sync to Google Cloud Secret Manager

Connected
DATABASE_URL
API_SECRET
STRIPE_KEY
Last syncedJust now
3 variables synced

How to connect Google Cloud Secret Manager

Follow this flow and your variables are synced in minutes.

Create a service account

Give it the Secret Manager Admin role on the project you want to sync into, and download the JSON key.

1

Paste the key

We read the project ID from it and check that the Secret Manager API is enabled before we let you connect.

2

Choose a prefix per environment

Defaults to the environment name. Two environments syncing into one project need different prefixes, and we warn you if they match.

3

Sync

Manually, or automatically on every change if you turn that on.

4

Google Cloud Secret Manager integration features

Everything needed to operate Google Cloud Secret Manager secrets from EnvManager.

One secret per variable

DATABASE_URL becomes a secret called PROD_DATABASE_URL, with the value as its latest version.

Built for secure automation

Writes only on change

We compare against the current version first. Unchanged variables get no new version, so you are not paying for versions that are all identical.

Built for secure automation

Old versions disabled, not destroyed

When a value changes we disable the previous version. It stays in the console if you ever need to look back.

Built for secure automation

Labelled as ours

Secrets carry managed-by=envmanager and the environment name, so gcloud secrets list can filter down to exactly what we manage.

Built for secure automation

One project per connection

A service account usually sees one project anyway. Several projects? Add a connection for each.

Built for secure automation

Honest error messages

API not enabled, wrong project, missing role: the validate step tells you which one it is instead of a generic "invalid credentials".

Built for secure automation

Google Cloud Secret Manager setup guide

Enabling the API, creating the service account with the right role, and how labels and versions behave once you sync.

Ready to connect Google Cloud Secret Manager?

14-day free trial. Connect Google Cloud Secret Manager and sync your first variables in under 5 minutes.