Infisical / infisical

♾ Infisical is the open-source secret management platform: Sync secrets across your team/infrastructure, prevent secret leaks, and manage internal PKI
https://infisical.com
Other
14.91k stars 833 forks source link

Google secrets manager integration synchronization #916

Open davidhonig opened 1 year ago

davidhonig commented 1 year ago

Feature description

We are thinking about using Infisical as central distribution system for secrets.

The feature is about creating an integration with GSM which takes a project/environment/path and synchronizes the secrets to the GSM, ideally I can use multiple integration to synchronize different directories to different GSMs.

Authentication should be based preferably on GCP SA json file

Why would it be useful?

For delivering secrets to different cloud projects and using Infisical as source of truth.

dangtony98 commented 1 year ago

Providing an update here that we've extended this integration to allow using service account JSON (SAJ) as an authentication method to sync secrets from Infisical to GCP Secret Manager as of #944.

This covers part if not all of this issue (will close this issue once you test it out and lmk if it works @davidhonig) 😄

An extension would be to allow users to add multiple authentication credentials to a single integration in Infisical. In the context of this integration, it would allow users to sync various folders to various GCP projects, each with its own SAJ if that is preferred.

Opened a related issue: #945