GCP Secret Manager

Navigate to your project’s integrations tab in Infisical.

Press on the GCP Secret Manager tile and select Continue with OAuth

Grant Infisical access to GCP.

In the Connection tab, select which Infisical environment secrets you want to sync to which GCP secret manager project. Lastly, press create integration to start syncing secrets to GCP secret manager.

Note that the GCP Secret Manager integration supports a few options in the Options tab:

• Secret Prefix: If inputted, the prefix is appended to the front of every secret name prior to being synced.
• Secret Suffix: If inputted, the suffix to appended to the back of every name of every secret prior to being synced.
• Label in GCP Secret Manager: If selected, every secret will be labeled in GCP Secret Manager (e.g. as managed-by:infisical); labels can be customized.

Setting a secret prefix, suffix, or enabling the labeling option ensures that existing secrets in GCP Secret Manager are not overwritten during the sync. As part of this process, Infisical abstains from mutating any secrets in GCP Secret Manager without the specified prefix, suffix, or attached label.

Navigate to IAM & Admin page in GCP and add the Secret Manager Admin and Service Usage Admin roles to the service account.

Navigate to your project’s integrations tab in Infisical.

Press on the GCP Secret Manager tile and paste in your GCP Service Account JSON (you can create and download the JSON for your service account in IAM & Admin > Service Accounts > Service Account > Keys).

In the Connection tab, select which Infisical environment secrets you want to sync to the GCP secret manager project. Lastly, press create integration to start syncing secrets to GCP secret manager.

Note that the GCP Secret Manager integration supports a few options in the Options tab:

• Secret Prefix: If inputted, the prefix is appended to the front of every secret name prior to being synced.
• Secret Suffix: If inputted, the suffix to appended to the back of every name of every secret prior to being synced.
• Label in GCP Secret Manager: If selected, every secret will be labeled in GCP Secret Manager (e.g. as managed-by:infisical); labels can be customized.

Setting a secret prefix, suffix, or enabling the labeling option ensures that existing secrets in GCP Secret Manager are not overwritten during the sync. As part of this process, Infisical abstains from mutating any secrets in GCP Secret Manager without the specified prefix, suffix, or attached label.