GCP Secret Manager

详细介绍 GCP Secret Manager 的机密存储组件

组件格式

要设置 GCP Secret Manager 的机密存储，创建一个类型为 secretstores.gcp.secretmanager 的组件。请参阅本指南了解如何创建和应用机密存储配置。请参阅本指南了解如何引用机密以使用 Dapr 组件检索和使用机密。

apiVersion: dapr.io/v1alpha1
kind: Component
metadata:
  name: gcpsecretmanager
spec:
  type: secretstores.gcp.secretmanager
  version: v1
  metadata:
  - name: type
    value: <replace-with-account-type>
  - name: project_id
    value: <replace-with-project-id>
  - name: private_key_id
    value: <replace-with-private-key-id>
  - name: client_email
    value: <replace-with-email>
  - name: client_id
    value: <replace-with-client-id>
  - name: auth_uri
    value: <replace-with-auth-uri>
  - name: token_uri
    value: <replace-with-token-uri>
  - name: auth_provider_x509_cert_url
    value: <replace-with-auth-provider-cert-url>
  - name: client_x509_cert_url
    value: <replace-with-client-cert-url>
  - name: private_key
    value: <replace-with-private-key>

规格元数据字段

字段必需详细信息示例
typeY账户类型。"service_account"
project_idY与此组件关联的项目 ID。"project_id"
private_key_idN私钥 ID"privatekey"
client_emailY客户端电子邮件地址"client@example.com"
client_idN客户端 ID"11111111"
auth_uriN认证 URI"https://accounts.google.com/o/oauth2/auth"
token_uriN认证令牌 URI"https://oauth2.googleapis.com/token"
auth_provider_x509_cert_urlN认证提供者的证书 URL"https://www.googleapis.com/oauth2/v1/certs"
client_x509_cert_urlN客户端的证书 URL"https://www.googleapis.com/robot/v1/metadata/x509/<project-name>.iam.gserviceaccount.com"
private_keyY用于认证的私钥"privateKey"

可选的每请求元数据属性

GCP Secret Manager 组件支持以下可选查询参数：

查询参数描述
metadata.version_id指定机密键的版本。

设置 GCP Secret Manager 实例

请参考 GCP 文档以设置 GCP Secret Manager：https://cloud.google.com/secret-manager/docs/quickstart。

相关链接