bcgov / bcgov/entity

Scanner - GCP SecretManager

Open
#33,089 1 comment 0 reactions 0 assignees View on GitHub
Colin Egress
Dominant language
JavaScript
Stars
23
Forks
62
Avg merge
24m
Merged PRs (30d)
1

Description

Introduce code to permit the retrieval of sensitive configuration values from Google Cloud Secret Manager.
Code will be implemented in ConfigKeys class.

Preconditions for GCP Implementation - Workload Identity Federation:
- A Windows System Environmental variable needs to be created on the scanning workstation called "GOOGLE_APPLICATION_CREDENTIALS". The value of this variable is to provide the location of a credential JSON file which contains the Application Default Credentials (ADC) for use by Cloud Client Libraries.
- The Google.Cloud.SecretManager.V1 Nuget package needs to be installed on the AppConfiguration project.
- The Workload Authenticator for Windows needs to be installed on the scanning workstation. The authenticator is a tool used to allow Windows-based applications to authenticate to Google Cloud services by utilizing existing Active Directory (Kerberos) credentials.

image.png

LINKS:
[https://googlecloudplatform.github.io/iam-federation-tools/wwauth/](https://googlecloudplatform.github.io/iam-federation-tools/wwauth/)
[https://docs.cloud.google.com/docs/authentication/client-libraries](https://docs.cloud.google.com/docs/authentication/client-libraries)
[https://docs.cloud.google.com/iam/docs/workload-identity-federation](https://docs.cloud.google.com/iam/docs/workload-identity-federation)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.