Creating Secret for Google Cloud Platform Cluster
Applies to: Kyvos Enterprise Kyvos Cloud (SaaS on AWS) Kyvos AWS Marketplace
Kyvos Azure Marketplace Kyvos GCP Marketplace Kyvos Single Node Installation (Kyvos SNI)
Creating a secret
Creating a secret requires the Secret Manager Admin role (roles/secretmanager.admin) to be assigned to the user creating the secret on the project.
Secret Manager can be created using the GCP Console or Gcloud command.
To create a secret, perform the following steps.
Permissions for Accessing Secret Manager
Assigning appropriate permissions to access Secret Manager requires a role to be attached to Kyvos Service Account attached to Kyvos Components.
Steps to create role for Secret Manager:
Click Roles > Create new role. Provide a name like secret-manager-role for storage service and assign the following permissions.
versions.access
versions.add
Go to IAM & Admin > IAM. Search for the service account that was created for Kyvos.
Click Edit Principal.
Click Add another role. Select the secret-manager-role (created in Step1).
Click Add condition.
Enter the Title as Secret Manager permission, and add conditions as:
Adding the first condition
Select the Condition Type as Resource > Name.
Select the Operator as Starts with
In the Value field, enter the Resource ID of Secret manager captured in Creating a secret section.
Adding the second condition
Click Add to add another condition.
Select the Condition Type as Resource > Service.
Select the Operator as is
In Resource Service, select the secretmanager.googleapis.com service. To know more about this service, refer to Google Documentation.
Click Save.
Copyright Kyvos, Inc. All rights reserved.