Announcing a configuration provider for GCP secrets.
This library will fetch secrets from Google Cloud Platform’s Secret Manager API and put them into your app as configuration on app start up.
That means the secrets are runtime configuration i.e. can be refreshed by restarting the app, without having to recompile or redeploy the app.
Using the secret manager means secrets are securely encrypted at rest, and access / creation of them can be configured through IAM roles. This library requires a service account to be made available to it on app boot, check the README for full examples.
Feedback / questions welcome!