4 ms·

Yes, they added Secret Manager early this year: https://cloud.google.com/secret-manager https://cloud.google.com/secret-manager

• ypeter 6y ago
  And before this you could implement Cloud KMS in your app to decrypt the encrypted secrets you can store in your repo.
  • bastawhiz 6y ago
    This still seems ridiculous. Why did I need to keep secrets in my repo to begin with? GAE, as far as I can tell, has been the only major PaaS that hasn't offered a solution for this. It's so easy to get wrong...it contradicts one of the biggest rules of version control: keep your secrets out of your repo.
    • stickfigure 6y ago
      There are a million ways to do it that don't require Google? Your CI system builds the production image, it can get secrets from anywhere.
      • bastawhiz 6y ago
        My CI system arguably shouldn't have access to production secrets any more than my developers' macbooks.