Search code examples
google-cloud-platformmigrationgoogle-kubernetes-enginekubernetes-secretsgoogle-secret-manager

Migrating GKE Secrets to Secret Manager

I was wondering if there are any migration guides for migrating from GKE Secrets to the Secret Manager API?

Solution

  • I'm not aware of any existing guides for doing this.

    Basically, you'll need to

    • recreate all of your secrets in Secret Manager
    • modify your application code to use the Secrets Manager API to access the secrets
    • ensure you have Workload Identity enabled for your cluster
    • make sure your pod(s) use a identity with access to Secrets Manager.
    • assuming everything above works, delete your existing Secrets