Skip to content

feat: add SecretManagerAccessor for GKE deployments#15

Open
rollingventures wants to merge 1 commit intomainfrom
feat/gsm-secrets
Open

feat: add SecretManagerAccessor for GKE deployments#15
rollingventures wants to merge 1 commit intomainfrom
feat/gsm-secrets

Conversation

@rollingventures
Copy link
Copy Markdown
Contributor

Adds abstracted GSM support to module template:

  • SecretManagerAccessor with configurable SECRET_MAP
  • ConfigFactory priority: GSM > File > Env > Database
  • Updated CLAUDE.md documentation

Adds SecretManagerAccessor template for reading secrets from Google
Secret Manager in GKE deployments with Workload Identity.

ConfigFactory priority order:
1. GSM (when OCE_TENANT_GCP_PROJECT_ID is set)
2. File config (YAML files at conventional paths)
3. Environment variables (when {VENDOR_PREFIX}_{MODULENAME}_ENV_CONFIG=1)
4. Database globals (default)

Includes PHPStan-compliant null handling for GSM SDK responses.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant