Class SecretVolume (1.8.2)

Version 1.8.2

• 1.18.1 (latest)
• 1.18.0
• 1.16.5
• 1.15.0
• 1.14.0
• 1.13.2
• 1.12.0
• 1.11.0
• 1.10.1
• 1.9.0
• 1.8.3
• 1.7.0
• 1.6.0
• 1.5.2
• 1.4.0
• 1.3.1
• 1.2.0
• 1.1.1
• 1.0.4
• 0.7.2
• 0.6.1
• 0.5.1
• 0.4.0
• 0.1.0

SecretVolume(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Configuration for a secret volume. It has the information necessary to fetch the secret value from secret manager and make it available as files mounted at the requested paths within the application container. Secret value is not a part of the configuration. Every filesystem read operation performs a lookup in secret manager to retrieve the secret value.

Attributes

Name	Description
mount_path	str The path within the container to mount the secret volume. For example, setting the mount_path as ``/etc/secrets`` would mount the secret value files under the ``/etc/secrets`` directory. This directory will also be completely shadowed and unavailable to mount any other secrets. Recommended mount paths: /etc/secrets Restricted mount paths: /cloudsql, /dev/log, /pod, /proc, /var/log
project_id	str Project identifier (preferrably project number but can also be the project ID) of the project that contains the secret. If not set, it will be populated with the function's project assuming that the secret exists in the same project as of the function.
secret	str Name of the secret in secret manager (not the full resource name).
versions	Sequence[google.cloud.functions_v1.types.SecretVolume.SecretVersion] List of secret versions to mount for this secret. If empty, the ``latest`` version of the secret will be made available in a file named after the secret under the mount point.

Inheritance

builtins.object > proto.message.Message > SecretVolume

Classes

SecretVersion

SecretVersion(mapping=None, *, ignore_unknown_fields=False, **kwargs)

Configuration for a single version.