Secret Manager release notes

This page documents production updates to Secret Manager. Check this page for announcements about new or updated features, bug fixes, known issues, and deprecated functionality.

You can see the latest product updates for all of Google Cloud on the Google Cloud page, browse and filter all release notes in the Google Cloud console, or programmatically access release notes in BigQuery.

To get the latest product updates delivered to you, add the URL of this page to your feed reader, or add the feed URL directly.

November 19, 2024

Creating custom organization policies with Secret Manager resources is now in General Availability (GA). You can use custom organization policies to enhance secret security by enforcing rotation schedules, annotations, and expirations for secrets. You can also use custom organization policies to restrict secret types to manage costs. To learn more about using custom organization policies in Secret Manager, see Use custom organization policies.

November 17, 2024

Secret Manager is now available in the following region:

northamerica-south1

For more information, see Secret Manager locations.

October 28, 2024

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.14.2 (2024-10-23)

Bug Fixes

secretmanager: Update google.golang.org/api to v0.203.0 (8bb87d5)
secretmanager: WARNING: On approximately Dec 1, 2024, an update to Protobuf will change service registration function signatures to use an interface instead of a concrete type in generated .pb.go files. This change is expected to affect very few if any users of this client library. For more information, see https://togithub.com/googleapis/google-cloud-go/issues/11020. (2b8ca4b)

October 14, 2024

Creating regional secrets using Secret Manager is now in Generally Availability (GA). Regional secrets let you store your sensitive data within a specific geographic location, ensuring it remains in that region at all times – whether at rest, in use, or in transit. Regional secrets are crucial for meeting data residency requirements and complying with regulatory mandates.

For information about all tasks related to creating and managing regional secrets, see the Regional service documentation.

September 16, 2024

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.14.1 (2024-09-12)

Bug Fixes

secretmanager: Bump dependencies (2ddeb15)

September 10, 2024

Secret Manager is now enabled for use with Cloud KMS Autokey.

Using keys generated by Autokey can help you consistently align with industry standards and recommended practices for data security, including the HSM protection level, separation of duties, key rotation, location, and key specificity. Keys requested using Autokey function identically to other Cloud HSM keys with the same settings.

For more information, see Enable customer-managed encryption keys for Secret Manager. To learn more about Cloud KMS Autokey, see Autokey overview.

August 26, 2024

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.14.0 (2024-08-20)

Features

secretmanager: Add support for Go 1.23 iterators (84461c0)

August 23, 2024

You can now create regional secrets using Secret Manager. When you create a regional secret, you specify the location where you want it to be stored. Your secret data remains within the chosen location at all times, whether it's at rest, in use, or in transit. This capability allows you to meet data residency requirements, which mandate that data remains within specified geographic boundaries, often due to regulatory or compliance reasons. The feature is in Preview.

For more information, see Data residency and regional secrets.

August 21, 2024

You can attach tags to secrets to conditionally grant or deny access to Secret Manager resources. For example, you can conditionally grant Identity and Access Management (IAM) roles based on whether a secret has a specific tag. This feature is in Preview. For more information, see Create and manage tags.

August 20, 2024

Secret Manager add-on for Google Kubernetes Engine (GKE) is now generally available (GA). With the add-on, you can access the secrets stored in Secret Manager as volumes mounted in Kubernetes Pods. You can install the Secret Manager add-on on both Standard clusters and Autopilot clusters. The Secret Manager add-on is a Google managed and officially supported version of the open source Kubernetes Secrets Store CSI driver.

secretmanager: Enable new auth lib (b95805f)

June 12, 2024

Delayed destruction of secret versions is now generally available (GA). You can set up a duration for delayed destruction at the time of creating or updating a secret. When a destruction delay duration is configured for a secret, destroying a version of that secret will disable the version and prevent its use. However, it won't be immediately destroyed. Instead, it will remain scheduled for destruction for the specified delay duration. After that duration expires, the version will be permanently destroyed. Secret Manager administrators can restore a secret version that is scheduled for destruction by either enabling or disabling it during the delay period.

May 27, 2024

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.13.1 (2024-05-22)

Bug Fixes

secretmanager: Enable cloud.google.com/go/auth (#10248) (532d8fb)

May 06, 2024

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.13.0 (2024-05-01)

Features

secretmanager: Add Secret Version Delayed Destroy changes for client libraries (1d757c6)

Bug Fixes

secretmanager: Bump x/net to v0.24.0 (ba31ed5)

April 02, 2024

To learn more, see Delay destruction of secret versions.

March 25, 2024

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.12.0 (2024-03-19)

Features

secretmanager: New client apiv1beta2 (#9610) (443914f)

March 18, 2024

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.11.6 (2024-03-14)

Bug Fixes

secretmanager: Update protobuf dep to v1.33.0 (30b038d)

March 07, 2024

For more information, see Use Secret Manager add-on with Google Kubernetes Engine.

February 05, 2024

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.11.5 (2024-01-30)

Bug Fixes

secretmanager: Enable universe domain resolution options (fd1d569)

January 31, 2024

Secret Manager is now available in the following region:

africa-south1

For more information, see Secret Manager locations.

December 18, 2023

Generally available: Key Access Justifications is now generally available with Secret Manager. Key Access Justifications works by adding a field to your Cloud External Key Manager requests that allows you to view the reason for each request. You can automatically approve or deny these requests, based on the justification. For more information, see Key Access Justifications.

November 06, 2023

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.11.4 (2023-11-01)

Bug Fixes

secretmanager: Bump google.golang.org/api to v0.149.0 (8d2ab9f)

October 31, 2023

For more information, refer to the overview of Key Access Justifcations.

October 30, 2023

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.11.3 (2023-10-26)

Bug Fixes

secretmanager: Update grpc-go to v1.59.0 (81a97b0)

October 16, 2023

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.11.2 (2023-10-12)

Bug Fixes

secretmanager: Update golang.org/x/net to v0.17.0 (174da47)

September 20, 2023

Secret Manager is now available in the following region:

me-central2

For more information, see Secret Manager locations.

August 22, 2023

Secret Manager is now available in the following region:

europe-west10

For more information, see Secret Manager locations.

June 26, 2023

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.11.1 (2023-06-20)

Bug Fixes

secretmanager: REST query UpdateMask bug (df52820)

June 05, 2023

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.11.0 (2023-05-30)

Features

secretmanager: Update all direct dependencies (b340d03)

May 15, 2023

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.10.1 (2023-05-08)

Bug Fixes

secretmanager: Update grpc to v1.55.0 (1147ce0)

April 03, 2023

A weekly digest of client library updates from across the Cloud SDK.

Python

Changes for google-cloud-secret-manager

2.16.1 (2023-03-23)

Documentation

Fix formatting of request arg in docstring (#409) (925d05a)

March 30, 2023

Secret Manager is now available in the following region:

me-central1

For more information, see Secret Manager locations.

March 23, 2023

Secret Manager is now available in the following region:

europe-west12

For more information, see Secret Manager locations.

March 13, 2023

Support for aliases in Secret Manager is now generally available. You can use an alias to get and access a version using a resource path name. A given alias string can only be bound to a single version. You can, however, assign multiple aliases to a secret version.

March 08, 2023

Support for Annotations in Secret Manager is now generally available. Annotations are used to define custom metadata about a secret.

March 06, 2023

A weekly digest of client library updates from across the Cloud SDK.

Python

Changes for google-cloud-secret-manager

2.16.0 (2023-02-28)

Features

Enable "rest" transport in Python for services supporting numeric enums (10c02e5)

January 30, 2023

A weekly digest of client library updates from across the Cloud SDK.

Python

Changes for google-cloud-secret-manager

2.15.1 (2023-01-20)

Bug Fixes

Add context manager return types (2b85fae)

Documentation

Add documentation for enums (2b85fae)

January 16, 2023

A weekly digest of client library updates from across the Cloud SDK.

Python

Changes for google-cloud-secret-manager

2.15.0 (2023-01-10)

Features

Add support for Python 3.11 (#386) (0c68091)

January 09, 2023

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.10.0 (2023-01-04)

Features

secretmanager: Add REST client (06a54a1)

Python

Changes for google-cloud-secret-manager

2.14.0 (2023-01-04)

Features

Update public API to include annotation support (#381) (68bbbe5)

December 19, 2022

A weekly digest of client library updates from across the Cloud SDK.

Python

Changes for google-cloud-secret-manager

2.13.0 (2022-12-14)

Features

Add support for google.cloud.secretmanager.__version__ (5530112)
Add typing to proto.Message based class attributes (5530112)
Regenerate client for v1beta1 (dc9b1e3)

Bug Fixes

Add dict typing for client_options (5530112)
deps: Require google-api-core >=1.34.0, >=2.11.0 (dc9b1e3)
Drop usage of pkg_resources (dc9b1e3)
Fix timeout default values (dc9b1e3)

Documentation

samples: Snippetgen handling of repeated enum field (5530112)
samples: Snippetgen should call await on the operation coroutine before calling result (dc9b1e3)

November 14, 2022

A weekly digest of client library updates from across the Cloud SDK.

Node.js

Changes for @google-cloud/secret-manager

4.1.4 (2022-11-11)

Bug Fixes

deps: Use google-gax v3.5.2 (#413) (1652509)

November 07, 2022

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.9.0 (2022-11-03)

Features

secretmanager: rewrite signatures in terms of new location (3c4b2b3)

October 31, 2022

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.8.0 (2022-10-25)

Features

secretmanager: start generating stubs dir (de2d180)

October 17, 2022

A weekly digest of client library updates from across the Cloud SDK.

Java

Changes for google-cloud-secretmanager

2.1.8 (2022-10-13)

⚠ BREAKING CHANGES

Release gapic-generator-java v2.0.0 (#557)

Features

Add gcf-owl-bot[bot] to ignoreAuthors (#485) (1e08041)
Add CustomerManagedEncryptionKey support, ReplicationStatus to SecretVersion (#217) (0d306e8)
Added expire_time and ttl fields to Secret (#355) (0dc2188)
Added topic field to Secret (#389) (32286cc)
Checksums in Secret Manager (#687) (4e5ee16)
Etags in Secret Manager (#481) (b2b9934)
In Secret Manager, users can now use filter to customize the output of ListSecrets/ListSecretVersions calls (#544) (bd2d8b3)
Release gapic-generator-java v2.0.0 (#557) (39419ba)
Rotation for Secrets (#425) (0d2e4b4)
Tune Secret Manager auto retry parameters (#536) (dcb0303)

Bug Fixes

Add shopt -s nullglob to dependencies script (#522) (4349b80)
java: Add -ntp flag to native image testing command (#1299) (#648) (a617941)
java: Java 17 dependency arguments (#1266) (#632) (d023065)
Next release from 2.1.x will be 2.1.8 (#890) (81d0755)
Release scripts from issuing overlapping phases (#445) (dda6b9a)
Typo (#440) (a74fda1)
Update dependencies.sh to not break on mac (#518) (7db26b9)
Update repo name (#368) (77ecec0)

Documentation

Generate sample code in the Java microgenerator (#370) (092bc28)
Remote redundant comments (#213) (a1b84ed)
sample: Add sample for Native Image Support (#711) (1afd3aa)

Dependencies

java: Update actions/github-script action to v5 (#1339) (#683) (f009d46)
Regenerating with new Protobuf (2.1.x) (#886) (75dfede)
Update actions/github-script action to v6 (#699) (60c04dd)
Update actions/setup-java action to v3 (#708) (19d54ed)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.10.0 (#232) (26aa078)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.10.2 (#245) (3bd711f)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.12.1 (#260) (dae6856)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.13.0 (#269) (2f3cf77)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.14.1 (#289) (ec5dd68)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.15.0 (#299) (b4cbfe2)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.16.0 (#318) (b980767)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.16.1 (#331) (bb3a6ce)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.17.0 (#336) (eda2c70)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.18.0 (#350) (e4cdc01)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.19.0 (#382) (fdfe07e)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.20.0 (#394) (7371c34)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.20.1 (#409) (a6b4dd0)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.21.0 (#432) (b3a2562)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.21.1 (#449) (4e6371f)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.8.2 (#182) (d2cbbe8)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.8.3 (#185) (f078a2d)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.8.6 (#194) (db5479f)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v0.9.0 (#212) (3591255)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v1 (#459) (f39f53b)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v1.1.0 (#473) (01de433)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v1.2.0 (#484) (0006e34)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v1.3.0 (#503) (2190697)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v1.4.0 (#525) (322a7f6)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2 (#552) (ed61ecb)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.0.1 (#558) (c2699f6)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.1.0 (#569) (deb6928)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.10.0 (#749) (1220d7d)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.2.0 (#582) (f7031c2)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.2.1 (#599) (f4ad7ed)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.3.0 (#607) (f0c849e)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.4.0 (#626) (2c7b4c4)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.5.0 (#642) (ff7164a)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.5.1 (#647) (b33aec5)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.6.0 (#667) (81e43ec)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.7.0 (#686) (161430c)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.8.0 (#717) (b6d3f9a)
Update dependency com.google.cloud:google-cloud-shared-dependencies to v2.9.0 (#739) (6a58447)
Update dependency com.google.cloud:native-image-support to v0.12.10 (#731) (3e9211a)
Update dependency com.google.cloud:native-image-support to v0.12.11 (#738) (afe2969)
Update dependency com.google.cloud:native-image-support to v0.12.6 (#723) (a2803ca)
Update dependency com.google.cloud:native-image-support to v0.12.7 (#727) (fa8e4ed)
Update dependency com.google.cloud:native-image-support to v0.12.8 (#729) (1a9d2b8)
Update dependency com.google.cloud:native-image-support to v0.12.9 (#730) (60e8336)
Update dependency com.google.cloud:native-image-support to v0.13.1 (#750) (68273d1)
Update dependency com.google.protobuf:protobuf-java-util to v3.15.3 (#395) (99aa3a0)
Update dependency com.google.protobuf:protobuf-java-util to v3.15.5 (#402) (5d72dad)
Update dependency com.google.protobuf:protobuf-java-util to v3.15.6 (#414) (cbe8d24)
Update dependency com.google.protobuf:protobuf-java-util to v3.15.8 (#428) (eb0714c)
Update dependency com.google.protobuf:protobuf-java-util to v3.17.0 (#468) (3980505)
Update dependency com.google.protobuf:protobuf-java-util to v3.17.1 (#490) (f94276f)
Update dependency com.google.protobuf:protobuf-java-util to v3.17.2 (#499) (2d487b4)
Update dependency com.google.protobuf:protobuf-java-util to v3.17.3 (#510) (b10a496)
Update dependency com.google.protobuf:protobuf-java-util to v3.18.0 (#604) (91bd508)
Update dependency com.google.protobuf:protobuf-java-util to v3.18.1 (#618) (35dfb27)
Update dependency com.google.protobuf:protobuf-java-util to v3.19.1 (#630) (de25d2a)
Update dependency com.google.protobuf:protobuf-java-util to v3.19.2 (#663) (9561bc0)
Update dependency com.google.protobuf:protobuf-java-util to v3.19.3 (#675) (1431f9c)
Update dependency com.google.protobuf:protobuf-java-util to v3.19.4 (#685) (180e572)
Update dependency com.google.protobuf:protobuf-java-util to v3.20.0 (#744) (48cb944)
Update dependency org.graalvm.buildtools:junit-platform-native to v0.9.10 (#724) (604a9bc)
Update dependency org.graalvm.buildtools:junit-platform-native to v0.9.11 (#735) (6123ddc)
Update dependency org.graalvm.buildtools:native-maven-plugin to v0.9.10 (#725) (6a71213)
Update dependency org.graalvm.buildtools:native-maven-plugin to v0.9.11 (#736) (d54de52)

Python

Changes for google-cloud-secret-manager

2.12.6 (2022-10-10)

Bug Fixes

deps: Allow protobuf 3.19.5 (#364) (4042d9e)

October 10, 2022

A weekly digest of client library updates from across the Cloud SDK.

Java

Changes for google-cloud-secretmanager

2.3.10 (2022-10-05)

Dependencies

Update dependency com.google.cloud:google-cloud-shared-dependencies to v3.0.4 (#881) (6404316)

Python

Changes for google-cloud-secret-manager

2.12.5 (2022-09-29)

Bug Fixes

deps: Require protobuf >= 3.20.2 (#361) (4758816)

Node.js

Changes for @google-cloud/certificate-manager

0.6.0 (2022-10-04)

Features

Added support for Private Trust to Certificate Manager API (#55) (d9ff953)

Bug Fixes

Allow passing gax instance to client constructor (#49) (f8f86e5)
Better support for fallback mode (#44) (75c72a9)
Change import long to require (#45) (1dc45d7)
Do not import the whole google-gax from proto JS (#1553) (#48) (96e4038)
Preserve default values in x-goog-request-params header (#51) (13c6ab0)
Remove pip install statements (#1546) (#47) (c5002fd)
use google-gax v3.3.0 (96e4038)

October 03, 2022

A weekly digest of client library updates from across the Cloud SDK.

Java

Changes for google-cloud-secretmanager

2.3.9 (2022-09-30)

Dependencies

Update dependency com.google.protobuf:protobuf-java-util to v3.21.7 (#876) (6d296f3)

2.3.8 (2022-09-28)

Dependencies

Update dependency cachetools to v5 (#871) (704f6ea)
Update dependency certifi to v2022.9.24 (#853) (a766f63)
Update dependency charset-normalizer to v2.1.1 (#857) (7194dfe)
Update dependency click to v8.1.3 (#865) (cd510ec)
Update dependency gcp-releasetool to v1.8.8 (#854) (fadf34f)
Update dependency google-api-core to v2.10.1 (#866) (ad6b71b)
Update dependency google-auth to v2.12.0 (#858) (b778051)
Update dependency google-cloud-core to v2.3.2 (#855) (e82616f)
Update dependency google-cloud-storage to v2.5.0 (#859) (4b67316)
Update dependency google-crc32c to v1.5.0 (#860) (ccc2cab)
Update dependency googleapis-common-protos to v1.56.4 (#856) (bcf0af9)
Update dependency importlib-metadata to v4.12.0 (#861) (c91100b)
Update dependency jeepney to v0.8.0 (#862) (ea77200)
Update dependency markupsafe to v2.1.1 (#863) (2f83987)
Update dependency protobuf to v3.20.2 (#864) (8745302)
Update dependency protobuf to v4 (#872) (9604cf1)
Update dependency pyjwt to v2.5.0 (#867) (537a64d)
Update dependency requests to v2.28.1 (#868) (92bdf04)
Update dependency typing-extensions to v4.3.0 (#869) (ca16bc0)
Update dependency zipp to v3.8.1 (#870) (7f543f6)

September 26, 2022

A weekly digest of client library updates from across the Cloud SDK.

Go

Changes for secretmanager/apiv1

1.7.0 (2022-09-21)

Features

secretmanager: remove beta client that no longer has source protos (9f303f9)

1.6.0 (2022-09-19)

Features

secretmanager: start generating proto message types (563f546)

Java

Changes for google-cloud-secretmanager

2.3.7 (2022-09-22)

Dependencies

Update dependency org.graalvm.buildtools:junit-platform-native to v0.9.14 (#846) (f2985b5)
Update dependency org.graalvm.buildtools:native-maven-plugin to v0.9.14 (#847) (27f5fa8)

2.3.6 (2022-09-21)

Dependencies

Update dependency org.junit.vintage:junit-vintage-engine to v5.9.1 (#842) (4bec542)

2.3.5 (2022-09-20)

Dependencies

Update dependency com.google.protobuf:protobuf-java-util to v3.21.6 (#832) (a2595c8)

Node.js

Changes for @google-cloud/secret-manager

4.1.3 (2022-09-22)

Bug Fixes

Preserve default values in x-goog-request-params header (#403) (af162f0)

September 19, 2022

A weekly digest of client library updates from across the Cloud SDK.

Java

Changes for google-cloud-secretmanager

2.3.4 (2022-09-15)

Dependencies

Update dependency com.google.cloud:google-cloud-shared-dependencies to v3.0.3 (#833) (a462455)

September 12, 2022

Cloud Secret Manager is now available in the following region:

me-west1

For more information, see Secret Manager locations.

A weekly digest of client library updates from across the Cloud SDK.

Java

Changes for google-cloud-secretmanager

2.3.3 (2022-09-09)

Dependencies

Update dependency com.google.cloud:google-cloud-shared-dependencies to v3.0.2 (#827) (b2162a7)

2.3.2 (2022-09-06)

Dependencies

Update dependency com.google.protobuf (6bf4745)

Node.js

Changes for @google-cloud/secret-manager

4.1.2 (2022-09-01)

Bug Fixes

Allow passing gax instance to client constructor (#399) (02d820f)
Do not import the whole google-gax from proto JS (#1553) (#398) (e16be85)

September 05, 2022

Secret Manager now supports using annotations to define custom metadata about the secret. The metadata in an annotation can be small or large, structured or unstructured, and can include characters. You can add annotations to secrets when you create a new secret or when you edit an existing secret. For information, see Creating and managing annotations.

August 29, 2022

A weekly digest of client library updates from across the Cloud SDK.

Python

Changes for google-cloud-secret-manager

2.12.4 (2022-08-24)

Documentation

samples: Added sample for creating Secret with UserManaged replication (#328) (c5fe7ff)

August 22, 2022

A weekly digest of client library updates from across the Cloud SDK.

Python

Changes for google-cloud-secret-manager

2.12.3 (2022-08-11)

Bug Fixes

deps: allow protobuf < 5.0.0 (#335) (34c5858)
deps: require proto-plus >= 1.22.0 (34c5858)

August 15, 2022

A weekly digest of client library updates from across the Cloud SDK.

Java

Changes for google-cloud-secretmanager

2.3.1 (2022-08-03)

Bug Fixes

enable longpaths support for windows test (#1485) (#804) (892845c)

Dependencies

update dependency com.google.cloud:google-cloud-shared-dependencies to v3 (#811) (9e84f35)
update dependency com.google.protobuf:protobuf-java-util to v3.21.3 (#808) (17cc2d2)
update dependency com.google.protobuf:protobuf-java-util to v3.21.4 (#809) (5ae26ff)
update dependency org.graalvm.buildtools:junit-platform-native to v0.9.13 (#802) (0749cd2)
update dependency org.graalvm.buildtools:native-maven-plugin to v0.9.13 (#803) (e2d693b)
update dependency org.junit.vintage:junit-vintage-engine to v5.9.0 (#810) (5c5bfb1)

Python

Changes for google-cloud-secret-manager

2.12.2 (2022-08-08)

Documentation

samples: add sample to update secret with alias (#307) (dab8e16)

August 01, 2022

A weekly digest of client library updates from across the Cloud SDK.

Python

Changes for google-cloud-secret-manager

2.12.1 (2022-07-26)

Bug Fixes

wrong package name google-cloud-secretmanager (#325) (1693fd1)

July 25, 2022

A weekly digest of client library updates from across the Cloud SDK.

Python

Changes for google-cloud-secret-manager

2.12.0 (2022-07-16)

Features

add audience parameter (bf4130e)

Bug Fixes

deps: require google-api-core>=1.32.0,>=2.8.0 (#320) (311a877)
require python 3.7+ (#317) (971a802)

July 21, 2022

Secret Manager now supports accessing secret versions using aliases. For information, see Assign an alias to a secret version.

July 04, 2022

A weekly digest of client library updates from across the Cloud SDK.

Java

Changes for google-cloud-secretmanager

2.3.0 (2022-07-01)

Features

Enable REST transport for most of Java and Go clients (#790) (d51c8fa)

Documentation

sample: clean up README for native image sample (#785) (67260d7)

Dependencies

update dependency com.google.cloud:google-cloud-shared-dependencies to v2.13.0 (#789) (71aae1d)
update dependency com.google.protobuf:protobuf-java-util to v3.21.0 (#779) (d38f1db)
update dependency com.google.protobuf:protobuf-java-util to v3.21.1 (#780) (6c613da)
update dependency com.google.protobuf:protobuf-java-util to v3.21.2 (#791) (d7d4ea9)
update dependency org.graalvm.buildtools:junit-platform-native to v0.9.12 (#787) (a2e0e97)
update dependency org.graalvm.buildtools:native-maven-plugin to v0.9.12 (#788) (8662fe6)

February 03, 2022

Secret manager now supports data checksums when adding or accessing a secret version.

December 14, 2021

Access Transparency supports Secret Manager in Preview stage.

November 16, 2021

Secret Manager is now available in the Santiago (southamerica-west1) region.

November 05, 2021

Secret Manager filtering support to customize the output of ListSecrets and ListSecretVersions is now generally available. For more information, see Filtering.

August 27, 2021

Cloud Audit Logs and Platform Logs are now available directly in the Secret Manager UI. See the Secret Manager page to learn more.

August 24, 2021

The Analyze Policy API now support Secret Manager types: * secretmanager.googleapis.com/Secret * secretmanager.googleapis.com/SecretVersion

August 03, 2021

Secret Manager is now available in northamerica-northeast2 (Toronto). See Secret Manager locations for more information.

July 20, 2021

Secret Manager now supports using a filter to customize the output of ListSecrets and ListSecretVersions. For more information, see Filtering.

ETags for optimistic concurrency control are generally available (GA) in Secret Manager.

July 01, 2021

Secret Manager now offers a limited number of free resources as part of the Google Cloud Free program.

For more details on free resources, see Secret Manager pricing.

June 30, 2021

Secret Manager now has a guide for rotating secrets and binding a secret version to your application.

To learn more, see Rotation of secrets.

June 29, 2021

Secret Manager is now available in asia-south2 (Delhi). See Secret Manager locations for more information.

Secret Manager now has a guide for using Cloud Asset Inventory to identify and audit secrets.

To learn more, see Analyze secrets with Cloud Asset Inventory.

June 21, 2021

Secret Manager is now available in australia-southeast2 (Melbourne). See Secret Manager locations for more information.

May 24, 2021

The Secret Manager SLA has been updated.

May 14, 2021

Secret Manager now supports etags for optimistic concurrency control. This feature is available in Preview.

See Etags to learn more.

May 12, 2021

Secret Manager integration with Cloud Run

Cloud Run now provides UI, command line, and YAML support for using secrets. This feature is available in Preview.

April 02, 2021

Secret Manager now has a Best Practices guide.

Learn more about Secret Manager best practices.

March 31, 2021

Secret Manager Event Notifications is generally available.

Secret Manager Event Notifications lets you configure secrets to send messages to Pub/Sub topics whenever a change is made to the secret or one of its versions.

Learn more at enabling event notifications.

March 30, 2021

Secret Manager Expiration is generally available.

Learn more at creating and managing expiring secrets.

Secret Manager Rotation is generally available.

Secret Manager Rotation sends messages to Pub/Sub topics based on the provided rotation frequency and rotation time.

Learn more at creating and managing rotation policies.

March 24, 2021

The europe-central2 region is now available. See Secret Manager locations for more information.

March 09, 2021

Secret Manager support for Customer-Managed Encryption Keys (CMEK) is now generally available.

Learn more by reading Enabling CMEK in Secret Manager.

February 25, 2021

Event notifications is now available in Preview.

Event notifications sends information about changes to your secrets and secret versions to Pub/Sub. These notifications can be used to trigger arbitrary workflows, such as restarting an application when a new secret version is added, or notifying security engineers when a secret is deleted.

Learn more at Enabling event notifications.

January 28, 2021

Secret Manager Expiration is available for all customers via public preview.

Learn more at Creating and Managing Expiring Secrets.

November 02, 2020

Secret Manager support for Customer-Managed Encryption Keys (CMEK) is available to all customers via public preview.

Learn more at Enabling CMEK in Secret Manager.

October 29, 2020

Secret Manager Integration with Cloud Asset Inventory

Secret Manager metadata can be queried in Cloud Asset Inventory (CAI). This integration enables users to query Secret Manager metadata at multiple granularities (project, folder, organization), query data over time, and export to other systems.

Learn more at Supported asset types.

September 21, 2020

Secret Manager is available in all regions.

See more details at Secret Manager locations.

July 20, 2020

Secret Manager adds support for the following curated IAM roles:

Secret Manager Secret Version Adder (roles/secretmanager.secretVersionAdder )
Secret Manager Secret Version Manager (roles/secretmanager.secretVersionManager)

To learn more, see IAM and access control.

July 13, 2020

Secret Manager resources can now be stored in the australia-southeast1 region. To learn more, see Locations.

March 11, 2020

Secret Manager is generally available

December 10, 2019

Launch of Secret Manager to Beta. Secret Manager provides a secure and convenient way to store API keys, passwords, certificates, and other credentials. Secret Manager is accessible via: