Reputation: 25
Where can I write critical
environment variables like on heroku?
I do not want to store the keys of my database in clear in app.yaml file.
Upvotes: 0
Views: 191
Reputation: 2232
The recommended approach to store secrets in GCP is using Cloud Key Management Service and Cloud Storage.
The Storing Secrets documentation guides you through the process of storing a secret in Cloud Storage bucket encrypted at the application layer with Cloud KMS. There's also other ways to manage secrets with Cloud KMS, it's documented in the Secret management with Cloud KMS page
Upvotes: 2