Mapping GCP Secrets to Parameter Contexts

The GcpSecretManagerParameterProvider maps a Secret to a Parameter, which can be grouped by adding a "group-name" label. To create a compatible secret from the GCP Console:

1. From the Secret Manager service, click the "Create Secret" button
2. Enter the Secret name. This is the name of a parameter. Enter a value.
3. Under "Labels", add a label with a Key of "group-name" and a value of the intended Parameter Group name.

Alternatively, from the command line, run a command like the following:

printf "[Parameter Value]" | gcloud secrets create --labels=group-name="[Parameter Group Name]" "[Parameter Name]" --data-file=-
    

In this example, [Parameter Group Name] should be the intended name of the Parameter Group, [Parameter Name] should be the parameter name, and [Parameter Value] should be the value of the parameter.

Configuring the Parameter Provider

GCP Secrets must be explicitly matched in the "Group Name Pattern" property in order for them to be fetched. This prevents more than the intended Secrets from being pulled into NiFi.