从 Bitbucket 管道访问存储在 Google Secret Manager 中的环境变量

Question

I am using bitbucket pipeline to run test cases. In order for test cases to succeed, I need secrets which is stored in google secret manager. Is there any way I can access those secrets within bitbucket pipeline environment?

Answer 1

There are a couple of options.

In case if these secrets are static, the easiest solution would be adding them to your Repository or Deployment variables . Make sure that they're marked as Secured, so that they will be masked, ie hidden, in the logs.

Alternatively, if your secrets are rotated and must be fetched from the secrets manager on every build in order to stay up-to-date, you'll need to use corresponding CLI commands in the build script. In order for this to work you will have to give Bitbucket Pipelines access to the secrets in your cloud. For details, check out, for example, this page .