GCP for DevOps — Configuration & Secrets

1 minute read

Configuration & Secrets

Managing configuration and secrets securely is essential for DevOps. Google Cloud provides Secret Manager for sensitive data, Cloud Asset Inventory for resource tracking, and OS Config for VM fleet management.

Configuration & Secrets Overview

Configuration & Secrets:
┌────────────────────────────────────────────────────────┐
│                                                         │
│  ┌──────────────────┐    ┌──────────────────────────┐  │
│  │  Secret Manager    │    │  Cloud Asset Inventory    │  │
│  │  • API keys        │    │  • Resource catalog       │  │
│  │  • DB passwords    │    │  • Change history         │  │
│  │  • TLS certs       │    │  • IAM analysis           │  │
│  │  • Versioned       │    │  • Export to BigQuery     │  │
│  └──────────────────┘    └──────────────────────────┘  │
│                                                         │
│  ┌──────────────────┐    ┌──────────────────────────┐  │
│  │  Policy Analyzer   │    │  OS Config                │  │
│  │  • Who has access  │    │  • Patch management       │  │
│  │  • Permission      │    │  • OS policies            │  │
│  │    simulation      │    │  • Software inventory     │  │
│  └──────────────────┘    └──────────────────────────┘  │
└────────────────────────────────────────────────────────┘

What You Will Learn

  • Create and manage secrets with Secret Manager
  • Access secrets from Cloud Run, GKE, and Cloud Functions
  • Use Cloud Asset Inventory to catalog resources
  • Analyze IAM policies with Policy Analyzer
  • Manage VM fleets with OS Config

Chapter Contents

# Topic Description
1 Secret Manager Create, version, rotate secrets
2 Accessing Secrets Use secrets in Run, GKE, Functions
3 Cloud Asset Inventory Resource catalog and analysis
4 Policy Analyzer IAM permission analysis
5 OS Config VM patch management
6 Practice Exercises Hands-on configuration labs

Start with → Secret Manager

Updated:

You may also enjoy