google-cloud-platformgoogle-cloud-pubsubgoogle-secret-manager

Google Cloud Secret Manager - Notifications on PubSub


I'm trying to configure Google Secret Manager in order to get notifications on PubSub (following this guide).

Is it possible to configure notifications on service level and not only on secret level?

I want to receive notifications on every secret of the project, without the need to explicitly to link a secret to the topic.

Thanks everyone!


Solution

  • It's not possible to configure a secret update notification at service level. Only the secret level is allowed.

    However, in that case, I recommend to script the creation, or to use IaC solution, such as terraform, to automate the creation and the addition of the new secret notification to the existing topic.

    To prevent manual creation, you can also remove the role to the users to force them to use your automated creation procedure.