Overview
Google Cloud Secret Manager is a secure service for storing API keys, credentials, and other sensitive values in Google Cloud.
Bruno integrates with Google Cloud Secret Manager the same way it does with HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault. Configure an account once in Preferences, attach it to a collection environment, then fetch and resolve secrets in requests, scripts, and environments.
- Secret values are never written to disk — only provider config and secret identifiers are saved.
- Secrets are fetched on demand into a per-environment, in-memory cache for the active session.
- The cache clears when you close the app or collection. Reopen Bruno and it will fetch secrets on demand.
This guide covers:
What you can do
- Select GCP Secrets Manager as a secret provider in Bruno.
- Authenticate with a GCP service account key - upload or paste the JSON key, or enter the Client Email and Private Key manually.
- Use the service account key’s project as the default, and override the project per environment row so one service account can fetch from multiple GCP projects.
- Fetch all secrets in the selected project(s) and resolve them in requests, scripts, and environments like the other providers. JSON secret values are accessible by sub-key.
- Use the same flow in the desktop app and the CLI.
Try it out
Explore the google-cloud-secret-manager sample collection to see Bruno's Google Cloud Secret Manager integration in action:
Future improvements
The following are not supported currently:
- Application Default Credentials,
gcloudCLI login, and Workload Identity Federation - Per-secret version pinning - secrets are always fetched at their latest version
Secret Manager Secret Accessor and Secret Manager Viewer roles, or equivalent custom permissions).