GCP  Secret Manager plugin  requires:

  1. GCP Project: A valid GCP project with Secret Manager API enabled
  2. Service Account: A service account with appropriate permissions
  3. Authentication: Service account key file or credentials

Required Permissions

The service account must have the following IAM permissions:

  • secretmanager.secrets.list
  • secretmanager.versions.list
  • secretmanager.versions.access

Recommended IAM role: Secret Manager Secret Accessor or a custom role with the above permissions.