Google Cloud Secret Manager example secret as file

example-google-secret-as-file.sh

# create secret as file
export SECRET_ID="example-secret"
export SECRET_FILE=".env"

# create env file
cat > $SECRET_FILE << EOF
# Node environment
NODE_ENV=production

# Logging configuration
LOG_LEVEL=debug

# Server configuration
PORT=8080
HOST=0.0.0.0

# Database configuration
DATABASE_URL=postgres://$DB_USER:$DB_PASS@$POSTGRES_HOST:$POSTGRES_PORT/$DB_NAME

# ...
EOF

# create secret from env file
gcloud secrets create $SECRET_ID --replication-policy="automatic"
gcloud secrets versions add $SECRET_ID --data-file=${PWD}/$SECRET_FILE

# remove temp file
rm $SECRET_FILE