# GCP Secrets Manager

DuploCloud integrates with **GCP Secrets Manager** to help you securely store and manage sensitive information such as API keys, credentials, and tokens. Secrets can be created and managed directly from the DuploCloud Portal and are automatically provisioned to your GCP environment, inheriting GCP’s native encryption and access control policies.

## Adding a Secret

1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Secrets**.
2. Click **Add**. The **Add Google Secret** pane displays.<br>

   <figure><img src="https://2471407984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F68cb0s9ce5UIUKWPuYs8%2Fuploads%2FDp99OwTYGvoEvU3s3WCh%2FScreenshot%20(518).png?alt=media&#x26;token=9c54b68b-a888-41ec-9ad7-c0b3b005db1c" alt=""><figcaption><p><strong>Add Google Secret</strong> pane in the DuploCloud Portal</p></figcaption></figure>
3. Complete the following fields:

<table data-header-hidden><thead><tr><th width="224.6666259765625">Field</th><th>Description</th></tr></thead><tbody><tr><td><strong>Name</strong></td><td>Provide a name for the secret which will be the identifier in DuploCloud and GCP.</td></tr><tr><td><strong>Secret Value Type</strong></td><td>Select the secret format (<strong>String</strong> or <strong>JSON</strong>).</td></tr><tr><td><strong>Secret Value</strong></td><td>Enter the actual secret you want to store securely.</td></tr><tr><td><strong>Labels</strong></td><td>Enter optional key-value pairs to help categorize or manage the secret.</td></tr><tr><td><strong>Replication Type</strong></td><td>Choose how GCP replicates the secret: <strong>Automatic</strong> (managed by Google) or <strong>User Managed</strong> (you specify the regions).</td></tr></tbody></table>

4. Click **Submit** to create the secret. The secret is created in CGP Secrets Manager and displays on the **Secrets** page in the DuploCloud Portal.<br>

   <figure><img src="https://2471407984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F68cb0s9ce5UIUKWPuYs8%2Fuploads%2F5I0aEyFkSHgcjtArIo0m%2FScreenshot%20(519).png?alt=media&#x26;token=2e496f7a-853c-40e9-b3b2-8655faa8f0cf" alt=""><figcaption><p><strong>Secrets</strong> page in the DuploCloud Portal</p></figcaption></figure>

## Viewing Secrets

After creating a secret, view its details directly from the DuploCloud Portal.

1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Secrets.**
2. Click on the secret name in the **NAME** column to open the details page.
3. Select the **Details** or **YAML** tab to review the secret's metadata, value, labels, and configuration.

<figure><img src="https://2471407984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F68cb0s9ce5UIUKWPuYs8%2Fuploads%2FNtg1jJJYG8iHKPCFBQt5%2FScreenshot%20(521).png?alt=media&#x26;token=e46d6f76-4be7-46bb-966d-006ec6600845" alt=""><figcaption><p><strong>Details</strong> tab for the <code>app-secret</code> secret</p></figcaption></figure>

{% hint style="info" %}
Secret values may be masked depending on your access level.
{% endhint %}

## Managing Secrets

View, update, or delete existing secrets using the actions menu in the DuploCloud Portal.

1. In the DuploCloud Portal, navigate to **Cloud Services** -> **Secrets**.
2. Click the menu icon (<img src="https://2471407984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F68cb0s9ce5UIUKWPuYs8%2Fuploads%2F2zCpjpPJBxCltuVCLA89%2Fmenu%20icon.avif?alt=media&#x26;token=85eee83d-9971-4469-9bcd-61a43626d0fb" alt="" data-size="line">) in the row of the secret you want to manage.<br>

   <figure><img src="https://2471407984-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2F68cb0s9ce5UIUKWPuYs8%2Fuploads%2FFo0TlGdVxIMg81AZsCfl%2FScreenshot%20(520).png?alt=media&#x26;token=e9b6eca3-3664-4e64-85aa-f4214f9d3be7" alt=""><figcaption><p><strong>Secrets</strong> page with menu options highlighted</p></figcaption></figure>
3. Choose from the available actions:

<table data-header-hidden><thead><tr><th width="148.22216796875">Action</th><th>Description</th></tr></thead><tbody><tr><td><strong>View</strong></td><td>Open the secret’s data and metadata in JSON format.</td></tr><tr><td><strong>Update</strong></td><td>Modify the secret’s value or labels.</td></tr><tr><td><strong>Delete</strong></td><td>Permanently remove the secret.</td></tr></tbody></table>