New RunLLM response generated: >>>*# Question* Hey all 👋 I'm having some trouble understanding the docs for "configuring a secret management system plugin". We'd like to access secrets stored in GCP within our task code - this is not listed in the supported secret managers in the docs, but we've followed the tutorial from these Union docs and I can see that there's a GCP Secret Manager in the flytepropeller codebase. Is it possible to use the GCP Secret Manager, and is there a config setting we need to set somewhere to use this as a plugin? The docs in the above linked section don't specify how to switch from the default k8s secret manager. We are running a self-managed flyte cluster in GCP configured via the official flyte-binary helm chart (v1.12.0). # Answer Yes, it is possible to use the GCP Secret Manager with Flyte. Although the official Flyte documentation does not explicitly list GCP Secret Manager as a supported secret manager, the Flyte codebase does include support for it. You can configure Flyte to use the GCP Secret Manager by setting the appropriate configuration in your

values.yaml

file for the Flyte Helm chart. Here are the steps to enable GCP Secret Manager: 1. Create Secrets in GCP Secret Manager: Follow the Union documentation to create your secrets in GCP Secret Manager. 2. Configure Flyte to Use GCP Secret Manager: Update your

values.yaml

file to specify the use of GCP Secret Manager. You need to set the

secretManagerType

to

GCP

under the

webhook

configuration.

configuration:
     inline:
       webhook:
         secretManagerType: "GCP"

3. Ensure Proper Permissions: Make sure that the Google service account (GSA) associated with your Flyte pods has the necessary permissions to access the secrets in GCP Secret Manager. This can be done via Workload Identity or by assigning the appropriate IAM roles to the GSA. 4. Request Secrets in Your Task: In your Flyte tasks, request the secrets using the

Secret

class. For example:

from flytekit import Secret, task

   @task(secret_requests=[Secret(group="my-secret-group", key="my-secret-key")])
   def my_task():
       secret_value = flytekit.current_context().secrets.get("my-secret-group", "my-secret-key")
       print(f"The secret value is: {secret_value}")