Registry / gcp / google-cloud-secret-manager

google-cloud-secret-manager

library2.30.0pypypi✓ verified 10d ago

A Python client library for Google Cloud Secret Manager, enabling secure storage and management of application secrets. Current version: 2.27.0. Released on a regular cadence, with recent updates enhancing functionality and security features.

gcp auth-security

pip install google-cloud-secret-manager

github ↗package ↗homepage ↗

INSTALL

IMPORT

SIG · GOOGLE-CLOUD-SECRE

google-cloud-secret-manager

gcppythonv2.30.0

Install

6.3s avg

Import

1457ms

Disk

70MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v2.30.0 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 1.734s · 71.9MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 6.3s · import 1.180s · 70MB

70MB installed

● package 70MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

SecretManagerServiceClient

✓ from google.cloud import secretmanager_v1

Ensure to import from 'secretmanager_v1' for the latest features and fixes.

A complete example demonstrating how to create a secret, add a version, and access the secret's payload using the Google Cloud Secret Manager client library.

import os from google.cloud import secretmanager_v1 # Set up authentication os.environ['GOOGLE_APPLICATION_CREDENTIALS'] = 'path_to_your_service_account_file.json' # Initialize the Secret Manager client client = secretmanager_v1.SecretManagerServiceClient() # Define project and secret details project_id = 'your-project-id' secret_id = 'your-secret-id' # Build the parent name from the project parent = f'projects/{project_id}' # Create the secret secret = client.create_secret( request={ 'parent': parent, 'secret_id': secret_id, 'secret': {'replication': {'automatic': {}}}, } ) # Add a version with a payload version = client.add_secret_version( request={ 'parent': secret.name, 'payload': {'data': b'hello world!'}, } ) # Access the secret version response = client.access_secret_version(request={'name': version.name}) # Print the secret payload payload = response.payload.data.decode('UTF-8') print(f'Plaintext: {payload}')

Debug

Known issues

breakingImport path changed from 'google.cloud import secretmanager' to 'google.cloud import secretmanager_v1'.

fix

Update import statements to 'from google.cloud import secretmanager_v1'.

affects: >=2.0.0

deprecatedUsing 'secretmanager' instead of 'secretmanager_v1' may lead to compatibility issues in future releases.

fix

Transition to 'secretmanager_v1' to ensure compatibility with future versions.

affects: >=2.0.0

gotchaEnsure that the 'GOOGLE_APPLICATION_CREDENTIALS' environment variable points to a valid service account JSON file for authentication.

fix

Set the 'GOOGLE_APPLICATION_CREDENTIALS' environment variable to the path of your service account JSON file.

affects: >=2.0.0

Errors

Common errors & fixes

ModuleNotFoundError: No module named 'google.cloud.secretmanager'

The `google-cloud-secret-manager` library is not installed in the Python environment, or the environment (e.g., a specific runtime in a cloud service) cannot locate the installed package.

fix

Install the library using pip: `pip install google-cloud-secret-manager`

ImportError: cannot import name 'secretmanager' from 'google.cloud'

This typically occurs when the `google-cloud-secret-manager` package is not correctly installed or its components are not accessible within the `google.cloud` namespace, sometimes due to conflicts with other `google.cloud` packages or environment issues.

fix

Ensure the library is properly installed: `pip install google-cloud-secret-manager`. If issues persist, verify your Python environment and package paths, especially in isolated environments like virtual machines or containers.

Permission denied (or similar error message indicating missing permissions like 'secretmanager.versions.accessSecretVersion')

The service account or user identity attempting to access the secret lacks the necessary IAM permissions, such as 'Secret Manager Secret Accessor' (`roles/secretmanager.secretAccessor`) for the secret, project, or folder.

fix

Grant the appropriate IAM role (e.g., 'Secret Manager Secret Accessor') to the service account or user identity on the specific secret or its parent resource (project/folder/organization).

AttributeError: 'SecretVersion' object has no attribute 'payload'

After retrieving a `SecretVersion` object, the actual secret data is stored within its `payload.data` attribute, not directly in a `payload` attribute of the `SecretVersion` object itself.

fix

Access the secret data via `response.payload.data.decode('utf-8')` after retrieving the secret version, where `response` is the `SecretVersion` object.

Upgrade

Version history

2.30.0latest on PyPI · released Jul 16, 2026

Audit

Dependencies

google-authrequiredRequired for authentication with Google Cloud services.

google-api-corerequiredProvides core functionality for Google API client libraries.

google-cloud-corerequiredContains common code for Google Cloud client libraries.

Agent activity

23 hits · last 30 days

node

Resources

githubhttps://github.com/googleapis/google-cloud-python ↗

packagehttps://pypi.org/project/google-cloud-secret-manager/ ↗

homepagehttps://cloud.google.com/secret-manager ↗