Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(parametermanager): Added global samples to create list render parameter and version #4012

Open
wants to merge 9 commits into
base: main
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
52 changes: 52 additions & 0 deletions .github/workflows/parametermanager.yaml
Original file line number Diff line number Diff line change
@@ -0,0 +1,52 @@
# Copyright 2025 Google LLC
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.

name: parametermanager
on:
push:
branches:
- main
paths:
- 'parametermanager/**'
- '.github/workflows/parametermanager.yaml'
pull_request:
types:
- opened
- reopened
- synchronize
- labeled
paths:
- 'parametermanager/**'
- '.github/workflows/parametermanager.yaml'
schedule:
- cron: '0 0 * * 0'
jobs:
test:
# Ref: https://github.com/google-github-actions/auth#usage
permissions:
contents: 'read'
id-token: 'write'
if: github.event.action != 'labeled' || github.event.label.name == 'actions:force-run'
uses: ./.github/workflows/test.yaml
with:
name: 'parametermanager'
path: 'parametermanager'
flakybot:
# Ref: https://github.com/google-github-actions/auth#usage
permissions:
contents: 'read'
id-token: 'write'
if: github.event_name == 'schedule' && always() # always() submits logs even if tests fail
uses: ./.github/workflows/flakybot.yaml
needs: [test]
1 change: 1 addition & 0 deletions .github/workflows/utils/workflows.json
Original file line number Diff line number Diff line change
Expand Up @@ -79,6 +79,7 @@
"mediatranslation",
"monitoring/prometheus",
"monitoring/snippets",
"parametermanager",
"retail",
"run/filesystem",
"scheduler",
Expand Down
33 changes: 32 additions & 1 deletion parametermanager/README.md
Original file line number Diff line number Diff line change
@@ -1 +1,32 @@
### Initial README.md placeholder file.
## Sample Snippets for Google Parameter Manager API

Google [Parameter Manager](https://cloud.google.com/secret-manager/parameter-manager/docs/overview)
provides a centralized storage for all configuration parameters related to your workload deployments.
Parameters are variables, often in the form of key-value pairs, which customize how an application functions.
These samples demonstrate how to access
the Parameter Manager API using the Google Node API Client Libraries.

## Prerequisites

### Enable the API

You
must [enable the Parameter Manager API](https://console.cloud.google.com/apis/enableflow?apiid=parametermanager.googleapis.com)
for your project in order to use these samples

### Grant Permissions

You must ensure that
the [user account or service account](https://cloud.google.com/iam/docs/service-accounts#differences_between_a_service_account_and_a_user_account)
you used to authorize your gcloud session has the proper permissions to edit Parameter Manager resources for your project.
In the Cloud Console under IAM, add the following roles to the project whose service account you're using to test:

* Parameter Manager Admin (`roles/parametermanager.admin`)
* Parameter Manager Parameter Accessor (`roles/parametermanager.parameterAccessor`)
* Parameter Manager Parameter Version Adder (`roles/parametermanager.parameterVersionAdder`)

To use the rendering of secret through parameter manager add the following role also:
* Secret Manager Secret Accessor (`roles/secretmanager.secretAccessor`)

More information can be found in
the [Parameter Manager Docs](https://cloud.google.com/secret-manager/parameter-manager/docs/access-control)
53 changes: 53 additions & 0 deletions parametermanager/createParam.js
Original file line number Diff line number Diff line change
@@ -0,0 +1,53 @@
// Copyright 2025 Google LLC

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The copyright year is set to 2025. Please confirm if this is the correct year, or if it should be updated to the current year.

Suggested change
// Copyright 2025 Google LLC
// Copyright 2023 Google LLC

//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

'use strict';

/**
* Creates a global parameter using the Parameter Manager SDK.
*
* @param {string} projectId - The Google Cloud project ID where the parameter is to be created.
* @param {string} parameterId - The ID of the parameter to create. This ID must be unique within the project.
*/
async function main(projectId = 'my-project', parameterId = 'my-parameter') {
// [START parametermanager_create_param]
/**
* TODO(developer): Uncomment these variables before running the sample.
*/
// const projectId = 'YOUR_PROJECT_ID';
// const parameterId = 'YOUR_PARAMETER_ID';

// Imports the Parameter Manager library
const {ParameterManagerClient} = require('@google-cloud/parametermanager');

// Instantiates a client
const client = new ParameterManagerClient();

async function createParam() {
const parent = client.locationPath(projectId, 'global');
const request = {
parent: parent,
parameterId: parameterId,
};

const [parameter] = await client.createParameter(request);
console.log(`Created parameter: ${parameter.name}`);
}

await createParam();
// [END parametermanager_create_param]
}

const args = process.argv.slice(2);
main(...args).catch(console.error);
75 changes: 75 additions & 0 deletions parametermanager/createParamVersion.js
Original file line number Diff line number Diff line change
@@ -0,0 +1,75 @@
// Copyright 2025 Google LLC

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The copyright year is set to 2025. Please confirm if this is the correct year, or if it should be updated to the current year.

Suggested change
// Copyright 2025 Google LLC
// Copyright 2023 Google LLC

//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

'use strict';

/**
* Creates a parameter version globally for unstructured data.
*
* @param {string} projectId - The Google Cloud project ID where the parameter is to be created
* @param {string} parameterId - The ID of the parameter for which the version is to be created.
* @param {string} parameterVersionId - The ID of the parameter version to be created.
* @param {string} payload - The unformatted string payload to be stored in the new parameter version.
*/
async function main(
projectId = 'my-project',
parameterId = 'my-parameter',
parameterVersionId = 'v1',
payload = 'This is unstructured data'
) {
// [START parametermanager_create_param_version]
/**
* TODO(developer): Uncomment these variables before running the sample.
*/
// const projectId = 'YOUR_PROJECT_ID';
// const parameterId = 'YOUR_PARAMETER_ID';
// const parameterVersionId = 'YOUR_PARAMETER_VERSION_ID';
// const payload = 'This is unstructured data';

// Imports the Parameter Manager library
const {ParameterManagerClient} = require('@google-cloud/parametermanager');

// Instantiates a client
const client = new ParameterManagerClient();

async function createParamVersion() {
// Construct the parent resource name
const parent = client.parameterPath(projectId, 'global', parameterId);

// Construct the parameter version
const parameterVersion = {
payload: {
data: Buffer.from(payload, 'utf8'),
},
};

// Construct the request
const request = {
parent: parent,
parameterVersionId: parameterVersionId,
parameterVersion: parameterVersion,
};

// Create the parameter version
const [response] = await client.createParameterVersion(request);
console.log(`Created parameter version: ${response.name}`);
}

await createParamVersion();
// [END parametermanager_create_param_version]
}

// Parse command line arguments
const args = process.argv.slice(2);
main(...args).catch(console.error);
85 changes: 85 additions & 0 deletions parametermanager/createParamVersionWithSecret.js
Original file line number Diff line number Diff line change
@@ -0,0 +1,85 @@
// Copyright 2025 Google LLC

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The copyright year is set to 2025. Please confirm if this is the correct year, or if it should be updated to the current year.

Suggested change
// Copyright 2025 Google LLC
// Copyright 2023 Google LLC

//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

'use strict';

/**
* Creates a new version of an existing parameter in the global location
* of the specified project using the Google Cloud Parameter Manager SDK.
* The payload is specified as a JSON string and includes a reference to a secret.
*
* @param {string} projectId - The Google Cloud project ID where the parameter is located.
* @param {string} parameterId - The ID of the parameter for which the version is to be created.
* @param {string} parameterVersionId - The ID of the parameter version to be created.
* @param {string} secretId - The ID of the secret to be referenced.
*/
async function main(
projectId = 'my-project',
parameterId = 'my-parameter',
parameterVersionId = 'v1',
secretId = 'projects/my-project/secrets/application-secret/version/latest'
) {
// [START parametermanager_create_param_version_with_secret]
/**
* TODO(developer): Uncomment these variables before running the sample.
*/
// const projectId = 'YOUR_PROJECT_ID';
// const parameterId = 'YOUR_PARAMETER_ID';
// const parameterVersionId = 'YOUR_PARAMETER_VERSION_ID';
// const secretId = 'YOUR_SECRET_ID'; // For example projects/my-project/secrets/application-secret/version/latest

// Imports the Parameter Manager library
const {ParameterManagerClient} = require('@google-cloud/parametermanager');

// Instantiates a client
const client = new ParameterManagerClient();

async function createParamVersionWithSecret() {
// Construct the parent resource name
const parent = client.parameterPath(projectId, 'global', parameterId);

// Construct the JSON data with secret references
const jsonData = {
db_user: 'test_user',
db_password: `__REF__(//secretmanager.googleapis.com/${secretId})`,
};

// Construct the parameter version
const parameterVersion = {
payload: {
data: Buffer.from(JSON.stringify(jsonData), 'utf8'),
},
};

// Construct the request
const request = {
parent: parent,
parameterVersionId: parameterVersionId,
parameterVersion: parameterVersion,
};

// Create the parameter version
const [response] = await client.createParameterVersion(request);
console.log(
`Created parameter version with secret references: ${response.name}`
);
}

await createParamVersionWithSecret();
// [END parametermanager_create_param_version_with_secret]
}

// Parse command line arguments
const args = process.argv.slice(2);
main(...args).catch(console.error);
69 changes: 69 additions & 0 deletions parametermanager/createStructuredParam.js
Original file line number Diff line number Diff line change
@@ -0,0 +1,69 @@
// Copyright 2025 Google LLC

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The copyright year is set to 2025. Please confirm if this is the correct year, or if it should be updated to the current year.

Suggested change
// Copyright 2025 Google LLC
// Copyright 2023 Google LLC

//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
// https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

'use strict';

const {protos} = require('@google-cloud/parametermanager');

/**
* Creates a parameter in the global location of the specified
* project with specified format using the Google Cloud Parameter Manager SDK.
*
* @param {string} projectId - The Google Cloud project ID where the parameter is to be created.
* @param {string} parameterId - The ID of the parameter to create. This ID must be unique within the project.
* @param {string} formatType - The format type of the parameter (UNFORMATTED, YAML, JSON).
*/
async function main(
projectId = 'my-project',
parameterId = 'my-json-parameter',
formatType = protos.google.cloud.parametermanager.v1.ParameterFormat.JSON
) {
// [START parametermanager_create_structured_param]
/**
* TODO(developer): Uncomment these variables before running the sample.
*/
// const {protos} = require('@google-cloud/parametermanager');
// const projectId = 'YOUR_PROJECT_ID';
// const parameterId = 'YOUR_PARAMETER_ID';
// const formatType = protos.google.cloud.parametermanager.v1.ParameterFormat.JSON;

// Imports the Parameter Manager library
const {ParameterManagerClient} = require('@google-cloud/parametermanager');

// Instantiates a client
const client = new ParameterManagerClient();

async function createStructuredParam() {
const parent = client.locationPath(projectId, 'global');
const request = {
parent: parent,
parameterId: parameterId,
parameter: {
format: formatType,
},
};

const [parameter] = await client.createParameter(request);
console.log(
`Created parameter ${parameter.name} with format ${parameter.format}`
);
}

await createStructuredParam();
// [END parametermanager_create_structured_param]
}

// This sample demonstrates how to create a parameter for structured data of JSON type.
const args = process.argv.slice(2);
main(...args).catch(console.error);
Loading