Access Secret

secret_manager.access_secret
ActionGoogle Cloudconnection required

Calls GET /projects/{project}/secrets/{secret}/versions/{version}:access.

Read the decoded value of a Secret Manager secret version.

Connection

Required
Yes — the node will not save without one
Auth type
OAuth 2.0
Providers
Google Secret Manager
Secret shape
{"client_id", "client_secret", "refresh_token"}
Config it needs
project_id
Resolved by
config.connection_id, else node.connection_id

Configuration

3 fields, 1 required. A dotted path is a nested object and name[] an array of objects — the editor renders the same tree.

FieldTypeRequiredDefaultConstraintsExample
project_id
GCP project id (overrides connection).
stringNo———
secret_id
Secret id (short name).
stringYes———
version
Version id or alias.
stringNolatest——

Example configuration

Every value below is the contract’s own example or default — nothing invented.

{
  "version": "latest"
}

Output

One shape.

result

FieldTypeExample
ok
boolean—
name
string—
secret_id
string—
version
string—
value
string—
{
  "name": "",
  "ok": false,
  "secret_id": "",
  "value": "",
  "version": ""
}

See Access Secret run in a workflow.

In a technical demo we add the Google Secret Manager connection, drop the node on the canvas and let Workflow Health pre-flight it before the first real run.