How mikemoore63/gcp-secretmanager-cache works
This package caches Google Secret Manager values for concurrent callers, returns the latest enabled secret version, and refreshes cached values after a TTL while retaining the old value on retryable service failures. Callers can invalidate entries or use decorators to inject secrets into functions. A separate documented capability handles rotation: Pub/Sub-triggered orchestration selects a secret mechanic, reads its configuration, and manages secret versions. Rotation implementation files were not sampled, so those nodes use the existing package directory and only documented relationships are shown.
Main entry points: cache_secret.py Cached secret · gcp_secretmanager_cache Rotation orchestrator · decorators.py Secret decorators · exceptions.py Cache exceptions
Components 12
Secret cache
- Cached secret
gcp_secretmanager_cache/cache_secret.py - TTL refresh
gcp_secretmanager_cache/cache_secret.py - Enabled version lookup
gcp_secretmanager_cache/cache_secret.py - Cache exceptions
gcp_secretmanager_cache/exceptions.py
Secret injection
- Secret decorators
gcp_secretmanager_cache/decorators.py
Secret rotation
- Rotation orchestrator
gcp_secretmanager_cache - Secret mechanic
gcp_secretmanager_cache - Rotation configuration
gcp_secretmanager_cache
Other components
- Application caller
- Google Secret Manager
- Rotation event
- Google Cloud Storage
Connections 13
- Application caller → Cached secret: gets or invalidates
README.md - Cached secret → Enabled version lookup: resolves version
README.md - Enabled version lookup → Google Secret Manager: lists versions and fetches
README.md - Cached secret → TTL refresh: schedules refresh
README.md - TTL refresh → Enabled version lookup: refreshes value
README.md - Cached secret → Cache exceptions: raises cache errors
README.md - Application caller → Secret decorators: wraps function
README.md - Secret decorators → Cached secret: looks up secret
README.md - Rotation event → Rotation orchestrator: triggers rotation
README.md - Rotation orchestrator → Google Secret Manager: manages versions
README.md - Rotation orchestrator → Secret mechanic: delegates secret work
README.md - Rotation orchestrator → Rotation configuration: reads configuration
README.md - Rotation configuration → Google Cloud Storage: may load GCS JSON
README.md