Fetch secrets from GCP Secret Manager and write them to an env file

write-secrest.js

#!/usr/bin/env node
const {SECRETS} = require('../build/dist/functions/secrets');
const {SecretManagerServiceClient} = require('@google-cloud/secret-manager');
const {join} = require('path');
const {writeFileSync} = require('fs')

const client = new SecretManagerServiceClient();

const projectId = process.argv[2];
const outputFile = join(__dirname, '..', `.env.${projectId}`);

async function readSecret(projectId, secretName) {
	// Access the secret.
	const name = `projects/${projectId}/secrets/${secretName}/versions/latest`;
	console.log('Accessing', name);
	const [accessResponse] = await client.accessSecretVersion({
		name: name,
	});
	return accessResponse.payload.data.toString('utf8');
}

async function generateEnvData(projectId) {
	const lines = await Promise.all(SECRETS.map(async (secretName) => {
		const value = await readSecret(projectId, secretName);
		return `${secretName}=${value}`;
	}));
	return lines.join('\n');
}

async function writeEnvFile(projectId, target) {
	const content = await generateEnvData(projectId);
	writeFileSync(target, content, 'utf8');
	return target;
}

writeEnvFile(projectId, outputFile)
	.then((file) => {
		console.log('Successfully written', file);
		process.exit(0);
	})
	.catch((err) => {
		console.error(err.message);
		process.exit(1);
	})