editSecretAnnotations.js

// Copyright 2024 Google LLC
//
// Licensed under the Apache License, Version 2.0 (the "License");
// you may not use this file except in compliance with the License.
// You may obtain a copy of the License at
//
//     https://www.apache.org/licenses/LICENSE-2.0
//
// Unless required by applicable law or agreed to in writing, software
// distributed under the License is distributed on an "AS IS" BASIS,
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
// See the License for the specific language governing permissions and
// limitations under the License.

'use strict';

async function main(name, annotationKey, annotationValue) {
  // [START secretmanager_edit_secret_annotations]
  /**
   * TODO(developer): Uncomment these variables before running the sample.
   */
  // const name = 'projects/my-project/secrets/my-secret';
  // const annotationKey = 'updatedannotationkey';
  // const annotationValue = 'updatedannotationvalue';

  // Imports the Secret Manager library
  const {SecretManagerServiceClient} = require('@google-cloud/secret-manager');

  // Instantiates a client
  const client = new SecretManagerServiceClient();

  async function getSecret() {
    const [secret] = await client.getSecret({
      name: name,
    });

    return secret;
  }

  async function editSecretAnnotations() {
    const oldSecret = await getSecret();
    oldSecret.annotations[annotationKey] = annotationValue;
    const [secret] = await client.updateSecret({
      secret: {
        name: name,
        annotations: oldSecret.annotations,
      },
      updateMask: {
        paths: ['annotations'],
      },
    });

    console.info(`Updated secret ${secret.name}`);
  }

  editSecretAnnotations();
  // [END secretmanager_edit_secret_annotations]
}

const args = process.argv.slice(2);
main(...args).catch(console.error);