ds-resolve-gcp

Overview ¶

Command ds-resolve-gcp is the Google Secret Manager resolver plugin (§12, §37.4). It reads the latest version through the `gcloud` CLI, which must be installed and authenticated, hashes the value in memory, and returns existence and the hash. The value never leaves this process. The address is the secret name, optionally `projects/<p>/secrets/<name>`.