Skip to content

Commit bd7d7fa

Browse files
committed
Add warning about GCP keys
1 parent 6f20ef8 commit bd7d7fa

2 files changed

Lines changed: 8 additions & 0 deletions

File tree

docs/configuration/loading_environment_variables.mdx

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -135,6 +135,10 @@ If you run imgproxy inside Google Cloud infrastructure (Compute Engine, Kubernet
135135

136136
Otherwise, set `IMGPROXY_ENV_GCP_KEY` environment variable to the content of Google Cloud JSON key. Get more info about JSON keys: [https://cloud.google.com/iam/docs/creating-managing-service-account-keys](https://cloud.google.com/iam/docs/creating-managing-service-account-keys).
137137

138+
:::warning
139+
For security reasons, imgproxy accepts only service account keys for Google Cloud Secret Manager integration.
140+
:::
141+
138142
## Environment file syntax
139143

140144
The following syntax rules apply to environment files:

docs/image_sources/google_cloud_storage.mdx

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,3 +32,7 @@ gs://%bucket_name/%file_key?generation=%generation
3232
If you run imgproxy inside Google Cloud infrastructure (Compute Engine, Kubernetes Engine, App Engine, and Cloud Functions, etc), and you have granted access to your bucket to the service account, you probably don't need to do anything here. imgproxy will try to use the credentials provided by Google.
3333

3434
Otherwise, set `IMGPROXY_GCS_KEY` environment variable to the content of Google Cloud JSON key. Get more info about JSON keys: [https://cloud.google.com/iam/docs/creating-managing-service-account-keys](https://cloud.google.com/iam/docs/creating-managing-service-account-keys).
35+
36+
:::warning
37+
For security reasons, imgproxy accepts only service account keys for Google Cloud Storage integration.
38+
:::

0 commit comments

Comments
 (0)