wget https://raw.githubusercontent.com/GoogleCloudPlatform/secrets-store-csi-driver-provider-gcp/main/deploy/provider-gcp-plugin.yaml

kubectl apply -f provider-gcp-plugin.yaml -namespace kube-system

Create Service Account:

gcloud iam service-accounts create my-secret-acc;

Attach SecretManagerAdmin policy to the new service account

gcloud projects add-iam-policy-binding $PROJECT_ID \
--member="serviceAccount: my-secret-acc @$PROJECT_ID.iam.gserviceaccount.com" \
--role="roles/secretmanager.admin" \
--condition="None";

Generate a key for your new service account

gcloud iam service-accounts keys create iam-key.json \
--iam-account=" my-secret-acc @$PROJECT_ID.iam.gserviceaccount.com";

Use keys generated from "4.6.4.2 Configure GCP secret manager and IAM" (iam-key.json file)

kubectl create secret generic <secret-name> --from-file=<iam-key.json>

gcloud secrets create <secret name> --data-file="/path/to/file"

Certificate should be in below format before uploading cert to GCP Secret Manager i.e it should be one .pem file (key, crt and CA in one file)

(Refer "mycert.pem" for sample certificate format)

gcloud secrets create <secret name> --data-file="/path/to/file"