Check Secret Manager API before cleaning secrets

kubernetes-sigs · Dec 5, 2024 · 43b7dba · 43b7dba
1 parent 445d89e
commit 43b7dba
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/cmd/janitor/gcp_janitor.py b/cmd/janitor/gcp_janitor.py
@@ -591,6 +591,9 @@ def clean_gke_cluster(project, age, filt):
 def clean_secrets(project, age, filt):
     """Clean up secrets from Google secret manager"""
     os.environ['CLOUDSDK_API_ENDPOINT_OVERRIDES_SECRETMANAGER'] = 'https://secretmanager.googleapis.com/'
+    if not api_enabled(project, 'secretmanager.googleapis.com'):
+        log('Secret Manager API is not enabled, skipping secret clean-up')
+        return 0
     cmd = [
             'gcloud', 'secrets', 'list',
             '--project=%s' % project,