Skip to content

Conversation

@khilan-crest
Copy link

Adding tags samples

Note: Before submitting a pull request, please open an issue for discussion if you are not associated with Google.

Checklist

  • I have followed guidelines from CONTRIBUTING.MD and Samples Style Guide
  • Tests pass: npm test (see Testing)
  • Lint pass: npm run lint (see Style)
  • Required CI tests pass (see CI testing)
  • These samples need a new API enabled in testing projects to pass (let us know which ones)
  • These samples need a new/updated env vars in testing projects set to pass (let us know which ones)
  • This pull request is from a branch created directly off of GoogleCloudPlatform/nodejs-docs-samples. Not a fork.
  • This sample adds a new sample directory, and I updated the CODEOWNERS file with the codeowners for this sample
  • This sample adds a new sample directory, and I created GitHub Actions workflow for this sample
  • This sample adds a new Product API, and I updated the Blunderbuss issue/PR auto-assigner with the codeowners for this sample
  • Please merge this PR for me once it is approved

Note: Any check with (dev), (experimental), or (legacy) can be ignored and should not block your PR from merging (see CI testing).

@khilan-crest khilan-crest requested review from a team as code owners January 20, 2026 07:10
@product-auto-label product-auto-label bot added the api: secretmanager Issues related to the Secret Manager API. label Jan 20, 2026
@snippet-bot
Copy link

snippet-bot bot commented Jan 20, 2026

Here is the summary of changes.

You are about to add 8 region tags.

This comment is generated by snippet-bot.
If you find problems with this result, please file an issue at:
https://github.com/googleapis/repo-automation-bots/issues.
To update this comment, add snippet-bot:force-run label or use the checkbox below:

  • Refresh this comment

@product-auto-label product-auto-label bot added the samples Issues that are directly related to samples. label Jan 20, 2026
@gemini-code-assist
Copy link
Contributor

Summary of Changes

Hello @khilan-crest, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request significantly expands the Google Cloud Secret Manager Node.js samples by introducing new functionalities related to tag management and filtered listing of secrets and their versions. It provides developers with practical code examples for detaching and listing tag bindings, as well as filtering secrets and secret versions based on specific criteria, with full support for regional deployments.

Highlights

  • New Tag Management Samples: Added new samples for managing tags on Secret Manager secrets, including detaching and listing tag bindings.
  • Filtered Listing Capabilities: Introduced samples for listing Secret Manager secrets and secret versions with filtering capabilities.
  • Regional Support: Provided regional versions for all new tag management and filtered listing samples to support geographically distributed secrets.
  • Comprehensive Testing: Enhanced the test suite with comprehensive integration tests for all newly added samples, ensuring their correctness and functionality.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

Copy link
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request adds several new samples for interacting with Google Cloud Secret Manager, focusing on tags and filtering. The new samples demonstrate how to list secrets and secret versions with filters, and how to list and detach tag bindings for both global and regional secrets. The changes also include corresponding tests for the new samples. My review focuses on ensuring the correctness and robustness of the new sample code. I've identified a recurring issue across several new files related to improper handling of asynchronous operations, which could lead to unhandled promise rejections and incorrect script behavior. I've provided suggestions to fix this.

console.log(`Detached tag value ${tagValue} from ${name}`);
}

detachTag();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The detachTag function is an async function. By calling it without await, you are creating a 'fire-and-forget' promise. If an error occurs within detachTag, it will cause an unhandled promise rejection, which can crash the process, instead of being caught by the .catch(console.error) at the end of the file. To ensure proper error handling and that the main function waits for completion, you should await this call.

Suggested change
detachTag();
await detachTag();

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Within Function await is added wherever required

});
}

listSecretVersionsWithFilter();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The listSecretVersionsWithFilter function is an async function. By calling it without await, you are creating a 'fire-and-forget' promise. If an error occurs within listSecretVersionsWithFilter, it will cause an unhandled promise rejection, which can crash the process, instead of being caught by the .catch(console.error) at the end of the file. To ensure proper error handling and that the main function waits for completion, you should await this call.

Suggested change
listSecretVersionsWithFilter();
await listSecretVersionsWithFilter();

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Within Function await is added wherever required

}
}

listSecretsWithFilter();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The listSecretsWithFilter function is an async function. By calling it without await, you are creating a 'fire-and-forget' promise. If an error occurs within listSecretsWithFilter, it will cause an unhandled promise rejection, which can crash the process, instead of being caught by the .catch(console.error) at the end of the file. To ensure proper error handling and that the main function waits for completion, you should await this call.

Suggested change
listSecretsWithFilter();
await listSecretsWithFilter();

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

await is added within function wherever required.

}
}

listTagBindings();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The listTagBindings function is an async function. By calling it without await, you are creating a 'fire-and-forget' promise. If an error occurs within listTagBindings, it will cause an unhandled promise rejection, which can crash the process, instead of being caught by the .catch(console.error) at the end of the file. To ensure proper error handling and that the main function waits for completion, you should await this call.

Suggested change
listTagBindings();
await listTagBindings();

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

await is added within function wherever required.

});
}

listRegionalSecretVersionsWithFilter();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The listRegionalSecretVersionsWithFilter function is an async function. By calling it without await, you are creating a 'fire-and-forget' promise. If an error occurs within listRegionalSecretVersionsWithFilter, it will cause an unhandled promise rejection, which can crash the process, instead of being caught by the .catch(console.error) at the end of the file. To ensure proper error handling and that the main function waits for completion, you should await this call.

Suggested change
listRegionalSecretVersionsWithFilter();
await listRegionalSecretVersionsWithFilter();

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

await is added within function wherever required.

});
}

listRegionalSecretsWithFilter();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The listRegionalSecretsWithFilter function is an async function. By calling it without await, you are creating a 'fire-and-forget' promise. If an error occurs within listRegionalSecretsWithFilter, it will cause an unhandled promise rejection, which can crash the process, instead of being caught by the .catch(console.error) at the end of the file. To ensure proper error handling and that the main function waits for completion, you should await this call.

Suggested change
listRegionalSecretsWithFilter();
await listRegionalSecretsWithFilter();

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

await is added within function wherever required.

}
}

listRegionalSecretTagBindings();
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The listRegionalSecretTagBindings function is an async function. By calling it without await, you are creating a 'fire-and-forget' promise. If an error occurs within listRegionalSecretTagBindings, it will cause an unhandled promise rejection, which can crash the process, instead of being caught by the .catch(console.error) at the end of the file. To ensure proper error handling and that the main function waits for completion, you should await this call.

Suggested change
listRegionalSecretTagBindings();
await listRegionalSecretTagBindings();

Copy link
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

await is added within function wherever required.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

api: secretmanager Issues related to the Secret Manager API. samples Issues that are directly related to samples.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant