docs(samples): add checksum snippets

samples/snippets/access_secret_version.py

@@ -17,7 +17,7 @@
 """
 
 import argparse
-
+import google_crc32c
 
 # [START secretmanager_access_secret_version]
 def access_secret_version(project_id, secret_id, version_id):
@@ -38,6 +38,13 @@ def access_secret_version(project_id, secret_id, version_id):
     # Access the secret version.
     response = client.access_secret_version(request={"name": name})
 
+    # Verify payload checksum.
+    crc32c = google_crc32c.Checksum()
+    crc32c.update(response.payload.data)
+    if response.payload.data_crc32c != int(crc32c.hexdigest(), 16):
+        print("Data corruption detected.")
+        return response
+
     # Print the secret payload.
     #
     # WARNING: Do not print the secret in a production environment - this

samples/snippets/add_secret_version.py

@@ -18,6 +18,7 @@
 """
 
 import argparse
+import google_crc32c
 
 
 # [START secretmanager_add_secret_version]
@@ -39,9 +40,17 @@ def add_secret_version(project_id, secret_id, payload):
     # pass in bytes instead of a str for the payload argument.
     payload = payload.encode("UTF-8")
 
+    # Calculate payload checksum. Passing a checksum in add-version request
+    # is optional.
+    crc32c = google_crc32c.Checksum()
+    crc32c.update(payload)
+
     # Add the secret version.
     response = client.add_secret_version(
-        request={"parent": parent, "payload": {"data": payload}}
+        request={
+            "parent": parent,
+            "payload": {"data": payload, "data_crc32c": int(crc32c.hexdigest(), 16)},
+        }
     )
 
     # Print the new secret version name.

samples/snippets/requirements.txt

@@ -1 +1,2 @@
-google-cloud-secret-manager==2.9.1
+google-cloud-secret-manager==2.9.1
+google-crc32c>=1.3.0