Google Cloud Secret Manger : Secret.replication should not be provided.

[theotruvelot-kazaar]

Helm Chart Version

1.9.2

What step the error happened?

Other

Relevant information

Hello,
When I want to create a source/destination with terraform. I got this error :

class ProblemMessageData {                                                      │
│         message: io.grpc.StatusRuntimeException: INVALID_ARGUMENT: Secret.replication sho │
│ uld not be provided. 

I'm using 0.6.5 terraform version and 1.9.2 helm charts version. The version of airbyte is the 2.0.1
I'm using the secret manager of google.

This is the helm file :

global:
  storage:
    type: "gcs"
    secretName: "airbyte-config-secrets"
    gcs:
      projectId: ${var.gcp_project_id}
      credentialsJsonSecretKey: 'gcp.json'
    bucket:
      log: ${google_storage_bucket.airbyte.name}
      state: ${google_storage_bucket.airbyte.name}
      workloadOutput: ${google_storage_bucket.airbyte.name}
  secretsManager:
      enabled: true
      type: GOOGLE_SECRET_MANAGER
      secretName: "airbyte-config-secrets"
      googleSecretManager:
         projectId: ${var.gcp_project_id}
         region: ${var.region}
         credentialsSecretKey: gcp.json
  database:
    type: external
    secretName: "airbyte-config-secrets"
    host: ${var.cloudsql_host}
    port: ${var.cloudsql_port}
    name: ${google_sql_database.airbyte.name}
    userSecretKey: "database-user"
    passwordSecretKey: "database-password"
postgresql:
  enabled: false

Relevant log output

the stack trace : 

2026-02-18 18:34:51,599 [public-api-executor-thread-4]    ERROR    i.a.c.s.e.p.AbstractTh │
│ rowableProblemHandler(handle):31 - Throwable Problem Handler caught exception:            │
│ io.airbyte.api.problems.throwable.generated.UnexpectedProblem: Detail: class UnexpectedPr │
│ oblemResponse {                                                                           │
│     status: 500                                                                           │
│     type: https://reference.airbyte.com/reference/errors                                  │
│     title: unexpected-problem                                                             │
│     detail: An unexpected problem has occurred. If this is an error that needs to be addr │
│ essed, please submit a pull request or github issue.                                      │
│     documentationUrl: null                                                                │
│     data: class ProblemMessageData {                                                      │
│         message: io.grpc.StatusRuntimeException: INVALID_ARGUMENT: Secret.replication sho │
│ uld not be provided.                                                                      │
│     }                                                                                     │
│ }.detail, Data: class ProblemMessageData {                                                │
│     message: io.grpc.StatusRuntimeException: INVALID_ARGUMENT: Secret.replication should  │
│ not be provided.                                                                          │
│ }                                                                                         │
│     at io.airbyte.server.apis.publicapi.errorHandlers.ConfigClientErrorHandler.handleErro │
│ r(ConfigClientErrorHandler.kt:132)                                                        │
│     at io.airbyte.server.apis.publicapi.services.DestinationServiceImpl.createDestination │
│ (DestinationService.kt:103)                                                               │
│     at io.airbyte.server.apis.publicapi.controllers.DestinationsController.publicCreateDe │
│ stination$lambda$2$lambda$1(DestinationsController.kt:83)                                 │
│     at io.airbyte.server.apis.publicapi.apiTracking.TrackingHelper.callWithTracker(Tracki │
│ ngHelper.kt:109)                                                                          │
│     at io.airbyte.server.apis.publicapi.controllers.DestinationsController.publicCreateDe │
│ stination(DestinationsController.kt:81)                                                   │
│     at io.airbyte.server.apis.publicapi.controllers.$DestinationsController$Definition$Ex │
│ ec.dispatch(Unknown Source)                                                               │
│     at io.micronaut.context.AbstractExecutableMethodsDefinition$DispatchedExecutableMetho │
│ d.invokeUnsafe(AbstractExecutableMethodsDefinition.java:461)                              │
│     at io.micronaut.context.DefaultBeanContext$BeanContextUnsafeExecutionHandle.invokeUns │
│ afe(DefaultBeanContext.java:4438)                                                         │
│     at io.micronaut.web.router.AbstractRouteMatch.execute(AbstractRouteMatch.java:272)    │
│     at io.micronaut.web.router.DefaultUriRouteMatch.execute(DefaultUriRouteMatch.java:38) │
│     at io.micronaut.http.server.RouteExecutor.executeRouteAndConvertBody(RouteExecutor.ja

---

Internal Tracking: https://github.com/airbytehq/oncall/issues/11361

[octavia-bot]

AI Triage Starting...

Thank you for opening this issue! I'm an AI assistant that will do an initial review and may:

• Ask clarifying questions if needed
• Suggest relevant documentation or workarounds
• Flag this for internal visibility

Note: Community issues are reviewed on a best-effort basis and do not have a guaranteed response time. For additional help:

• Join the Airbyte Community Slack to connect with other users and community members
• If you're an Airbyte Cloud customer, you can open a support ticket or contact your account representative, referencing this issue URL

View playbook

• 🔗 Session URL: https://app.devin.ai/sessions/c7c45551836a463f8d5bdad9ad0b0b00

✅ Devin AI session created successfully!

[devin-ai-integration]

Hi Théo TRUVELOT Kazaar (@theotruvelot-kazaar), thank you for reporting this issue!

I have been able to reproduce and identify the root cause in the Airbyte platform code.

Root Cause Analysis

The error INVALID_ARGUMENT: Secret.replication should not be provided is coming from the Google Cloud Secret Manager gRPC API. In the Airbyte platform code (GoogleSecretManagerPersistence.kt), when a new secret is created, the code unconditionally sets the deprecated replication field:

val secretBuilder = Secret.newBuilder().setReplication(getReplicationPolicy())

The getReplicationPolicy() method returns:

Replication.newBuilder()
  .setAutomatic(Replication.Automatic.newBuilder().build())
  .build()

Google Cloud Secret Manager no longer accepts the replication field in certain configurations (particularly with regional endpoints). Automatic replication is now the default, and explicitly setting it causes the INVALID_ARGUMENT error.

A couple of clarifying questions:

1. I notice in your Helm config that secretsManager.enabled is set to false. Could you confirm whether you have any other configuration (e.g., environment variables or a previous deployment) that might still have Google Secret Manager enabled? The error stack trace shows that GSM is actively being used to store secrets.
2. Are you using a regional Google Cloud Secret Manager endpoint, or the default global endpoint?

Please ensure you mask or remove any sensitive information (API keys, passwords, tokens, connection strings) before sharing any additional logs or configuration.

I am escalating this to the internal team for investigation as this appears to be a confirmed bug in the platform code.

---

Need more help? Join Airbyte Community Slack for peer support, or if you're a Cloud customer, open a support ticket referencing this URL.

This message is generated from Devin.ai (internal session link).

[devin-ai-integration]

This issue has been escalated to the internal team for investigation: https://github.com/airbytehq/oncall/issues/11361

We will follow up here with any updates.

---

This message is generated from Devin.ai (internal session link).

[theotruvelot-kazaar]

sorry, bad copy paste ^^