Good morning
@Charlie Francis,
For syncing secrets to GCP Secret Manager (so Cloud Run can access them), you only need these two docs in order:
1.
https://infisical.com/docs/integrations/app-connections/gcp — set up the GCP Connection
2.
https://infisical.com/docs/integrations/secret-syncs/gcp-secret-manager — configure the sync
The GCP IAM doc is unrelated (that's for dynamic secret generation).
Re: Cloud Resource Manager API: That's not a role, it's a GCP API you need to enable on your project. Go to APIs & Services → Library in the GCP Console and enable it, along with Secret Manager API and Service Usage API. Let me know if this clears things up!