Skip to content

Latest commit

 

History

History
37 lines (26 loc) · 1.33 KB

gcp.mdx

File metadata and controls

37 lines (26 loc) · 1.33 KB
Raw
layout page_title description
docs
Vault Agent Auto-Auth GCP Method
GCP Method for Vault Agent Auto-Auth

Vault Agent Auto-Auth GCP Method

The gcp method performs authentication against the GCP Auth method. Both gce and iam authentication types are supported.

Credentials

Vault will use the GCP SDK's normal credential chain behavior. You can set a static credentials value, but it is usually not needed. If running on GCE using Application Default Credentials, you may need to specify the service account and project since ADC does not provide metadata used to automatically determine these.

Configuration

  • type (string: required) - The type of authentication; must be gce or iam

  • role (string: required) - The role to authenticate against on Vault

  • credentials (string: optional) - When using static credentials, the contents of the JSON credentials file

  • service_account (string: optional) - The service account to use, if it cannot be automatically determined

  • jwt_exp (string or int: optional) - The number of minutes a generated JWT should be valid for when using the iam method; defaults to 15 minutes

-> Note: The project parameter has been removed in Vault 1.5.9+, 1.6.5+, and 1.7.2+. It is no longer needed for configuration and will be ignored if provided.