Vault Agent Auto-Auth GCP Method
The gcp
method performs authentication against the GCP Auth
method. Both gce
and iam
authentication types are supported.
Credentials
Vault will use the GCP SDK's normal credential chain behavior. You can set a
static credentials
value, but it is usually not needed. If running on GCE
using Application Default Credentials, you may need to specify the service
account and project since ADC does not provide metadata used to automatically
determine these.
Configuration
type
(string: required)
- The type of authentication; must begce
oriam
role
(string: required)
- The role to authenticate against on Vaultcredentials
(string: optional)
- When using static credentials, the contents of the JSON credentials fileservice_account
(string: optional)
- The service account to use, if it cannot be automatically determinedjwt_exp
(string or int: optional)
- The number of minutes a generated JWT should be valid for when using theiam
method; defaults to 15 minutes
Note: The project
parameter has been removed in Vault 1.5.9+, 1.6.5+, and 1.7.2+.
It is no longer needed for configuration and will be ignored if provided.