awatertrevi/infisical
1
0
Fork 0
mirror of https://github.com/awatertrevi/infisical.git synced 2026-09-22 13:39:35 +00:00
Code Issues Packages Projects Releases Wiki Activity

Complete adding GCP GCE auth

Browse Source
This commit is contained in:
Tuan Dang
2024-05-08 15:51:09 -07:00
parent ac469dbe4f
commit e99182c141
32 changed files with 1178 additions and 545 deletions
Download Patch File Download Diff File Expand all files Collapse all files

17
docs/documentation/platform/identities/gcp-iam-auth.mdx
View File

@@ -1,6 +1,6 @@
---
title: GCP IAM Auth
description: "Learn how to authenticate with Infisical Google Cloud Platform via IAM service accounts"
title: GCP Auth
description: "Learn how to authenticate with Infisical Google Cloud Platform"
---
**GCP IAM Auth** is a GCP-native authentication method for IAM service accounts.
@@ -70,6 +70,19 @@ access the Infisical API using the GCP IAM authentication method.
<Step title="Accessing the Infisical API with the identity">
To access the Infisical API as the identity, you need to generate a signed JWT token using the `projects.serviceAccounts.signJwt` [API method](https://cloud.google.com/iam/docs/reference/credentials/rest/v1/projects.serviceAccounts/signJwt) and make a request to the `/api/v1/auth/gcp-iam-auth/login` endpoint containing the signed JWT token in exchange for an access token.
<Info>
Enable the [IAM Service Account Credentials API](https://console.developers.google.com/apis/api/iamcredentials.googleapis.com/overview) in your project
Cloud Resource Manager API
Identity and Access Management (IAM) API has not been used in project 512461120021 before or it is disabled. Enable it by visiting https://console.developers.google.com/apis/api/iam.googleapis.com/overview?project=512461120021 then retry.
Add the role `roles/iam.serviceAccountTokenCreator` to the service account. This role includes the required `iam.serviceAccounts.signJwt` permission.
Must have: `resourcemanager.projects.get` (for the Infisical service account)
o Infisical uses scope:https://www.googleapis.com/auth/cloud-platform.read-only
</Info>
We provide a few code examples below of how you can authenticate with Infisical to access the [Infisical API](/api-reference/overview/introduction).
<AccordionGroup>