-
-
Notifications
You must be signed in to change notification settings - Fork 1.2k
[Documentation] - Include audience field as part of Hashicorp Vault Kubernetes Auth #1723
Copy link
Copy link
Closed
Feature
Copy link
Labels
area/documentationIssues / Pull Requests related to documentationIssues / Pull Requests related to documentationarea/vaultIndicates an issue or PR related to Vault.Indicates an issue or PR related to Vault.kind/documentationCategorizes issue or PR as related to documentation.Categorizes issue or PR as related to documentation.
Description
Describe the solution you'd like
There are scenarios where using Hashicorp Vault Kubernetes Auth, one needs to use a JWT with custom audience.
Right now one only can define a JWT through a static secret which could not be used in a GitOps deployment, or through service account name which can't customize JWT
What is the added value?
Enabling TokenRequest API to fetch service account tokens in Hashipotp Vault Kubernetes Auth will increase the scenarios where this secure auth method could be used.
Observations (Constraints, Context, etc):
The TokenRequest API it's being used alredy in Hashicorp Vault JWT/OIDC Auth, see field kubernetesServiceAccountToken.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
area/documentationIssues / Pull Requests related to documentationIssues / Pull Requests related to documentationarea/vaultIndicates an issue or PR related to Vault.Indicates an issue or PR related to Vault.kind/documentationCategorizes issue or PR as related to documentation.Categorizes issue or PR as related to documentation.
Type
Projects
Status
Done