AuthBackend

The mount accessor related to the auth mount. It is useful for integration with Identity Secrets Engine.

The clients email associated with the credentials

The Client ID of the credentials

A JSON string containing the contents of a GCP credentials file. If this value is empty, Vault will try to use Application Default Credentials from the machine on which the Vault server is running.

Specifies overrides to service endpoints used when making API requests. This allows specific requests made during authentication to target alternative service endpoints for use in Private Google Access environments. Requires Vault 1.11+. Overrides are set at the subdomain level using the following keys:

A description of the auth method.

If set, opts out of mount migration on path updates. See here for more info on Mount Migration

Specifies if the auth method is local only.

The namespace to provision the resource in. The value should not contain leading or trailing forward slashes. The namespace is always relative to the provider's configured namespace. Available only for Vault Enterprise.

The path to mount the auth method — this defaults to 'gcp'.

The ID of the private key from the credentials

The GCP Project ID

Extra configuration block. Structure is documented below. The tune block is used to tune the auth backend: