POST
/
api
/
v1
/
auth
/
gcp-auth
/
identities
/
{identityId}

Authorizations

Authorization
string
headerrequired

An access token in Infisical

Path Parameters

identityId
string
required

The ID of the identity to attach the configuration onto.

Body

application/json
type
enum<string>
required
Available options:
iam,
gce
allowedServiceAccounts
string
default:

The comma-separated list of trusted service account emails corresponding to the GCE resource(s) allowed to authenticate with Infisical.

allowedProjects
string
default:

The comma-separated list of trusted GCP projects that the GCE instance must belong to authenticate with Infisical.

allowedZones
string
default:

The comma-separated list of trusted zones that the GCE instances must belong to authenticate with Infisical.

accessTokenTrustedIps
object[]

The IPs or CIDR ranges that access tokens can be used from.

accessTokenTTL
integer
default: 2592000

The lifetime for an access token in seconds.

Required range: 1 < x < 315360000
accessTokenMaxTTL
integer
default: 2592000

The maximum lifetime for an access token in seconds.

Required range: x < 315360000
accessTokenNumUsesLimit
integer
default: 0

The maximum number of times that an access token can be used.

Required range: x > 0

Response

200 - application/json
identityGcpAuth
object
required

Was this page helpful?