terraform-provider/docs/resources/identity_gcp_auth.md

page_title, subcategory, description

page_title	subcategory	description
kms_identity_gcp_auth Resource - terraform-provider	Identities	Create and manage identity gcp auth in Hanzo KMS.

kms_identity_gcp_auth (Resource)

Create and manage identity gcp auth in Hanzo KMS.

Schema

Required

• identity_id (String) The ID of the identity to attach the configuration onto.

Optional

• access_token_max_ttl (Number) The maximum lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000
• access_token_num_uses_limit (Number) The maximum number of times that an access token can be used; a value of 0 implies infinite number of uses. Default:0
• access_token_trusted_ips (Attributes List) A list of IPs or CIDR ranges that access tokens can be used from. You can use 0.0.0.0/0, to allow usage from any network address.. (see below for nested schema)
• access_token_ttl (Number) The lifetime for an access token in seconds. This value will be referenced at renewal time. Default: 2592000
• allowed_projects (List of String) List of trusted GCP projects that the GCE instance must belong to authenticate with Hanzo KMS. Note that this validation property will only work for GCE instances
• allowed_service_account_emails (List of String) List of trusted service account emails corresponding to the GCE resource(s) allowed to authenticate with Hanzo KMS; this could be something like [email protected], [email protected], etc.
• allowed_zones (List of String) List of trusted zones that the GCE instances must belong to authenticate with Hanzo KMS; this should be the fully-qualified zone name in the format <region>-<zone>like us-central1-a, us-west1-b, etc. Note that this validation property will only work for GCE instances.
• type (String) The Type of GCP Auth Method to use: Options are gce, iam. Default:gce

Read-Only

• id (String) The ID of the gcp auth

Nested Schema for access_token_trusted_ips

Optional:

• ip_address (String)