mirror of
https://github.com/optim-enterprises-bv/vault.git
synced 2025-11-01 11:08:10 +00:00
06df5b9d95
* Adding check-legacy-links-format workflow * Adding test-link-rewrites workflow * Updating docs-content-check-legacy-links-format hash * Migrating links to new format Co-authored-by: Kendall Strautman <kendallstrautman@gmail.com>
25 lines
914 B
Plaintext
25 lines
914 B
Plaintext
---
|
|
layout: docs
|
|
page_title: Vault Agent Auto-Auth Kubernetes Method
|
|
description: Kubernetes Method for Vault Agent Auto-Auth
|
|
---
|
|
|
|
# Vault Agent Auto-Auth Kubernetes Method
|
|
|
|
The `kubernetes` method reads in a Kubernetes service account token from the
|
|
running pod (via `/var/run/secrets/kubernetes.io/serviceaccount/token`) and
|
|
sends it to the [Kubernetes Auth
|
|
method](/vault/docs/auth/kubernetes/).
|
|
|
|
## Configuration
|
|
|
|
- `role` `(string: required)` - The role to authenticate against on Vault
|
|
- `token_path` `(string: optional)` - The file path to a custom JWT token to use
|
|
for authentication. If omitted, the default service account token path is used.
|
|
|
|
## Tutorial
|
|
|
|
Refer to the [Vault Agent with
|
|
Kubernetes](https://learn.hashicorp.com/vault/identity-access-management/vault-agent-k8s)
|
|
tutorial to learn how to authenticate the clients using a Kubernetes Service Account Token and manage the tokens lifecycle.
|