Docs Home Pulumi IaC Pulumi ESC Pulumi Insights Pulumi Cloud Packages Tutorials
  1. Packages
  2. Akeyless Provider
  3. API Docs
  4. AuthMethodGcp
akeyless 1.9.0 published on Monday, Apr 14, 2025 by akeyless-community
akeyless-community/terraform-provider-akeyless

akeyless.AuthMethodGcp

Explore with Pulumi AI

akeyless 1.9.0 published on Monday, Apr 14, 2025 by akeyless-community
akeyless-community/terraform-provider-akeyless

GCE Auth Method Resource

Create AuthMethodGcp Resource

Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

Constructor syntax

new AuthMethodGcp(name: string, args: AuthMethodGcpArgs, opts?: CustomResourceOptions);
@overload
def AuthMethodGcp(resource_name: str,
                  args: AuthMethodGcpInitArgs,
                  opts: Optional[ResourceOptions] = None)

@overload
def AuthMethodGcp(resource_name: str,
                  opts: Optional[ResourceOptions] = None,
                  type: Optional[str] = None,
                  bound_service_accounts: Optional[Sequence[str]] = None,
                  force_sub_claims: Optional[bool] = None,
                  auth_method_gcp_id: Optional[str] = None,
                  bound_ips: Optional[Sequence[str]] = None,
                  bound_labels: Optional[Sequence[str]] = None,
                  bound_projects: Optional[Sequence[str]] = None,
                  audit_logs_claims: Optional[Sequence[str]] = None,
                  bound_zones: Optional[Sequence[str]] = None,
                  bound_regions: Optional[Sequence[str]] = None,
                  delete_protection: Optional[str] = None,
                  access_expires: Optional[float] = None,
                  jwt_ttl: Optional[float] = None,
                  name: Optional[str] = None,
                  service_account_creds_data: Optional[str] = None,
                  audience: Optional[str] = None)
func NewAuthMethodGcp(ctx *Context, name string, args AuthMethodGcpArgs, opts ...ResourceOption) (*AuthMethodGcp, error)
public AuthMethodGcp(string name, AuthMethodGcpArgs args, CustomResourceOptions? opts = null)
public AuthMethodGcp(String name, AuthMethodGcpArgs args)
public AuthMethodGcp(String name, AuthMethodGcpArgs args, CustomResourceOptions options)

type: akeyless:AuthMethodGcp
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.

Parameters

name This property is required. string
The unique name of the resource.
args This property is required. AuthMethodGcpArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
resource_name This property is required. str
The unique name of the resource.
args This property is required. AuthMethodGcpInitArgs
The arguments to resource properties.
opts ResourceOptions
Bag of options to control resource's behavior.
ctx Context
Context object for the current deployment.
name This property is required. string
The unique name of the resource.
args This property is required. AuthMethodGcpArgs
The arguments to resource properties.
opts ResourceOption
Bag of options to control resource's behavior.
name This property is required. string
The unique name of the resource.
args This property is required. AuthMethodGcpArgs
The arguments to resource properties.
opts CustomResourceOptions
Bag of options to control resource's behavior.
name This property is required. String
The unique name of the resource.
args This property is required. AuthMethodGcpArgs
The arguments to resource properties.
options CustomResourceOptions
Bag of options to control resource's behavior.

Constructor example

The following reference example uses placeholder values for all input properties.

var authMethodGcpResource = new Akeyless.AuthMethodGcp("authMethodGcpResource", new()
{
    Type = "string",
    BoundServiceAccounts = new[]
    {
        "string",
    },
    ForceSubClaims = false,
    AuthMethodGcpId = "string",
    BoundIps = new[]
    {
        "string",
    },
    BoundLabels = new[]
    {
        "string",
    },
    BoundProjects = new[]
    {
        "string",
    },
    AuditLogsClaims = new[]
    {
        "string",
    },
    BoundZones = new[]
    {
        "string",
    },
    BoundRegions = new[]
    {
        "string",
    },
    DeleteProtection = "string",
    AccessExpires = 0,
    JwtTtl = 0,
    Name = "string",
    ServiceAccountCredsData = "string",
    Audience = "string",
});
Copy
example, err := akeyless.NewAuthMethodGcp(ctx, "authMethodGcpResource", &akeyless.AuthMethodGcpArgs{
Type: pulumi.String("string"),
BoundServiceAccounts: pulumi.StringArray{
pulumi.String("string"),
},
ForceSubClaims: pulumi.Bool(false),
AuthMethodGcpId: pulumi.String("string"),
BoundIps: pulumi.StringArray{
pulumi.String("string"),
},
BoundLabels: pulumi.StringArray{
pulumi.String("string"),
},
BoundProjects: pulumi.StringArray{
pulumi.String("string"),
},
AuditLogsClaims: pulumi.StringArray{
pulumi.String("string"),
},
BoundZones: pulumi.StringArray{
pulumi.String("string"),
},
BoundRegions: pulumi.StringArray{
pulumi.String("string"),
},
DeleteProtection: pulumi.String("string"),
AccessExpires: pulumi.Float64(0),
JwtTtl: pulumi.Float64(0),
Name: pulumi.String("string"),
ServiceAccountCredsData: pulumi.String("string"),
Audience: pulumi.String("string"),
})
Copy
var authMethodGcpResource = new AuthMethodGcp("authMethodGcpResource", AuthMethodGcpArgs.builder()
    .type("string")
    .boundServiceAccounts("string")
    .forceSubClaims(false)
    .authMethodGcpId("string")
    .boundIps("string")
    .boundLabels("string")
    .boundProjects("string")
    .auditLogsClaims("string")
    .boundZones("string")
    .boundRegions("string")
    .deleteProtection("string")
    .accessExpires(0)
    .jwtTtl(0)
    .name("string")
    .serviceAccountCredsData("string")
    .audience("string")
    .build());
Copy
auth_method_gcp_resource = akeyless.AuthMethodGcp("authMethodGcpResource",
    type="string",
    bound_service_accounts=["string"],
    force_sub_claims=False,
    auth_method_gcp_id="string",
    bound_ips=["string"],
    bound_labels=["string"],
    bound_projects=["string"],
    audit_logs_claims=["string"],
    bound_zones=["string"],
    bound_regions=["string"],
    delete_protection="string",
    access_expires=0,
    jwt_ttl=0,
    name="string",
    service_account_creds_data="string",
    audience="string")
Copy
const authMethodGcpResource = new akeyless.AuthMethodGcp("authMethodGcpResource", {
    type: "string",
    boundServiceAccounts: ["string"],
    forceSubClaims: false,
    authMethodGcpId: "string",
    boundIps: ["string"],
    boundLabels: ["string"],
    boundProjects: ["string"],
    auditLogsClaims: ["string"],
    boundZones: ["string"],
    boundRegions: ["string"],
    deleteProtection: "string",
    accessExpires: 0,
    jwtTtl: 0,
    name: "string",
    serviceAccountCredsData: "string",
    audience: "string",
});
Copy
type: akeyless:AuthMethodGcp
properties:
    accessExpires: 0
    audience: string
    auditLogsClaims:
        - string
    authMethodGcpId: string
    boundIps:
        - string
    boundLabels:
        - string
    boundProjects:
        - string
    boundRegions:
        - string
    boundServiceAccounts:
        - string
    boundZones:
        - string
    deleteProtection: string
    forceSubClaims: false
    jwtTtl: 0
    name: string
    serviceAccountCredsData: string
    type: string
Copy

AuthMethodGcp Resource Properties

To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

Inputs

In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

The AuthMethodGcp resource accepts the following input properties:

Type This property is required. string
The type of the GCP Auth Method (iam/gce)
AccessExpires double
Access expiration date in Unix timestamp (select 0 for access without expiry date)
Audience string
The audience to verify in the JWT received by the client
AuditLogsClaims List<string>
Subclaims to include in audit logs
AuthMethodGcpId string
The ID of this resource.
BoundIps List<string>
A CIDR whitelist with the IPs that the access is restricted to
BoundLabels List<string>
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
BoundProjects List<string>
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
BoundRegions List<string>
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
BoundServiceAccounts List<string>
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
BoundZones List<string>
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
DeleteProtection string
Protection from accidental deletion of this auth method, [true/false]
ForceSubClaims bool
enforce role-association must include sub claims
JwtTtl double
Creds expiration time in minutes
Name string
Auth Method name
ServiceAccountCredsData string
Service Account creds data, base64 encoded
Type This property is required. string
The type of the GCP Auth Method (iam/gce)
AccessExpires float64
Access expiration date in Unix timestamp (select 0 for access without expiry date)
Audience string
The audience to verify in the JWT received by the client
AuditLogsClaims []string
Subclaims to include in audit logs
AuthMethodGcpId string
The ID of this resource.
BoundIps []string
A CIDR whitelist with the IPs that the access is restricted to
BoundLabels []string
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
BoundProjects []string
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
BoundRegions []string
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
BoundServiceAccounts []string
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
BoundZones []string
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
DeleteProtection string
Protection from accidental deletion of this auth method, [true/false]
ForceSubClaims bool
enforce role-association must include sub claims
JwtTtl float64
Creds expiration time in minutes
Name string
Auth Method name
ServiceAccountCredsData string
Service Account creds data, base64 encoded
type This property is required. String
The type of the GCP Auth Method (iam/gce)
accessExpires Double
Access expiration date in Unix timestamp (select 0 for access without expiry date)
audience String
The audience to verify in the JWT received by the client
auditLogsClaims List<String>
Subclaims to include in audit logs
authMethodGcpId String
The ID of this resource.
boundIps List<String>
A CIDR whitelist with the IPs that the access is restricted to
boundLabels List<String>
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
boundProjects List<String>
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
boundRegions List<String>
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
boundServiceAccounts List<String>
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
boundZones List<String>
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
deleteProtection String
Protection from accidental deletion of this auth method, [true/false]
forceSubClaims Boolean
enforce role-association must include sub claims
jwtTtl Double
Creds expiration time in minutes
name String
Auth Method name
serviceAccountCredsData String
Service Account creds data, base64 encoded
type This property is required. string
The type of the GCP Auth Method (iam/gce)
accessExpires number
Access expiration date in Unix timestamp (select 0 for access without expiry date)
audience string
The audience to verify in the JWT received by the client
auditLogsClaims string[]
Subclaims to include in audit logs
authMethodGcpId string
The ID of this resource.
boundIps string[]
A CIDR whitelist with the IPs that the access is restricted to
boundLabels string[]
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
boundProjects string[]
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
boundRegions string[]
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
boundServiceAccounts string[]
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
boundZones string[]
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
deleteProtection string
Protection from accidental deletion of this auth method, [true/false]
forceSubClaims boolean
enforce role-association must include sub claims
jwtTtl number
Creds expiration time in minutes
name string
Auth Method name
serviceAccountCredsData string
Service Account creds data, base64 encoded
type This property is required. str
The type of the GCP Auth Method (iam/gce)
access_expires float
Access expiration date in Unix timestamp (select 0 for access without expiry date)
audience str
The audience to verify in the JWT received by the client
audit_logs_claims Sequence[str]
Subclaims to include in audit logs
auth_method_gcp_id str
The ID of this resource.
bound_ips Sequence[str]
A CIDR whitelist with the IPs that the access is restricted to
bound_labels Sequence[str]
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
bound_projects Sequence[str]
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
bound_regions Sequence[str]
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
bound_service_accounts Sequence[str]
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
bound_zones Sequence[str]
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
delete_protection str
Protection from accidental deletion of this auth method, [true/false]
force_sub_claims bool
enforce role-association must include sub claims
jwt_ttl float
Creds expiration time in minutes
name str
Auth Method name
service_account_creds_data str
Service Account creds data, base64 encoded
type This property is required. String
The type of the GCP Auth Method (iam/gce)
accessExpires Number
Access expiration date in Unix timestamp (select 0 for access without expiry date)
audience String
The audience to verify in the JWT received by the client
auditLogsClaims List<String>
Subclaims to include in audit logs
authMethodGcpId String
The ID of this resource.
boundIps List<String>
A CIDR whitelist with the IPs that the access is restricted to
boundLabels List<String>
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
boundProjects List<String>
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
boundRegions List<String>
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
boundServiceAccounts List<String>
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
boundZones List<String>
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
deleteProtection String
Protection from accidental deletion of this auth method, [true/false]
forceSubClaims Boolean
enforce role-association must include sub claims
jwtTtl Number
Creds expiration time in minutes
name String
Auth Method name
serviceAccountCredsData String
Service Account creds data, base64 encoded

Outputs

All input properties are implicitly available as output properties. Additionally, the AuthMethodGcp resource produces the following output properties:

AccessId string
Auth Method access ID
Id string
The provider-assigned unique ID for this managed resource.
AccessId string
Auth Method access ID
Id string
The provider-assigned unique ID for this managed resource.
accessId String
Auth Method access ID
id String
The provider-assigned unique ID for this managed resource.
accessId string
Auth Method access ID
id string
The provider-assigned unique ID for this managed resource.
access_id str
Auth Method access ID
id str
The provider-assigned unique ID for this managed resource.
accessId String
Auth Method access ID
id String
The provider-assigned unique ID for this managed resource.

Look up Existing AuthMethodGcp Resource

Get an existing AuthMethodGcp resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

public static get(name: string, id: Input<ID>, state?: AuthMethodGcpState, opts?: CustomResourceOptions): AuthMethodGcp
@staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        access_expires: Optional[float] = None,
        access_id: Optional[str] = None,
        audience: Optional[str] = None,
        audit_logs_claims: Optional[Sequence[str]] = None,
        auth_method_gcp_id: Optional[str] = None,
        bound_ips: Optional[Sequence[str]] = None,
        bound_labels: Optional[Sequence[str]] = None,
        bound_projects: Optional[Sequence[str]] = None,
        bound_regions: Optional[Sequence[str]] = None,
        bound_service_accounts: Optional[Sequence[str]] = None,
        bound_zones: Optional[Sequence[str]] = None,
        delete_protection: Optional[str] = None,
        force_sub_claims: Optional[bool] = None,
        jwt_ttl: Optional[float] = None,
        name: Optional[str] = None,
        service_account_creds_data: Optional[str] = None,
        type: Optional[str] = None) -> AuthMethodGcp
func GetAuthMethodGcp(ctx *Context, name string, id IDInput, state *AuthMethodGcpState, opts ...ResourceOption) (*AuthMethodGcp, error)
public static AuthMethodGcp Get(string name, Input<string> id, AuthMethodGcpState? state, CustomResourceOptions? opts = null)
public static AuthMethodGcp get(String name, Output<String> id, AuthMethodGcpState state, CustomResourceOptions options)
resources:  _:    type: akeyless:AuthMethodGcp    get:      id: ${id}
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
resource_name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
name This property is required.
The unique name of the resulting resource.
id This property is required.
The unique provider ID of the resource to lookup.
state
Any extra arguments used during the lookup.
opts
A bag of options that control this resource's behavior.
The following state arguments are supported:
AccessExpires double
Access expiration date in Unix timestamp (select 0 for access without expiry date)
AccessId string
Auth Method access ID
Audience string
The audience to verify in the JWT received by the client
AuditLogsClaims List<string>
Subclaims to include in audit logs
AuthMethodGcpId string
The ID of this resource.
BoundIps List<string>
A CIDR whitelist with the IPs that the access is restricted to
BoundLabels List<string>
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
BoundProjects List<string>
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
BoundRegions List<string>
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
BoundServiceAccounts List<string>
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
BoundZones List<string>
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
DeleteProtection string
Protection from accidental deletion of this auth method, [true/false]
ForceSubClaims bool
enforce role-association must include sub claims
JwtTtl double
Creds expiration time in minutes
Name string
Auth Method name
ServiceAccountCredsData string
Service Account creds data, base64 encoded
Type string
The type of the GCP Auth Method (iam/gce)
AccessExpires float64
Access expiration date in Unix timestamp (select 0 for access without expiry date)
AccessId string
Auth Method access ID
Audience string
The audience to verify in the JWT received by the client
AuditLogsClaims []string
Subclaims to include in audit logs
AuthMethodGcpId string
The ID of this resource.
BoundIps []string
A CIDR whitelist with the IPs that the access is restricted to
BoundLabels []string
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
BoundProjects []string
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
BoundRegions []string
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
BoundServiceAccounts []string
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
BoundZones []string
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
DeleteProtection string
Protection from accidental deletion of this auth method, [true/false]
ForceSubClaims bool
enforce role-association must include sub claims
JwtTtl float64
Creds expiration time in minutes
Name string
Auth Method name
ServiceAccountCredsData string
Service Account creds data, base64 encoded
Type string
The type of the GCP Auth Method (iam/gce)
accessExpires Double
Access expiration date in Unix timestamp (select 0 for access without expiry date)
accessId String
Auth Method access ID
audience String
The audience to verify in the JWT received by the client
auditLogsClaims List<String>
Subclaims to include in audit logs
authMethodGcpId String
The ID of this resource.
boundIps List<String>
A CIDR whitelist with the IPs that the access is restricted to
boundLabels List<String>
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
boundProjects List<String>
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
boundRegions List<String>
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
boundServiceAccounts List<String>
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
boundZones List<String>
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
deleteProtection String
Protection from accidental deletion of this auth method, [true/false]
forceSubClaims Boolean
enforce role-association must include sub claims
jwtTtl Double
Creds expiration time in minutes
name String
Auth Method name
serviceAccountCredsData String
Service Account creds data, base64 encoded
type String
The type of the GCP Auth Method (iam/gce)
accessExpires number
Access expiration date in Unix timestamp (select 0 for access without expiry date)
accessId string
Auth Method access ID
audience string
The audience to verify in the JWT received by the client
auditLogsClaims string[]
Subclaims to include in audit logs
authMethodGcpId string
The ID of this resource.
boundIps string[]
A CIDR whitelist with the IPs that the access is restricted to
boundLabels string[]
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
boundProjects string[]
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
boundRegions string[]
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
boundServiceAccounts string[]
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
boundZones string[]
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
deleteProtection string
Protection from accidental deletion of this auth method, [true/false]
forceSubClaims boolean
enforce role-association must include sub claims
jwtTtl number
Creds expiration time in minutes
name string
Auth Method name
serviceAccountCredsData string
Service Account creds data, base64 encoded
type string
The type of the GCP Auth Method (iam/gce)
access_expires float
Access expiration date in Unix timestamp (select 0 for access without expiry date)
access_id str
Auth Method access ID
audience str
The audience to verify in the JWT received by the client
audit_logs_claims Sequence[str]
Subclaims to include in audit logs
auth_method_gcp_id str
The ID of this resource.
bound_ips Sequence[str]
A CIDR whitelist with the IPs that the access is restricted to
bound_labels Sequence[str]
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
bound_projects Sequence[str]
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
bound_regions Sequence[str]
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
bound_service_accounts Sequence[str]
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
bound_zones Sequence[str]
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
delete_protection str
Protection from accidental deletion of this auth method, [true/false]
force_sub_claims bool
enforce role-association must include sub claims
jwt_ttl float
Creds expiration time in minutes
name str
Auth Method name
service_account_creds_data str
Service Account creds data, base64 encoded
type str
The type of the GCP Auth Method (iam/gce)
accessExpires Number
Access expiration date in Unix timestamp (select 0 for access without expiry date)
accessId String
Auth Method access ID
audience String
The audience to verify in the JWT received by the client
auditLogsClaims List<String>
Subclaims to include in audit logs
authMethodGcpId String
The ID of this resource.
boundIps List<String>
A CIDR whitelist with the IPs that the access is restricted to
boundLabels List<String>
GCE only. A list of GCP labels formatted as key:value pairs that must be set on instances in order to authenticate. For multiple values repeat this flag.
boundProjects List<String>
A list of GCP project IDs. Clients must belong to any of the provided projects in order to authenticate. For multiple values repeat this flag.
boundRegions List<String>
GCE only. A list of regions. GCE instances must belong to any of the provided regions in order to authenticate. For multiple values repeat this flag.
boundServiceAccounts List<String>
A list of Service Accounts. Clients must belong to any of the provided service accounts in order to authenticate. For multiple values repeat this flag.
boundZones List<String>
GCE only. A list of zones. GCE instances must belong to any of the provided zones in order to authenticate. For multiple values repeat this flag.
deleteProtection String
Protection from accidental deletion of this auth method, [true/false]
forceSubClaims Boolean
enforce role-association must include sub claims
jwtTtl Number
Creds expiration time in minutes
name String
Auth Method name
serviceAccountCredsData String
Service Account creds data, base64 encoded
type String
The type of the GCP Auth Method (iam/gce)

Package Details

Repository
akeyless akeyless-community/terraform-provider-akeyless
License
Notes
This Pulumi package is based on the akeyless Terraform Provider.
akeyless 1.9.0 published on Monday, Apr 14, 2025 by akeyless-community
akeyless-community/terraform-provider-akeyless