POST
/
api
/
v1
/
auth
/
gcp-auth
/
identities
/
{identityId}
curl --request POST \
  --url https://us.infisical.com/api/v1/auth/gcp-auth/identities/{identityId} \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{
  "type": "iam",
  "allowedServiceAccounts": "",
  "allowedProjects": "",
  "allowedZones": "",
  "accessTokenTrustedIps": [
    {
      "ipAddress": "0.0.0.0/0"
    },
    {
      "ipAddress": "::/0"
    }
  ],
  "accessTokenTTL": 2592000,
  "accessTokenMaxTTL": 2592000,
  "accessTokenNumUsesLimit": 0
}'
{
  "identityGcpAuth": {
    "id": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "accessTokenTTL": 7200,
    "accessTokenMaxTTL": 7200,
    "accessTokenNumUsesLimit": 0,
    "accessTokenTrustedIps": "<any>",
    "createdAt": "2023-11-07T05:31:56Z",
    "updatedAt": "2023-11-07T05:31:56Z",
    "identityId": "3c90c3cc-0d44-4b50-8888-8dd25736052a",
    "type": "<string>",
    "allowedServiceAccounts": "<string>",
    "allowedProjects": "<string>",
    "allowedZones": "<string>"
  }
}

Authorizations

​
Authorization
string
header
required

An access token in Infisical

Path Parameters

​
identityId
string
required

The ID of the identity to attach the configuration onto.

Body

application/json
​
type
enum<string>
required
Available options:
iam,
gce
​
allowedServiceAccounts
string
default:

The comma-separated list of trusted service account emails corresponding to the GCE resource(s) allowed to authenticate with Infisical.

​
allowedProjects
string
default:

The comma-separated list of trusted GCP projects that the GCE instance must belong to authenticate with Infisical.

​
allowedZones
string
default:

The comma-separated list of trusted zones that the GCE instances must belong to authenticate with Infisical.

​
accessTokenTrustedIps
object[]

The IPs or CIDR ranges that access tokens can be used from.

​
accessTokenTTL
integer
default:2592000

The lifetime for an access token in seconds.

Required range: 0 <= x <= 315360000
​
accessTokenMaxTTL
integer
default:2592000

The maximum lifetime for an access token in seconds.

Required range: 0 <= x <= 315360000
​
accessTokenNumUsesLimit
integer
default:0

The maximum number of times that an access token can be used.

Required range: x >= 0

Response

200
application/json
Default Response
​
identityGcpAuth
object
required

Was this page helpful?

Suggest editsRaise issue