slawek/gcp-wif-test
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Added Google Storage Transfer Agent configuration and tests.

Browse Source
This commit is contained in:
slawek committed 2026-10-19 12:46:19 +02:00
1 parent c43a99986a
commit 1a9cc618fa
13 files changed
+266 -4
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

docs/vault-userpass.md
+1 -1
View File
@@ -38,7 +38,7 @@ vault policy write pki-client pki-client.hcl
vault auth enable userpass
node vault_create_user.mjs --policy pki-client alice
./vault_create_user.mjs --policy pki-client alice
```
`vault_create_user.mjs` takes the user name and one or more `--policy` options, one for each policy. The optional `--token-ttl` (default `15m`) and `--token-max-ttl` (default `1h`) options set the lifetime of the tokens of the user. It asks for the password twice without echoing it and creates the user through the Vault HTTP API with the `VAULT_ADDR` and `VAULT_TOKEN` of the administrator. The password never appears in the process list or in the shell history. It needs only Node.js 24 or later, no npm packages. When the server certificate is issued by a private CA, point Node.js at the CA certificate: