Skip to content

vault/jwt-role

Vault role to authenticate as via JWT.

Name of the Vault role bound to this JWT identity. Required when vault/auth-method is jwt. The role's policies determine what the issued token can access.

Configure the role on the Vault side with, for example:

Text Only
vault write auth/<mount>/role/<role-name> \
    role_type=jwt \
    bound_audiences=vault \
    bound_subject=system:serviceaccount:openshift-config:default \
    user_claim=sub \
    token_policies=drp-vault \
    token_ttl=1h \
    token_max_ttl=4h

Objects that Reference vault/jwt-role

Not used in current content packs

Objects used by vault/jwt-role

Not used in current content packs