vault/jwt¶

JWT presented at Vault login when vault/auth-method is jwt.

The JWT value the plugin presents at auth/<vault/jwt-mount>/login. Required when vault/auth-method is jwt.

Where this JWT comes from is your environment's choice: an OIDC identity provider Vault trusts (Auth0, Keycloak, etc.), a Kubernetes service-account token minted via oc create token or the TokenRequest API, or a long-lived JWT signed by anything Vault's JWT auth backend is configured to trust. The plugin does not mint JWTs; it only consumes them. Whatever automation rotates this JWT updates this param via drpcli plugins set (or the equivalent API call); the next plugin login picks up the new value.

Marked Secure so the JWT is encrypted at rest in DRP.

Objects that Reference vault/jwt¶

Not used in current content packs

Objects used by vault/jwt¶

Not used in current content packs