Medium: Securing your workflow using Vault Agent with GCP Auth Method on HashiCorp Vault

vault-agent.hcl

vault {
  address = "https://10.234.56.78:8200"
  retry {
    num_retries = 3
  }
}

auto_auth {
  method "gcp" {
    mount_path = "auth/my-project-123"
    config = {
      type = "gce"
      role = "gce-role"
    }
  }
  sink "file" {
    config = {
      path = "/path/to/dir/vault-token-via-agent"
      mode = 0644
    }
  }
}

cache {
  use_auth_auth_token = true
}

listener "tcp" {
  address = "127.0.0.1:8100"
  tls_disable = true
}