From 1a7cd116a77d12af5df6a7cdd61c358a3324fcbb Mon Sep 17 00:00:00 2001 From: Tommy Murphy <1523807+tam7t@users.noreply.github.com> Date: Fri, 7 Dec 2018 18:10:30 -0500 Subject: [PATCH] Correct GCE Token Parameter (#5667) As written the GCE token curl results in an error: "non-empty audience parameter required". Google's docs (https://cloud.google.com/compute/docs/instances/verifying-instance-identity) confirm that the parameter is 'audience' not 'aud'. --- website/source/docs/auth/gcp.html.md | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/website/source/docs/auth/gcp.html.md b/website/source/docs/auth/gcp.html.md index d0f735b99d..510922c9fb 100644 --- a/website/source/docs/auth/gcp.html.md +++ b/website/source/docs/auth/gcp.html.md @@ -276,14 +276,13 @@ commands from the GCE instance.** The JWT token can be obtained from the ```text ROLE="my-gce-role" -SERVICE_ACCOUNT="service-account@my-project.iam.gserviceaccount.com" curl \ --header "Metadata-Flavor: Google" \ --get \ - --data-urlencode "aud=http://vault/${ROLE}" \ + --data-urlencode "audience=http://vault/${ROLE}" \ --data-urlencode "format=full" \ - "http://metadata/computeMetadata/v1/instance/service-accounts/${SERVICE_ACCOUNT}/identity" + "http://metadata/computeMetadata/v1/instance/service-accounts/default/identity" ``` ## API