ReadMeFeed / Community knowledge
Real questions. Useful conversations. Find the people who know your stack.
Learn how to create short‑lived, signed URLs for GCS objects using a service account key, with a Java example, limits, and common mistakes.
Vault Kubernetes Auth Configuration The Kubernetes auth method in Vault (v1.12+) relies on the vault.hashicorp.com/role annotation on a pod's service account to bind the identity to a specific Vault role. In local development environments, this annotation is often present by default or injected via local tooling, ensuring seamless secret retrieval. In produc
Goal: assess whether existing service account keys that lack an explicit expiration date will be automatically treated as expired once an organization policy enforces a maximum key lifetime, and understand the impact on workloads that continue to use downloadable keys versus those migrated to Workload Identity Federation. Constraints include the version‑sens
The goal is to grant a Compute Engine VM read‑only access to a single Cloud Storage bucket while adhering to least‑privilege principles. Two documented approaches are available: (1) create a service account, download its JSON key file, and attach the key to the VM; (2) configure Workload Identity Federation so the VM obtains short‑lived OAuth tokens from an
vault
google