Skip to content

Commit ed82074

Browse files
author
Lee Fine
committed
Merge branch 'ab#67448' of https://github.com/Keyfactor/gcp-certmanager-orchestrator into ab#67448
2 parents 2377d90 + 8d00928 commit ed82074

File tree

1 file changed

+3
-35
lines changed

1 file changed

+3
-35
lines changed

README.md

Lines changed: 3 additions & 35 deletions
Original file line numberDiff line numberDiff line change
@@ -120,7 +120,7 @@ To use the Google Cloud Provider Certificate Manager Universal Orchestrator exte
120120

121121
| Name | Display Name | Description | Type | Default Value/Options | Required |
122122
| ---- | ------------ | ---- | --------------------- | -------- | ----------- |
123-
| Location | Location | **global** is the default but could be another region based on the project. | String | global | ✅ Checked |
123+
| Location | Location | The GCP region used for this Certificate Manager instance. **global** is the default but could be another region based on the project. | String | global | ✅ Checked |
124124
| ServiceAccountKey | Service Account Key File Path | The file name of the Google Cloud Service Account Key File installed in the same folder as the orchestrator extension. Empty if the orchestrator server resides in GCP and you are not using a service account key. | String | | 🔲 Unchecked |
125125

126126
The Custom Fields tab should look like this:
@@ -165,12 +165,6 @@ To use the Google Cloud Provider Certificate Manager Universal Orchestrator exte
165165
Refer to [Starting/Restarting the Universal Orchestrator service](https://software.keyfactor.com/Core-OnPrem/Current/Content/InstallingAgents/NetCoreOrchestrator/StarttheService.htm).
166166
167167
168-
6. **(optional) PAM Integration**
169-
170-
The Google Cloud Provider Certificate Manager Universal Orchestrator extension is compatible with all supported Keyfactor PAM extensions to resolve PAM-eligible secrets. PAM extensions running on Universal Orchestrators enable secure retrieval of secrets from a connected PAM provider.
171-
172-
To configure a PAM provider, [reference the Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam) to select an extension, and follow the associated instructions to install it on the Universal Orchestrator (remote).
173-
174168
175169
> The above installation steps can be supplimented by the [official Command documentation](https://software.keyfactor.com/Core-OnPrem/Current/Content/InstallingAgents/NetCoreOrchestrator/CustomExtensions.htm?Highlight=extensions).
176170
@@ -198,26 +192,12 @@ To use the Google Cloud Provider Certificate Manager Universal Orchestrator exte
198192
| Client Machine | GCP Project ID for your account. |
199193
| Store Path | This is not used and should be defaulted to n/a per the certificate store type set up. |
200194
| Orchestrator | Select an approved orchestrator capable of managing `GcpCertMgr` certificates. Specifically, one with the `GcpCertMgr` capability. |
201-
| Location | **global** is the default but could be another region based on the project. |
195+
| Location | The GCP region used for this Certificate Manager instance. **global** is the default but could be another region based on the project. |
202196
| ServiceAccountKey | The file name of the Google Cloud Service Account Key File installed in the same folder as the orchestrator extension. Empty if the orchestrator server resides in GCP and you are not using a service account key. |
203197
204198
205199
206200
207-
<details><summary>Attributes eligible for retrieval by a PAM Provider on the Universal Orchestrator</summary>
208-
209-
If a PAM provider was installed _on the Universal Orchestrator_ in the [Installation](#Installation) section, the following parameters can be configured for retrieval _on the Universal Orchestrator_.
210-
| Attribute | Description |
211-
| --------- | ----------- |
212-
| Location | **global** is the default but could be another region based on the project. |
213-
214-
215-
Please refer to the **Universal Orchestrator (remote)** usage section ([PAM providers on the Keyfactor Integration Catalog](https://keyfactor.github.io/integrations-catalog/content/pam)) for your selected PAM provider for instructions on how to load attributes orchestrator-side.
216-
217-
> Any secret can be rendered by a PAM provider _installed on the Keyfactor Command server_. The above parameters are specific to attributes that can be fetched by an installed PAM provider running on the Universal Orchestrator server itself.
218-
</details>
219-
220-
221201
</details>
222202
223203
* **Using kfutil**
@@ -239,24 +219,12 @@ To use the Google Cloud Provider Certificate Manager Universal Orchestrator exte
239219
| Client Machine | GCP Project ID for your account. |
240220
| Store Path | This is not used and should be defaulted to n/a per the certificate store type set up. |
241221
| Orchestrator | Select an approved orchestrator capable of managing `GcpCertMgr` certificates. Specifically, one with the `GcpCertMgr` capability. |
242-
| Location | **global** is the default but could be another region based on the project. |
222+
| Location | The GCP region used for this Certificate Manager instance. **global** is the default but could be another region based on the project. |
243223
| ServiceAccountKey | The file name of the Google Cloud Service Account Key File installed in the same folder as the orchestrator extension. Empty if the orchestrator server resides in GCP and you are not using a service account key. |
244224
245225
246226
247227
248-
<details><summary>Attributes eligible for retrieval by a PAM Provider on the Universal Orchestrator</summary>
249-
250-
If a PAM provider was installed _on the Universal Orchestrator_ in the [Installation](#Installation) section, the following parameters can be configured for retrieval _on the Universal Orchestrator_.
251-
| Attribute | Description |
252-
| --------- | ----------- |
253-
| Location | **global** is the default but could be another region based on the project. |
254-
255-
256-
> Any secret can be rendered by a PAM provider _installed on the Keyfactor Command server_. The above parameters are specific to attributes that can be fetched by an installed PAM provider running on the Universal Orchestrator server itself.
257-
</details>
258-
259-
260228
3. **Import the CSV file to create the certificate stores**
261229
262230
```shell

0 commit comments

Comments
 (0)