Skip to content

Commit b78a1c1

Browse files
committed
[OSDOCS-8304] Reinstates AWS and GCP short term creds details
1 parent f4c8556 commit b78a1c1

File tree

3 files changed

+3
-1
lines changed

3 files changed

+3
-1
lines changed
File renamed without changes.

modules/cco-short-term-creds-auth-flow-aws.adoc

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ The following diagram illustrates the authentication flow between AWS and the {p
3131
.AWS Security Token Service authentication flow
3232
image::347_OpenShift_credentials_with_STS_updates_0623_AWS.png[Detailed authentication flow between AWS and the cluster when using AWS STS]
3333

34-
Requests for new and refreshed credentials are automated by using an appropriately configured AWS IAM OpenID Connect (OIDC) identity provider, combined with AWS IAM roles. {product-title} signs service account tokens that are trusted by AWS IAM, and can be projected into a pod and used for authentication.
34+
Requests for new and refreshed credentials are automated by using an appropriately configured AWS IAM OpenID Connect (OIDC) identity provider, combined with AWS IAM roles. {product-title} signs service account tokens that are trusted by AWS IAM, and can be projected into a pod and used for authentication. Tokens are refreshed after one hour.
3535

3636
[id="cco-short-term-creds-auth-flow-aws-refresh-policy_{context}"]
3737
== Token refreshing for AWS STS

modules/cco-short-term-creds-auth-flow-gcp.adoc

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,8 @@
66
[id="cco-short-term-creds-auth-flow-gcp_{context}"]
77
= GCP Workload Identity authentication process
88

9+
Requests for new and refreshed credentials are automated by using an appropriately configured OpenID Connect (OIDC) identity provider combined with IAM service accounts. Service account tokens that are trusted by GCP are signed by {product-title} and can be projected into a pod and used for authentication. Tokens are refreshed after one hour.
10+
911
The following diagram details the authentication flow between GCP and the {product-title} cluster when using GCP Workload Identity.
1012

1113
.GCP Workload Identity authentication flow

0 commit comments

Comments
 (0)