Skip to content

Commit c31911a

Browse files
Update workload-identity-authentication.md
1 parent fe4c2de commit c31911a

File tree

1 file changed

+11
-11
lines changed

1 file changed

+11
-11
lines changed

docs/details/workload-identity-authentication.md

Lines changed: 11 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ This is how Workload Identity Federation Works:
2323

2424
5. Backups are uploaded securely to GCS without static keys.
2525

26-
With Workload Identity Authentication, PBM relies on **Application Default Credentials** (ADC) provided by the runtime (for example, GKE metadata server, or an external Workload Identity Federation credential configuration file). When ADC is available, PBM can upload and download backups from GCS **without embedding JSON private keys** in the PBM config.
26+
With Workload Identity Authentication, PBM relies on **Application Default Credentials** (ADC) provided by the runtime (for example, GKE metadata server, or an external Workload Identity Federation credential configuration file). When ADC is available, PBM can upload and download backups from GCS **without embedding JSON private keys** in the PBM config.
2727

2828
## Configuration steps
2929

@@ -90,16 +90,16 @@ Follow theese steps to configure Workload Identity Federation for PBM:
9090
pbm config --file pbm_config.yaml
9191
```
9292
93-
??? Example "Example PBM configuration snippet"
94-
```yaml
95-
storage:
96-
type: gcs
97-
bucket: my-backup-bucket
98-
auth:
99-
method: workload-identity
100-
provider: pbm-provider
101-
service-account: pbm-backup sa@PROJECT_ID.iam.gserviceaccount.com
102-
```
93+
??? Example "Example PBM configuration snippet"
94+
```yaml
95+
storage:
96+
type: gcs
97+
bucket: my-backup-bucket
98+
auth:
99+
method: workload-identity
100+
provider: pbm-provider
101+
service-account: pbm-backup sa@PROJECT_ID.iam.gserviceaccount.com
102+
```
103103
104104
!!! note
105105
- **PBM version:** Ensure you are using PBM 2.10.0 or higher. Earlier versions used the AWS SDK (S3 compatibility) which required HMAC keys.

0 commit comments

Comments
 (0)