Your DevOps team would like to provision VMs in GCP via a CICD pipeline. They would like to integrate Vault to protect the credentials used by the tool. Which secrets engine would you recommend?
The Google Cloud Secrets Engine in Vault allows dynamic creation of short-lived GCP IAM credentials. This is ideal for provisioning VMs securely in a CI/CD pipeline because:
It avoids storing long-lived credentials in pipeline configs.
Credentials can be automatically revoked after use.
It integrates directly with GCP IAM to create temporary service account keys.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
sadi123
1 month, 1 week agodaz_rekka
7 months, 4 weeks ago