You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The [Userpass auth method](https://developer.hashicorp.com/vault/docs/auth/userpass) allows
264
+
your GitHub Actions workflow to authenticate to Vault with a username and password.
265
+
Set the username and password as GitHub secrets and pass them to the
266
+
`username`and `password` parameters.
267
+
268
+
This is not the same as ldap or okta auth methods.
269
+
270
+
```yaml
271
+
with:
272
+
url: https://vault.mycompany.com:8200
273
+
caCertificate: ${{ secrets.VAULT_CA_CERT }}
274
+
method: userpass
275
+
username: ${{ secrets.VAULT_USERNAME }}
276
+
password: ${{ secrets.VAULT_PASSWORD }}
277
+
```
278
+
279
+
### Ldap
280
+
281
+
The [LDAP auth method](https://developer.hashicorp.com/vault/docs/auth/ldap) allows
282
+
your GitHub Actions workflow to authenticate to Vault with a username and password inturn verfied with ldap servers.
283
+
Set the username and password as GitHub secrets and pass them to the
284
+
`username`and `password` parameters.
285
+
286
+
```yaml
287
+
with:
288
+
url: https://vault.mycompany.com:8200
289
+
caCertificate: ${{ secrets.VAULT_CA_CERT }}
290
+
method: ldap
291
+
username: ${{ secrets.VAULT_USERNAME }}
292
+
password: ${{ secrets.VAULT_PASSWORD }}
293
+
```
294
+
259
295
### Other Auth Methods
260
296
261
297
If any other method is specified and you provide an `authPayload`, the action will
@@ -437,6 +473,8 @@ Here are all the inputs available through `with`:
437
473
| `jwtGithubAudience` | Identifies the recipient ("aud" claim) that the JWT is intended for |`sigstore`| |
438
474
| `jwtTtl` | Time in seconds, after which token expires | | 3600 |
439
475
| `kubernetesTokenPath` | The path to the service-account secret with the jwt token for kubernetes based authentication |`/var/run/secrets/kubernetes.io/serviceaccount/token` | |
476
+
| `username` | The username of the user to log in to Vault as. Available to both Userpass and LDAP auth methods | | |
477
+
| `password` | The password of the user to log in to Vault as. Available to both Userpass and LDAP auth methods | | |
440
478
| `authPayload` | The JSON payload to be sent to Vault when using a custom authentication method. | | |
441
479
| `extraHeaders` | A string of newline separated extra headers to include on every request. | | |
442
480
| `exportEnv` | Whether or not export secrets as environment variables. | `true` | |
0 commit comments