Configure targets with credential brokering

Configure targets with credential brokering

출처: HashiCorp Boundary docs

Configuring credential brokering for a target lets Boundary return the matching credential to a user automatically when they connect, instead of requiring them to look it up separately. Boundary supports brokering credentials from both static and Vault credential stores.

This page assumes you already have a target and a credential store configured; it covers only the step of associating a credential with that target for brokering.

Requirements

  • To configure a static credential store, refer to Create static credential stores.To configure a Vault credential store and credential library, refer to Create Vault credential stores.

Add brokered credentials to a target

Complete the following steps to configure credential brokering for a target: UI CLI Terraform

  • Log in to Boundary.

  • Select Orgs on the navigation pane.

  • Select your desired org.

  • Select the project where your target resides.

  • Click Targets on the navigation pane.

  • Click on the target you want to configure for credential brokering.

  • Click on the Brokered Credential tab.

  • Click Managed and select Add Brokered Credential in the pull down menu.

  • Do one of the following:If you are using a static credential store: Select the credential that corresponds to your target and click Add Brokered Credentials.If you are using a Vault credential store: Select the credential library that corresponds to your target and click Add Brokered Credentials.

$ boundary authenticate Please enter the login name (it will be hidden): Please enter the password (it will be hidden):

- ```
$ boundary targets add-credential-sources \
  -id ttcp_vO60a7TwpI \
  -brokered-credential-source csvlt_Xqa6V6QwfM

Target information: ID: ttcp_vO60a7TwpI Brokered Credential Sources: csvlt_Xqa6V6QwfM


Tip
If you are using a static credential store, `brokered-credential-source` refers to the ID of a **credential** in the static credential store.

If you are using a Vault credential store, `brokered-credential-source` refers to the ID of a **credential library** in the Vault credential store.
Apply the following Terraform configuration to create a target `foo` and add
brokered credentials to it.

resource "boundary_target" "foo" { name = "foo" description = "Foo target" type = "tcp" address = "127.0.0.1" default_port = "22" scope_id = boundary_scope.project.id brokered_credential_source_ids = [ boundary_credential_library_vault.foo.id ] }


## More information

Refer to the following topics for more information:

- Create static credential stores
- Create Vault credential stores
- Target types

Edit this page on GitHub