Modifying audience string

hashicorp · Oct 24, 2023 · a74d7bd · a74d7bd
1 parent 1c00c77
commit a74d7bd
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/provider/auth_gcp.go b/internal/provider/auth_gcp.go
@@ -210,7 +210,7 @@ func (l *AuthLoginGCP) getJWT(ctx context.Context) (string, error) {
 	if metadata.OnGCE() {
 		// If we are running on GCE instance we can get the JWT token
 		// from the meta-data service.
-		audience := fmt.Sprintf("%s/vault", l.params[consts.FieldRole])
+		audience := fmt.Sprintf("vault/%s", l.params[consts.FieldRole])
 		c := metadata.NewClient(nil)
 		resp, err := c.Get(
 			fmt.Sprintf("instance/service-accounts/default/identity?audience=%s&format=full", audience),