fix: GCP KMS integration test configuration parsing

.github/workflows/build.yaml

@@ -137,8 +137,8 @@ jobs:
         if: "!startsWith(github.ref, 'refs/tags/v')"
 
   integration-tests:
-    # if: "!startsWith(github.ref, 'refs/tags/v')"
-    if: false
+    if: "!startsWith(github.ref, 'refs/tags/v')"
+    # if: false
     needs: deploy-ec2
     runs-on: ubuntu-latest
     strategy:
@@ -190,21 +190,17 @@ jobs:
           VAULT_AZ_TZ2: ${{ secrets.INTEGRATIONTEST_VAULT_AZ_TZ2 }}
           VAULT_AZ_TZ3: ${{ secrets.INTEGRATIONTEST_VAULT_AZ_TZ3 }}
           VAULT_AZ_TZ3_PK: ${{ secrets.INTEGRATIONTEST_VAULT_AZ_TZ3_PK }}
+          GCP_SERVICE_ACCOUNT_KEY: ${{ secrets.GCP_SERVICE_ACCOUNT_KEY }}
           VAULT_GCP_PROJECTID: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_PROJECTID }}
-          VAULT_GCP_PRIVATEKEYID: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_PRIVATEKEYID }}
-          VAULT_GCP_PRIVATEKEY: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_PRIVATEKEY }}
-          VAULT_GCP_CLIENTEMAIL: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_CLIENTEMAIL }}
-          VAULT_GCP_CLIENTID: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_CLIENTID }}
-          VAULT_GCP_X509_URL: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_X509_URL }}
-          VAULT_GCP_KEYRING: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_KEYRING }}
           VAULT_GCP_LOCATION: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_LOCATION }}
+          VAULT_GCP_KEYRING: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_KEYRING }}
           VAULT_GCP_TZ3: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_TZ3 }}
           VAULT_GCP_TZ3_PK: ${{ secrets.INTEGRATIONTEST_VAULT_GCP_TZ3_PK }}
         run: >
          cd integration_test;
          export ARCH=amd64;
          . ./.env.${{ matrix.testenvs }};
-         envsubst < gcp-token-template.json > gcp-token.json;
+         echo "$GCP_SERVICE_ACCOUNT_KEY" > gcp-token.json;
          echo $VAULT_AZ_SP_KEY |base64 -d >service-principal.key;
          chmod 777 ./hashicerts;
          docker compose up -d --wait --pull always;

README.md

@@ -54,6 +54,7 @@ Explore detailed documentation for various components of Signatory:
 
 ### Other
 - [JWT Authentication](https://signatory.io/docs/jwt)
+- [Proof of Possession (POP)](https://signatory.io/docs/proof_of_possession)
 - [Remote Policy Configuration](https://signatory.io/docs/remote_policy)
 - [Signatory Architecture](https://signatory.io/docs/architecture)
 

cmd/commands/utils.go

@@ -10,13 +10,14 @@ import (
 )
 
 const listTemplateSrc = `{{range . -}}
-Public Key Hash:    {{.Hash}}
-Reference:          {{keyRef .KeyReference}}
-Vault:              {{.Vault.Name}}
-Active:             {{.Active}}
+Public Key Hash:           {{.Hash}}
+Reference:                 {{keyRef .KeyReference}}
+Vault:                     {{.Vault.Name}}
+Active:                    {{.Active}}
 {{with .Policy -}}
-Allowed Requests:   {{.AllowedRequests}}
-Allowed Operations: {{.AllowedOps}}
+Allowed Requests:          {{.AllowedRequests}}
+Allowed Operations:        {{.AllowedOps}}
+Allow Proof of Possession: {{.AllowProofOfPossession}}
 {{end}}
 {{end -}}
 `