Update target service accounts docs

Co-authored-by: Joshua Humphries <2035234+jhump@users.noreply.github.com>
This commit is contained in:
Jonathan Beaulieu 2022-10-24 21:09:06 -07:00 committed by Jon
parent cc08c6392e
commit 119b8c90e8
1 changed files with 7 additions and 5 deletions

View File

@ -206,11 +206,13 @@ func init() {
the provided descriptor sources will be used in addition to server
reflection to resolve messages and extensions.`))
flags.Var(&altsTargetServiceAccounts, "alts-target-service-account", prettify(`
A list of expected target service accounts. If the service is running as
any of the provided service account the connection and request will be
made else the connection will fail to connect. If not target service
accounts are provided, no client side authorization will be done and any
connection will be allowed.`))
The full email address of the service account that the server is
expected to be using when ALTS is used. You can specify this option
multiple times to indicate multiple allowed service accounts. If the
server authenticates with a service account that is not one of the
expected accounts, the RPC will not be issued. If no such arguments are
provided, no check will be performed, and the RPC will be issued
regardless of the server's service account.`))
}
type multiString []string