From 119b8c90e896c64edec428dc3577467f208882d8 Mon Sep 17 00:00:00 2001 From: Jonathan Beaulieu Date: Mon, 24 Oct 2022 21:09:06 -0700 Subject: [PATCH] Update target service accounts docs Co-authored-by: Joshua Humphries <2035234+jhump@users.noreply.github.com> --- cmd/grpcurl/grpcurl.go | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/cmd/grpcurl/grpcurl.go b/cmd/grpcurl/grpcurl.go index 79e7046..c8caa40 100644 --- a/cmd/grpcurl/grpcurl.go +++ b/cmd/grpcurl/grpcurl.go @@ -206,11 +206,13 @@ func init() { the provided descriptor sources will be used in addition to server reflection to resolve messages and extensions.`)) flags.Var(&altsTargetServiceAccounts, "alts-target-service-account", prettify(` - A list of expected target service accounts. If the service is running as - any of the provided service account the connection and request will be - made else the connection will fail to connect. If not target service - accounts are provided, no client side authorization will be done and any - connection will be allowed.`)) + The full email address of the service account that the server is + expected to be using when ALTS is used. You can specify this option + multiple times to indicate multiple allowed service accounts. If the + server authenticates with a service account that is not one of the + expected accounts, the RPC will not be issued. If no such arguments are + provided, no check will be performed, and the RPC will be issued + regardless of the server's service account.`)) } type multiString []string