Create a new external integration.
| Time | Status | User Agent | |
|---|---|---|---|
Retrieving recent requests… | |||
Some integration types support keyless authentication, where Doppler authenticates with a short-lived OIDC token instead of a stored credential. For those types, authMethod selects the mode and determines which other fields are required. See Keyless Authentication for how the trust relationship is established.
Keyless connections are created without their access being verified, since the identity they authenticate as contains the connection ID that this request returns. Grant that identity access in your cloud after creating the connection, using the federation object on the Retrieve response.
AWS Secrets Manager and Parameter Store
Type: aws_secrets_manager or aws_parameter_store
Data Object
| Field | Type | Description |
|---|---|---|
| aws_assume_role_arn | string | The ARN of the AWS role that Doppler should use to assume into your AWS account. See docs for configuration details. |
Azure Vault (Service Principal)
Type: azure_vault_service_principal
Data Object
Azure Service Principal (Rotated and Dynamic)
Type: azure_rotated_service_principal or azure_dynamic_service_principal
These types support keyless authentication. See docs for setup details.
Data Object
| Field | Type | Description |
|---|---|---|
| authMethod | string | oidc for keyless authentication or clientSecret. Defaults to clientSecret when omitted. |
| clientId | string | The Application (Client) ID of the managing Service Principal. |
| tenantId | string | The Directory (Tenant) ID of the managing Service Principal. |
| clientSecret | string | The managing Service Principal's client secret value. Required when authMethod is clientSecret, rejected when it's oidc. |
CircleCI
Type: circleci
Data Object
| Field | Type | Description |
|---|---|---|
| api_token | string | A CircleCI API token. See docs for setup details. |
Fly.io
Type: flyio
Data Object
| Field | Type | Description |
|---|---|---|
| api_key | string | A Fly.io API key. See docs for setup details. |
GCP Cloud SQL
Type: gcp_cloudsql_mysql, gcp_cloudsql_postgres, or gcp_cloudsql_sqlserver
These types support keyless authentication. See docs for setup details.
Data Object
| Field | Type | Description |
|---|---|---|
| authMethod | string | oidc for keyless authentication or key. Defaults to key when omitted. |
| gcpKey | object | The IAM Service Account JSON key. Required when authMethod is key. |
| gcp_workload_identity_provider | string | The full resource name of the workload identity provider, beginning with //iam.googleapis.com/. Required when authMethod is oidc. |
| gcp_project_id | string | The GCP project ID. Required when authMethod is oidc. |
Supplying both gcpKey and gcp_workload_identity_provider is rejected.
GCP Secret Manager
Type: gcp_secret_manager
This type supports keyless authentication. See docs for setup details.
Data Object
| Field | Type | Description |
|---|---|---|
| authMethod | string | oidc for keyless authentication or key. Defaults to key when omitted. |
| gcp_key | object | The IAM Service Account JSON key. Required when authMethod is key. See docs for details. |
| gcp_workload_identity_provider | string | The full resource name of the workload identity provider, beginning with //iam.googleapis.com/. Required when authMethod is oidc. |
| gcp_project_id | string | The GCP project ID. Required when authMethod is oidc. |
| gcp_secret_prefix | string | The prefix added to any secret created by this integration in GCP. See docs for details. |
Supplying both gcp_key and gcp_workload_identity_provider is rejected.
Terraform Cloud
Type: terraform_cloud
Data Object
| Field | Type | Description |
|---|---|---|
| api_key | string | A Terraform Cloud API key. See docs for setup details. |