设置 vault policy write read-gcp-gsql - << EOF xss=removed xss=removed token_policies=read-gcp-gsql vault format=json> agent-config/roleid vault write -force -format=json auth/approle/ro