docker-buildkite-plugin icon indicating copy to clipboard operation
docker-buildkite-plugin copied to clipboard

feat: add GCP workload identity federation compatibility

Open valkum opened this issue 2 months ago • 0 comments

We run our workloads in Google Cloud and thus need to identify with a workload identity provider. I noticed for the AWS counterpart there is special support with propagate-aws-auth-tokens.

This adds support for the gcp-workload-identity-federation plugin and works similar to the AWS token support. It will expose the env vars set by gcp-workload-identity-federation and mount the OIDC temp dir created by the plugin.

I wonder if in the future these can be more abstracted to avoid adding a setting for each cloud provider.

valkum avatar Apr 09 '24 16:04 valkum