search

authgear / authgear-server

Open source alternative to Auth0 / Firebase Auth
https://www.authgear.com
Apache License 2.0
72 stars 29 forks source link

Enable authgear deployment to use workload identity federation #4378

Open linear[bot] opened 1 week ago

linear[bot] commented 1 week ago

The objective is to make sure we can use workload identity, not banning use of services account keys.

What we need to do:

  1. Enable existing code transparently resolve to token provided by workload identity if exist.
  2. Change the helm to run as service account of appropriate separation.
  3. Configure the deployment to have workload identity.
  4. Actually switch to use workload identity token on compliance required deployment environment.
linear[bot] commented 1 week ago

DEV-1448 Enable authgear deployment to use workload identity federation