feat: use workload identity federation to gain access to google

midu-git commented 11 months ago

Issue #, if available: The code doesn't support Workload Identity Federation, which enables interaction with Google services without requiring to provide any sensitive credential data, c.f. here.

Description of changes:

Add an optional parameter to specify a service account to be used by from the Workload Identity Federation chain. This is the service account for which the JSON credential file needs to be downloaded without Workload Identity Federation.
Extended the code to allow using Google Application Default Credentials if no credential file is explicitly specified.
Extended the SAM configuration to include the new parameter.
Replace deprecated ioutil.ReadFile by os.ReadFile.

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

midu-git commented 10 months ago

Hi @ChrisPates. Can I provide any support here?

ChrisPates commented 10 months ago

Thanks for the offer.

Right now, I'm working through a bunch of work improving validation and configuration flexibility in the Cfn template. Once I've got that squared away, I'll be looking to bring you PR in.

Chris

-----Original message----- From: Michael Dudzinski @.> Sent: Friday, 3rd November 2023, 6:51 To: awslabs/ssosync @.> Cc: Chris Pates @.>; Mention @.> Subject: Re: [awslabs/ssosync] feat: use workload identity federation to gain access to google (PR #150) Hi @ChrisPates. Can I provide any support here?

— Reply to this email directly, view it on GitHub, or unsubscribe. You are receiving this because you were mentioned.Message ID: @.***>

midu-git commented 2 months ago

Hi @ChrisPates, it have been a while since your last message. Is there a plan for when you will start working on this PR? Can I support you somehow?

awslabs / ssosync

feat: use workload identity federation to gain access to google #150