search

google-github-actions / get-gke-credentials

A GitHub Action that configure authentication to a GKE cluster.
https://cloud.google.com/gke
Apache License 2.0
100 stars 41 forks source link

Update example on the README.md to use the preferred direct workload identity federation #305

Closed calexandre closed 1 month ago

calexandre commented 1 month ago

TL;DR

As stated in the google-github-actions/auth documentation:

In this setup, the Workload Identity Pool has direct IAM permissions on Google Cloud resources; there are no intermediate service accounts or keys. This is preferred since it directly authenticates GitHub Actions to Google Cloud without a proxy resource. However, not all Google Cloud resources support principalSet identities. Please see the documentation for your Google Cloud service for more information.

Detailed design

No response

Additional information

No response