hashicorp / packer-plugin-googlecompute

Packer plugin for Google Compute Builder
https://www.packer.io/docs/builders/googlecompute
Mozilla Public License 2.0
23 stars 51 forks source link

Support OIDC #139

Closed tetsuya28 closed 8 months ago

tetsuya28 commented 1 year ago

Community Note

Please vote on this issue by adding a 👍 reaction to the original issue to help the community and maintainers prioritize this request. Please do not leave "+1" or "me too" comments, they generate extra noise for issue followers and do not help prioritize the request. If you are interested in working on this issue or have submitted a pull request, please leave a comment.

Description

Currently, packer-plugin-googlecompute uses google.JWTConfigFromJson, which does not support external_account https://github.com/hashicorp/packer-plugin-googlecompute/blob/701e1ac21796e556dad0df7f0e2536c5bc8a8e63/builder/googlecompute/account.go#L33-L41

https://github.com/golang/oauth2/blob/e07593a4c41a489556d019d1ad4d82e9ee66b4a7/google/google.go#L81-L91

To use OIDC for GCP, I want to use OIDC as following. Workforce identity federation  |  IAM Documentation  |  Google Cloud

Use Case(s)

Any relevant use-cases that you see.

Potential configuration

Potential References