Assigned
Status Update
Comments
gi...@google.com <gi...@google.com> #2
Hello,
This feature request was forwarded to Cloud SDK team.
There is no ETA or guarantee of its implementation.
All future updates on this will be provided here.
This feature request was forwarded to Cloud SDK team.
There is no ETA or guarantee of its implementation.
All future updates on this will be provided here.
ru...@ml6.eu <ru...@ml6.eu> #4
For Github, you can check this Github Action:
From that Github Action, I gather that for using it directly with gcloud, there is apparently a (currently?) undocumented flag for this: gcloud auth login --brief --cred-file="[my cred file]"
ma...@nordcloud.com <ma...@nordcloud.com> #5
Comment has been deleted.
ma...@nordcloud.com <ma...@nordcloud.com> #6
Confirming that the --brief work.
to...@telus.com <to...@telus.com> #7
It appears this feature was added in Nov 2021
ru...@ml6.eu <ru...@ml6.eu> #8
Indeed, this feature was added in version 363.0.0 in November 2021:
gcloud command-line tool supports authentication using workload identity federation via
gcloud auth login --cred-file=/path/to/workload/identity/config/file
.
However, I cannot seem to close this issue myself, someone from Google needs to do this.
Description
Problem you have encountered: I am not able to authenticate gcloud using credentials from identity federation with OIDC. Using the steps described here , I'm able to use google cloud (python) client libraries to authenticate using identity federation. However, it's not clear how to authenticate the gcloud SDK itself.
Normally, using a service account key, one would run
gcloud auth activate-service-account [ACCOUNT] --key-file=KEY_FILE
, but this does not work for workload identity federation credentials and there seems to be no equivalent command for it.What you expected to happen: Being able to supply workload identity federation credentials for gcloud SDK.
(Referred from stackoverflow:https://stackoverflow.com/questions/67413658/how-to-set-up-gcloud-to-use-credentials-from-identity-federation-with-oidc )