Giters

fluxcd / pkg

Toolkit common packages

Home Page:https://pkg.go.dev/github.com/fluxcd/pkg

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Support cross cloud federation

danquack opened this issue · comments

commented

GCP supports authenticating from different trusted identities. One possible authentication story is a user wants to auth from AWS against a GCloud Container Registry. Currently the auth code only supports querying the internal metadata url via the const GCP_TOKEN_URL.

References:
https://cloud.google.com/iam/docs/configuring-workload-identity-federation
https://cloud.google.com/iam/docs/using-workload-identity-federation#aws_3