Skip to content

out_gcs: add Workload Identity Federation support - #1

Closed
uristernik wants to merge 2 commits into
masterfrom
out-gcs-workload-identity-federation
Closed

uristernik wants to merge 2 commits into
masterfrom
out-gcs-workload-identity-federation

Conversation

@uristernik

@uristernik uristernik commented Aug 23, 2026 •

Copy link
Copy Markdown
Owner

No description provided.

Add keyless auth via an external-account OIDC token file: exchange the
subject token at Google STS and optionally impersonate a service account,
as an alternative to the static service account key.
Single-exit cleanup in the STS/IAM exchange, inline the token-expiry
check, and build the Bearer header with flb_sds_printf; no behavior change.

This branch was previously deployed

1 inactive deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant