How to Setup Google Cloud Workload Identity Federation for GitHub Actions & Terraform

#gcp #githubactions #workloadidentity #cicd
GitHub Repo
github.com/vis...
How to Setup Google Cloud Workload Identity Federation for GitHub Actions & Terraform
In this video, we'll guide you through setting up Google Cloud Workload Identity Federation to securely manage Google Cloud resources using GitHub Actions and Terraform. You'll learn how to create a Workload Identity Pool and Provider in Google Cloud, configure a GitHub Actions workflow to authenticate using workload identity federation, and set up Terraform to provision resources without needing long-lived service account keys. This setup enhances security by leveraging short-lived credentials and simplifies managing cloud resources directly from your CI/CD pipeline.
Looking to get in touch?
Drop me a line at [e-mail], or schedule a meeting using the provided link topmate.io/vis...
Playlists
Associate Cloud Engineer -Complete Free Course
• Associate Cloud Engine...
Google Cloud Data Engineer Certification Course
• Google Cloud Data Engi...
Google Cloud Platform(GCP) Tutorials
• Google Cloud Platform(...
Generative AI
• Generative AI
Getting Started with Duet AI
• Getting started with D...
Google Cloud Projects
• Google Cloud Projects
Python For GCP
• Python for GCP
Terraform Tutorials
• Terraform Associate C...
Linkedin
/ vishal-bulbule
Medium Blog
/ vishalbulbule
Github
Source Code
github.com/vis...
#googlecloud #gcp

[@danielcoronadonunez2640]

you save my day! many thanks for this clear explanation :)

[@SolomonLeo_]

Thank you bhai!

[@CharlesOkoronkwo-t8g]

God bless you. I was able to authenticate using WIF

[@ravinasty]

A big Thanks to you for your prompt response to my request on WIF. I followed your steps and could able to provision. Appreciate your efforts.

[@gauravgupta5989]

Thank you for the video, How do we identify all the required attribute mappings between Google & our IDP(eg: AWS, OIDC, SAML)?

[@BetzabethMaestre-d5f]

Do i have to that conf to every repository?

[@rajenderprasad1193]

Hi. Thank you. But I have an issue.
I have two repos. CICD repo and app repo. I only configured CICD repo with WIF setup. And WIF pool is different projects than my CICD repo.
I have reusable workflows in the CICD repo. I am calling these from application repo which is not configured with WIF setup. I want to deploy or copy the jars from runner to gcs bucket. And all these steps included in CICD pipeline. Just app repo is calling this. It’s failing with 403 permissions denied error. It’s not storage permissions. It’s working only if I also configure WIF on app repo which I don’t want to do that. Is this even possible. Pls advise thanks

[@patrickroyce3956]

thanks.. was looking forward 👀

[@saquibherman1637]

Thanks for sharing the knowledge !!

[@saquibherman1637]

I have used it in my GCP project with Terraform. Do you have any idea how we can use WIF from inside Dockerfile?

[@حسینزرعی-س7غ]

excellent and easy to understand.🤩

[@leandrojpg]

You is the best

[@sunilkumar-cy7qf]

Very helpful. Could you please also do it for Gitlab

[@techtrapture]

I will do it soon

[@sandeshghoti8313]

thanks, I just wanted OIDC setup :)

[@udaykumar-tb5kn]

Yet to upload moree videos or done with this playlist??