koalaops/GCP Workload Identity Federation
Secure GCP authentication using Workload Identity Federation with optional Artifact Registry and GKE setup
View on GitHubTrust Signals
- Scorecard Score
- not yet scored
- Maintenance Recency
- Maintainedlast commit Aug 5, 2025
- License
- MIT
Pinned Snippet
uses: koalaops/gcp-federation-action@c48425a514f67bcd4b248a2078bb44ed4de02224 # v1.0.0tags can be moved; commit SHAs can't. why a SHA?
Inputs
| name | description | required | default |
|---|---|---|---|
| gcp_project_id | GCP project ID | yes | — |
| gcp_project_number | GCP project number (required for WIF) | no | — |
| workload_identity_pool | WIF pool name (will auto-generate if not provided) | no | — |
| workload_identity_provider | WIF provider ID (will auto-generate if not provided) | no | — |
| service_account | Service account email for WIF or full JSON for legacy auth | yes | — |
| enable_artifact_registry | Enable Docker authentication to Artifact Registry | no | false |
| artifact_registry_location | Artifact Registry location (e.g., us-central1) | no | — |
| enable_gke_auth | Enable GKE cluster authentication and kubectl context setup | no | false |
| gke_cluster_name | GKE cluster name (required if enable_gke_auth is true) | no | — |
| gke_cluster_location | GKE cluster location (required if enable_gke_auth is true) | no | — |
Outputs
no outputs