koalaops/GCP Workload Identity Federation

Secure GCP authentication using Workload Identity Federation with optional Artifact Registry and GKE setup

View on GitHub

Trust Signals

Scorecard Score
not yet scored
Maintenance Recency
Maintainedlast commit Aug 5, 2025
License
MIT

Pinned Snippet

workflow.ymlSHA-pinned
uses: koalaops/gcp-federation-action@c48425a514f67bcd4b248a2078bb44ed4de02224 # v1.0.0

tags can be moved; commit SHAs can't. why a SHA?

namedescriptionrequireddefault
gcp_project_idGCP project IDyes
gcp_project_numberGCP project number (required for WIF)no
workload_identity_poolWIF pool name (will auto-generate if not provided)no
workload_identity_providerWIF provider ID (will auto-generate if not provided)no
service_accountService account email for WIF or full JSON for legacy authyes
enable_artifact_registryEnable Docker authentication to Artifact Registrynofalse
artifact_registry_locationArtifact Registry location (e.g., us-central1)no
enable_gke_authEnable GKE cluster authentication and kubectl context setupnofalse
gke_cluster_nameGKE cluster name (required if enable_gke_auth is true)no
gke_cluster_locationGKE cluster location (required if enable_gke_auth is true)no

no outputs