ci-9739 - workload identity/OIDC support for GAR/GCR (#413)

* adds support for oidc access tokens gar/gcr
This commit is contained in:
Eoin McAfee
2023-10-23 10:11:18 +01:00
committed by GitHub
parent c354cd6a8d
commit 757a756d1a
6 changed files with 314 additions and 41 deletions
+20
View File
@@ -133,6 +133,26 @@ steps:
from_secret: gcr_json_key
```
### GAR (Google Artifact Registry) using workload identity (OIDC)
```yaml
steps:
- name: push-to-gar
image: plugins/gcr
pull: never
settings:
tag: latest
repo: project-id/repo/image-name
registry_type: GAR
location: europe
project_number: project-number
pool_id: workload identity pool id
provider_id: workload identity provider id
service_account_email: service account email
oidc_token_id:
from_secret: token
```
## Developer Notes
- When updating the base image, you will need to update for each architecture and OS.