third/plugin-drone-kaniko
1
0
Fork 0
mirror of https://github.com/drone/drone-kaniko.git synced 2026-06-04 10:14:54 +08:00
Code Issues Packages Projects Releases Wiki Activity

Refactor GAR authentication and crane push to use Application Default Credentials

Browse Source
This commit is contained in:
Ompragash Viswanathan
2025-05-13 13:46:08 +05:30
parent ef62817264
commit 4c65ff4509
1 changed files with 10 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files
cmd/kaniko-gar/main.go
+10 -9
View File
@@ -505,17 +505,16 @@ func handlePushOnly(c *cli.Context) error {
// Setup GAR authentication
jsonKey := c.String("json-key")
var opts []crane.Option
// Configure GAR authentication if JSON key is provided
if jsonKey != "" {
// Setup GAR auth using the service account key file
// This sets GOOGLE_APPLICATION_CREDENTIALS which will be used by crane
// through Application Default Credentials (ADC)
if err := setupGARAuth(jsonKey); err != nil {
return err
}
// When using GAR with a service account key, the GOOGLE_APPLICATION_CREDENTIALS
// environment variable is set, which crane will automatically use
logrus.Info("Using Google Application Credentials for authentication")
} else {
logrus.Warn("No JSON key provided, authentication may fail if not running with workload identity")
}
// Load the image from the tarball
@@ -534,11 +533,13 @@ func handlePushOnly(c *cli.Context) error {
for _, tag := range tags {
dest := fmt.Sprintf("%s/%s:%s", registry, repo, tag)
logrus.Infof("Pushing image to: %s", dest)
if err := crane.Push(img, dest, opts...); err != nil {
// crane uses Google's Application Default Credentials flow
// which automatically picks up GOOGLE_APPLICATION_CREDENTIALS
if err := crane.Push(img, dest); err != nil {
return fmt.Errorf("failed to push image to %s: %v", dest, err)
}
logrus.Infof("Successfully pushed image to %s", dest)
}