fix Workload Identity Federation OIDC

kinfinity · Mar 5, 2024 · 461cf97 · 461cf97
1 parent bc407b9
commit 461cf97
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 6 deletions.
diff --git a/.github/workflows/buildandpush-app.yaml b/.github/workflows/buildandpush-app.yaml
@@ -49,9 +49,8 @@ jobs:
             - name: Authenticate with Google Cloud
               uses: 'google-github-actions/auth@v2'
               with:
-                project_id: ${{ secrets.PROJECT_ID }}
                 workload_identity_provider: ${{ secrets.WORKLOAD_IDENTITYPROVIDER }}
-                credentials_json:  ${{ secrets.GCP_CREDENTIALS }}
+                service_account: ${{ secrets.SERVICE_ACCOUNT }}
 
             - name: Build and Push Image
               run: |

diff --git a/.github/workflows/infra-release.yaml b/.github/workflows/infra-release.yaml
@@ -41,9 +41,8 @@ jobs:
       - name: Authenticate with Google Cloud
         uses: 'google-github-actions/auth@v2'
         with:
-          project_id: ${{ secrets.PROJECT_ID }}
           workload_identity_provider: ${{ secrets.WORKLOAD_IDENTITYPROVIDER }}
-          credentials_json:  ${{ secrets.GCP_CREDENTIALS }}
+          service_account: ${{ secrets.SERVICE_ACCOUNT }}
 
       - name: Terraform Plan
         if: ${{ github.event_name == 'pull_request' }}

diff --git a/.github/workflows/k8s-apps-release.yaml b/.github/workflows/k8s-apps-release.yaml
@@ -22,9 +22,8 @@ jobs:
             - name: Authenticate with Google Cloud
               uses: 'google-github-actions/auth@v2'
               with:
-                project_id: ${{ secrets.PROJECT_ID }}
                 workload_identity_provider: ${{ secrets.WORKLOAD_IDENTITYPROVIDER }}
-                credentials_json:  ${{ secrets.GCP_CREDENTIALS }}
+                service_account: ${{ secrets.SERVICE_ACCOUNT }}
 
             - name: Configure kubectl
               uses: google-github-actions/setup-gcloud@v0