This is an opinionated plugin to authenticate to any Google Cloud project from Buildkite using Workload Identity Federation.
The Workload Identity Provider uses a hash for the GitHub repository with the format owner/repo, the
hash has a length of 28 characters.
| Name | Description | Required | Default |
|---|---|---|---|
lifetime |
The time (in seconds) the OIDC token will be valid for before expiry. Must be a non-negative integer. | false |
1800 |
project-id |
The GCP project id. | false |
elastic-observability |
project-number |
The GCP project number. | false |
8560181848 |
steps:
- command: |
echo "Credentials are located at \$GOOGLE_APPLICATION_CREDENTIALS"
gcloud container clusters list
plugins:
- elastic/oblt-google-auth#v1.3.0:
lifetime: 1800 # seconds
# project-id: "elastic-observability"
# project-number: "8560181848"This plugin needs the following requirements:
- bash
- buildkite-agent