Commit Graph

19 Commits

Author SHA1 Message Date
Seth Vargo
7c4e01fd00
Make auth universe-aware (#352)
This adds support for making the action "universe" aware, so it will be
usable for TPC and GDCH.
2023-11-28 21:59:39 -05:00
Seth Vargo
fe9207673e
Add support for Direct Workload Identity auth (#348)
This adds a new authentication mode, Direct Workload Identity
Federation. This new mode permits authenticating to Google Cloud
directly using the GitHub Actions OIDC token instead of proxying through
a Google Cloud Service Account.
2023-11-28 10:41:10 -05:00
Seth Vargo
43a59886fc
Update deps (#339) 2023-11-08 06:22:12 -08:00
Seth Vargo
41d8fa4aaa
Enable default retries of 3 retry attempts at 250ms backoff (#294)
This changes the default behavior to enable retries. Retry logic has
existed for awhile, but required direct user action to enable. This
enables 3 retries with a fibonacci backoff of 250ms by default to handle
transient communication errors with upstream APIs.
2023-04-17 22:57:11 +00:00
Mike Verbanic
95a6bc2a27
feat: add retries (#181) 2022-05-23 15:17:21 -04:00
Seth Vargo
d16fd896f7
feat: allow opt-out of exporting environment variables (#157)
This allows users to opt-out of exporting environment variables. This might be helpful if they **don't** want future steps to be authenticated, or if the exported environment variables conflict with other values.
2022-03-24 16:02:18 -05:00
Seth Vargo
54924dbbed
feat: switch to use node version 16 (#110) 2022-01-22 14:38:43 -05:00
Seth Vargo
443ae925ab
bug: only cleanup credentials if credentials were created (#96) 2021-12-23 11:39:54 -05:00
Seth Vargo
8708e498da
Add support for Domain-Wide Delegation (#70) 2021-12-02 10:17:06 -06:00
Seth Vargo
1e9245c68a
Clean up exported credentials when the workflow finishes (#67)
* Clean up exported credentials when the workflow finishes

* Fix conditional and log
2021-12-01 11:38:47 -06:00
Seth Vargo
a61909d048
Description < 125 characters 2021-11-09 16:13:20 -05:00
Seth Vargo
2f0b4dbd9b
Add support for specifying authentication via JSON service account keys (#37)
* Add support for specifying authentication via JSON service account keys

* Update README.md

Co-authored-by: Bharath KKB <bharathkrishnakb@gmail.com>

* Update README.md

Co-authored-by: Bharath KKB <bharathkrishnakb@gmail.com>

* Update README.md

Co-authored-by: Bharath KKB <bharathkrishnakb@gmail.com>

* Review feedback

* Undo interface

* Use TokenCreator instead

Co-authored-by: Bharath KKB <bharathkrishnakb@gmail.com>
2021-11-08 17:13:59 -05:00
Seth Vargo
f3c3e206c9
Default audience to the WIF provider ID (#23) 2021-10-04 09:14:08 -07:00
Seth Vargo
fb26879445
Update references to google now (#8) 2021-09-21 19:30:30 -04:00
Seth Vargo
febe21311b
Add the ability to generate and export a credentials file (#7)
This credentials file can be passed to gcloud or other Google Cloud SDKs to automatically do the exchange.
2021-09-21 18:10:27 -04:00
Seth Vargo
c7bb6ad28f
access_token_scopes is not required 2021-09-21 12:25:09 -04:00
Seth Vargo
cb396c3f31
Refactor to support access and id tokens (#3) 2021-09-18 12:12:21 -04:00
Yuki Furuyama
e13dfdd573
Support ID Token generation (#1)
* Support id token generation

* Fix id_token_audience validation

* Add id_token_audience to test workflow

* Generate dist/index.js for id token support
2021-09-18 11:34:46 -04:00
Seth Vargo
688a7bd017
Initial commit 2021-09-16 12:54:29 -04:00