Add workload identity federated login + test

populationgenomics · Sep 19, 2023 · 4f85f7f · 4f85f7f
1 parent f128b70
commit 4f85f7f
Showing 1 changed file with 10 additions and 4 deletions.
diff --git a/.github/workflows/deploy.yaml b/.github/workflows/deploy.yaml
@@ -6,6 +6,7 @@ on:
     branches:
       - main
       - dev
+      - workload-identity-federation
 
 jobs:
   deploy:
@@ -23,11 +24,16 @@ jobs:
     steps:
       - uses: actions/checkout@v3
 
-      - name: "gcloud setup"
-        uses: google-github-actions/setup-gcloud@v1
+      - id: "google-cloud-auth"
+        name: "Authenticate to Google Cloud"
+        uses: "google-github-actions/auth@v1"
         with:
-          project_id: sample-metadata
-          service_account_key: ${{ secrets.GCP_SERVER_DEPLOY_KEY }}
+          workload_identity_provider: "projects/774248915715/locations/global/workloadIdentityPools/gh-deploy-pool/providers/gh-provider"
+          service_account: "[email protected]"
+
+      - id: "google-cloud-sdk-setup"
+        name: "Set up Cloud SDK"
+        uses: google-github-actions/setup-gcloud@v1
 
       - name: "gcloud docker auth"
         run: |