Back to Integrations
OIDC with Google Cloud
Authenticate env zero deployments to Google Cloud with workload identity federation instead of service account keys
Integration
category
Identity and Access Management
Overview
Use OpenID Connect so env zero deployments authenticate to Google Cloud without a service account key file. Each run gets a short-lived token through workload identity federation, so there is no long-lived key to rotate or leak.
How it works
Create a workload identity pool and provider in Google Cloud that trusts env zero's OIDC issuer, then let it impersonate a service account. At deploy time env zero presents a signed token and Google Cloud returns temporary credentials for that run.
%25203.svg)
%25202%2520(6).svg)
%25202%2520(2).svg)
%25202%2520(7).svg)
%25203%2520(1).svg)
.svg)
%25202%2520(8).svg)
