Skip to content

Commit

Permalink
Update version and make authentication process clear
Browse files Browse the repository at this point in the history
  • Loading branch information
IsaacCalligeros95 committed Dec 5, 2024
1 parent ea1f479 commit 263a677
Showing 1 changed file with 2 additions and 3 deletions.
5 changes: 2 additions & 3 deletions src/pages/docs/infrastructure/accounts/google-cloud/index.md
Original file line number Diff line number Diff line change
Expand Up @@ -8,7 +8,7 @@ navOrder: 30
---

:::div{.hint}
Google Cloud Accounts were added in Octopus **2021.2**, Generic OpenId Connect Accounts were added in **2024.4**
Google Cloud Accounts were added in Octopus **2021.2**, Generic OpenId Connect Accounts were added in **2025.1**
:::

To deploy infrastructure to Google Cloud Platform, you can define a Google cloud or Generic OpenId Connect account in Octopus.
Expand All @@ -24,7 +24,7 @@ Google Cloud steps can use a Generic OpenId Connect Account for authentication.
1. set an audience, this should match the audience set on the Workload Identity Federation. By default this is `https://iam.googleapis.com/projects/{project-id}/locations/global/workloadIdentityPools/{pool-id}/providers/{provider-id}`
1. Click the **SAVE**, to test the account set it as the account on a gcloud script step.

See the [Google cloud documentation](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers) for instructions on creating and configuring a Workload Identity Federation. To authenticate octopus calls the gcloud cli
See the [Google cloud documentation](https://cloud.google.com/iam/docs/workload-identity-federation-with-other-providers) for instructions on creating and configuring a Workload Identity Federation. To authenticate in the gcloud script step octopus calls the gcloud cli with:

```bash
gcloud iam workload-identity-pools create-cred-config \
Expand All @@ -39,7 +39,6 @@ gcloud iam workload-identity-pools create-cred-config \
```



:::div{.hint}
The default audience format is `https://iam.googleapis.com/projects/PROJECT_NUMBER/locations/global/workloadIdentityPools/POOL_ID/providers/PROVIDER_ID` while `workload-identity-pools create-cred-config` command expects the audience without `https://iam.googleapis.com`. In this scenario Octopus expects the full audience value to be set on the account including `https://iam.googleapis.com` but will trim the `https://iam.googleapis.com` when running the create-cred-config command.
:::
Expand Down

0 comments on commit 263a677

Please sign in to comment.