Reproducible OpenID connect to GCR for GitHub Actions workflows using Terraform

The recently introduced by GitHub support for OpenID Connect (OIDC) tokens in GitHub Actions allows workflows to mint new tokens and then exchange those tokens for short-lived OAuth 2.0 or JWT tokens. These tokens can be used to access and manage Cloud resources. This is all done without the need to store the traditional long-lived service account keys in a form of GitHub secrets. ...

2022-01-29 · 6 min · Mark Chmarny

Multi Region REST Service on GCP using GitHub Template

I learn best by doing. And recently, most of the projects I’ve been building are either REST or gRPC-base services deployed as container images into Cloud Run on GCP. That means that I increasingly find myself recreating a lot of the same infra and app deployment flows. ...

2022-01-05 · 2 min · Mark Chmarny