[
https://issues.apache.org/jira/browse/NIFI-15166?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18038411#comment-18038411
]
ASF subversion and git services commented on NIFI-15166:
--------------------------------------------------------
Commit 7e5f84cc5fe7104ae002703aeebb00f9b6c0a404 in nifi's branch
refs/heads/main from Pierre Villard
[ https://gitbox.apache.org/repos/asf?p=nifi.git;h=7e5f84cc5f ]
NIFI-15166 - Add support for GCP Workload Identity Federation to
GCPCredentialsControllerService
This closes #10485.
Signed-off-by: Peter Turcsanyi <[email protected]>
> Add support for GCP Workload Identity Federation to
> GCPCredentialsControllerService
> -----------------------------------------------------------------------------------
>
> Key: NIFI-15166
> URL: https://issues.apache.org/jira/browse/NIFI-15166
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Extensions
> Reporter: Pierre Villard
> Assignee: Pierre Villard
> Priority: Major
> Time Spent: 2h 20m
> Remaining Estimate: 0h
>
> The goal is to add support for Workload Identity Federation to the GCP
> Credentials Controller Service in order to authenticate against GCP services
> using tokens issued by an external identity provider. This token is then
> exchanged against a GCP token via the STS endpoint exposed by Google Cloud
> and used to authenticate against the GCP services.
> For the initial implementation, we are not adding support for service account
> impersonation. This will be added as a follow up effort.
> [https://docs.cloud.google.com/iam/docs/workload-identity-federation]
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
