elastic / cloudbeat / 21215027268

76%

Build Type

push

github

Committed by web-flow

Commit Message

refactor: switch GCP Cloud Connectors auth to AWS Workload Identity Federation (#3851)

Refactors the GCP Cloud Connectors authentication flow from direct
OIDC/JWT-based token exchange to AWS Workload Identity Federation. The
new approach first assumes an AWS role using the JWT via
AssumeRoleWithWebIdentity, then uses the resulting AWS credentials for
GCP Workload Identity Federation token exchange before impersonating the
target service account in the customer's GCP project. This change aligns
the GCP Cloud Connectors authentication with the AWS-based trust pattern
and includes updates to the configuration to properly pass
CloudConnectorsConfig with the JWT file path to GCP auth providers.

Run Details

15 of 58 new or added lines in 5 files covered. (25.86%)

1 existing line in 1 file now uncovered.

9661 of 12722 relevant lines covered (75.94%)

16.34 hits per line