Skip to content

Latest commit

 

History

History
27 lines (22 loc) · 1.13 KB

README.md

File metadata and controls

27 lines (22 loc) · 1.13 KB

Workload Identity Federation Setup Utils

This repository provides tools to set up Workload Identity Federation in Google Cloud Platform (GCP) for granting access to Splunk integrations. Two setup approaches are available based on your requirements:

Permissions

To create WIF resources you need the following permissions:

iam.googleapis.com/workloadIdentityPoolProviders.create
iam.googleapis.com/workloadIdentityPoolProviders.delete
iam.googleapis.com/workloadIdentityPoolProviders.undelete
iam.googleapis.com/workloadIdentityPoolProviders.update
iam.googleapis.com/workloadIdentityPools.create
iam.googleapis.com/workloadIdentityPools.delete
iam.googleapis.com/workloadIdentityPools.undelete
iam.googleapis.com/workloadIdentityPools.update

Alternatively, you can use the following predefined role:

  • roles/iam.workloadIdentityPoolAdmin

Additionally, you need the permission to create IAM bindings:

  • resourcemanager.projects.setIamPolicy

You can also use predefined role:

  • roles/resourcemanager.projectIamAdmin