Skip to content

Conversation

@JorTurFer
Copy link
Contributor

@JorTurFer JorTurFer commented Dec 10, 2025

Description

This PR supports incoming Workload Identity Federation flow. New environment variables have been added to allow default configuration:

  • "STACKIT_SERVICE_ACCOUNT_EMAIL" -> Service account email (this isn't new but it was deprecated and deprecation has been removed)
  • "STACKIT_FEDERATED_TOKEN_FILE" -> Directory where the assertion token is placed
  • "STACKIT_IDP_TOKEN_ENDPOINT" -> IDP endpoint to exchange the token
  • "STACKIT_IDP_TOKEN_EXPIRATION_SECONDS" -> Sets token duration. Not used yet but added for SDK downstream proposes.

Except STACKIT_SERVICE_ACCOUNT_EMAIL, all of them have default values (prod values)

This is a new auth method that will be publicly shipped during next weeks

Checklist

  • No generated code was adjusted manually (check comments in file header)
  • Changelogs
    • Changelog in the root directory was adjusted (see here)
    • Changelog(s) of the service(s) were adjusted (see e.g. here)
  • VERSION file(s) of the service(s) were adjusted
  • Code format was applied: make fmt
  • Examples were added / adjusted (see examples/ directory)
  • Unit tests got implemented or updated
  • Unit tests are passing: make test (will be checked by CI)
  • No linter issues: make lint (will be checked by CI)

marceljk
marceljk previously approved these changes Jan 7, 2026
marceljk
marceljk previously approved these changes Jan 7, 2026
@JorTurFer
Copy link
Contributor Author

Updated comments 😄

Fyusel
Fyusel previously approved these changes Jan 13, 2026
@JorTurFer
Copy link
Contributor Author

Fixed!

JorTurFer and others added 27 commits January 21, 2026 14:24
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
Signed-off-by: Jorge Turrado <[email protected]>
@marceljk marceljk enabled auto-merge (squash) January 21, 2026 13:25
@marceljk marceljk merged commit 848cf95 into stackitcloud:main Jan 21, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants