gcp-wif-bootstrap

To bootstrap Workload Identity Federation and Secret Manager, this automation generates Terraform configurations for IAM bindings and a GitHub Actions workflow that applies the infrastructure and exports critical outputs as repository secrets.

Yes, Terraform automates GitHub Actions secrets provisioning by generating a bootstrap workflow that initializes and applies the infrastructure configuration, then securely wires the GCP outputs directly into your repository secrets.

Automating secure CI/CD pipelines across repositories requires configuring Workload Identity Federation. This skill quickly bootstraps multi-repo setups by generating the necessary Terraform IAM bindings and GitHub Actions workflows.

Yes, setting up GCP Workload Identity Federation requires a GitHub repository with Actions capabilities along with a Google Cloud project context and access to repository secrets to wire the necessary permissions.

Workload Identity Federation provides secure access control without long-lived credentials. This automation enforces policy-as-code by generating Terraform IAM bindings, reducing manual setup and potential misconfigurations.

A generated GitHub Actions bootstrap workflow applies Terraform to provision GCP Secret Manager by initializing the configuration, applying the infrastructure changes, and exporting the resulting critical outputs as GitHub Secrets.