Skip to content

Conversation

@modular-magician
Copy link
Collaborator

b/453727810

attribute from cert json used to determine x509 eligibility based on https://docs.cloud.google.com/go/docs/reference/cloud.google.com/go/auth/latest/credentials/externalaccount#cloud_google_com_go_auth_credentials_externalaccount_CredentialSource

Tested using a basic network

resource "google_compute_network" "custom_test" {
  provider = google-beta
  project = "terraform-dev-nickelliot-xxx"
  name                    = "tf-test-x509-nickelliot"
  auto_create_subnetworks = false
}

This run using my config for an X.509 Cert, using a config setup following the steps from the official docs here: https://docs.cloud.google.com/iam/docs/workload-identity-federation-with-x509-certificates
gpaste/4807609722994688

This run using my standard set-up (does not contain the debug lines added for X.509's auth flow)
gpaste/6295676673720320

Release Note Template for Downstream PRs (will be copied)

See Write release notes for guidance.

provider: an issue preventing X.509 certificates from being used for authentication when supplied as Application Default Credentials as been resolved

Derived from GoogleCloudPlatform/magic-modules#15691

[upstream:525cea9d14cc8358f71a52c329f5fa79955de4b8]

Signed-off-by: Modular Magician <magic-modules@google.com>
@modular-magician modular-magician merged commit b84ea44 into hashicorp:main Nov 14, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant