Skip to content

Configure impersonated token lifetime in WIF credentials - #541

Open
7hokerz wants to merge 1 commit into
google-github-actions:mainfrom
7hokerz:wif-impersonation-token-lifetime
Open

7hokerz wants to merge 1 commit into
google-github-actions:mainfrom
7hokerz:wif-impersonation-token-lifetime

Conversation

@7hokerz

@7hokerz 7hokerz commented Oct 11, 2026 •

Copy link
Copy Markdown

The generated WIF credentials file does not currently allow configuring the lifetime of impersonated service account access tokens used by downstream tools such as gcloud.

This adds the optional service_account_impersonation_lifetime input to set service_account_impersonation.token_lifetime_seconds in that file. Existing behavior is preserved when omitted, and access_token_lifetime continues to apply only to the action's access_token output.

Validation: 54 local tests passed, including a new credentials-file test. Lint and build passed.

@7hokerz
7hokerz requested a review from a team as a code owner October 11, 2026 05:39
@7hokerz
7hokerz requested review from ChrisGe4 and haroonc October 11, 2026 05:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant