Pull artifacts from GAR using OIDC tokens

[Stefan Popov]

As of right now, I was able to find only one way of using a docker image as a container in Bitbucket Pipeline: 

image: name: europe-docker.pkg.dev/csdm-global-assets/pipeline-registry/csdmdev/frontend:20

username: _json_key

password: $PULL_FROM_ARTIFACT_REGISTRY

We don't want to save any service account keys as workspace variables, I am looking for a way of using the OIDC token feature so that the pipeline principal can access the docker image and pull it.

[Ben]

Hi @Stefan Popov 

So that we may assist you effectively, we will need access to your build environment and its associated YAML configuration/repository settings.

To do so - we'll need a formal support ticket. Please raise a ticket directly with our support team using your paid workspace URL:

• https://support.atlassian.com/contact/

If you encounter issues raising a ticket, please let me know your timezone so that I may raise a ticket on your behalf with the team that operates within your region.

Cheers!

- Ben (Bitbucket Cloud Support)