is it possible to connect GCR with OpenID?

[Katja Haase]

We would like to be able to use Google Container Registry (GCR) images in Pipelines with OpenID Connect the same way it is done for AWS.

Here is an example

pipelines:  
  default:  
   - step:  
     image:  name: 123456789012.dkr.ecr.us-east-1.amazonaws.com/repository/my-repo:latest  
aws:  oidc-role: arn:aws:iam::123456789012:role/pipelines-ecr-access  
oidc: true

and here the support page for the aws.

Support_Page  

[Ben · Accepted solution]

Hey Katja,

Unfortunately - we do not have any documentation specifically for GCR to use OIDC.

We have an article here explaining how to use GCR images as build environments in Bitbucket Pipelines (see Private images hosted by Google Container Registry subheading):
https://support.atlassian.com/bitbucket-cloud/docs/use-docker-images-as-build-environments/

There's also some documentation here that might be useful:
https://cloud.google.com/iam/docs/workload-identity-federation-with-deployment-pipelines

Cheers!

- Ben (Bitbucket Cloud Support)