Repository navigation
v0.9.2
runner: fall back to IAM Credentials API for IAP token in Cloud Build
Cloud Build with a custom SA can't use the metadata identity endpoint (idtoken.NewTokenSource fails). Fall back to impersonate.IDTokenSource which calls the IAM Credentials API — no extra permissions needed.