Feature request: oslogin with workforce identity

[igpix]

Hello team,
It would be great to have the oslogin feature available for workforce identity user.

This error appears when connecting to a Linux vm

oslogin works when connecting via gcloud

[jpassing]

I agree, and this is a high-priority feature on the roadmap.

When version 2.38 was released, OS Login didn't support workforce identity yet, but support for was just released 2 weeks ago.

[jpassing]

Here's a preview build of IAP Desktop 2.39 that supports OS Login with workforce identity, If you have the opportunity, it would be great if you could give that a try.

Two things to note:

1. You might need to update the guest environment on your VMs. OS Login with workforce identity federation uses SSH certificates, and support for that was only added recently.
2. To log in, you need to have the Service Usage Consumer role on the project (in addition to the typical OS Login roles). This role is required for quota-charging purposes.
   (This requirement might go away in the future.)

[jpassing]

This feature is now available in version 2.39, so I'm closing this issue.

[igpix]

@jpassing thank you for this improvement! I will check it as soon as possible