Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Don't hide Configuring GitHub authentication... section #377

Closed
wants to merge 1 commit into from

Conversation

simonw
Copy link

@simonw simonw commented Jan 5, 2024

I've been scratching my head over this procedure for ages... and then today I finally spotted that the key information I needed was right here on this page, but because it was hid inside a <details><summary> collapsed element I'd never managed to find it before!

I suggest expanding this crucial information into a more visible section, so that people like me don't miss it in the future.

…ct Workload Identity Federation

Signed-off-by: Simon Willison <swillison@gmail.com>
@simonw simonw requested a review from a team as a code owner January 5, 2024 02:09
@sethvargo
Copy link
Member

Hi @simonw - thank you for opening a PR. This was an intentional decision because:

  • There are three ways to configure authentication (Direct WIF, WIF via SA, and SAKE), and expanding each of those sections makes the README un-navigable. Your PR proposes expanding one section, but leaves the other two collapsed.

  • This project does not seek to be the authority on every possible configuration option for WIF on Google Cloud; the Google Cloud documentation. These sections are meant to provide a bare-bones example.

  • It used to be visible, but people complained because the README was too long and it was too easy to get lost among the different configuration options.

For these reasons, I won't be merging this PR. I'm open to emojis and font changes to make these drop-downs more obvious.

@sethvargo sethvargo closed this Jan 5, 2024
@simonw
Copy link
Author

simonw commented Jan 5, 2024

Maybe it's worth expanding this documentation to multiple pages, perhaps using GitHub Pages.

I'll be honest: I've been procrastinating on switching my GitHub actions workflows that deploy things to Cloud Run over to OIDC for over two years now, because I find the process of doing so too confusing!

I was pretty excited when I thought I might have finally found the missing clue hidden behind a "expand" link on this page!

@simonw simonw deleted the patch-1 branch January 5, 2024 16:38
@sethvargo
Copy link
Member

Maybe it's worth expanding this documentation to multiple pages, perhaps using GitHub Pages.

As I said above, this GitHub repo does not seek to be the authority on how to configure WIF. The vast majority of the steps are not specific to GitHub Actions, which is why they are documented in the Google Cloud documentation.

The primary function of this repository is to provide the GitHub Action that exchanges a GitHub Actions OIDC token for a valid Google Cloud credential for use in future GitHub Actions workflow steps. If you have general feedback about the WIF process or documentation, it would be best to use the "Send feedback" button to direct it to the WIF team.

I was pretty excited when I thought I might have finally found the missing clue hidden behind a "expand" link on this page!

If you're still having trouble, our TROUBLESHOOTING guide might be able to help. If that doesn't, provide your GitHub Actions YAML file and debug logs, and we'll try to figure it out.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

2 participants