8000 🪄 byop deployment by eidam · Pull Request #1 · eidam/cloudflare-docs · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

🪄 byop deployment #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: production
Choose a base branch
from
Open

🪄 byop deployment #1

wants to merge 1 commit into from

Conversation

eidam
Copy link
Owner
@eidam eidam commented Mar 29, 2023 •
edited
Loading

Deployments to BYOP are leveraging OIDC tokens to authenticate, and no static long-lived secrets are needed.

✨ Success! Uploaded 7692 files (98.63 sec)

✨ Uploading _headers
✨ Uploading _redirects
✨ Uploading Functions
✨ Deployment complete! Take a peek over at 
   👉 https://refs-pull-1-merge-621026842-github.eidam.dev/
   👉 https://b5b72a0a502272e8fb9d6246cbd4cce719f6394d-621026842-github.eidam.dev/

Benefits of using OIDC

  • No cloud secrets: You won't need to duplicate your cloud credentials as long-lived GitHub secrets. Instead, you can configure the OIDC trust on your cloud provider, and then update your workflows to request a short-lived access token from the cloud provider through OIDC.
  • Authentication and authorization management: You have more granular control over how workflows can use credentials, using your cloud provider's authentication (authN) and authorization (authZ) tools to control access to cloud resources.
  • Rotating credentials: With OIDC, your cloud provider issues a short-lived access token that is only valid for a single job, and then automatically expires.

https://docs.github.com/en/actions/deployment/security-hardening-your-deployments/about-security-hardening-with-openid-connect#benefits-of-using-oidc

@eidam eidam force-pushed the e/add-byop branch 7 times, most recently from 855c749 to c42be6f Compare March 29, 2023 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@eidam
0