Add support for Workload Identity Federation

[IchordeDionysos]

Use case

To more securely setup the authentication to services like Google Cloud, the default recommended way is to utilise Workload Identity Federation.

At many organisations the creation of service account keys is disable. This is now even the default option.
Downloading and the leaking of service account keys is the #1 security risk of cloud applications according to Mandiant.

Idea

Workload Identity Federation ensures that a secure secret exchange for short-lived, workload specific credential is made.

This means no need to download any credentials that may leak. Simply connect Google Cloud with Codemagic via a OIDC connection.

Codemagic then generates a token with it's private keys, Google Cloud can verify whether it's indeed a token generated by Codemagic via the public keys Codemagic publishes.

https://docs.cloud.google.com/iam/docs/workload-identity-federation

[icarusdust]

Hi @IchordeDionysos, thanks for the suggestion ❤️

Shared it with the team