Support keyless Google Cloud service account integration

Grafana Authentication
1

To set up Grafana Cloud for Google Cloud, we need to create a service account and generate a service account key
However, managing keys can lead to security risks, as they might get exposed and leaked. Nowadays, many SaaS providers support keyless service account integration. In this case, the SaaS provider prepares their own service account and provides its email to the customer, who then adds the necessary permissions.

Google now recommends not using service account keys by several security reasons. Could you please assist with keyless service account integration for Google Cloud using this method?

Thank you!

2

Integrating keyless Google Cloud service accounts enhances security by eliminating the need for service account keys. This method uses workload identity federation, allowing applications to authenticate seamlessly using Google-managed identities. It reduces the risk of key exposure and simplifies credential management. For related solutions, check SubtitleEdit.