Secrets of the Orb

Okay, but what can I actually do with that token?

Even after building OIDC into orbs, it wasn’t immediately obvious to me how far we could push an OIDC-based dev env. So here are a few ideas to get the juices flowing, drawn from both internal usage and feedback from our early partners.

1. Configure workload identity federation in GCP and grant access to your production logs and metrics from all orbs in your workspace.

I’ve been banging my head around how to give the agent the credentials necessary for whichever task it needs to do in the sandboxI had decided without much conviction to inject encrypted secrets and have them be decrypted on sandbox boot with the caveats that I would spend more time researching a better solution later. .