Skip to main content

Gitpod Secretless Authentication

Gitpod supports OIDC integration for secretless authentication to cloud providers from cloud-hosted development workspaces.

Overview​

Gitpod's OIDC support enables authentication to cloud providers without storing credentials in workspace environments. This provides:

  • Credential-Free Workspaces: OIDC tokens replace API keys
  • Cloud Provider Integration: Access AWS, GCP, Azure resources
  • Workspace Identity: Token claims include project context
  • Enhanced Security: No long-lived credentials in workspaces

Key Capabilities​

  • OIDC token generation from Gitpod workspaces
  • Integration with cloud provider OIDC endpoints
  • Project and user identity claims
  • Automatic token refresh

Contributing​

This page is a placeholder. We need your help to create comprehensive documentation!

What we need:

  • Complete setup guide for Gitpod OIDC
  • Cloud provider configuration (AWS, GCP, Azure)
  • .gitpod.yml configuration examples
  • Token claim structure and validation
  • Environment setup and initialization
  • Troubleshooting common issues
  • Integration guides for each cloud provider

How to contribute:

Resources​