OSDOCS-19436# Add documentation for enabling JWKs in GCP workload identity pool OIDC providers. by sslocket · Pull Request #111570 · openshift/openshift-docs

sslocket · 2026-05-13T00:56:21Z

Version(s):

4.22+

Issue:

https://redhat.atlassian.net/browse/OSDOCS-19436

Link to docs preview:

(install) Creating Google Cloud resources with the Cloud Credential Operator utility -- https://111570--ocpdocs-pr.netlify.app/openshift-enterprise/latest/installing/installing_gcp/installing-gcp-customizations.html#cco-ccoctl-creating-at-once_installing-gcp-customizations
Updating cloud provider resources with the Cloud Credential Operator utility -- https://111570--ocpdocs-pr.netlify.app/openshift-enterprise/latest/updating/preparing_for_updates/preparing-manual-creds-update.html#cco-ccoctl-upgrading_preparing-manual-creds-update
Rotating Google Cloud OIDC bound service account signer keys -- https://111570--ocpdocs-pr.netlify.app/openshift-enterprise/latest/post_installation_configuration/changing-cloud-credentials-configuration#rotating-bound-service-keys_key-rotation-gcp

QE review:

QE has approved this change.

Additional information:

Release note PR: #111891

Note to merge reviewer: Due to time constraints, the numerated callouts in these files will need to be reformatted for DITA compliance post-release. Work will be tracked in this card https://redhat.atlassian.net/browse/OSDOCS-19931

ocpdocs-previewbot · 2026-05-13T01:13:57Z

🤖 Fri May 29 10:43:34 - Prow CI generated the docs preview:
https://111570--ocpdocs-pr.netlify.app
Complete list of updated preview URLs: artifacts/updated_preview_urls.txt

sslocket · 2026-05-21T11:56:21Z

@jstuever PTAL

jstuever · 2026-05-21T16:27:35Z

LGTM

…ntity pool OIDC providers. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

ocpdocs-vale-bot · 2026-05-29T10:44:40Z

-If the Cloud Credential Operator (CCO) for your {product-title} cluster
+[role="_abstract"]
+You can rotate the bound service account signer key for an {product-title} cluster
 ifdef::rotate-aws[on {aws-first}]


🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

No indication that this isn't a false positive. Conditionals function as intended in preview.

ocpdocs-vale-bot · 2026-05-29T10:44:42Z

-ifdef::rotate-azure[{entra-first},]
-you can rotate the bound service account signer key.
+that uses the Cloud Credential Operator (CCO) in manual mode with
+ifdef::rotate-aws[{sts-short}.]


🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

No indication that this isn't a false positive. Conditionals function as intended in preview.

Perhaps it doesn't like that the ifdef::rotate-aws[{sts-short}.] format doesn't have an endif? A matter for a different PR anyway.

ocpdocs-vale-bot · 2026-05-29T10:44:44Z

-you can rotate the bound service account signer key.
+that uses the Cloud Credential Operator (CCO) in manual mode with
+ifdef::rotate-aws[{sts-short}.]
+ifdef::rotate-gcp[{gcp-wid-short}.]


🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

No indication that this isn't a false positive. Conditionals function as intended in preview.

ocpdocs-vale-bot · 2026-05-29T10:44:46Z

+that uses the Cloud Credential Operator (CCO) in manual mode with
+ifdef::rotate-aws[{sts-short}.]
+ifdef::rotate-gcp[{gcp-wid-short}.]
+ifdef::rotate-azure[{entra-first}.]


🤖 [error] AsciiDoc.ValidConditions: File contains unbalanced if statements. Review the file to ensure it contains matching opening and closing if statements.

No indication that this isn't a false positive. Conditionals function as intended in preview.

openshift-ci · 2026-05-29T10:44:57Z

@sslocket: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

sslocket · 2026-05-29T15:34:57Z

/label merge-review-needed

mburke5678 · 2026-05-29T21:06:23Z

/cherrypick enterprise-4.22

openshift-cherrypick-robot · 2026-05-29T21:07:14Z

@mburke5678: new pull request created: #112532

Details

In response to this:

/cherrypick enterprise-4.22

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-ci Bot added the size/M Denotes a PR that changes 30-99 lines, ignoring generated files. label May 13, 2026

ocpdocs-vale-bot reviewed May 13, 2026

View reviewed changes

Comment thread modules/rotating-bound-service-keys.adoc

ocpdocs-vale-bot reviewed May 13, 2026

View reviewed changes

Comment thread modules/rotating-bound-service-keys.adoc

sslocket force-pushed the OSDOCS-19436 branch from ee3f78c to 01e5134 Compare May 20, 2026 10:28

sslocket mentioned this pull request May 20, 2026

OSDOCS-19682# Release note for enable JWKs in GCP workload identity pool OIDC providers. #111891

Merged

1 task

OSDOCS-19436: Add documentation for enabling JWKs in GCP workload ide…

1d7dcc8

…ntity pool OIDC providers. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

sslocket force-pushed the OSDOCS-19436 branch from 01e5134 to 1d7dcc8 Compare May 29, 2026 10:36

ocpdocs-vale-bot reviewed May 29, 2026

View reviewed changes

openshift-ci Bot added the merge-review-needed Signifies that the merge review team needs to review this PR label May 29, 2026

mburke5678 added this to the Planned for 4.22 GA milestone May 29, 2026

mburke5678 merged commit 9f4dba5 into openshift:main May 29, 2026
2 checks passed

openshift-cherrypick-robot mentioned this pull request May 29, 2026

[enterprise-4.22] OSDOCS-19436# Add documentation for enabling JWKs in GCP workload identity pool OIDC providers. #112532

Merged

Conversation

sslocket commented May 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

ocpdocs-previewbot commented May 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Uh oh!

Uh oh!

sslocket commented May 21, 2026

Uh oh!

jstuever commented May 21, 2026

Uh oh!

ocpdocs-vale-bot May 29, 2026

Choose a reason for hiding this comment

Uh oh!

sslocket May 29, 2026

Choose a reason for hiding this comment

Uh oh!

ocpdocs-vale-bot May 29, 2026

Choose a reason for hiding this comment

Uh oh!

sslocket May 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

mburke5678 May 29, 2026

Choose a reason for hiding this comment

Uh oh!

ocpdocs-vale-bot May 29, 2026

Choose a reason for hiding this comment

Uh oh!

sslocket May 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

ocpdocs-vale-bot May 29, 2026

Choose a reason for hiding this comment

Uh oh!

sslocket May 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Choose a reason for hiding this comment

Uh oh!

openshift-ci Bot commented May 29, 2026

Uh oh!

sslocket commented May 29, 2026

Uh oh!

Uh oh!

mburke5678 commented May 29, 2026

Uh oh!

openshift-cherrypick-robot commented May 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

6 participants

sslocket commented May 13, 2026 •

edited

Loading

ocpdocs-previewbot commented May 13, 2026 •

edited

Loading

sslocket May 29, 2026 •

edited

Loading

sslocket May 29, 2026 •

edited

Loading

sslocket May 29, 2026 •

edited

Loading