asm/identity-provider/googleidp.yaml (10 lines of code) (raw):
---
apiVersion: security.cloud.google.com/v1alpha1
kind: IdentityProvider
metadata:
name: google
spec:
authentication:
oidc:
issuerUri: https://accounts.google.com
serviceAccount: request.auth.claims["email"]