Please update Setting Up Workload Identity Federation docs in the GitHub Marketplace

TL;DR

The docs for Setting Up Workload Identity Federation need to be updated. Because step 8 refers to the incorrect way of using the --member parameter.

Expected behavior

For step 8) for the Setting Up Workload Identity Federation, the command should be:

gcloud iam service-accounts add-iam-policy-binding "[email protected]${PROJECT_ID}.iam.gserviceaccount.com" \ --project="${PROJECT_ID}" \ --role="roles/iam.workloadIdentityUser" \ --member="principalSet://iam.googleapis.com/projects/${PROJECT_NUMBER}/locations/global/workloadIdentityPools/${WORKLOAD_IDENTITY_POOL_ID}/attribute.repository/${REPO}"

Where the --member parameter should be of the format specificied here.

Observed behavior

The current step 8) for the Setting Up Workload Identity Federation, the command is:

gcloud iam service-accounts add-iam-policy-binding "[email protected]${PROJECT_ID}.iam.gserviceaccount.com" \ --project="${PROJECT_ID}" \ --role="roles/iam.workloadIdentityUser" \ --member="principalSet://iam.googleapis.com/${WORKLOAD_IDENTITY_POOL_ID}/attribute.repository/${REPO}"

Action YAML

N/A

Log output

And if you use the incorrect format for the `--member` parameter the error looks like this:

ERROR: (gcloud.iam.service-accounts.add-iam-policy-binding) INVALID_ARGUMENT: The member principalSet://iam.googleapis.com/*REDACTED*/attribute.repository/REPO_OWNER/REPO_NAME is of an unknown type. Please set a valid type prefix for the member.

Additional information

No response