
7/7/2025 · Regnard Raquedan
What this post added
This post details the secure deployment of AI agents to Google Cloud using GitLab CI/CD components and Workload Identity Federation. It introduces a practical example of an AI agent for Canadian city recommendations, outlining the setup of IAM integration with Workload Identity Federation and Google Artifact Registry. The post provides a `.gitlab-ci.yml` configuration that leverages GitLab CI/CD components for building Docker containers, performing security scans (dependency, SAST, secret detection), uploading to Artifact Registry, and deploying to Cloud Run. It highlights security benefits such as no long-lived credentials, automated security scanning, an audit trail, and the principle of least privilege.