cooper-oai fb5aa093e0 Support workload identity in remote exec-server auth (#38610) ...

## Why

Remote exec-server registry requests need to refresh managed credentials before sending a request. Static auth-header resolution cannot perform the asynchronous token exchange required by workload identity.

## What changed

- Add asynchronous auth-header resolution to `AuthProvider`, with the existing static-header behavior as the default.
- Resolve fresh managed credentials for each remote environment registry request while preserving the expected account and workspace identity.
- Load the cloud configuration bundle during remote exec-server startup when workload identity is selected.

## Testing

- Update the managed-auth and environment-registry auth tests to exercise asynchronous header resolution.

GitOrigin-RevId: 5d60f1127467aaacdb5d1a8f3d92278bc4bf2e29

2026-08-14 17:32:37 +00:00

..

src

Support workload identity in remote exec-server auth (#38610)

2026-08-14 17:32:37 +00:00

BUILD.bazel

Add workload identity token exchange support (#37610)

2026-08-08 17:18:02 +00:00

Cargo.toml

Add workload identity token exchange support (#37610)

2026-08-08 17:18:02 +00:00