use gcloud for reading secrets

Author: v1v

.buildkite/bk.integration-fips.pipeline.yml

@@ -17,7 +17,7 @@ common:
       elastic/oblt-google-auth#v1.3.0:
         lifetime: 10800 # seconds
   # TODO: maybe we can rely on the VM and install only if not present?
-  - oblt_cli_plugin: &oblt_cli_plugin:
+  - oblt_cli_plugin: &oblt_cli_plugin
       elastic/oblt-cli#v0.2.0:
         version-file: .oblt-cli-version
 
@@ -54,8 +54,9 @@ steps:
       TF_VAR_integration_server_docker_image: "docker.elastic.co/beats-ci/elastic-agent-cloud-fips:git-${BUILDKITE_COMMIT:0:12}"
     command: .buildkite/scripts/steps/ess_start.sh
     agents:
-      # image: "docker.elastic.co/ci-agent-images/platform-ingest/oblt-cli:latest"
-      image: "docker.elastic.co/observability-ci/oblt-cli:7.21.0"
+      image: "docker.elastic.co/ci-agent-images/platform-ingest/oblt-cli:latest"
+    plugins:
+      - *google_oidc_observability_plugin
 
   - group: "fips:Stateful:Ubuntu"
     key: integration-tests-ubuntu-fips

.buildkite/bk.integration.pipeline.yml

@@ -43,7 +43,7 @@ common:
           KIBANA_USERNAME: ea-serverless-it-kibana-username
           KIBANA_PASSWORD: ea-serverless-it-kibana-password
   # TODO: maybe we can rely on the VM and install only if not present?
-  - oblt_cli_plugin: &oblt_cli_plugin:
+  - oblt_cli_plugin: &oblt_cli_plugin
       elastic/oblt-cli#v0.2.0:
         version-file: .oblt-cli-version
 
@@ -55,8 +55,9 @@ steps:
           context: "buildkite/elastic-agent-extended-testing - ESS stack provision using oblt-cli"
     command: .buildkite/scripts/steps/ess_start.sh
     agents:
-      # image: "docker.elastic.co/ci-agent-images/platform-ingest/oblt-cli:latest"
-      image: "docker.elastic.co/observability-ci/oblt-cli:7.21.0"
+      image: "docker.elastic.co/ci-agent-images/platform-ingest/oblt-cli:latest"
+    plugins:
+      - *google_oidc_observability_plugin
 
   - group: "Extended runtime leak tests"
     key: extended-integration-tests