Can router and workers can support GKE Workload Identity ?
#7,279 opened on 2023年10月19日
Repository metrics
- Stars
- (19,563 stars)
- PR merge metrics
- (平均マージ 5d 16h) (30d で 138 merged PRs)
説明
Is your feature request related to a problem? Please describe. Without defining "CUBESTORE_GCP_KEY_FILE" in router and worker, I got below error: thread 'main' panicked at 'SERVICE_ACCOUNT(_JSON) or GOOGLE_APPLICATION_CREDENTIALS(_JSON) environment parameter required: NotPresent'
Describe the solution you'd like Workload Identity allows a Kubernetes service account in your GKE cluster to act as an IAM service account. Pods that use the configured Kubernetes service account automatically authenticate as the IAM service account when accessing Google Cloud APIs.
Referring to https://cube.dev/docs/reference/configuration/environment-variables#cubestore_gcp_key_file "CUBESTORE_GCP_KEY_FILE" is Required when using Google Cloud Storage and A valid Google Cloud JSON key file is needed.
is there possible to support GKE Workload Identity in future?