cube-js/cube

Can router and workers can support GKE Workload Identity ?

Open

#7,279 建立於 2023年10月19日

在 GitHub 查看
 (1 留言) (8 反應) (0 負責人)Rust (1,965 fork)batch import
help wanted

倉庫指標

Star
 (19,563 star)
PR 合併指標
 (平均合併 5天 16小時) (30 天內合併 138 個 PR)

描述

Is your feature request related to a problem? Please describe. Without defining "CUBESTORE_GCP_KEY_FILE" in router and worker, I got below error: thread 'main' panicked at 'SERVICE_ACCOUNT(_JSON) or GOOGLE_APPLICATION_CREDENTIALS(_JSON) environment parameter required: NotPresent'

Describe the solution you'd like Workload Identity allows a Kubernetes service account in your GKE cluster to act as an IAM service account. Pods that use the configured Kubernetes service account automatically authenticate as the IAM service account when accessing Google Cloud APIs.

Referring to https://cube.dev/docs/reference/configuration/environment-variables#cubestore_gcp_key_file "CUBESTORE_GCP_KEY_FILE" is Required when using Google Cloud Storage and A valid Google Cloud JSON key file is needed.

is there possible to support GKE Workload Identity in future?

貢獻者指南