cube-js/cube

Can router and workers can support GKE Workload Identity ?

Open

#7,279 创建于 2023年10月19日

在 GitHub 查看
 (1 评论) (8 反应) (0 负责人)Rust (1,965 fork)batch import
help wanted

仓库指标

Star
 (19,563 star)
PR 合并指标
 (平均合并 5天 16小时) (30 天内合并 138 个 PR)

描述

Is your feature request related to a problem? Please describe. Without defining "CUBESTORE_GCP_KEY_FILE" in router and worker, I got below error: thread 'main' panicked at 'SERVICE_ACCOUNT(_JSON) or GOOGLE_APPLICATION_CREDENTIALS(_JSON) environment parameter required: NotPresent'

Describe the solution you'd like Workload Identity allows a Kubernetes service account in your GKE cluster to act as an IAM service account. Pods that use the configured Kubernetes service account automatically authenticate as the IAM service account when accessing Google Cloud APIs.

Referring to https://cube.dev/docs/reference/configuration/environment-variables#cubestore_gcp_key_file "CUBESTORE_GCP_KEY_FILE" is Required when using Google Cloud Storage and A valid Google Cloud JSON key file is needed.

is there possible to support GKE Workload Identity in future?

贡献者指南