Comments (7)
gsutil doesn't seem to be able to do it because there is no --cred-file option
I think the gcloud storage command can be used instead
https://cloud.google.com/sdk/gcloud/reference/alpha/storage
from auth.
@sethvargo Where is the best to track for the improvement. I would like to keep using gsutil
and bq
with GitHub Actions OIDS. I am a little hesitate to use gcloud alpha {storage,bq}
yet, because they are still alpha.
from auth.
Hi @eriksw
It's not currently possible to use this authentication mechanism with the gsutil
and bq
CLI tools. As @utamori mentioned, you can use the gcloud alpha storage
CLI. Please let me know if you have any other questions.
from auth.
@sethvargo Can you provide specifics on what this is specifically blocked on, for purposes of what to give to a VAR/TAM to have them escalate?
(Is this a "those tools need to change to use standard creds" thing or a "those tools are never going to change and this action is going to have to do something weird to accomodate them" thing?)
from auth.
Hi @eriksw - the --cred-file
option is only available in gcloud right now, so there's nothing this action can do to inject the WIF authentication into gsutil
. The update needs to happen in those tools.
from auth.
@sethvargo Is there a reason to use the gcloud auth login --brief --cred-file=...
workflow instead of create_credentials_file: true
(+ activate_credentials_file: true
)?
My expectation as a naive user would be that create_credentials_file: true
would set up everything needed for all parts of the google cloud sdk to "just work" in future steps. (Except perhaps for specifying the project.)
from auth.
My expectation as a naive user would be that create_credentials_file: true would set up everything needed for all parts of the google cloud sdk to "just work" in future steps.
That's certainly the goal, but there's a lot of moving parts, each of which need to be updated, tested, and released while still preserving backwards-compatibility with any existing workflows. The GitHub Action itself is still rapidly evolving as GitHub solidifies the final design of this feature too.
from auth.
Related Issues (20)
- Retry options seem to be deprecated, but not according to the docs HOT 1
- "create_credentials_file" option HOT 3
- Java cannot find certification path HOT 5
- Local testing HOT 3
- GKE WLI to authenticate as another service account HOT 12
- gsutil isn't authenticated HOT 16
- cant use credentials_json after an hour and half HOT 3
- Typo in Readme HOT 1
- Post Clean Up Issue HOT 10
- Add support to include a `request_reason` with the `X-Goog-Request-Reason` system parameter header HOT 3
- Provide `principalSet` as an IAM permission example for Direct Workload Identity Federation HOT 3
- Direct Workload Identity Federation readme outdated or missing details for working example HOT 4
- Docs: Subject exceeds the 127 byte limit mitigation strategy HOT 4
- google-github-actions/get-gke-credentials failed with: required "container.clusters.get" permission(s) HOT 2
- Cannot configure the github-oidc workload identity federation HOT 5
- 403: PERMISSION_DENIED HOT 3
- GCP rate limit HOT 7
- Please provide Terraform templates HOT 2
- URL-encoding not handled for proxy username. HOT 2
- Document token lifetimes HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from auth.