Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Allow specifying GCS credentials directly through the environment #1038

Open
echozio opened this issue Jun 23, 2024 · 1 comment
Open

Allow specifying GCS credentials directly through the environment #1038

echozio opened this issue Jun 23, 2024 · 1 comment

Comments

@echozio
Copy link

echozio commented Jun 23, 2024

Is your feature request related to a problem? Please describe.
When using the operator there's seemingly no good way to add credentials for GCS with AUTH=implicit. Since it doesn't allow us to add volumes or volumeMounts and GOOGLE_APPLICATION_CREDENTIALS is expected to point to a file.

Describe the solution you'd like
An alternative environment variable where we can include the whole service account key json encoded in base64. E.g. GOOGLE_APPLICATION_CREDENTIALS_BASE64

Describe alternatives you've considered

  • Using GCS with the S3 driver and HMAC keys instead, as these can be specified in their entirety from the environment.
  • Shut down the cluster, add the credentials to each volume and read them from there.

Additional context
This could also be solved by implementing support for either additional volumes or additional initContainers in the operator, but not having to rely on the filesystem at all for this seems like a better approach.

Jira issue: CRDB-39766

Copy link

blathers-crl bot commented Jun 23, 2024

Hello, I am Blathers. I am here to help you get the issue triaged.

I was unable to automatically find someone to ping.

If we have not gotten back to your issue within a few business days, you can try the following:

  • Join our community slack channel and ask on #cockroachdb.
  • Try find someone from here if you know they worked closely on the area and CC them.

🦉 Hoot! I am a Blathers, a bot for CockroachDB. My owner is dev-inf.

@jlinder jlinder transferred this issue from cockroachdb/cockroach Jun 25, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants