Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add support for CLOUD_SDK_ACCESS_TOKEN_PATH #775

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Add support for CLOUD_SDK_ACCESS_TOKEN_PATH #775

wants to merge 1 commit into from

Commits on Nov 23, 2023

  1. Add support for CLOUD_SDK_ACCESS_TOKEN_PATH 

    This commit adds support for configuring the collector to authenticate with
a token source that comes from a file defined by the
CLOUD_SDK_ACCESS_TOKEN_PATH environment variable.

When the token expires, the token source will refresh by reading the file
again. Optionally the user can set CLOUD_SDK_ACCESS_TOKEN_EARLY_EXPIRY to control
when the refresh occurs.

The gcloud CLI has support for authenticating with user-supplied access tokens.
See: https://issuetracker.google.com/issues/134539464#comment12

This is useful when credentials need to be generated dynamically from some
centralized system that passes these scoped short-lived credentials to
untrusted systems which use them to authenticate with GCP services (instead of
having the untrusted system generate the credentals with some
base/root credentials).
    @alyshanjahani-crl
    alyshanjahani-crl committed Nov 23, 2023
    Configuration menu
    Copy the full SHA
    cb2450c View commit details
    Browse the repository at this point in the history