You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi! I am looking at the example provided for gcp_bigquery_client but I have an authentication issue. I am running the code from a Google Compunte Engine and I am using a service account to access resources (like BigQuery), not a credentials file. The example I see is only for credentials file usage. According to Google recommendation: "Service account keys could pose a security risk if compromised. We recommend you avoid downloading service account keys and instead use the Workload Identity Federation " but the examples given here are using files with service account keys.
Is there an example about how I can authenticate with this client into BigQuery using Google recommended method Workload Identity Federation? As for now I usually use an attached service account: username@project_id.iam.gserviceaccount.com whenever I access different resources, either from Compute Engine or pipelines like Kubeflow.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Hi! I am looking at the example provided for gcp_bigquery_client but I have an authentication issue. I am running the code from a Google Compunte Engine and I am using a service account to access resources (like BigQuery), not a credentials file. The example I see is only for credentials file usage. According to Google recommendation: "Service account keys could pose a security risk if compromised. We recommend you avoid downloading service account keys and instead use the Workload Identity Federation " but the examples given here are using files with service account keys.
Is there an example about how I can authenticate with this client into BigQuery using Google recommended method Workload Identity Federation? As for now I usually use an attached service account: username@project_id.iam.gserviceaccount.com whenever I access different resources, either from Compute Engine or pipelines like Kubeflow.
Beta Was this translation helpful? Give feedback.
All reactions