Uploaded image for project: 'Libcloud'
  1. Libcloud
  2. LIBCLOUD-885

Google Authentication does not detect IAM service accounts

    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Minor
    • Resolution: Duplicate
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: Storage

      Description

      The current code to guess what authentication mode is being used assumes that all services accounts end in 'developer.gserviceaccount.com' but that is no longer true for service accounts that use IAM. Those accounts end with '@<project-name>.iam.gserviceaccount.com'

      https://cloud.google.com/iam/docs/service-accounts#product_name_short_service_accounts

      The current authentication will not work for these service accounts and the library will fallback to an installed application auth flow (which prompts for user input to do out of band OAuth)

      Relevant Commit: 3849f65fe5289f7d7160b7537afa930c7e2ea8a8

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                sumukh Sumukh Sridhara
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:

                  Time Tracking

                  Estimated:
                  Original Estimate - 0.5h
                  0.5h
                  Remaining:
                  Remaining Estimate - 0.5h
                  0.5h
                  Logged:
                  Time Spent - Not Specified
                  Not Specified