Add support for Google Workload Identity to Cube Store
Open
cube store
help wanted
- Dominant language
- Rust
- Stars
- 20.8k
- Forks
- 2.1k
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 181
Description
**Is your feature request related to a problem? Please describe.**
Cube Store currently supports only using a JSON service account credential for authenticating to Google Cloud Storage. Google [recommends against](https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#workload_identity) using this method when possible for security hardening purposes.
**Describe the solution you'd like**
Implement Workload identity as described in https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity
**Describe alternatives you've considered**
Alternative is to use the existing hard-coded secrets method.
Contributor guide
Assessment
This issue has not been assessed yet.