cube-js / cube-js/cube

Add support for Google Workload Identity to Cube Store

Open
#4,434 6 comments 12 reactions 0 assignees View on GitHub
cube store help wanted
Dominant language
Rust
Stars
20.8k
Forks
2.1k
Avg merge
1d 2h
Merged PRs (30d)
181

Description

**Is your feature request related to a problem? Please describe.**
Cube Store currently supports only using a JSON service account credential for authenticating to Google Cloud Storage. Google [recommends against](https://cloud.google.com/kubernetes-engine/docs/how-to/hardening-your-cluster#workload_identity) using this method when possible for security hardening purposes.

**Describe the solution you'd like**
Implement Workload identity as described in https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity

**Describe alternatives you've considered**
Alternative is to use the existing hard-coded secrets method.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.