beam-commits mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Ahmet Altay (JIRA)" <>
Subject [jira] [Updated] (BEAM-1070) Service Account Based Authentication Broken
Date Thu, 06 Apr 2017 17:03:41 GMT


Ahmet Altay updated BEAM-1070:
    Priority: Minor  (was: Critical)

> Service Account Based Authentication Broken
> -------------------------------------------
>                 Key: BEAM-1070
>                 URL:
>             Project: Beam
>          Issue Type: Bug
>          Components: sdk-py
>         Environment: CentOS Linux release 7.1.1503 (Core) 
> Python 2.7.5
>            Reporter: Stephen Reichling
>            Assignee: Ahmet Altay
>            Priority: Minor
> {{sdks/python/apache_beam/internal/}} calls into the {{oauth2client.service_account.ServiceAccountCredentials.from_p12_keyfile}}
method with invalid and incorrectly-ordered parameters. Compare the [function signature of
with [how it is invoked|].
This causes a runtime error when one attempts to use a service account to authenticate with
the Google Dataflow APIs.
> The specific problems are:
>  - the {{client_scopes}} variable (a list) is passed as a positional parameter where
the function signature expects the {{private_key_password}} parameter (a string).
>  - a keyed parameter, {{user_agent}}, is passed but no such parameter is defined in the
function signature.
>  - no value is provided for {{private_key_password}}. All p12 key files for service accounts
issued by Google Cloud have the password {{notasecret}} as documented [here|],
so it's currently not possible to use a Google-issued p12 key file with this implementation.

This message was sent by Atlassian JIRA

View raw message