libcloud-notifications mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Sumukh Sridhara (JIRA)" <j...@apache.org>
Subject [jira] [Created] (LIBCLOUD-885) Google Authentication does not detect IAM service accounts
Date Sat, 31 Dec 2016 09:57:58 GMT
Sumukh Sridhara created LIBCLOUD-885:
----------------------------------------

             Summary: Google Authentication does not detect IAM service accounts
                 Key: LIBCLOUD-885
                 URL: https://issues.apache.org/jira/browse/LIBCLOUD-885
             Project: Libcloud
          Issue Type: Bug
          Components: Storage
            Reporter: Sumukh Sridhara
            Priority: Minor


The current code to guess what authentication mode is being used assumes that all services
accounts end in 'developer.gserviceaccount.com' but that is no longer true for service accounts
that use IAM. Those accounts end with '@<project-name>.iam.gserviceaccount.com' 

https://cloud.google.com/iam/docs/service-accounts#product_name_short_service_accounts

The current authentication will not work for these service accounts and the library will fallback
to an installed application auth flow (which prompts for user input to do out of band OAuth)


Relevant Commit: 3849f65fe5289f7d7160b7537afa930c7e2ea8a8



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message