Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

storage: support gcloud ADC impersonation for signed URLs #9827

Closed
frankyn opened this issue Sep 13, 2022 · 1 comment
Closed

storage: support gcloud ADC impersonation for signed URLs #9827

frankyn opened this issue Sep 13, 2022 · 1 comment
Labels
api: storage Issues related to the Cloud Storage API. cpp: backlog While desirable, we do not have time to work on this for the foreseeable future. type: feature request ‘Nice-to-have’ improvement, new feature or different behavior or design.

Comments

@frankyn
Copy link
Member

frankyn commented Sep 13, 2022

What component of google-cloud-cpp is this feature request for?
google/cloud/storage

Is your feature request related to a problem? Please describe.
GCS Use Case: Customers do not want to download and manage a private key locally. They wish to configure authentication using only gcloud auth. Currently, they can run gcloud auth application-default login and the storage client will work for manipulating buckets and objects. However, Signed URLs can't be signed this way without additional support in Storage libraries and support for impersonation in language specific auth libraries.

Describe the solution you'd like
Be able to create a signed URL using gcloud ADC impersonated credentials with IAM Service Account Sign Blob API without having to use a service-account private key locally.

Additional context
Go Storage is working on an implementation however it does rely on Auth library support for this path;
PR: googleapis/google-cloud-go#6591

@frankyn frankyn added the type: feature request ‘Nice-to-have’ improvement, new feature or different behavior or design. label Sep 13, 2022
@product-auto-label product-auto-label bot added the api: storage Issues related to the Cloud Storage API. label Sep 13, 2022
@coryan
Copy link
Member

coryan commented Feb 15, 2023

Realistically we do not have time to work on this for the foreseeable future. Closing for now.

@coryan coryan closed this as completed Feb 15, 2023
@coryan coryan added the cpp: backlog While desirable, we do not have time to work on this for the foreseeable future. label Feb 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
api: storage Issues related to the Cloud Storage API. cpp: backlog While desirable, we do not have time to work on this for the foreseeable future. type: feature request ‘Nice-to-have’ improvement, new feature or different behavior or design.
Projects
None yet
Development

No branches or pull requests

2 participants