Ankurdeewan commented on PR #56324: URL: https://github.com/apache/airflow/pull/56324#issuecomment-3661973187
@VladaZakharova I tested this against a real GCP project. I set up a Google connection with a separate quota_project_id and verified that the credentials created by GoogleBaseHook contain that quota project. When making a Cloud Storage API call, GCP enforces permissions on the quota project (not the resource project). The call fails with a serviceusage.services.use permission error (This failure is expected and confirms that GCP is enforcing the quota project, not the resource project.), which is expected since the service account doesn’t have that permission on the quota project. This confirms that the quota/billing project is actually being used and honored by GCP (via x-goog-user-project), rather than falling back silently. <img width="1895" height="1013" alt="image" src="https://github.com/user-attachments/assets/34b420bb-6648-4cd0-994c-ff9269c7bf9c"; /> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
