This is an automated email from the ASF dual-hosted git repository.
shahar1 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new 7b47022bf69 Document all Google Cloud connection fields (#76160)
7b47022bf69 is described below
commit 7b47022bf69afc63c3de6159041dcbb623c1220b
Author: pavansai1997 <[email protected]>
AuthorDate: Sun Nov 1 00:55:42 2026 +0530
Document all Google Cloud connection fields (#76160)
Five fields shown in the Google Cloud connection form, covering anonymous
credentials and the external IdP Client Credentials Grant flow, had no
description, and the list of keys accepted when defining the connection
as a URI or JSON stopped at num_retries. Users configuring the
connection from environment variables or secrets backends had to read
the hook source to discover those keys.
---
providers/google/docs/connections/gcp.rst | 30 ++++++++++++++++++++++++++++++
1 file changed, 30 insertions(+)
diff --git a/providers/google/docs/connections/gcp.rst
b/providers/google/docs/connections/gcp.rst
index fe2dbe57e38..e0050b7f827 100644
--- a/providers/google/docs/connections/gcp.rst
+++ b/providers/google/docs/connections/gcp.rst
@@ -109,6 +109,28 @@ Credential Configuration File
Not required if using application default credentials.
+IdP Token Issue URL (Client Credentials Grant Flow)
+ URL of an external identity provider (IdP) token endpoint. When set,
Airflow uses the OAuth 2.0
+ Client Credentials Grant flow to request an OIDC token from this endpoint
and passes it as the
+ subject token of the ``Credential Configuration File``, which is required
in that case.
+
+Client ID (Client Credentials Grant Flow)
+ Client ID of the application registered with the IdP. Sent in the token
request to
+ ``IdP Token Issue URL``.
+
+Client Secret (Client Credentials Grant Flow)
+ Client secret of the application registered with the IdP. Sent in the
token request to
+ ``IdP Token Issue URL``.
+
+IdP Extra Request Parameters
+ JSON object with additional parameters to include in the token request to
``IdP Token Issue URL``,
+ for example ``{"audience": "api://my-application"}``.
+
+Anonymous credentials (ignores all other settings)
+ Use anonymous credentials for APIs that do not require authentication,
such as reading public
+ Cloud Storage objects. Cannot be combined with ``Keyfile Path``, ``Keyfile
JSON``,
+ ``Credential Configuration File`` or ``Secret name which holds Keyfile
JSON``.
+
Secret name which holds Keyfile JSON
Name of the secret in Secret Manager which contains a `service account
<https://cloud.google.com/docs/authentication/#service_accounts>`_ key.
@@ -160,10 +182,18 @@ Impersonation Chain
* ``project`` - Project Id
* ``key_path`` - Keyfile Path
* ``keyfile_dict`` - Keyfile JSON
+ * ``credential_config_file`` - Credential Configuration File
* ``key_secret_name`` - Secret name which holds Keyfile JSON
* ``key_secret_project_id`` - Project Id which holds Keyfile JSON
* ``scope`` - Scopes
* ``num_retries`` - Number of Retries
+ * ``impersonation_chain`` - Impersonation Chain
+ * ``quota_project_id`` - Quota Project ID
+ * ``is_anonymous`` - Anonymous credentials
+ * ``idp_issuer_url`` - IdP Token Issue URL
+ * ``client_id`` - Client ID
+ * ``client_secret`` - Client Secret
+ * ``idp_extra_parameters`` - IdP Extra Request Parameters
Note that all components of the URI should be URL-encoded.
