dgorelik commented on issue #9236: URL: https://github.com/apache/airflow/issues/9236#issuecomment-642844288
> I wonder why we can't improve the current implementation of impersonated service? For now, you can interpersonal to another account using delegate_to parameter. This parameter is available in hook and operators, so its use is very easy. When used with the Google Auth library, `delegate_to` is used for "Domain-wide delegation allows a service account to access user data on behalf of any user in a Google Apps domain without consent from the user." (https://google-auth.readthedocs.io/en/latest/reference/google.oauth2.service_account.html#domain-wide-delegation) That is, it's not for delegating on behalf of a GCP service account. ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
