Stephen Reichling created BEAM-1070:

             Summary: Service Account Based Authentication Broken
                 Key: BEAM-1070
             Project: Beam
          Issue Type: Bug
          Components: sdk-py
         Environment: CentOS Linux release 7.1.1503 (Core) 
Python 2.7.5
            Reporter: Stephen Reichling
            Assignee: Frances Perry
            Priority: Critical

{{sdks/python/apache_beam/internal/}} calls into the 
method with invalid and incorrectly-ordered parameters. Compare the [function 
signature of 
 with [how it is 
 This causes a runtime error when one attempts to use a service account to 
authenticate with the Google Dataflow APIs.

The specific problems are:
 - the {{client_scopes}} variable (a list) is passed as a positional parameter 
where the function signature expects the {{private_key_password}} parameter (a 
 - a keyed parameter, {{user_agent}}, is passed but no such parameter is 
defined in the function signature.
 - no value is provided for {{private_key_password}}. All p12 key files for 
service accounts issued by Google Cloud have the password {{notasecret}} as 
so it's currently not possible to use a Google-issued p12 key file with this 

This message was sent by Atlassian JIRA

Reply via email to