oscerd opened a new pull request, #25809:
URL: https://github.com/apache/camel/pull/25809
The `google-pubsub` docs advertise Workload Identity Federation for every
Google component and show
code that does not compile:
```java
GooglePubsubEndpoint endpoint =
context.getEndpoint("google-pubsub:my-project:my-subscription",
GooglePubsubEndpoint.class);
endpoint.setUseWorkloadIdentityFederation(true);
endpoint.setWorkloadIdentityConfig("/path/to/wif-config.json");
endpoint.setImpersonatedServiceAccount("[email protected]");
```
Those setters do not exist. `useWorkloadIdentityFederation`,
`workloadIdentityConfig` and
`impersonatedServiceAccount` are default methods on
`GoogleCommonConfiguration` returning
`false`/`null`; no component overrides them, none declares a matching
`@UriParam`, and no catalog
entry lists them. `GooglePubsubEndpoint` implements the interface directly
and adds nothing. So
`config.isUseWorkloadIdentityFederation()` is always false and the WIF
branch of
`GoogleCredentialsHelper.getCredentials` is never entered — which makes the
explicit-config and
impersonation paths unreachable, not just undocumented.
The section's **GKE claim is correct**, but for a different reason than it
gives: the plain
Application Default Credentials fallback
(`GoogleCredentials.getApplicationDefault()`) resolves the
identity attached to the workload by itself, without involving the WIF code
at all. That is what the
rewritten section documents — GKE Workload Identity, Compute Engine and
Cloud Run all need no
credential configuration — plus a note that configuring an external identity
provider or service
account impersonation is not exposed as an endpoint option.
Docs only, no production code touched. The catalog mirror is regenerated in
the same commit.
The other half of CAMEL-24521 — actually wiring the three options up — is
the feature asked for in
CAMEL-17368 (functions) and CAMEL-17369 (storage), which I have linked and
commented on. This PR
makes the documentation honest in the meantime.
_Claude Code on behalf of oscerd_
🤖 Generated with [Claude Code](https://claude.com/claude-code)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
