gianarb opened a new issue, #5073:
URL: https://github.com/apache/arrow-rs/issues/5073

   **Is your feature request related to a problem or challenge? Please describe 
what you are trying to do.**
   
   Hello, I deploy my application to GCP GKE and in order to authorize to GCP 
Object Storage I am using a workload identity as described by the GCP 
documentation
   
   
https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity#authenticating_to
   
   The problem I am facing is that `default` is not the right service account, 
I would like to use the one defined when attaching the iam service account to 
the kubernetes one.
   
   
https://github.com/apache/arrow-rs/blob/master/object_store/src/gcp/credential.rs#L325-L331
   
   
   **Describe the solution you'd like**
   
   I think we should add configuration to specify the name of the service 
account you want to use. I am not sure the implication but it sounds good to 
use the `service_account_key` if present, if not we can use `default` as we do 
today.
   
   **Describe alternatives you've considered**
   
   I can generate a credential file and authenticate with another method but 
this one looks like the way to go suggested by GCP itself.
   
   **Additional context**
   <!--
   Add any other context or screenshots about the feature request here.
   -->
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to