scwhittle commented on issue #28286: URL: https://github.com/apache/beam/issues/28286#issuecomment-1782589064
It does appear that PubsubJsonClient uses the credential [here](https://github.com/apache/beam/blob/e98e37f15b898c55b63af680aff33f528d2ede38/sdks/java/io/google-cloud-platform/src/main/java/org/apache/beam/sdk/io/gcp/pubsub/PubsubJsonClient.java#L94) However as Daniel notes the PubsubIO implementation is overridden for dataflow. You can use `--experiment=enable_custom_pubsub_source` to disable the read PubsubIO replacement done with dataflow. However you will not benefit from the features: https://cloud.google.com/dataflow/docs/concepts/streaming-with-cloud-pubsub#integration-features However couldn't you instead grant Service account A viewer/subscriber permissions to read from the topic/sub owned by account B? -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
