agchang commented on PR #454: URL: https://github.com/apache/iceberg-go/pull/454#issuecomment-2971397056
> @agchang The current implementation's GCS client uses Application Default Credentials. https://gocloud.dev/howto/blob/#gcs > > > blob.OpenBucket will use Application Default Credentials; if you have authenticated via [gcloud auth application-default login](https://cloud.google.com/sdk/gcloud/reference/auth/application-default/login), it will use those credentials. See [Application Default Credentials](https://cloud.google.com/docs/authentication/production) to learn about authentication alternatives, including using environment variables. I'm pretty sure I tested this with $GOOGLE_APPLICATION_CREDENTIALS set (and I have run gcloud auth application-default login, so there are creds in the well-known .config path). I think the issue is that the `AnonymousHTTPClient` doesn't use the OAuth RoundTripper so credentials are never added to the header -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
