[Helm] Support the GKE Workload Identity #44884
Unanswered
chrisduong
asked this question in
Deployment
Replies: 1 comment
-
It's worth noting that there's already a (very stale) issue here for this: I agree this would be the ideal solution though when deploying on GKE. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
It had been mentioned here https://discuss.airbyte.io/t/logging-to-gcs-with-workload-identity-in-airbyte-on-gke/6731
In the security point of view, we should use the GKE Workload Identity instead. This means we don't need to set
global.storage.gcs.credentialsJson
.However it is not possible, as the Helm chart always requires it.
The remedy is to update the Helm chart to allow
global.storage.gcs.credentialsJson
to be empty.Beta Was this translation helpful? Give feedback.
All reactions