You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
docs(readme): add example for service_account_impersonation_url in clientOptions (#1902)
* docs(readme): add service_account_impersonation_url example for AwsSupplier
The service_account_impersonation_url must be passed in the clientOptions
when using a custom AwsSupplier to avoid permissions errors. Updated the
README to include this information.
* docs(config): add service_account_impersonation_url example to .partials.yml
Updated the .partials.yml file to include the service_account_impersonation_url
configuration example, ensuring consistency with the README file.
Copy file name to clipboardExpand all lines: .readme-partials.yaml
+1
Original file line number
Diff line number
Diff line change
@@ -434,6 +434,7 @@ body: |-
434
434
audience: '//iam.googleapis.com/projects/$PROJECT_NUMBER/locations/global/workloadIdentityPools/$WORKLOAD_POOL_ID/providers/$PROVIDER_ID', // Set the GCP audience.
435
435
subject_token_type: 'urn:ietf:params:aws:token-type:aws4_request', // Set the subject token type.
436
436
aws_security_credentials_supplier: new AwsSupplier("AWS_REGION") // Set the custom supplier.
437
+
service_account_impersonation_url: 'https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/$EMAIL:generateAccessToken', // Set the service account impersonation url.
437
438
}
438
439
439
440
// Create a new Auth client and use it to create service client, i.e. storage.
Copy file name to clipboardExpand all lines: README.md
+1
Original file line number
Diff line number
Diff line change
@@ -478,6 +478,7 @@ const clientOptions = {
478
478
audience: '//iam.googleapis.com/projects/$PROJECT_NUMBER/locations/global/workloadIdentityPools/$WORKLOAD_POOL_ID/providers/$PROVIDER_ID', // Set the GCP audience.
479
479
subject_token_type: 'urn:ietf:params:aws:token-type:aws4_request', // Set the subject token type.
480
480
aws_security_credentials_supplier: newAwsSupplier("AWS_REGION") // Set the custom supplier.
481
+
service_account_impersonation_url: 'https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/$EMAIL:generateAccessToken', // Set the service account impersonation url.
481
482
}
482
483
483
484
// Create a new Auth client and use it to create service client, i.e. storage.
0 commit comments