Skip to content

Commit f52a190

Browse files
authored
docs(readme): add example for service_account_impersonation_url in clientOptions (#1902)
* docs(readme): add service_account_impersonation_url example for AwsSupplier The service_account_impersonation_url must be passed in the clientOptions when using a custom AwsSupplier to avoid permissions errors. Updated the README to include this information. * docs(config): add service_account_impersonation_url example to .partials.yml Updated the .partials.yml file to include the service_account_impersonation_url configuration example, ensuring consistency with the README file.
1 parent 0897882 commit f52a190

File tree

2 files changed

+2
-0
lines changed

2 files changed

+2
-0
lines changed

Diff for: .readme-partials.yaml

+1
Original file line numberDiff line numberDiff line change
@@ -434,6 +434,7 @@ body: |-
434434
audience: '//iam.googleapis.com/projects/$PROJECT_NUMBER/locations/global/workloadIdentityPools/$WORKLOAD_POOL_ID/providers/$PROVIDER_ID', // Set the GCP audience.
435435
subject_token_type: 'urn:ietf:params:aws:token-type:aws4_request', // Set the subject token type.
436436
aws_security_credentials_supplier: new AwsSupplier("AWS_REGION") // Set the custom supplier.
437+
service_account_impersonation_url: 'https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/$EMAIL:generateAccessToken', // Set the service account impersonation url.
437438
}
438439
439440
// Create a new Auth client and use it to create service client, i.e. storage.

Diff for: README.md

+1
Original file line numberDiff line numberDiff line change
@@ -478,6 +478,7 @@ const clientOptions = {
478478
audience: '//iam.googleapis.com/projects/$PROJECT_NUMBER/locations/global/workloadIdentityPools/$WORKLOAD_POOL_ID/providers/$PROVIDER_ID', // Set the GCP audience.
479479
subject_token_type: 'urn:ietf:params:aws:token-type:aws4_request', // Set the subject token type.
480480
aws_security_credentials_supplier: new AwsSupplier("AWS_REGION") // Set the custom supplier.
481+
service_account_impersonation_url: 'https://iamcredentials.googleapis.com/v1/projects/-/serviceAccounts/$EMAIL:generateAccessToken', // Set the service account impersonation url.
481482
}
482483

483484
// Create a new Auth client and use it to create service client, i.e. storage.

0 commit comments

Comments
 (0)