Skip to content

Support workload identity federation for BigQuery #26641

@nguyenmphu

Description

@nguyenmphu

Problem

Workload Identity Federation is the method for accessing Google Cloud resources without using a service account secret key.

However, the BigQuery connector currently only supports secret keys (docs).

Proposed Solution

bigquery-connector using google-auth-library for authentication. It supports workload identity federation, just following this guide: https://github.com/googleapis/google-auth-library-java?tab=readme-ov-file#workload-identity-federation

Why

  • Service account keys are powerful credentials that can present a security risk if not managed correctly. Workload Identity Federation eliminates the maintenance and security burden associated with service account keys.
  • For security reasons, some organizations do not allow the use of service account keys.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bigqueryBigQuery connector

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions