Workload Identity Support
Opened this issue · 1 comments
rthneha commented
Currently we don't have Workload Identity support for logstash bigquery plugin. Is there any plan for it?
Or how can we help in contributing it.
We want to use Workload Identity to Authenticate for BQ Write calls from Logstash, so that we don't rely on static service account files to authenticate for API Calls.
This is part of our VAPT findings.
josephlewis42 commented
Hi @rthneha , this should work if you're using an environment with the GCE metadata server and have set the json_key_file field to null: https://github.com/logstash-plugins/logstash-output-google_bigquery/blob/main/docs/index.asciidoc#json_key_file
The logic is here: