Use application default credentials
Closed this issue · 1 comments
Currently Spydra requires a service account key as a json file for authenticating with GCP. It would be convenient to instead rely on the Application Default Credentials strategy implemented in Google's libs and command line clients (https://cloud.google.com/docs/authentication/production).
This would allow users to continue using the service account key file like today. However, when running Spydra itself on GCP VMs, they can instead use the default credentials supplied by the metadata service.
I believe this would be good both for simplicity and security, as one would no longer have to distribute key files.
To test this properly the PR contains a setup for running the integration tests on GCP Kubernetes in integration_test_k8s/