Skip to content

storage(feat): adding support for signed url for workload identity - #68

Open
shubhangi-google wants to merge 2 commits into
mainfrom
support_signed_url_workload_identity
Open

storage(feat): adding support for signed url for workload identity#68
shubhangi-google wants to merge 2 commits into
mainfrom
support_signed_url_workload_identity

Conversation

@shubhangi-google

Copy link
Copy Markdown
Owner

Thank you for opening a Pull Request! Before submitting your PR, there are a few things you can do to make sure it goes smoothly:

  • Make sure to open an issue as a bug/issue before writing your code! That way we can discuss the change, evaluate designs, and agree on the general idea.
  • Follow the instructions in CONTRIBUTING. Most importantly, ensure the tests and linter pass by running bundle exec rake ci in the gem subdirectory.
  • Update code documentation if necessary.

closes: #<issue_number_goes_here>

@shubhangi-google shubhangi-google changed the title adding signed url support for key less env storage(feat): adding support for signed url for workload identity Aug 25, 2026
end
unencoded_signature = signing_key.sign OpenSSL::Digest::SHA256.new, secret
elsif Google::Cloud.env.compute_engine?
require "google/cloud/storage/iam_signer"

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can you make this a class level variable, is it possible?

issuer = options[:issuer] || options[:client_email] || @service.credentials.issuer
return issuer if issuer

if Google::Cloud.env.compute_engine?

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does this making compute engine a mandatory for this authentication

signer = service_account_signer signing_key
elsif Google::Cloud.env.compute_engine?
require "google/cloud/storage/iam_signer"
iam_signer = Google::Cloud::Storage::IAMSigner.new

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same here also

packed_signature = signing_key.sign OpenSSL::Digest::SHA256.new, data
elsif Google::Cloud.env.compute_engine?
require "google/cloud/storage/iam_signer"
iam_signer = Google::Cloud::Storage::IAMSigner.new

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

same here also

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants