hanishi opened a new issue, #1493:
URL: https://github.com/apache/pekko-connectors/issues/1493

   ## Problem
   pekko-connectors-google-common reimplements Google's credential resolution 
instead of delegating to google-auth-library-java. This is a design issue that 
leads to:
   
   1. Incomplete GCP environment support
   
   The custom implementation does not correctly handle GKE Workload Identity, 
while `GoogleCredentials.getApplicationDefault()` works on the same Pod. 
Reimplementing authentication means that every change or addition to a GCP 
environment requires `pekko-connectors` to catch up.
   
   2. No non-deprecated escape hatch
   
   The only way to bypass the custom implementation (`withCallCredentials`) is 
**deprecated** and has no replacement.
   
   **google-auth-library-java is maintained by Google, uses standard HTTP 
clients (no Pekko HTTP dependency), and supports all GCP environments. There is 
no benefit to reimplementing this.**
   
   ## Proposal
   Replace the custom credential resolution with 
`GoogleCredentials.getApplicationDefault()` from google-auth-library-java.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to