Skip to content

fix: restrict GCS static auth to SA keys - #2126

Merged
stefanprodan merged 1 commit into
mainfrom
fix-gcp-bucket
Aug 5, 2026
Merged

fix: restrict GCS static auth to SA keys#2126
stefanprodan merged 1 commit into
mainfrom
fix-gcp-bucket

Conversation

@stefanprodan

@stefanprodan stefanprodan commented Aug 4, 2026

Copy link
Copy Markdown
Member

Migrate GCS static auth from the deprecated untyped loaders to cloud.google.com/go/auth.

Secrets holding another credential configuration besides type: service_account are now rejected with FetchFailed.

@stefanprodan stefanprodan added bug Something isn't working area/bucket Bucket related issues and pull requests backport:release/v1.9.x To be backported to release/v1.9.x labels Aug 4, 2026
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>

@matheuscscp matheuscscp left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@stefanprodan
stefanprodan merged commit fee0a76 into main Aug 5, 2026
6 checks passed
@stefanprodan
stefanprodan deleted the fix-gcp-bucket branch August 5, 2026 10:42
@fluxcdbot

Copy link
Copy Markdown
Member

Backport failed for release/v1.9.x, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin release/v1.9.x
git worktree add -d .worktree/backport-2126-to-release/v1.9.x origin/release/v1.9.x
cd .worktree/backport-2126-to-release/v1.9.x
git switch --create backport-2126-to-release/v1.9.x
git cherry-pick -x 9e50b15c888551bc99836d74d3ceddb1a3b4ecb0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/bucket Bucket related issues and pull requests backport:release/v1.9.x To be backported to release/v1.9.x bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants