Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

GCS backend only allows short lived token #935

Open
Critical-Impact opened this issue Mar 13, 2024 · 0 comments
Open

GCS backend only allows short lived token #935

Critical-Impact opened this issue Mar 13, 2024 · 0 comments
Labels
bug Something isn't working

Comments

@Critical-Impact
Copy link

Description

At present when specifying a GCS bucket as the backend, you have the ability to set the following

  1. projectIDSecretRef
  2. accessTokenSecretRef
  3. bucket

This appears to set GOOGLE_ACCESS_TOKEN on the restic side which is a short lived token. This is a problem if you create a schedule as the short lived token would expire.

Additional Context

No response

Logs

No response

Expected Behavior

Would it be possible to either specify a GOOGLE_ACCESS_TOKEN or GOOGLE_APPLICATION_CREDENTIALS when using GCS? As far as I can see this is supported natively by restic https://restic.readthedocs.io/en/latest/030_preparing_a_new_repo.html#google-cloud-storage

So you'd have

  1. projectIDSecretRef
  2. accessTokenSecretRef
  3. applicationCredentialsSecretRef
  4. bucket

Steps To Reproduce

No response

Version of K8up

2.7.2

Version of Kubernetes

v1.26.13-gke.1052000

Distribution of Kubernetes

GKE

@Critical-Impact Critical-Impact added the bug Something isn't working label Mar 13, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

1 participant