Skip to content

fix(batch-permit-job): use runtime auth for storage - #1768

Open
Jacky-Pham wants to merge 3 commits into
mainfrom
Jacky/remove-batch-permit-gcp-auth-key
Open

fix(batch-permit-job): use runtime auth for storage#1768
Jacky-Pham wants to merge 3 commits into
mainfrom
Jacky/remove-batch-permit-gcp-auth-key

Conversation

@Jacky-Pham

@Jacky-Pham Jacky-Pham commented Jul 14, 2026

Copy link
Copy Markdown
Collaborator

Summary

  • remove the batch permit validator job deployed GCP_AUTH_KEY mapping so it uses the Cloud Run runtime identity
  • support keyless signed URL generation with the ADC access token and service account email
  • only refresh ADC when its token is not valid
  • add focused unit coverage for the keyless signed URL path

Dependency

@sonarqubecloud

Copy link
Copy Markdown

Comment thread strr-api/src/strr_api/services/gcp_storage_service.py
Comment thread strr-api/src/strr_api/services/gcp_storage_service.py Outdated
Comment thread strr-api/src/strr_api/services/gcp_storage_service.py Outdated
@sonarqubecloud

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants