I need to connect Camel to GCP storage (bucket) with the Camel google-storage component. Camel running in k8s (GCP).
The component accepts a key file. this works locally when provided a key file.
For security reasons, I don't want to include the key file in the POD but somehow enable the POD to access GCP services.
What are my options?
Workload Identity is the recommended way to access Google Cloud services from applications running within Google Kubernetes Engine. Using Workload Identity.
Otherwise, you can create and use a service account and assign it storage roles. And keys can be used with service accounts. Using Service account for authentication to Google Cloud. Camel documentation has also the steps to use service account keys Camel with Google Storage.
I'm in a similar situation (except I would like to use google pubsub).
Inspecting relevant code suggest to me that using workload identity to authz to google service using camel is not possible ATM.
Look at relevant code (line 170-188): it either uses the supplied key or no credentials at all.
