Unable to use gsutil with workload identity feature for GKE cluster

6/25/2019

I enabled the workload identity feature for my GKE cluster and it works fine.

I have no issues accessing gcloud commands with the right IAM permissions for the Google Cloud service account, however I am unsure how I could use gsutil commands inside a kubernetes pod when workload_identity is enabled.

Basically my question is, when workload_identity is enabled, is there a way to use gsutil ?

I see this error when use gsutil inside my pod

You are attempting to access protected data with no configured credentials. Please visit https://cloud.google.com/console#/project and sign up for an account, and then run the "gcloud auth login" command to configure gsutil to use these credentials.

How can we allow gsutil use gcloud credentials ?

-- Varunkumar Manohar
google-kubernetes-engine

0 Answers