Skip to content

Starrocks doesnt use default ADC configured via GOOGLE_APPLICATION_CREDENTIALS variable #76242

Description

Starrocks is not properly inheriting the GOOGLE_APPLICATION_CREDENTIALS when connecting to GCS when configured as an environment variable on both the FE and BE node, likely an issue with implementation as ADC seems to be excluded.

=== FULL ERROR MESSAGE ===
1064 (HY000): Access storage error. Error message: 403 Forbidden
GET https://storage.googleapis.com/storage/v1/b/XXXXXXX/o/catalyst-extracts%2Fontology_pipe_test%2Fevents.parquet?fields=bucket,name,timeCreated,updated,generation,metageneration,size,contentType,contentEncoding,md5Hash,crc32c,metadata
{
"code": 403,
"errors": [
{
"domain": "global",
"message": "Caller does not have storage.objects.get access to the Google Cloud Storage object. Permission 'storage.objects.get' d

Metadata

Metadata

Assignees

No one assigned

    Labels

    type/bugSomething isn't working

    Type

    No type

    Fields

    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions