Skip to content

Commit df03b30

Browse files
authored
Update blob-store.md (#19)
1 parent aabb951 commit df03b30

File tree

1 file changed

+9
-3
lines changed

1 file changed

+9
-3
lines changed

src/config/blob-store.md

Lines changed: 9 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -83,9 +83,11 @@ tables:
8383
To configure GCS credentials, you can set the following
8484
environment variables if you are using service accont:
8585

86-
* `GOOGLE_SERVICE_ACCOUNT`
87-
88-
Note that GCP Workload Identity is NOT supported yet, blocked by [https://github.com/apache/arrow-rs/issues/3490](https://github.com/apache/arrow-rs/issues/3490).
86+
* `GOOGLE_SERVICE_ACCOUNT` / `GOOGLE_SERVICE_ACCOUNT_PATH`: location of service account file
87+
* `GOOGLE_SERVICE_ACCOUNT_KEY`: JSON serialized service account key
88+
* `GOOGLE_APPLICATION_CREDENTIALS`: set by gcloud SDK
89+
* [Google Compute Engine Service Account](https://cloud.google.com/compute/docs/access/service-accounts#associating_a_service_account_to_an_instance)
90+
* [GKE Workload Identity](https://cloud.google.com/kubernetes-engine/docs/concepts/workload-identity)
8991

9092
## Azure Storage
9193

@@ -115,3 +117,7 @@ environment variables:
115117
* `AZURE_STORAGE_TENANT_ID`
116118
* `AZURE_STORAGE_SAS_KEY`
117119
* `AZURE_STORAGE_TOKEN`
120+
* `AZURE_MSI_ENDPOINT` / `AZURE_IDENTITY_ENDPOINT`: Endpoint to request a imds managed identity token
121+
* `AZURE_OBJECT_ID`: Object id for use with managed identity authentication
122+
* `AZURE_MSI_RESOURCE_ID`: Msi resource id for use with managed identity authentication
123+
* `AZURE_FEDERATED_TOKEN_FILE`: File containing token for Azure AD workload identity federation

0 commit comments

Comments
 (0)