GCPCredentialsControllerService¶
Description¶
Defines credentials for Google Cloud Platform processors. Uses Application Default credentials without configuration. Application Default credentials support environmental variable (GOOGLE_APPLICATION_CREDENTIALS) pointing to a credential file, the config generated by gcloud auth application-default login, AppEngine/Compute Engine service accounts, etc.
Tags¶
credentials, gcp, provider
Properties¶
In the list below required Properties are shown with an asterisk (*). Other properties are considered optional. The table also indicates any default values, and whether a property supports the NiFi Expression Language.
| Display Name | API Name | Default Value | Allowable Values | Description |
|---|---|---|---|---|
| Delegation Strategy * | Delegation Strategy | Service Account |
| The Delegation Strategy determines which account is used when calls are made with the GCP Credential. |
| Delegation User * | Delegation User | This user will be impersonated by the service account for api calls. API calls made using this credential will appear as if they are coming from delegate user with the delegate user’s access. Any scopes supplied from processors to this credential must have domain-wide delegation setup with the service account. | ||
| Use Application Default Credentials | application-default-credentials | false |
| If true, uses Google Application Default Credentials, which checks the GOOGLE_APPLICATION_CREDENTIALS environment variable for a filepath to a service account JSON key, the config generated by the gcloud sdk, the App Engine service account, and the Compute Engine service account. |
| Use Compute Engine Credentials | compute-engine-credentials | false |
| If true, uses Google Compute Engine Credentials of the Compute Engine VM Instance which NiFi is running on. |
| Proxy Configuration Service | proxy-configuration-service | Specifies the Proxy Configuration Controller Service to proxy network requests. | ||
| Service Account JSON | service-account-json | The raw JSON containing a Service Account keyfile. | ||
| Service Account JSON File | service-account-json-file | Path to a file containing a Service Account key file in JSON format. |
State management¶
This component does not store state.
Restricted¶
Restrictions¶
| Required Permission | Explanation |
|---|---|
| access environment credentials | The default configuration can read environment variables and system properties for credentials |
System Resource Considerations¶
This component does not specify system resource considerations.