GCPCredentialsControllerService¶

Description¶

Defines credentials for Google Cloud Platform processors. Uses Application Default credentials without configuration. Application Default credentials support environmental variable (GOOGLE_APPLICATION_CREDENTIALS) pointing to a credential file, the config generated by gcloud auth application-default login, AppEngine/Compute Engine service accounts, etc.

Tags¶

credentials, gcp, provider

Properties¶

In the list below required Properties are shown with an asterisk (*). Other properties are considered optional. The table also indicates any default values, and whether a property supports the NiFi Expression Language.

Display Name	API Name	Default Value	Allowable Values	Description
Delegation Strategy *	Delegation Strategy	Service Account	Service Account Delegated Account	The Delegation Strategy determines which account is used when calls are made with the GCP Credential.
Delegation User *	Delegation User			This user will be impersonated by the service account for api calls. API calls made using this credential will appear as if they are coming from delegate user with the delegate user’s access. Any scopes supplied from processors to this credential must have domain-wide delegation setup with the service account.
Use Application Default Credentials	application-default-credentials	false	true false	If true, uses Google Application Default Credentials, which checks the GOOGLE_APPLICATION_CREDENTIALS environment variable for a filepath to a service account JSON key, the config generated by the gcloud sdk, the App Engine service account, and the Compute Engine service account.
Use Compute Engine Credentials	compute-engine-credentials	false	true false	If true, uses Google Compute Engine Credentials of the Compute Engine VM Instance which NiFi is running on.
Proxy Configuration Service	proxy-configuration-service			Specifies the Proxy Configuration Controller Service to proxy network requests. Supported proxies: HTTP + AuthN
Service Account JSON	service-account-json			The raw JSON containing a Service Account keyfile.
Service Account JSON File	service-account-json-file			Path to a file containing a Service Account key file in JSON format.

State management¶

This component does not store state.

Restricted¶

Restrictions¶

Required Permission	Explanation
access environment credentials	The default configuration can read environment variables and system properties for credentials

System Resource Considerations¶

This component does not specify system resource considerations.