search

DataBiosphere / dsub

Open-source command-line tool to run batch computing tasks and workflows on backend services such as Google Cloud.
Apache License 2.0
265 stars 44 forks source link

Provide an option to run with user provided service account #112

Closed snamburi3 closed 6 years ago

snamburi3 commented 6 years ago

I think dsub presently runs with the default compute engine service account (I could be wrong about this!). Our setup needs users to use a custom service account with its own scopes.

I made it work by replacing the "email" value with service account email here. It worked for me. This might be useful to other users.

mbookman commented 6 years ago

Thanks. That's right. The behavior of dsub has always been to just request the default with the notion that wiring through a --service-account command-line parameter would be straight-forward, but we should avoid "option-bloat" if no one actually needs it.

snamburi3 commented 6 years ago

I agree - we don't need an extra option. The users who need this can refer to this issue. I will close the issue.

The Pipelines API allows use of a service account other than the default . Refer: pipelines/run#ServiceAccount