Workload Identity Support

[rthneha]

Currently we don't have Workload Identity support for logstash bigquery plugin. Is there any plan for it?
Or how can we help in contributing it.

We want to use Workload Identity to Authenticate for BQ Write calls from Logstash, so that we don't rely on static service account files to authenticate for API Calls.

This is part of our VAPT findings.

[josephlewis42]

Hi @rthneha , this should work if you're using an environment with the GCE metadata server and have set the json_key_file field to null: https://github.com/logstash-plugins/logstash-output-google_bigquery/blob/main/docs/index.asciidoc#json_key_file

The logic is here:

logstash-output-google_bigquery/lib/logstash/outputs/bigquery/streamclient.rb

Line 112 in db64bfc

def credentials(json_key_path)