googleapis
BigQuery Feature: Support key less authentication
We are using Workload Identity Federation for an key less authentication to a GCP Service Account using ExternalAccountClient from 'google-auth-library' .
All provided samples on authenticating to BigQuery include properties from a key file or path to a key file, which we do not have in our key less solution.
We have seen the possibility to provide an Oauth token in the Big Query options. But when we try to provide a token we get "Error: Could not load the default credentials."
So we would like an example of how authenticate to BigQuery using an Oauth token.
To clarify, @samuellundberg - when you're using keyless auth, are you setting up a workload identity pool for your external service accounts and then generating a config file? (Here's a blog post explaining the process!). At that point, you can set your ADC to that filepath instead of the classic key-file. I'm happy to add an example here (and probably at least in the code), but just wanted to make sure we're on the same page!
I've changed priority level on this, and happy to re-engage when we have clarification!