This message was deleted.

Yeah, I think we can support that pretty easily. If I understand correctly, it would just mean we don't pass credentials into the BigQuery client library and that should cause it to pull credentials from the metadata server instead.

Yes exactly, with Workload Identity it should be pulling temp credentials from the metadata server. And sounds good, our Infra team will be happy to hear this!

I just added this option in the latest docker build. You can now opt-in to use auto-discovery for credentials instead of uploading a JSON key file. Auto-discovery will look in environment variables and GCP metadata.

Wauw, that’s cool! Thank you, we’ll check it out 👍