java - 使用 Micronaut java 创建 google 存储桶时出现 401 未授权
问题描述
谷歌云的 Micronaut 文档支持https://micronaut-projects.github.io/micronaut-gcp/2.0.x/guide/
设置 GCP 支持
implementation("io.micronaut.gcp:micronaut-gcp-common:2.0.2")
将凭证设置在application.yml
gcp:
credentials:
location: classpath:googleStorageKey.json
googleStorageKey.json
application.yml
与文件位于同一目录中
谷歌服务帐户文件包含以下数据
{
"type": "service_account",
"project_id": "fetebird",
"private_key_id": "cf93ffffffjjhjyyuyu144842f20dc055763aa665",
"private_key": "-----BEGIN PRIVATE KEY-----\nMIIEv--REDACTED--4XOs=\n-----END PRIVATE KEY-----\n",
"client_email": "fetebirdstorage@fetebird.iam.gserviceaccount.com",
"client_id": "106425305070351254286",
"auth_uri": "https://accounts.google.com/o/oauth2/auth",
"token_uri": "https://oauth2.googleapis.com/token",
"auth_provider_x509_cert_url": "https://www.googleapis.com/oauth2/v1/certs",
"client_x509_cert_url": "https://www.googleapis.com/robot/v1/metadata/x509/fetebirdstorage%40fetebird.iam.gserviceaccount.com"
}
这是我用来创建带有选项的存储桶的代码
public Observable<Void> createBucketWithStorageClassAndLocation() {
Storage storage = StorageOptions.newBuilder().setProjectId(googleUploadObjectConfiguration.projectId()).build().getService();
StorageClass storageClass = StorageClass.COLDLINE;
try {
Bucket bucket =
storage.create(
BucketInfo.newBuilder(googleUploadObjectConfiguration.bucketName())
.setStorageClass(storageClass)
.setLocation(googleUploadObjectConfiguration.locationName())
.build());
LOG.info(String.format("Created bucket %s in %s with storage class %s", bucket.getName(), bucket.getLocation(), bucket.getStorageClass()));
} catch (Exception ex) {
LOG.error(ex.getMessage());
}
return Observable.empty();
}
参考 - https://cloud.google.com/storage/docs/samples/storage-create-bucket-clss-location
例外
401 Unauthorized
POST https://storage.googleapis.com/storage/v1/b?project=fetebird&projection=full
里面的Storage.options
凭证是空的,这就是我得到 401 的原因。它应该从 application.yml 文件位置选择凭证。
我在哪里犯错?
按照这里的说明https://cloud.google.com/docs/authentication/production#automatically
暴露此命令后
export GOOGLE_APPLICATION_CREDENTIALS="/home/user/Downloads/my-key.json"
仍然无法进行身份验证,我想我错过了一些东西。
gcloud projects add-iam-policy-binding --member=serviceAccount:fetebird-storage@fetebird.iam.gserviceaccount.com --role=roles/storage.admin fetebird
解决方案
推荐阅读
- python-3.x - Python Socrata API - 无法操作浮动时间戳
- kubernetes - 如何在 pod 上获取客户端的公共 IP?
- google-apps-script - 按名称覆盖文件夹中的现有文件(第 2 部分)
- kotlin - ViewPager 适配器显示错误的图像
- c# - 是否有 System.Text.Json 替代 Json.NET 的 JsonProperty(Order)?
- json - 使用 JSON 的 Arduino POST 请求
- python - Unittest 的 subTest 不适用于 Pytest,还是我疯了?
- reactjs - 我们如何在 React.js 上监听 Solidity 智能合约事件?
- flutter - 嵌套 JSON 解析颤动
- python - 错误:(-215:断言失败)size.width>0 && size.height>0 in function 'imshow'