Assigned
Status Update
Comments
mo...@google.com <mo...@google.com> #2
I have forwarded this request to the engineering team. We will update this issue with any progress updates and a resolution.
Best Regards,
Josh Moyer
Google Cloud Platform Support
Best Regards,
Josh Moyer
Google Cloud Platform Support
so...@gmail.com <so...@gmail.com> #3
This is not only useful for IP addresses, but also for many other resources. I understand that names are currently used as identifiers, so this request is probably not trivial to implement. Maybe distinguishing between a (numeric, automatically generated) identifier and a (textual) label is the way to go?
Description
What you would like to accomplish:
This document[1] outlines after a user configure a quota, Cloud Endpoints tracks the number of requests per minute per consumer Cloud project. Each application that calls the user's API must:
- Have enabled your API in their Cloud project.
- Send an API key with each request to user's API. This allows Cloud Endpoints to identify the Cloud project that the calling application is associated with and to increment the request counter for the Cloud project.
Customer would like to accomplish this with service account. According to customer associating the quota with service account / role would probably be the better way to go about it.
Customer is using gRPC version 1.18 or 1.17.2
[1]
How this might work:
Customer is doing server to server API calls. They use API Keys to authenticate requests on a per / account basis. They are also internally associating the API keys in order to authorize specific RPC request content.
Customer wants to identify and report on requests, traces and metrics specific to the customer that consumes the API key (each has a dedicated project) and to be able to set limits (throttle) some of the APIs per account.
Customer has indicated according to him it appears based on the Cloud Endpoints documentation[2] these requires an API Key which he likes to achieve using service account.
[2]
If applicable, reasons why alternative solutions are not sufficient:
Customer is looking forward to automate the whole process. He was originally looking for an Google Cloud API to API Key which is not available at this moment and now seeking the features that is associated with API Key to be associated with service account as well.
Other information (workarounds you have tried, documentation consulted, etc):