Skip to content

fix: enable ADC for connect gateway and bump dev-tools to 1.28 - #759

Draft
apeabody wants to merge 1 commit into
mainfrom
fix/bumps-dev-tools-to-1-28
Draft

fix: enable ADC for connect gateway and bump dev-tools to 1.28#759
apeabody wants to merge 1 commit into
mainfrom
fix/bumps-dev-tools-to-1-28

Conversation

@apeabody

@apeabody apeabody commented Sep 4, 2026

Copy link
Copy Markdown
Collaborator
  • Configure Connect Gateway to use native Application Default Credentials (ADC) in testutils.ConnectToFleet and Cloud Build options.env. This prevents gke-gcloud-auth-plugin from invoking 'gcloud config config-helper', which crashes on Google Cloud SDK >= 573.0.0 due to upstream bug b/525047270.
  • Bump cft/developer-tools to 1.28 across build configurations and Makefile.

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the developer tools Docker image version from 1.25 to 1.28 across multiple build configuration files and the Makefile. It also configures the environment variable CLOUDSDK_CONTAINER_USE_APPLICATION_DEFAULT_CREDENTIALS to true in the build configurations and within the integration test utilities. The reviewer pointed out that setting this environment variable inside ConnectToFleet is redundant because it is already set globally in the package's init() function.

Comment thread test/integration/testutils/utils.go Outdated
t.Fatalf("Could not release creds lock: %v", err)
}
}()
os.Setenv("CLOUDSDK_CONTAINER_USE_APPLICATION_DEFAULT_CREDENTIALS", "true")

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The environment variable CLOUDSDK_CONTAINER_USE_APPLICATION_DEFAULT_CREDENTIALS is already set to "true" globally in the package's init() function (lines 36-38). Setting it again here in ConnectToFleet is redundant and can be safely removed.

@apeabody
apeabody force-pushed the fix/bumps-dev-tools-to-1-28 branch 2 times, most recently from 0ee7433 to 7462b76 Compare September 4, 2026 22:14
- Configure Connect Gateway to use native Application Default Credentials (ADC)
  in testutils.ConnectToFleet and Cloud Build options.env. This prevents
  gke-gcloud-auth-plugin from invoking 'gcloud config config-helper', which
  crashes on Google Cloud SDK >= 573.0.0 due to upstream bug b/525047270.
- Bump cft/developer-tools to 1.28 across build configurations and Makefile.
@amandakarina
amandakarina force-pushed the fix/bumps-dev-tools-to-1-28 branch from 7462b76 to 922bc08 Compare September 7, 2026 21:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants