google-nomulus/java/google/registry
nickfelt be4c62ccf1 Make BigqueryCommand use application default creds
This fixes a long-standing bug b/26016322 to move BigqueryCommand off of using a service account to access the Bigquery API.  It's now using Application Default Credentials, which can be easily auto-installed on a machine by running 'gcloud auth application-default login' and clicking through the OAuth consent screen.

The old method was a pain because:

1) individual users of the tool each needed to know to download and store a private key for the service account, and specify the key file via a CLI flag
2) BigQuery actions taken via the tool (e.g. load or query jobs) were listed as belonging to the service account, making them harder to find in the UI or for debugging, and difficult to audit (no idea which engineer invoked the tool)
3) within Google, this meant extra whitelisting headaches

The new method also isn't perfect because Application Default Credentials obtained via gcloud are supposed to be used primarily for local testing, and don't support setting any custom scopes.  However, we don't need custom scopes for this, and the smoother flow is worth it.

In the longer term, once the CLI is using OAuth to talk to the app itself, we'll be able to switch to the "best practice" option of also using those credentials for talking to the BigQuery API.

-------------
Created by MOE: https://github.com/google/moe
MOE_MIGRATED_REVID=145120770
2017-01-25 12:21:07 -05:00
..
backup Move ConfigModule and LocalTestConfig into RegistryConfig 2017-01-09 12:01:09 -05:00
batch Add ExpandRecurringBillingEventsAction cron job 2017-01-18 11:03:32 -05:00
bigquery Move ConfigModule and LocalTestConfig into RegistryConfig 2017-01-09 12:01:09 -05:00
braintree Move ConfigModule and LocalTestConfig into RegistryConfig 2017-01-09 12:01:09 -05:00
builddefs Use bin_ and genfiles_ directories derived from the ctx, not the configuration 2016-12-13 16:03:55 -05:00
config Use enum instead of boolean for TMCH CA mode 2017-01-18 11:11:35 -05:00
cron Restructure Maven dependencies in build 2017-01-09 11:59:04 -05:00
dns Remove the util package's dependency on the config package 2017-01-12 14:14:51 -05:00
eclipse Restructure Maven dependencies in build 2017-01-09 11:59:04 -05:00
env Remove PurgeSyntheticBillingEventsAction 2017-01-18 11:06:44 -05:00
export Move ConfigModule and LocalTestConfig into RegistryConfig 2017-01-09 12:01:09 -05:00
flows Create *InfoData objects instead of reusing *Resource objects 2017-01-12 14:11:51 -05:00
gcs Move ConfigModule and LocalTestConfig into RegistryConfig 2017-01-09 12:01:09 -05:00
groups Move ConfigModule and LocalTestConfig into RegistryConfig 2017-01-09 12:01:09 -05:00
idn Run buildifier on codebase to format BUILD files 2016-11-28 18:15:21 -05:00
keyring/api Add MOE equivalence for sync on 2016-12-19 2017-01-09 11:59:04 -05:00
loadtest Restructure Maven dependencies in build 2017-01-09 11:59:04 -05:00
mapreduce Restructure Maven dependencies in build 2017-01-09 11:59:04 -05:00
model Remove RoidSuffixes entirely 2017-01-18 11:08:21 -05:00
module Remove PurgeSyntheticBillingEventsAction 2017-01-18 11:06:44 -05:00
monitoring Inject the BigQuery streaming metrics queue 2017-01-13 10:29:36 -05:00
pricing Restructure Maven dependencies in build 2017-01-09 11:59:04 -05:00
rdap Move ConfigModule and LocalTestConfig into RegistryConfig 2017-01-09 12:01:09 -05:00
rde Move ConfigModule and LocalTestConfig into RegistryConfig 2017-01-09 12:01:09 -05:00
request Move ConfigModule and LocalTestConfig into RegistryConfig 2017-01-09 12:01:09 -05:00
security Add MOE equivalence for sync on 2016-12-19 2017-01-09 11:59:04 -05:00
storage/drive Restructure Maven dependencies in build 2017-01-09 11:59:04 -05:00
tldconfig/idn Add MOE equivalence for sync on 2016-12-19 2017-01-09 11:59:04 -05:00
tmch Use enum instead of boolean for TMCH CA mode 2017-01-18 11:11:35 -05:00
tools Make BigqueryCommand use application default creds 2017-01-25 12:21:07 -05:00
ui Use strict email address validation in SendEmailUtils 2017-01-12 14:17:57 -05:00
util Remove the util package's dependency on the config package 2017-01-12 14:14:51 -05:00
whois Remove the util package's dependency on the config package 2017-01-12 14:14:51 -05:00
xjc Remove the unused flags extension 2017-01-09 11:59:04 -05:00
xml Remove the unused flags extension 2017-01-09 11:59:04 -05:00
BUILD Restructure Maven dependencies in build 2017-01-09 11:59:04 -05:00
repositories.bzl Fix missing @CopyAnnotations by upgrading to AutoValue 1.4-rc2 2017-01-12 14:16:29 -05:00