How do I Use Flyte with Google Cloud Platform?¶
I tried to run examples, but task fails with 401 error?¶
Steps:
- Are you using Workload Identity, then you have to pass in the ServiceAccount when you create the launchplan.
Refer to docs How do I use Kubernetes ServiceAccounts to access my cloud resources?
More information about WorkloadIdentity at https://cloud.google.com/kubernetes-engine/docs/how-to/workload-identity
If you are just using a simple Nodepool wide permissions then check the cluster’s ServiceAccount for Storage permissions. Do they look fine?
If not, then start a dummy pod in the intended namespace and check for
gcloud auth list
Note
FlytePropeller uses Google Application credentials, but gsutil does not use these credentials