Skip to content

Google Cloud Storage

Google Cloud Storage stores module archives and provider binaries with checksum metadata.

Configuration

Field Type Required Description
bucket string Yes GCS bucket name 
storageConfig:
  gcs:
    bucket: opendepot-modules

Authentication

OpenDepot uses Application Default Credentials (ADC). Common Kubernetes deployments use:

  • GKE with Workload Identity: Bind a Google service account to the Version controller's Kubernetes ServiceAccount. This is the recommended option.
  • Service account key: Mount a JSON key file and set GOOGLE_APPLICATION_CREDENTIALS.

Permissions

The storage identity requires:

  • storage.objects.create
  • storage.objects.get
  • storage.objects.delete
  • storage.objects.getMetadata, or the Storage Object Admin role

See Pre-signed URL Redirects for signed provider download configuration.