GCP Pub/Sub

GCP Pub/Sub组件详细文档

创建 Dapr 组件

要安装GCP pubsub,请创建一个类型为pubsub.gcp.pubsub的组件。 请参阅 本指南,了解如何创建和应用 pubsub 配置。

  1. apiVersion: dapr.io/v1alpha1
  2. kind: Component
  3. metadata:
  4. name: gcp-pubsub
  5. namespace: default
  6. spec:
  7. type: pubsub.gcp.pubsub
  8. version: v1
  9. metadata:
  10. - name: type
  11. value: service_account
  12. - name: projectId
  13. value: <PROJECT_ID> # replace
  14. - name: identityProjectId
  15. value: <IDENTITY_PROJECT_ID> # replace
  16. - name: privateKeyId
  17. value: <PRIVATE_KEY_ID> #replace
  18. - name: clientEmail
  19. value: <CLIENT_EMAIL> #replace
  20. - name: clientId
  21. value: <CLIENT_ID> # replace
  22. - name: authUri
  23. value: https://accounts.google.com/o/oauth2/auth
  24. - name: tokenUri
  25. value: https://oauth2.googleapis.com/token
  26. - name: authProviderX509CertUrl
  27. value: https://www.googleapis.com/oauth2/v1/certs
  28. - name: clientX509CertUrl
  29. value: https://www.googleapis.com/robot/v1/metadata/x509/<PROJECT_NAME>.iam.gserviceaccount.com #replace PROJECT_NAME
  30. - name: privateKey
  31. value: <PRIVATE_KEY> # replace x509 cert
  32. - name: disableEntityManagement
  33. value: "false"

Warning

以上示例将 Secret 明文存储。 更推荐的方式是使用 Secret 组件, 这里

元数据字段规范

字段必填详情示例
typeNGCP credentials type. Only service_account is supported. Defaults to service_accountservice_account
project_idYGCP 项目 idmyproject-123
identityProjectIdNIf the GCP pubsub project is different from the identity project, specify the identity project using this attribute“myproject-123”
privateKeyIdNIf using explicit credentials, this field should contain the private_key_id field from the service account json document“my-private-key”
privateKeyNIf using explicit credentials, this field should contain the private_key field from the service account json——-BEGIN PRIVATE KEY——-MIIBVgIBADANBgkqhkiG9w0B
clientEmailNIf using explicit credentials, this field should contain the client_email field from the service account json“myservice@myproject-123.iam.gserviceaccount.com”
clientIdNIf using explicit credentials, this field should contain the client_id field from the service account json106234234234
authUriNIf using explicit credentials, this field should contain the auth_uri field from the service account jsonhttps://accounts.google.com/o/oauth2/auth
tokenUriNIf using explicit credentials, this field should contain the token_uri field from the service account jsonhttps://oauth2.googleapis.com/token
authProviderX509CertUrlNIf using explicit credentials, this field should contain the auth_provider_x509_cert_url field from the service account jsonhttps://www.googleapis.com/oauth2/v1/certs
clientX509CertUrlNIf using explicit credentials, this field should contain the client_x509_cert_url field from the service account jsonhttps://www.googleapis.com/robot/v1/metadata/x509/myserviceaccount%40myproject.iam.gserviceaccount.com
disableEntityManagementN当设置为“true”时,主题和订阅不会自动创建。 默认值为 “false”“true”, “false”

创建 GCP Pub/Sub

You can use either “explicit” or “implicit” credentials to configure access to your GCP pubsub instance. If using explicit, most fields are required. Implicit relies on dapr running under a Kubernetes service acccount (KSA) mapped to a Google service account (GSA) which has the necessary permissions to access pubsub. In implicit mode, only the projectId attribute is needed, all other are optional.

按照这里的说明设置Google Cloud Pub/Sub系统。

相关链接