Osquery uses basic SQL commands to leverage a relational data-model to describe a device.

osquery

hey all, for the google pub/sub logging plugin, how does it use the service account credentials? is it just an env variable `GOOGLE_APPLICATION_CREDENTIALS` with a path to a service account key json?

hmph, is there a way to get more verbose logs? no matter what i'm getting "insufficient scopes" even if it's not pointing to a creds file at all, and on the other side of the spectrum i've oversupplied the service account with GCP permissions to this project hosting the pub/sub

You can turn on debug logging. <https://github.com/kolide/fleet/blob/master/docs/infrastructure/configuring-the-fleet-binary.md#logging_debug>

My Pub/Sub envs are as follows, running in Kubernetes.
```KOLIDE_OSQUERY_STATUS_LOG_PLUGIN: pubsub
KOLIDE_OSQUERY_RESULT_LOG_PLUGIN: pubsub
GOOGLE_APPLICATION_CREDENTIALS: /secrets/pubsub/pubsub.json
KOLIDE_PUBSUB_STATUS_TOPIC: osq-status-REDACTED
KOLIDE_PUBSUB_RESULT_TOPIC: osq-result-REDACTED
KOLIDE_PUBSUB_PROJECT: some-gcp-project```

yeah that's pretty much aligned on my side, hmm, i'll see if the debug logging helps...thanks!!