hey all for the google pub sub logging plugin how does it us

Question

hey all for the google pub sub logging plugin how does it use the service account credentials is it just an env variable `GOOGLE APPLICATION CREDENTIALS` with a path to a service account key json

sundsta · Answer

Yes

PJ Meyer · Answer

hmph is there a way to get more verbose logs no matter what i m getting insufficient scopes even if it s not pointing to a creds file at all and on the other side of the spectrum i ve oversupplied the service account with GCP permissions to this project hosting the pub sub

sundsta · Answer

You can turn on debug logging <https github com kolide fleet blob master docs infrastructure configuring the fleet binary md logging debug>

sundsta · Answer

My Pub Sub envs are as follows running in Kubernetes ```KOLIDE OSQUERY STATUS LOG PLUGIN pubsub KOLIDE OSQUERY RESULT LOG PLUGIN pubsub GOOGLE APPLICATION CREDENTIALS secrets pubsub pubsub json KOLIDE PUBSUB STATUS TOPIC osq status REDACTED KOLIDE PUBSUB RESULT TOPIC osq result REDACTED KOLIDE PUBSUB PROJECT some gcp project```

PJ Meyer · Answer

yeah that s pretty much aligned on my side hmm i ll see if the debug logging helps thanks