For Authentication for running a GCP Cloud Function, can I just put the Key for the GCP Service Account that runs the function into a Prefect Secret?

How would you do it in Python? You would use the key or json?

I've actually been triggering them from Bash with the Cloud Scheduler

Ah I haven’t used it myself to provide feedback here.

I think I did it right - I put the JSON file for the Service Account in

GCP_CREDENTIALS

in Prefect.

Sweet! Thanks for sharing 🙂

MVP:

import prefect
from prefect import task, Flow, Parameter
from prefect.tasks.secrets.base import PrefectSecret
from google.oauth2 import service_account
from google.auth.transport.requests import AuthorizedSession
import requests
import json


@task
def trigger_cloud_fn(secret: PrefectSecret, url: str):
    credentials = service_account.IDTokenCredentials.from_service_account_info(
        secret, target_audience=url
    )
    authed_session = AuthorizedSession(credentials)
    body = json.dumps(dict())
    response = <http://authed_session.post|authed_session.post>(url=url, json=body)
    return response


with Flow("run-cloud-fn") as flow:
    cloud_fn_url = Parameter("cloud_fn_url", required=True)
    gcp_secret = PrefectSecret("GCP_CREDENTIALS")
    trigger_cloud_fn(gcp_secret, cloud_fn_url)

flow.register(project_name="tester")