Module gcs_credentials 

Refreshable Google workload-identity credentials for pinned object-store clients. Refreshable GCS workload-identity credentials.

object_store 0.13 supports injecting a credential provider but cannot parse Google external-account ADC files. This module bridges Google’s official refreshable provider into that existing hook without retaining or logging access tokens in LaminarDB.

Enums

GcsCredentialError

A redacted failure while selecting Google application credentials.

Functions

configure_gcs_workload_identity

Apply GCS options while keeping credential material owned by the injected workload-identity provider.

gcs_workload_identity_provider

Select a refreshable credential provider when external-account ADC wins the existing explicit-over-ambient credential precedence.