Hi for using bigquery using env variable do we need to give OAUTH permission to the service account?

I don't believe so. We only call BigQuery from our back-end.so we shouldn't need OAuth.

but we got this error while uploading BQ private key file: Access Denied: BigQuery BigQuery: Missing required OAuth scope. Need BigQuery or Cloud Platform read scope.

The service account needs to have the following roles • Data Viewer • Metadata Viewer • Job User

ah alright. but the problem is the same key file worked in upload mode, but not when we give it as a secret

What env variables are you using?

GOOGLE_APPLICATION_CREDENTIALS

or something else?

using

GOOGLE_APPLICATION_CREDENTIALS

Hmm. And are you getting this error running locally or within GCP?

this is with GCP, we are using GKE

My guess is that either the credentials path is wrong or the environment variable isn't being set for the container. That would cause the client libraries to use the service account tied to GKE instead.

hi @future-teacher-7046 we have set the env value of GOOGLE_APPLICATION_CREDENTIALS as the path and the path conatins the key json attaching screenshot Moreover i am getting below error The file at /opt/growthbook.json does not exist, or it is not a file. ENOENT: no such file or directory, lstat '/opt/growthbook.json

Hmm. That's strange. Is it possibly a permissions error?

not sure i have a question if i do echo for GOOGLE_APPLICATION_CREDENTIALS inside the pod should it print the value of SA key or the path of SA key

It should be the path I think

but still it throws error The file at /opt/growthbook.json does not exist, or it is not a file. ENOENT: no such file or directory, lstat '/opt/growthbook.json