Google Cloud PubSub - 区域端点身份验证问题

如何解决Google Cloud PubSub - 区域端点身份验证问题

我想为发布到区域端点的 Google Cloud Pub/Sub 创建一个发布者。

这是我正在运行的代码（几乎是快速入门指南中的代码）：

List<X509Certificate> certs = new List<X509Certificate>
{
    new X509Certificate2("myCert.pfx")
};

var options = new MqttClientOptionBuilder()
    .WithTcpServer(broker,port)
    .WithTls(new MqttClientOptionsBuilderTlsParameters
    {
        UseTls = true,Certificates = certs
    })
    .Build();

我想使用排序功能，因此我需要消息位于同一区域。

此代码返回：

using Google.Cloud.PubSub.V1;
using Grpc.Core;
using System;
using System.Collections.Generic;
using System.Linq;
using System.Threading;
using System.Threading.Tasks;
using static Google.Cloud.PubSub.V1.PublisherClient;

namespace PubSub
{
    class PubSubProducer
    {
        public async Task<int> PublishMessagesAsync(string projectId,string topicId,IEnumerable<string> messageTexts)
        {
            var creationSettings = new ClientCreationSettings(credentials: await GoogleGrpcCredentials.GetApplicationDefaultAsync().ConfigureAwait(false),serviceEndpoint: "us-central1-pubsub.googleapis.com");

            var customSettings = new PublisherClient.Settings
            {
                EnableMessageOrdering = true
            };

            TopicName topicName = TopicName.FromProjectTopic(projectId,topicId);
            PublisherClient publisher = await PublisherClient.CreateAsync(topicName,clientCreationSettings: creationSettings,settings: customSettings);

            int publishedMessageCount = 0;
            var publishTasks = messageTexts.Select(async text =>
            {
                try
                {
                    string ordering_key;
                    if (int.Parse(text) > 5)
                        ordering_key = "a";
                    else
                        ordering_key = "b";
                    string message = await publisher.PublishAsync(ordering_key,text);
                    Console.WriteLine($"Published message {message}");
                    Interlocked.Increment(ref publishedMessageCount);
                }
                catch (Exception exception)
                {
                    Console.WriteLine($"An error ocurred when publishing message {text}: {exception.Message}");
                }
            });
            await Task.WhenAll(publishTasks);
            return publishedMessageCount;
        }
    }
}

当我不提供 An error ocurred when publishing message 9: Status(StatusCode="Unauthenticated",Detail="Request had invalid authentication credentials. Expected OAuth 2 access token,login cookie or other valid authentication credential. See https://developers.google.com/identity/sign-in/web/devconsole-project.",DebugException="Grpc.Core.Internal.CoreErrorDetailException: {"created":"@1608719160.348000000","description":"Error received from peer ipv4:<IP>","file":"T:\src\github\grpc\workspace_csharp_ext_windows_x64\src\core\lib\surface\call.cc","file_line":1062,"grpc_message":"Request had invalid authentication credentials. Expected OAuth 2 access token,"grpc_status":16}") 时它工作正常：

regional endpoint

我的服务帐户似乎缺少使用此区域端点的权限。

我该如何解决这个问题？我缺少哪些权限？

解决方法

问题在于我如何创建 ClientCreationSettings。

发布者的正确方式：

var clientCreationSettings = new PublisherClient.ClientCreationSettings(serviceEndpoint: "us-central1-pubsub.googleapis.com:443");

订阅者：

var clientCreationSettings = new SubscriberClient.ClientCreationSettings(serviceEndpoint: "us-central1-pubsub.googleapis.com:443");