From 0c26454eb1d42690e874a651fbedd55a12185e32 Mon Sep 17 00:00:00 2001 From: Daniel Sanche Date: Tue, 2 Jun 2026 14:12:16 -0700 Subject: [PATCH 1/5] chore(auth): re-enable auth releases --- .librarian/config.yaml | 3 --- librarian.yaml | 1 - .../system_tests/system_tests_sync/test_service_account.py | 2 +- 3 files changed, 1 insertion(+), 5 deletions(-) diff --git a/.librarian/config.yaml b/.librarian/config.yaml index f8388dccd344..af751c2626d9 100644 --- a/.librarian/config.yaml +++ b/.librarian/config.yaml @@ -41,8 +41,5 @@ libraries: # TODO(https://github.com/googleapis/google-cloud-python/issues/17327) - id: "google-cloud-bigtable" release_blocked: true - # TODO(https://github.com/googleapis/google-cloud-python/issues/17334) - - id: "google-auth" - release_blocked: true diff --git a/librarian.yaml b/librarian.yaml index 2018678a980d..fb5d376113a1 100644 --- a/librarian.yaml +++ b/librarian.yaml @@ -221,7 +221,6 @@ libraries: default_version: v1alpha1 - name: google-auth version: 2.53.0 - skip_release: true python: library_type: AUTH - name: google-auth-httplib2 diff --git a/packages/google-auth/system_tests/system_tests_sync/test_service_account.py b/packages/google-auth/system_tests/system_tests_sync/test_service_account.py index 7fd38d9d7a94..5c859fbf6b0a 100644 --- a/packages/google-auth/system_tests/system_tests_sync/test_service_account.py +++ b/packages/google-auth/system_tests/system_tests_sync/test_service_account.py @@ -57,7 +57,7 @@ def test_iam_signer(http_request, credentials): credentials, credentials.service_account_email ) - + signed_blob = signer.sign("message") assert isinstance(signed_blob, bytes) From 8dec28105e4b53dd5bc3223d10dd9bfed1db7786 Mon Sep 17 00:00:00 2001 From: Daniel Sanche Date: Tue, 2 Jun 2026 14:50:04 -0700 Subject: [PATCH 2/5] added debug logging --- .../system_tests/system_tests_sync/test_service_account.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/packages/google-auth/system_tests/system_tests_sync/test_service_account.py b/packages/google-auth/system_tests/system_tests_sync/test_service_account.py index 5c859fbf6b0a..0acc9de74cb9 100644 --- a/packages/google-auth/system_tests/system_tests_sync/test_service_account.py +++ b/packages/google-auth/system_tests/system_tests_sync/test_service_account.py @@ -52,6 +52,8 @@ def test_iam_signer(http_request, credentials): ) # Verify iamcredentials signer. + print(f"\nDEBUG: Service Account Email: {credentials.service_account_email}") + print(f"DEBUG: Key ID: {credentials.signer.key_id}") signer = iam.Signer( http_request, credentials, From 4ea473bbdd89acc185487ce9ee1571a733ebb9ab Mon Sep 17 00:00:00 2001 From: Daniel Sanche Date: Tue, 2 Jun 2026 15:35:14 -0700 Subject: [PATCH 3/5] attempt auto key creation --- .kokoro/system.sh | 10 +++++++--- 1 file changed, 7 insertions(+), 3 deletions(-) diff --git a/.kokoro/system.sh b/.kokoro/system.sh index 469d0e81c7fa..981542f28c19 100755 --- a/.kokoro/system.sh +++ b/.kokoro/system.sh @@ -54,12 +54,16 @@ run_package_test() { "google-auth") # Copy files needed for google-auth system tests mkdir -p "${package_path}/system_tests/data" - cp "${KOKORO_GFILE_DIR}/google-auth-service-account.json" "${package_path}/system_tests/data/service_account.json" + PROJECT_ID=$(cat "${KOKORO_GFILE_DIR}/google-auth-project-id.json") + SA_EMAIL=$(grep -o '"client_email": "[^"]*"' "${KOKORO_GFILE_DIR}/google-auth-service-account.json" | cut -d'"' -f4) + EPHEMERAL_KEY="${KOKORO_GFILE_DIR}/ephemeral.json" + echo "Ephemeral Key SA Email: ${SA_EMAIL}" + gcloud iam service-accounts keys create "${EPHEMERAL_KEY}" --iam-account="${SA_EMAIL}" --project="${PROJECT_ID}" + cp "${EPHEMERAL_KEY}" "${package_path}/system_tests/data/service_account.json" + GOOGLE_APPLICATION_CREDENTIALS="${EPHEMERAL_KEY}" cp "${KOKORO_GFILE_DIR}/google-auth-authorized-user.json" "${package_path}/system_tests/data/authorized_user.json" cp "${KOKORO_GFILE_DIR}/google-auth-impersonated-service-account.json" "${package_path}/system_tests/data/impersonated_service_account.json" - PROJECT_ID=$(cat "${KOKORO_GFILE_DIR}/google-auth-project-id.json") - GOOGLE_APPLICATION_CREDENTIALS="${KOKORO_GFILE_DIR}/google-auth-service-account.json" NOX_FILE="system_tests/noxfile.py" NOX_SESSION="" ;; From ba0877c76b7dbd2613d18698de3c73e1d93fe680 Mon Sep 17 00:00:00 2001 From: Daniel Sanche Date: Tue, 2 Jun 2026 15:53:34 -0700 Subject: [PATCH 4/5] Revert "attempt auto key creation" This reverts commit 4ea473bbdd89acc185487ce9ee1571a733ebb9ab. --- .kokoro/system.sh | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/.kokoro/system.sh b/.kokoro/system.sh index 981542f28c19..469d0e81c7fa 100755 --- a/.kokoro/system.sh +++ b/.kokoro/system.sh @@ -54,16 +54,12 @@ run_package_test() { "google-auth") # Copy files needed for google-auth system tests mkdir -p "${package_path}/system_tests/data" - PROJECT_ID=$(cat "${KOKORO_GFILE_DIR}/google-auth-project-id.json") - SA_EMAIL=$(grep -o '"client_email": "[^"]*"' "${KOKORO_GFILE_DIR}/google-auth-service-account.json" | cut -d'"' -f4) - EPHEMERAL_KEY="${KOKORO_GFILE_DIR}/ephemeral.json" - echo "Ephemeral Key SA Email: ${SA_EMAIL}" - gcloud iam service-accounts keys create "${EPHEMERAL_KEY}" --iam-account="${SA_EMAIL}" --project="${PROJECT_ID}" - cp "${EPHEMERAL_KEY}" "${package_path}/system_tests/data/service_account.json" - GOOGLE_APPLICATION_CREDENTIALS="${EPHEMERAL_KEY}" + cp "${KOKORO_GFILE_DIR}/google-auth-service-account.json" "${package_path}/system_tests/data/service_account.json" cp "${KOKORO_GFILE_DIR}/google-auth-authorized-user.json" "${package_path}/system_tests/data/authorized_user.json" cp "${KOKORO_GFILE_DIR}/google-auth-impersonated-service-account.json" "${package_path}/system_tests/data/impersonated_service_account.json" + PROJECT_ID=$(cat "${KOKORO_GFILE_DIR}/google-auth-project-id.json") + GOOGLE_APPLICATION_CREDENTIALS="${KOKORO_GFILE_DIR}/google-auth-service-account.json" NOX_FILE="system_tests/noxfile.py" NOX_SESSION="" ;; From a0543508cd6057f36ece1cf3817c1989e31887c9 Mon Sep 17 00:00:00 2001 From: Daniel Sanche Date: Tue, 2 Jun 2026 16:20:39 -0700 Subject: [PATCH 5/5] remove print statements --- .../system_tests/system_tests_sync/test_service_account.py | 2 -- 1 file changed, 2 deletions(-) diff --git a/packages/google-auth/system_tests/system_tests_sync/test_service_account.py b/packages/google-auth/system_tests/system_tests_sync/test_service_account.py index 0acc9de74cb9..5c859fbf6b0a 100644 --- a/packages/google-auth/system_tests/system_tests_sync/test_service_account.py +++ b/packages/google-auth/system_tests/system_tests_sync/test_service_account.py @@ -52,8 +52,6 @@ def test_iam_signer(http_request, credentials): ) # Verify iamcredentials signer. - print(f"\nDEBUG: Service Account Email: {credentials.service_account_email}") - print(f"DEBUG: Key ID: {credentials.signer.key_id}") signer = iam.Signer( http_request, credentials,