java - 如何使用Java中的服务帐户验证GCP PubSub主题是否具有写入权限？

Question

我有一个项目 A 的服务帐户，它对项目 B 中定义的 Pubsub 主题具有写入权限。我想以编程方式验证相同的内容吗？有人可以帮我解决这个问题吗？

Answer 1

我自己解决了。 这是示例代码

public static void PubSubTopicValidator(String projectId, String topicId)
    throws IOException {

    TopicAdminSettings topicAdminSettings = getTopicAdminSettings(projectId);

    try (TopicAdminClient topicAdminClient = TopicAdminClient.create(topicAdminSettings)) {
        ProjectTopicName topicName = ProjectTopicName.of(projectId, topicId);

        List<String> permissions = new LinkedList<>();
        permissions.add("pubsub.topics.attachSubscription");
        permissions.add("pubsub.topics.publish");
        permissions.add("pubsub.topics.update");

        TestIamPermissionsRequest testIamPermissionsRequest =
            TestIamPermissionsRequest.newBuilder()
                .setResource(topicName.toString())
                .addAllPermissions(permissions)
                .build();

        TestIamPermissionsResponse testedPermissionsResponse = topicAdminClient.testIamPermissions(testIamPermissionsRequest);

        log.info("Tested:\n" + testedPermissionsResponse);


    }
}

private static TopicAdminSettings getTopicAdminSettings(String projectId) throws IOException {
    log.info("Get Topic admin settings ");
    String defaultProjectId = System.getenv("GOOGLE_CLOUD_PROJECT");
    GoogleCredentials credentials;
    ClassLoader classloader = Thread.currentThread().getContextClassLoader();
    InputStream is = classloader.getResourceAsStream("int_sa.json");

    log.info(" inputstream "+ is);
    if(projectId.equals(defaultProjectId)){
        credentials = getDefaultCredentials();
    }
    else{
        credentials = getGoogleCredentials(is);
    }

    return TopicAdminSettings.newBuilder()
                .setCredentialsProvider(FixedCredentialsProvider.create(credentials))
                 .build();
}