Skip to main content

PrivateServiceConnectUris

Default Value Data Type Required
None String

No

Description

A comma-separated list of base URIs to substitute when accessing Private Service Connect URLs. The following are valid URIs:

  • ACCOUNTS: The baseline accounts service URI, used only for interactive authentication (OAuthType value 3). The default value is: https://accounts.google.com.
  • For example:

    ACCOUNTS=https://accounts-<myprivateserver>.p.googleapis.com

  • OAUTH2: The baseline OAuth 2.0 service URI, used to retrieve access tokens for OAuth 2.0 authentication flows. The default value is: https://oauth2.googleapis.com.
  • For example:

    OAUTH2=https://oauth2-<myprivateserver>.p.googleapis.com

  • STS: The baseline security token service, used to retrieve access tokens for External Account Authentication flows. The default value is: https://sts.googleapis.com.
  • For example:

    STS=https://sts-<myprivateserver>.p.googleapis.com

  • BIGQUERY: The baseline Database REST API service, used to interface with the Database data source, via the REST API. The default value is: https://bigquery.googleapis.com.
  • For example:

    BIGQUERY=https://bigquery-<myprivateserver>.p.googleapis.com

  • READ_API: The host and port required to access the Database Storage Read API service, used to read data from tables via the Storage Read API. The default value is: bigquerystorage.googleapis.com:443.
  • For example:

    READ_API=bigquerystorage-<myprivateserver>.p.googleapis.com:443

    Note:

    The format must be [Host]:[Port], with no protocol specifier or URL components.

Note:

  • When OAuthType=0, the connector prioritizes the OAUTH2 URI from the key file specified in the KeyFile or KeyFilePath property. In order, the precedence is:
    1. KeyFile{_Enc}/KeyFilePath{_Enc}
    2. PrivateServiceConnectUris=...,OAUTH2=<YOUR_OAUTH2_URL>,...
    3. Default
  • When OAuthType=4, the connector prioritizes the STS URI from either the configuration file specified in the KeyFile or KeyFilePath property. In order, the precedence is:
    1. KeyFile/KeyFilePath{_Enc}
    2. PrivateServiceConnectUris=...,STS=<YOUR_STS_URL>,...
    3. Default
  • For more information about Private Service Connect, see "Private Service Connect" in the Google Cloud documentation: https://cloud.google.com/vpc/docs/private-service-connect.

Was this article helpful?

We're sorry to hear that.