Authenticating a Cloud Run Service with a Service Account Key

Hi @gasperblk :wave: I think you're on the right track!

Here's what I did to try to reproduce what you're seeing:

  1. I just spun up a test GCP Cloud Run Service
  2. Created a service account
  3. Added that service account to be able to invoke the Cloud Run Service
  4. Created a key for that service account
  5. Set the REST API authentication in Retool similarly to how you did in your screenshot... with one difference: I did not specify any scope in the Service Account OAuth Scopes field whereas you provided one.

Can you try clearing out the scopes, saving the resource, and retrying your query?

Here's a GIF showing how removing the scope worked for me. Were you seeing the exact same error message?

gif2