Request to release GCS Python library

[frankyn]

Hi,

Is it possible to release the Storage client library for Python?

I'd like the new method get_service_account_email to be available. Unless there exist concerns.

[tseaver]

@frankyn my only current storage-related concern is the flaky KMS system tests (#5852). We can likely make a release without addressing it.

[frankyn]

Let's take a look at the failing tests first. I think it's a permission issue.

[tseaver]

@frankyn The failures are flaky: I presume that means there needs to be some backoff / retry added, or maybe the KMS stuff has a LRO we need to wait on?

[frankyn]

KMS has strong consistency for newly created key rings and keys. Are they being disabled in-between?

https://cloud.google.com/kms/docs/consistency#keys

[tseaver]

@crwilcox Do you have context for the KMS issue?

[frankyn]

The issue is the CI service account requires permission to cloudkms.keyRings.setIamPolicy for it to be able to update the keyRing IamPolicy. The existing roles it exists in are: roles/owner and roles/cloudkms.admin, and I think using only roles/cloudkms.admin given the service account currently uses Editor would help solve this issue.