missing application_default_credentials.json inside paude container

[ktdreyer]

I tried paude start on my Fedora 43 laptop. It opened claude ok. When I send a message "hello", I get this error:

❯ hello
  ⎿  API Error: The file at
     /home/paude/.config/gcloud/application_default_credentials.json does not
     exist, or it is not a file. EACCES: permission denied, statx
     '/home/paude/.config/gcloud/application_default_credentials.json'

/home/paude/.config/gcloud/ exists in the paude container environment, but it's empty.

podman inspect localhost/paude-runtime:f531177309b7 shows no mounts. I don't know much about how this works, but I would have expected to see a mount or a secret with my Google ADC JSON

[ktdreyer]

SELinux stopped me from reading .gcloud inside the container at all.

When I disabled SELinux, I still could not read the ADC because it's 0600 on my laptop.

This change works for me: #4

[ktdreyer]

(Tangent: I was curious how the OpenShift backend handles secrets. It simply copies files with oc cp, no k8s secrets used.)