Gcloud：使用服务帐户进行身份验证

Question

Authenticating with service account using gcloud We are using below command for activating service account using .json file.

gcloud auth activate-service-account <service_account> --key-file <file_name>

After doing this we are able to deploy templates. But we are not supposed to keep json file on server for authentication purpose.

Is there any other way of authenticating for deploying templates?

Is there any way to deploy templates using client secret and client id without using json file ?

Answer 1

To authorize Cloud SDK tools without storing private key, alternatively use tokens, see OAuth :

1. gcloud init on your local terminal, see Run gcloud init documentation
2. gcloud init on Compute Engine VM Instance, see Set up gcloud compute documentation

To avoid prompts, provide parameters for gcloud init in the command line (works only when $ gcloud config set disable_prompts false )

$ gcloud init --account=[account-name] --configuration=[config-name] --project=[prj-name] --console-only

For more details see documentation Managing SDK Configurations and Managing SDK Properties

There is also Google Cloud Shell, with 5GB of persistent disk storage and no additional authorization required to use Cloud SDK, see Starting Cloud Shell

To provide authorization you also can use Cloud Identity and Access Management API . You may also find helpful the answer for similar question on Stack Overflow