GCP Cloud Function Invocation by Service Account

gcp_cloud_func_test.sh

###############
## VARIABLES ##
###############
SA='my-service-account'
PROJECT_ID='my-project-id'
FUNCTION_URL='my-func-url'


# Create the service account
gcloud iam service-accounts create $SA --project $PROJECT_ID

# Export service account credentials via JSON file
gcloud iam service-accounts keys create credentials.json \
--iam-account $(SA)@$(PROJECT_ID).iam.gserviceaccount.com

# Run the function with service account credentials
# Run gcloud as the service account
gcloud auth activate-service-account --key-file=credentials.json

# Invoke the Cloud Function as your service account
curl -m 70 -X POST $(FUNCTION_URL) \
-H "Authorization: bearer $(gcloud auth print-identity-token)" \
-H "Content-Type: application/json" \
-d '{
  "name": "Hello World"
}'