Skip to content

Instantly share code, notes, and snippets.

@nordineb
Created February 9, 2022 15:19
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save nordineb/b48bec4c0e378e70fec60787d3fc6454 to your computer and use it in GitHub Desktop.
Save nordineb/b48bec4c0e378e70fec60787d3fc6454 to your computer and use it in GitHub Desktop.
Google Cloud authentication using service accounts

You might want to use a service account to access google cloud. This is how

gcloud iam service-accounts create \
labgke --description="Temp access account to gke for lab purpose"  \
--display-name="tmp lab service account"  \

gcloud iam service-accounts list
gcloud projects add-iam-policy-binding  \
k8s2021 \
--member="serviceAccount:labgke@k8s2021.iam.gserviceaccount.com"  \
--role="roles/container.developer"

gcloud iam service-accounts keys create ~/key-lab.json
--iam-account labgke@k8s2021.iam.gserviceaccount.com

gcloud iam service-accounts keys list --iam-account labgke@k8s2021.iam.gserviceaccount.com

gcloud auth activate-service-account labgke@k8s2021.iam.gserviceaccount.com --key-file=key.json --project=k8s2021 gcloud config set project k8s2021 gcloud container clusters get-credentials prod-cluster --zone europe-north1-a --project k8s2021

Clean up

gcloud iam service-accounts keys delete 90e2db87305b6d6e6840b08a9cc7ca7f4c540ea7  --iam-account=labgke@k8s2021.iam.gserviceaccount.com
gcloud iam service-accounts keys list  --iam-account=labgke@k8s2021.iam.gserviceaccount.com
gcloud iam service-accounts delete  --iam-account=labgke@k8s2021.iam.gserviceaccount.com

https://crimson-shrimp-69ji9t3v.ws-eu03.gitpod.io

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment