gcloud alpha auth application-default - manage your active Application Default Credentials
gcloud alpha auth application-default COMMAND [GCLOUD_WIDE_FLAG ...]
(ALPHA) Application Default Credentials (ADC) provide a method to get credentials used in calling Google APIs. The gcloud alpha auth application-default command group allows you to manage active credentials on your machine that are used for local application development.
These credentials are only used by Google client libraries in your own application.
For more information about ADC and how it works, see Authenticating as a service account https://cloud.google.com/docs/authentication/production.
To use your own user credentials for your application to access an API, run:
$ gcloud alpha auth application-default login
This will take you through a web flow to acquire new user credentials.
To create a service account and have your application use it for API access, run:
$ gcloud iam service-accounts create my-account $ gcloud iam service-accounts keys create key.json \ --iam-account=my-account@my-project.iam.gserviceaccount.com $ export GOOGLE_APPLICATION_CREDENTIALS=key.json $ ./my_application.sh
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMAND is one of the following:
- login
(ALPHA) Acquire new user credentials to use for Application Default Credentials.
- print-access-token
(ALPHA) Print an access token for your current Application Default Credentials.
- revoke
(ALPHA) Revoke previously generated Application Default Credentials.
- set-quota-project
(ALPHA) Update or add a quota project in application default credentials (ADC).
This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. These variants are also available:
$ gcloud auth application-default
$ gcloud beta auth application-default