NAME

gcloud alpha iam service-accounts keys get-public-key - get the public key for a service account key pair

SYNOPSIS

gcloud alpha iam service-accounts keys get-public-key KEY-ID --iam-account=IAM_ACCOUNT --output-file=OUTPUT_FILE [--type=TYPE; default="pem"] [GCLOUD_WIDE_FLAG ...]

DESCRIPTION

(ALPHA) Get the public key for a service account key pair in pem or raw format.

EXAMPLES

To get the public key for some key ID for some service account (to validate a blob or JWT signature, for example), run:

$ gcloud alpha iam service-accounts keys get-public-key keyid \ --output-file=key-file \ --iam-account=my-iam-account@my-project.iam.gserviceaccount.com

POSITIONAL ARGUMENTS

KEY-ID

The key to get.

REQUIRED FLAGS

--iam-account=IAM_ACCOUNT

A textual name to display for the account.

--output-file=OUTPUT_FILE

The output file to write the public key.

OPTIONAL FLAGS

--type=TYPE; default="pem"

The type of the public key to get. TYPE must be one of: pem, raw.

GCLOUD WIDE FLAGS

These flags are available to all commands: --access-token-file, --account, --billing-project, --configuration, --flags-file, --flatten, --format, --help, --impersonate-service-account, --log-http, --project, --quiet, --trace-token, --user-output-enabled, --verbosity.

Run $ gcloud help for details.

NOTES

This command is currently in alpha and might change without notice. If this command fails with API permission errors despite specifying the correct project, you might be trying to access an API with an invitation-only early access allowlist. This variant is also available:

$ gcloud beta iam service-accounts keys get-public-key