gcloud beta auth application-default - manage your active Application Default Credentials
gcloud beta auth application-default COMMAND [GCLOUD_WIDE_FLAG ...]
(BETA) Application Default Credentials (ADC) provide a method to get credentials used in calling Google APIs. The gcloud beta auth application-default command group allows you to manage active credentials on your machine that are used for local application development.
These credentials are only used by Google client libraries in your own application.
For more information about ADC and how it works, see Authenticating as a service account https://cloud.google.com/docs/authentication/production.
To use your own user credentials for your application to access an API, run:
$ gcloud beta auth application-default login
This will take you through a web flow to acquire new user credentials.
To create a service account and have your application use it for API access, run:
$ gcloud iam service-accounts create my-account $ gcloud iam service-accounts keys create key.json \ --iam-account=my-account@my-project.iam.gserviceaccount.com $ export GOOGLE_APPLICATION_CREDENTIALS=key.json $ ./my_application.sh
These flags are available to all commands: --help.
Run $ gcloud help for details.
COMMAND is one of the following:
- login
(BETA) Acquire new user credentials to use for Application Default Credentials.
- print-access-token
(BETA) Print an access token for your current Application Default Credentials.
- revoke
(BETA) Revoke previously generated Application Default Credentials.
- set-quota-project
(BETA) Update or add a quota project in application default credentials (ADC).
This command is currently in beta and might change without notice. These variants are also available:
$ gcloud auth application-default
$ gcloud alpha auth application-default