GCP CLI Auth

[sinmetal]

以下のコマンドの影響範囲や、Revokeの方法をまとめる

• gcloud auth login
• gcloud auth application-default login
• appcfg.py でのログイン

[sinmetal]

https://github.com/golang/oauth2/blob/d2e6202438beef2727060aa7cabdd924d92ebfd9/google/default.go#L43

[sinmetal]

https://github.com/googleapis/google-api-go-client/blob/master/transport/grpc/dial.go#L37:6

[sinmetal]

https://github.com/GoogleCloudPlatform/google-cloud-go/blob/c15cd9f75aa4baf9a7fe2767b55231bce7f3694a/spanner/client.go#L166

https://github.com/googleapis/google-api-go-client/blob/76f31e4d17c2f1190154e8fab72d772db9a59a5d/transport/grpc/dial.go#L74

https://github.com/golang/oauth2/blob/d2e6202438beef2727060aa7cabdd924d92ebfd9/google/default.go#L43:6

[sinmetal]

https://github.com/golang/oauth2/blob/d2e6202438beef2727060aa7cabdd924d92ebfd9/google/go19.go#L33

[sinmetal]

https://cloud.google.com/docs/authentication/production#providing_credentials_to_your_application

[sinmetal]

だいたい https://medium.com/google-cloud-jp/gcp-%E3%81%A8-oauth2-91476f2b3d7f でよさそうｗ

[sinmetal]

Service Accountの運用の話も入れてもよいかも。

App Engine, GCE, GKE, Functionとか、デフォルトでService Accountを持ってる or 設定できるものたちの話。