gcpug / nouhau

Google Cloud Platformのノウハウを共有するRepository
https://gcpug.jp
MIT License
655 stars 23 forks source link

GCP CLI Auth #34

Open sinmetal opened 6 years ago

sinmetal commented 6 years ago

以下のコマンドの影響範囲や、Revokeの方法をまとめる

sinmetal commented 5 years ago

https://github.com/golang/oauth2/blob/d2e6202438beef2727060aa7cabdd924d92ebfd9/google/default.go#L43

sinmetal commented 5 years ago

https://github.com/googleapis/google-api-go-client/blob/master/transport/grpc/dial.go#L37:6

sinmetal commented 5 years ago

https://github.com/GoogleCloudPlatform/google-cloud-go/blob/c15cd9f75aa4baf9a7fe2767b55231bce7f3694a/spanner/client.go#L166

https://github.com/googleapis/google-api-go-client/blob/76f31e4d17c2f1190154e8fab72d772db9a59a5d/transport/grpc/dial.go#L74

https://github.com/golang/oauth2/blob/d2e6202438beef2727060aa7cabdd924d92ebfd9/google/default.go#L43:6

sinmetal commented 5 years ago

https://github.com/golang/oauth2/blob/d2e6202438beef2727060aa7cabdd924d92ebfd9/google/go19.go#L33

sinmetal commented 5 years ago

https://cloud.google.com/docs/authentication/production#providing_credentials_to_your_application

sinmetal commented 5 years ago

だいたい https://medium.com/google-cloud-jp/gcp-%E3%81%A8-oauth2-91476f2b3d7f でよさそうw

sinmetal commented 5 years ago

Service Accountの運用の話も入れてもよいかも。

App Engine, GCE, GKE, Functionとか、デフォルトでService Accountを持ってる or 設定できるものたちの話。