Uly.me

cloud engineer

  • Home
  • About
  • Archives
Home/Archives for service account

April 14, 2020

GCP Instances By Service Account

Here’s how to get a list of GCP instances using a specific service account.

gcloud compute instances list \
--filter="serviceAccounts.email=service-account@domain.com" \
--project project-id

gcloud compute instances list \ --filter="serviceAccounts.email=service-account@domain.com" \ --project project-id

To display all instances and their service accounts in JSON format.

gcloud compute instances list \
--format="json(name,serviceAccounts[].email)" \
--project your-project-id

gcloud compute instances list \ --format="json(name,serviceAccounts[].email)" \ --project your-project-id

Display in YAML which is also the Default.

gcloud compute instances list \
--format="default(name,serviceAccounts[].email)" \
--project your-project-id

gcloud compute instances list \ --format="default(name,serviceAccounts[].email)" \ --project your-project-id

September 25, 2019

GCP Service Accounts

Here’s how display the Service Account of a particular instance in Google Cloud.

gcloud compute instances describe server-name \
--zone us-central1-c \
--project project-id \
--format="flattened(serviceAccounts[].email)"

gcloud compute instances describe server-name \ --zone us-central1-c \ --project project-id \ --format="flattened(serviceAccounts[].email)"

Result is:

serviceAccounts[0].email: service-account-name@project-id.iam.gserviceaccount.com

serviceAccounts[0].email: service-account-name@project-id.iam.gserviceaccount.com

September 22, 2019

GCP Create Service Account Key

Here’s how to create a key for the GCP Service Account.

Create Key.

gcloud iam service-accounts keys create ~/key.json \
  --iam-account service-name@project-id.iam.gserviceaccount.com

gcloud iam service-accounts keys create ~/key.json \ --iam-account service-name@project-id.iam.gserviceaccount.com

Activate Key

gcloud auth activate-service-account service-name@project-id.iam.gserviceaccount.com \
--key-file=key.json

gcloud auth activate-service-account service-name@project-id.iam.gserviceaccount.com \ --key-file=key.json

Revoke Key.

gcloud auth revoke service-account@project-id.iam.gserviceaccount.com

gcloud auth revoke service-account@project-id.iam.gserviceaccount.com

Delete Key

gcloud iam service-accounts keys delete key-id \
    --iam-account service-name@project-id.iam.gserviceaccount.com

gcloud iam service-accounts keys delete key-id \ --iam-account service-name@project-id.iam.gserviceaccount.com

  • 1
  • 2
  • Next Page »
  • Cloud
  • Linux
  • Git

Copyright © 2012–2021