envs

Google Cloud — application default credentials

gcp/credentials · version 1

envs add gcp/credentials

This declares the keys below in your catalog and sets none of them. A template is a schema for keys; it never carries a value.

Key Needed Kind Notes
GOOGLE_APPLICATION_CREDENTIALS required secret A path to a service account JSON key, not the key itself, which is why the file beside it matters as much as this value. Google says a compromised service account key is usable by an attacker with nothing else, and to rotate keys. Replace by creating a key and deleting the old.. where to get it

The JSON the CLI reads