gcloud-credential-helper

Documentation

Overview

Command gcloud-credential-helper prints a Google Cloud access token obtained from Application Default Credentials (ADC) in one of several formats (raw, the serialized OAuth2 token, or the Bazel --credential_helper wire format). It is primarily a Bazel credential helper for the GCS remote cache, invoked as `gcloud-credential-helper get` with a request on stdin and the reply on stdout.

It replaces shelling out to `gcloud auth application-default print-access-token`: the Google auth library resolves ADC (the gcloud application-default file, a service account key, or the metadata server) and mints — and refreshes — the access token itself.