Can I use another credential methods in python script except for service account?

Question

I was trying this pub/sub client tutorial, and got this error in publisher.py

google.auth.exceptions.DefaultCredentialsError: Could not automatically determine credentials. Please set GOOGLE_APPLICATION_CREDENTIALS or explicitly create credentials and re-run the application. For more information, please see https://cloud.google.com/docs/authentication/getting-started

when I call this part.

publisher = pubsub_v1.PublisherClient()

I am a member of a GCP group which has already pubsub.publisher, pubsub.subscriber roles. And I registered my account on my local machine. So, if I use CLI command on terminal like

gcloud pubsub topics publish <topic-name> --message="help me"

It succeeds.

I can see that python script can be seen as a service, so it needs service account. But is there any way to use my group's credentials in python script too, or should I use a service account?

(12.03.2021 updated 1) Thanks for answering guys, (Sorry, I'm noob in GCP). I have no roles to give specific roles to a service account, which means that I cannot make a service account that has roles pubsub.publisher and pubsub.subscriber. (this is our department's policy. is it kind of wired??) So for the tutorials in local machine, I just want to use groups IAM (user account IAM) for a credentials. Is there no way not to use service account?? (I just thought that there is a way even though python script can be seen as a service)

(12.03.2021 updated 2)

gcloud auth application-default login worked as suggested by here

you may want to take a look at this topic stackoverflow.com/questions/44328277/… — lukaszberwid
– lukaszberwid, Commented Dec 2, 2021 at 11:49
@lukaszberwid Thanks, I applied gcloud auth application-default login and it works! — zzaebok
– zzaebok, Commented Dec 3, 2021 at 3:59

guillaume blaquiere · Accepted Answer · 2021-12-02 13:40:27Z

0

Add your service account email in your Google Groups and Voilà!

answered Dec 2, 2021 at 13:40

guillaume blaquiere

76.5k3 gold badges65 silver badges102 bronze badges

Sign up to request clarification or add additional context in comments.

2 Comments

zzaebok Over a year ago

Thanks for answering, but I have no roles to give specific roles to a service account, which means that I cannot make a service account that has roles pubsub.publisher and pubsub.subscriber. Is there no way not to use service account? (I updated my question)

guillaume blaquiere Over a year ago

You can avoid to use a service account in your local environment and use your own credential. But, when your app run on Google Cloud, you can't (in fact I prefer not to say how to achieve that hack and very bad practice) use your own credential, you will have to use a service account.

Collectives™ on Stack Overflow

Can I use another credential methods in python script except for service account?

1 Answer 1

2 Comments

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

2 Comments

Your Answer

Sign up or log in

Post as a guest

Linked

Related