gcloud auth activate-service-account logout / revoke / remove / unset

ashen madusanka

Dec 10

0 views1

In a gcloud CLI on a GCP Ubuntu VM, I added my service-account successfully using this command:

gcloud auth activate-service-account --key-file=mycredentialsialreadyhad.json

and now I can't remove or logout from it. I tried these commands and received errors:

gcloud auth revoke

ERROR: (gcloud.auth.revoke) Cannot revoke GCE-provided credentials.

gcloud config configurations delete default

ERROR: (gcloud.config.configurations.delete) Deleting named
configuration failed because configuration [default] is set as active.
Use gcloud config configurations activate to change the active
configuration.

google-cloud-platform gcloud

1 answer

Accepted answer · original discussion

JM Gelilio

Dec 10

Permalink

UPDATE

Use a command with a specified account because you can't revoke the Compute Engine service account(default).

For example:

gcloud auth revoke serviceaccount@testproject.iam.gserviceaccount.com

and run:

gcloud auth list

It should only display the default service account of the Compute Engine:

[PROJECT-NUMBER]-compute@developer.gserviceaccount.com

Your perspective belongs here.

Join the conversation

1 question comment

Use comments to ask for clarification. Post a solution as an answer.

John HanleyPermalink

Dec 11

If your code/application/cli is running on a GCP instance, you cannot revoke the service account assigned to your Compute engine instance. The credentials for that service account derive from metadata. Google creates those credentials. You cannot revoke/cancel them as they are "created' for compute services. Note: you cannot deletes/void/cancel the default service account. Those keys are private to Google and not to your instance/application/cli.