GCP gcloud 切換多帳號小記

GCP gcloud 切換多帳號小記

有時候因為專案的關係, 或是要分開私人帳號與公司帳號, GCP 可能會需要以不同的帳號來操作.

今天就來整理 gcloud 如何切換不同的帳號

gcloud 相關設定位置

• ~/.config/gcloud/

gcloud 設定檔位置

• ~/.config/gcloud/configurations/

首先來觀察, 目前有多少 configuration ?

列出所有 configuration 設定

• gcloud config configurations list - lists existing named configurations

> gcloud  config  configurations list

NAME     IS_ACTIVE  ACCOUNT              PROJECT                DEFAULT_ZONE  DEFAULT_REGION

default  True       YOUR_NAME@gmail.com  steadfast-task-238409  asia-east1-a  asia-east1

• 這邊可以觀察到只有1個設定檔

接下來列出目前 active configuration 設定

• gcloud  config  list - list Cloud SDK properties for the currently active configuration

$ gcloud  config  list

[compute]

region = asia-east1

zone = asia-east1-a

[core]

account = YOUR_NAME@gmail.com

disable_usage_reporting = True

project = steadfast-task-238409

Your active configuration is: [default]

• 這邊可以觀察到目前啟用的設定檔
• 預設 region / zone
• account email
• 預設的專案
• 設定檔名稱

最後列出所有 account 設定

• gcloud  auth  list  -  lists credentialed accounts

$ gcloud  auth  list

   Credentialed Accounts

ACTIVE  ACCOUNT

*       YOUR_NAME@gmail.com

• 目前也是只有一個 account

接下來進入多帳號的設定, 想法如下

• 建立另外一個設定檔, 使用不同的 account ( e-mail )
• 不同專案就不另外建立設定檔, 而是採用在 gcloud 指令的選項中, 透過 --project 來指定專案

透過 gcloud  init 來新增另外一個設定檔

> gcloud  init

Welcome! This command will take you through the configuration of gcloud.

Settings from your current configuration [default] are:

compute:

  region: asia-east1

  zone: asia-east1-a

core:

  account: YOUR_NAME@gmail.com

  disable_usage_reporting: 'True'

  project: steadfast-task-238409

Pick configuration to use:

 [1] Re-initialize this configuration [default] with new settings 

 [2] Create a new configuration

Please enter your numeric choice:  2 (輸入 2, 新增設定 )

Enter configuration name. Names start with a lower case letter and 

contain only lower case letters a-z, digits 0-9, and hyphens '-':  lab (輸入設定檔名稱)

Your current configuration has been set to: [lab]

You can skip diagnostics next time by using the following flag:

  gcloud init --skip-diagnostics

Network diagnostic detects and fixes local network connection issues.

Checking network connection...done.                                                                                

Reachability Check passed.

Network diagnostic passed (1/1 checks passed).

Choose the account you would like to use to perform operations for 

this configuration:

 [1] YOUR_NAME@gmail.com

 [2] Log in with a new account

Please enter your numeric choice:  2 ( 登入新的 account )

Your browser has been opened to visit: (瀏覽器會開啟, 執行登入動作)

    https://accounts.google.com/o/oauth2/auth?code_challenge=0-smYcBiF296tCbNO_F-2sXFlAb8sN8fehvCa934QHc&prompt=select_account&code_challenge_method=S256&access_type=offline&redirect_uri=http%3A%2F%2Flocalhost%3A8085%2F&response_type=code&client_id=32553940559.apps.googleusercontent.com&scope=https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fuserinfo.email+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud-platform+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fappengine.admin+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcompute+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Faccounts.reauth

正於現有瀏覽器工作階段中開啟。

You are logged in as: [YOUR_NAME2@gmail.com].

Pick cloud project to use: 

 [1] amazing-ripple-359511

 [2] fluent-music-263505

 [3] single-howl-271209

 [4] yjhung

 [5] Create a new project

Please enter numeric choice or text value (must exactly match list 

item):  3 ( 選取要成為預設的專案 )

Your current project has been set to: [single-howl-271209].

Do you want to configure a default Compute Region and Zone? (Y/n)?  Y ( 設定預設的 Region 與 Zone )

Which Google Compute Engine zone would you like to use as project 

default?

If you do not specify a zone via a command line flag while working 

with Compute Engine resources, the default is assumed.

 [1] us-east1-b

 [2] us-east1-c

 [3] us-east1-d

 [4] us-east4-c

 [5] us-east4-b

 [6] us-east4-a

 [7] us-central1-c

 [8] us-central1-a

 [9] us-central1-f

 [10] us-central1-b

 [11] us-west1-b

 [12] us-west1-c

 [13] us-west1-a

 [14] europe-west4-a

 [15] europe-west4-b

 [16] europe-west4-c

 [17] europe-west1-b

 [18] europe-west1-d

 [19] europe-west1-c

 [20] europe-west3-c

 [21] europe-west3-a

 [22] europe-west3-b

 [23] europe-west2-c

 [24] europe-west2-b

 [25] europe-west2-a

 [26] asia-east1-b

 [27] asia-east1-a

 [28] asia-east1-c

 [29] asia-southeast1-b

 [30] asia-southeast1-a

 [31] asia-southeast1-c

 [32] asia-northeast1-b

 [33] asia-northeast1-c

 [34] asia-northeast1-a

 [35] asia-south1-c

 [36] asia-south1-b

 [37] asia-south1-a

 [38] australia-southeast1-b

 [39] australia-southeast1-c

 [40] australia-southeast1-a

 [41] southamerica-east1-b

 [42] southamerica-east1-c

 [43] southamerica-east1-a

 [44] asia-east2-a

 [45] asia-east2-b

 [46] asia-east2-c

 [47] asia-northeast2-a

 [48] asia-northeast2-b

 [49] asia-northeast2-c

 [50] asia-northeast3-a

Did not print [21] options.

Too many options [71]. Enter "list" at prompt to print choices fully.

Please enter numeric choice or text value (must exactly match list 

item): 27 (我選臺灣)

Your project default Compute Engine zone has been set to [asia-east1-a].

You can change it by running [gcloud config set compute/zone NAME].

Your project default Compute Engine region has been set to [asia-east1].

You can change it by running [gcloud config set compute/region NAME].

Your Google Cloud SDK is configured and ready to use!

* Commands that require authentication will use YOUR_NAME2@gmail.com by default

* Commands will reference project `single-howl-271209` by default

* Compute Engine commands will use region `asia-east1` by default

* Compute Engine commands will use zone `asia-east1-a` by default

這樣就設定成功了

按照剛剛的指令來進行觀察

> gcloud  config  configurations list

NAME     IS_ACTIVE  ACCOUNT                PROJECT                DEFAULT_ZONE  DEFAULT_REGION

default  False      YOUR_NAME@gmail.com   steadfast-task-238409  asia-east1-a  asia-east1

lab      True       YOUR_NAME2@gmail.com  single-howl-271209     asia-east1-a  asia-east1

• 這邊可以觀察到有兩個設定檔, 兩個 account
• 目前啟用的是剛剛建立的 lab

觀察目前啟用的設定檔

> gcloud  config  list

[compute]

region = asia-east1

zone = asia-east1-a

[core]

account =  YOUR_NAME2@gmail.com

disable_usage_reporting = True

project = single-howl-271209

Your active configuration is: [lab]

觀察帳號

> gcloud  auth  list

    Credentialed Accounts

ACTIVE  ACCOUNT

*       YOUR_NAME2@gmail.com

        YOUR_NAME@gmail.com

• 這邊可以觀察到 啟用的是 YOUR_NAME2@gmail.com

進行簡單的指令測試

> gcloud  projects  list

PROJECT_ID             NAME              PROJECT_NUMBER

single-howl-271209     maxtest           64278264160

接下來進行設定檔切換

觀察目前的設定檔

> gcloud  config  configurations list

NAME     IS_ACTIVE  ACCOUNT                PROJECT                DEFAULT_ZONE  DEFAULT_REGION

default  False      YOUR_NAME@gmail.com   steadfast-task-238409  asia-east1-a  asia-east1

lab      True       YOUR_NAME2@gmail.com  single-howl-271209     asia-east1-a  asia-east1

> gcloud  config  configurations activate  default

Activated [default].

• 切換到 default

再次觀察

> gcloud  config  configurations list

NAME     IS_ACTIVE  ACCOUNT                PROJECT                DEFAULT_ZONE  DEFAULT_REGION

default  True       YOUR_NAME@gmail.com   steadfast-task-238409  asia-east1-a  asia-east1

lab      False      YOUR_NAME2@gmail.com  single-howl-271209     asia-east1-a  asia-east1

> gcloud  auth  list

    Credentialed Accounts

ACTIVE  ACCOUNT

        YOUR_NAME2@gmail.com

*        YOUR_NAME@gmail.com

使用簡單的指令觀察

> gcloud  projects  list

PROJECT_ID             NAME                      PROJECT_NUMBER

sakanatest             sakanatest                905434913606

這樣就達成我們的目的了

以後可以簡單的 

• 觀察目前的 account
• gcloud  auth  list 
• 切換設定檔
• gcloud  config  configurations activate 設定檔名稱 

~ enjoy it

Reference:

• https://cloud.google.com/sdk/gcloud/reference/config/configurations/list
• https://itsmetommy.com/2019/06/05/managing-multiple-accounts-in-gcp/
• https://web.kmp.tw/post/gcloudchangeaccountandproject/
• https://ephrain.net/gcloud-%E8%AE%93-gcloud-%E9%80%A3%E5%88%B0%E6%96%B0%E7%9A%84-google-%E5%B8%B3%E6%88%B6%EF%BC%8C%E7%AE%A1%E7%90%86-google-cloud-platform/