Question

A batch-processing script runs on an on-premises Linux server (outside Google Cloud) and needs to upload files to a Cloud Storage bucket every night. The server cannot use Google Cloud metadata-based credentials. Following Google's recommended approach for this constraint, how should you authenticate the script to Google Cloud?

Accepted Answer

Create a service account, generate a JSON key, place it on the server, and set GOOGLE_APPLICATION_CREDENTIALS to point to the key file

Answer

Configure the server to use the Compute Engine default service account and its automatic access scopes

Answer

Store your personal user credentials in a file on the server and run gcloud auth login non-interactively

Answer

Enable Workload Identity Federation on the on-premises server and attach it to the GKE cluster