Mako Authentication

The Mako command-line tool and the Mako clients communicate with https://mako.dev using the Application Default Credentials (ADC) strategy. You can find full documentation of this strategy at http://cloud.google.com/docs/authentication/production.

When running locally and wanting to authenticate as yourself (as opposed to as a service account), the easiest way to set up authentication is using the gcloud CLI, which is part of the Google Cloud SDK. Instructions for installing the SDK and CLI can be found here: https://cloud.google.com/sdk/gcloud/.

Once the SDK is installed, execute the following command to establish credentials that the Mako tools/clients can use:

gcloud auth application-default login

Follow the instructions, which will involve visiting a web page, copying an access token, and pasting it in the command-line prompt. Documentation for this command can be found here: https://cloud.google.com/sdk/gcloud/reference/auth/application-default/login.

Authenticating from a Docker container

The Quickstore microservice can be built as a Docker image. When running the microservice in this way, it's necessary to provide credentials to the Docker environment.

If you authenticated using the gcloud auth application-default login command referenced above, your credentials should be stored at ~/.config/gcloud/application_default_credentials.json. The following docker run flags make those credentials available to the Docker container's environment:

-v ~/.config/gcloud/application_default_credentials.json:/root/adc.json -e "GOOGLE_APPLICATION_CREDENTIALS=/root/adc.json"

See the GUIDE.md for an example of a full command-line execution of the microservice Docker image.