You need authentication while using
Access data from Google Cloud Storage
Use, run, or deploy Octue services
Authentication can be provided by using one of:
A service account
Application Default Credentials
Creating a service account
Using a service account
Create and download a key for your service account - it will be called
It’s best not to store this in your project to prevent accidentally committing it or building it into a docker image layer. Instead, bind mount it into your docker image from somewhere else on your local system.
If you must keep within your project, it’s good practice to name the file
gha-greds-<whatever>.json and make
gha-creds-* is in your
If you’re developing in a container (like a VSCode
.devcontainer), mount the file into the container. You can make gcloud available too - check out this tutorial.
GOOGLE_APPLICATION_CREDENTIALSenvironment variable to the path of the key file.
On GCP infrastructure
Credentials are provided when running code on GCP infrastructure (e.g. Google Cloud Run)
octueuses these when when running on these platforms
You should ensure the correct service account is being used by the deployed instance