Practical Ansible 2

Authentication

There are two different approaches to obtain a working set of credentials in Google Cloud Platform:

• The Service Account
• The Machine Account

The first approach is the suggested one in the majority of cases since the second applies only to circumstances where Ansible is run directly within the Google Cloud Platform environment.

Once you have created the Service Account, you should set the following environmental variables:

• GCP_AUTH_KIND
• GCP_SERVICE_ACCOUNT_EMAIL
• GCP_SERVICE_ACCOUNT_FILE
• GCP_SCOPES

Now, Ansible can use the proper Service Account.

The second approach is by far the easiest since Ansible will be able to auto-detect the Machine Account if you are running it in a Google Cloud instance.