def Run(self, args):
result = self.iam_client.projects_serviceAccounts_keys.Create(
self.messages.IamProjectsServiceAccountsKeysCreateRequest(
name=iam_util.EmailToAccountResourceName(args.iam_account),
createServiceAccountKeyRequest=
self.messages.CreateServiceAccountKeyRequest(
privateKeyType=iam_util.KeyTypeToCreateKeyType(
iam_util.KeyTypeFromString(args.key_file_type)))))
# Only the creating user has access. Set file permission to "-rw-------".
self.WriteFile(args.output, result.privateKeyData, make_private=True)
log.status.Print(
'created key [{0}] of type [{1}] as [{2}] for [{3}]'.format(
iam_util.GetKeyIdFromResourceName(result.name),
iam_util.KeyTypeToString(result.privateKeyType),
args.output,
args.iam_account))
def testRoundTripKeyTypeString(self):
key_types = ['p12', 'json', 'unspecified']
for key_type in key_types:
round_trip_key_type = iam_util.KeyTypeToString(
iam_util.KeyTypeFromString(key_type))
self.assertEqual(key_type, round_trip_key_type)